Report - m.3sktv.news/3sk-03.php

Report Overview

Submitted URL
m.3sktv.news/3sk-03.php
IP
104.21.53.190
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-23 21:07:54
Access
public
Website Title
قصة عشق
Final URL
x.3seq.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
glaikrolsoa.com	unknown	2024-04-02	2024-04-03	2024-04-04	456 B	4.2 kB	139.45.197.242
my.rtmark.net	9054	2014-10-29	2015-02-04	2024-04-23	455 B	741 B	139.45.195.8
webmid.net	unknown	unknown	No data	No data	392 B	81 kB	188.114.96.1
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-22	867 B	164 kB	142.250.74.168
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-23	452 B	29 kB	216.58.207.234
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-22	1.5 kB	72 kB	216.58.207.227
m.3sktv.news	unknown	2022-03-24	2023-01-25	2024-03-24	477 B	37 kB	172.67.216.162
ethaistoothi.com	unknown	unknown	No data	No data	1.1 kB	8.4 kB	139.45.197.244
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-23	431 B	31 kB	142.250.74.170
x.3seq.com	unknown	2021-08-27	2023-10-31	2024-01-23	19 kB	11 MB	104.21.83.225

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-23	medium	glaikrolsoa.com	Sinkholed
2024-04-23	medium	webmid.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2	86 kB	2023-03-07	2024-05-03
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2 IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-03 20:39:12 Times Seen388062 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	x.3seq.com/sandbox%20eval%20code	147 B	2023-04-11	2024-05-03
Pretty URL x.3seq.com/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-03 20:43:30 Times Seen344503 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.googletagmanager.com/gtag/js?id=G-BTQF22D0QH&l=dataLayer&cx=c	250 kB	2024-04-23	2024-04-23
Pretty URL www.googletagmanager.com/gtag/js?id=G-BTQF22D0QH&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-23 23:08:01 Last Seen2024-04-23 23:08:01 Times Seen2 Hash 71ace91ca91f821fefeede6c8a0c82f5 630b8a056535db1cd273fc5e7e7c191662481044 a4a65d70a7c81a3d30b8656dfadc645afab9017c7ead35fa0b9f72e4546033ef Loading...

	x.3seq.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2	19 kB	2024-03-13	2024-05-03
Pretty URL x.3seq.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP 104.21.83.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 16:02:37 Last Seen2024-05-03 20:31:54 Times Seen2643 Hash b976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3 Loading...

	x.3seq.com/	3.2 kB	2024-04-23	2024-04-23
Pretty URL x.3seq.com/ IP 104.21.83.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-23 23:08:01 Last Seen2024-04-23 23:08:01 Times Seen1 Hash e1d6bb541a0de33d3f7609b7a88da57c ad9d1d8746c728a92870d7e32f33da0115e4e13b 6e54da4683ffa6b6587375222f3153f0cc09977a8f28d2fb8361bfd63338c427 Loading...

	x.3seq.com/	77 B	2023-11-14	2024-04-23
Pretty URL x.3seq.com/ IP 104.21.83.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-14 23:34:33 Last Seen2024-04-23 23:08:01 Times Seen2 Hash 1abfa35379ad7c18dce3958da34eecf0 bf9b8cdad5ea3682cd64533d1983e911b290d599 27db6a8687e3f82391438090d9b104b8f0f8f5fcc0584a199f1465b341effd9b Loading...

	x.3seq.com/wp-content/themes/vo2023/assets/bootstrap/js/bootstrap.min.js?ver=2.0	35 kB	2023-03-10	2024-04-25
Pretty URL x.3seq.com/wp-content/themes/vo2023/assets/bootstrap/js/bootstrap.min.js?ver=2.0 IP 104.21.83.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 19:54:32 Last Seen2024-04-25 22:14:39 Times Seen45 Hash fa4447550b446ac73a77aa6c7582476d 44fb7da919b5c169af65fbba84114c6b8233f704 81106ddb86f999330c3dd90e9f7315f7341ca70e74f1b129e98ce66767c7a825 Loading...

	www.googletagmanager.com/gtag/js?id=UA-165899285-5	204 kB	2024-04-23	2024-04-23
Pretty URL www.googletagmanager.com/gtag/js?id=UA-165899285-5 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-23 23:08:01 Last Seen2024-04-23 23:08:01 Times Seen2 Hash 9e753adb8f93ccacea09775359a2c9c0 4b87195ef168ea34d0dc0eb2106f4a41d5907536 0407c9111162496df0b50a6fb2665b375f1b44f320b985a4f89bdbf4e8c26b0a Loading...

	x.3seq.com/	195 B	2024-04-23	2024-04-23
Pretty URL x.3seq.com/ IP 104.21.83.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-23 23:08:01 Last Seen2024-04-23 23:08:01 Times Seen1 Hash e310dd74e79bf1a2a9c35eeacc567ccd 8027c589373b0ae6bdfe20b114253ad38413dfb8 30a95583aea7bbbfb77d33cb9f17c7ce93b48a4f2ba9a2e598f1c5af309fa704 Loading...

	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-05-03
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-03 20:43:30 Times Seen343997 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	x.3seq.com/wp-content/themes/vo2023/assets/js/core.js	5.2 kB	2023-11-14	2024-04-23
Pretty URL x.3seq.com/wp-content/themes/vo2023/assets/js/core.js IP 104.21.83.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-14 23:34:33 Last Seen2024-04-23 23:08:01 Times Seen4 Hash 445f1e56af2d7793877ee55fe6956538 f493d12ff759ab26115694a39b734a6a24a540e3 20b798c497c8678ab4d4d2badf72bf35e251bfc21135f4e8cd0d75726232ef08 Loading...

	webmid.net/tag.min.js	80 kB	2024-04-03	2024-04-26
Pretty URL webmid.net/tag.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-03 23:08:40 Last Seen2024-04-26 00:59:04 Times Seen10 Hash e6003f4635d68b0f1237d9be50735b86 a0bb298b293d507d1687e42c531567d8365b313a b19b1a865bbc7ffbbb3874c6dc91c9c7a4b9666bd0bee4aef72a46faa332939b Loading...

	x.3seq.com/	190 B	2024-04-06	2024-04-26
Pretty URL x.3seq.com/ IP 104.21.83.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-06 22:12:36 Last Seen2024-04-26 00:59:03 Times Seen3 Hash 55c4809e41afc74ed698df1a00532f1d 7a6415c7068289a7996cada10431fc6221ac2755 38762ae0d0fed3eea007fe0d6f8a565080aa1266af199b9ce10dced1545ba66f Loading...

HTTP Transactions (49)

URL IP Response Size

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2

142.250.74.170

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js?ver=2 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 23:09:34 GMT
expires: Tue, 22 Apr 2025 23:09:34 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 79070
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=UA-165899285-5

142.250.74.168

200 OK

74 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=UA-165899285-5
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
74 kB (73902 bytes)
Hash
9e753adb8f93ccacea09775359a2c9c0
4b87195ef168ea34d0dc0eb2106f4a41d5907536
0407c9111162496df0b50a6fb2665b375f1b44f320b985a4f89bdbf4e8c26b0a

HTTP Headers

GET /gtag/js?id=UA-165899285-5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 23 Apr 2024 21:07:24 GMT
expires: Tue, 23 Apr 2024 21:07:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73902
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

x.3seq.com/wp-content/themes/vo2023/assets/images/grey.gif

104.21.83.225

200 OK

43 B

URL GET HTTP/3
x.3seq.com/wp-content/themes/vo2023/assets/images/grey.gif
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
22c114f768798a2c77899a1485cc69d5
54a69da17972770faffce1f758c820ecb8e440af
902feb64d8b6d481ab8ddda06fbebbba4c95dfa9b7936a7beeb197266cd8b846

HTTP Headers

GET /wp-content/themes/vo2023/assets/images/grey.gif HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/gif
content-length: 43
last-modified: Sun, 31 May 2020 13:56:58 GMT
etag: "5ed3b7aa-2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=azGyvb5g1g1hFK%2B%2BnPExvXi%2FfyTlIG%2BxH6iou%2Fxe%2FuXKlZmeHcMlpabrNMIFTJzi3oD4bWejZmhS136Ddi%2Bhak4i%2Bi%2BkOSHe10VQxoTONvA%2FPm9xExqNALyZv3ik"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b04d86b524-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckY5y-au8.woff2

216.58.207.227

200 OK

23 kB

URL GET HTTP/2
fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckY5y-au8.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23012, version 1.0
Size
23 kB (23012 bytes)
Hash
187491db8db7275ff71c604b20f6e65c
2bbe276e509cca71dec5465ab8d937cea65363e9
58db43356ac0ddedd9a03bcd1cd7a3e0f8ab563fb70b73b26639a2fd435451c6

HTTP Headers

GET /s/changa/v27/2-cm9JNi2YuVOUckY5y-au8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://x.3seq.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23012
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:40:00 GMT
expires: Fri, 18 Apr 2025 17:40:00 GMT
cache-control: public, max-age=31536000
age: 444445
last-modified: Thu, 24 Aug 2023 17:32:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

x.3seq.com/wp-includes/css/dist/block-library/style-rtl.min.css?ver=6.5.2

104.21.83.225

200 OK

23 kB

URL GET HTTP/3
x.3seq.com/wp-includes/css/dist/block-library/style-rtl.min.css?ver=6.5.2
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
23 kB (23438 bytes)
Hash
465ea1fdd158eedd1bb23efbbb08b18c
6de45560a2bf3c326dcae7734eeea418987f9405
4c2e92c45a2c2768dc59e9e9d62582bcf44d2326a2b16072d9619a60af6a398a

HTTP Headers

GET /wp-includes/css/dist/block-library/style-rtl.min.css?ver=6.5.2 HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 02 Apr 2024 20:37:44 GMT
etag: W/"660c6c98-1ba38"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IslvHgHZmWI3GZpEYuCPUUZVJcNOAhgN697DWizo%2F7nGI53U014e0IHsyZZDPZDHYmg68bPXVaKMNAxTCdz2yNw3p9eujf60kaklrXfekveiTqJ0Z1Tsgq9HlKvI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b04d7ab524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

m.3sktv.news/3sk-03.php

172.67.216.162

302 Found

36 kB

URL User Request GET HTTP/2
m.3sktv.news/3sk-03.php
IP
172.67.216.162:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject3sktv.news
Fingerprint1C:15:E6:1E:80:4A:B6:2E:11:46:2C:67:33:60:CD:7F:E5:73:D0:25
ValiditySun, 14 Apr 2024 20:11:06 GMT - Sat, 13 Jul 2024 20:11:05 GMT

File type
data
Size
36 kB (36506 bytes)
Hash
a184f8d64df7869fbe0c341595856097
315b33b5265e6c801786ca2810465c601d6b1989
8cac1a653b7a3f575f631e1d14c6559221d0b23075f3a306365fe534386302b5

HTTP Headers

GET /3sk-03.php HTTP/1.1
Host: m.3sktv.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 23 Apr 2024 21:07:24 GMT
content-type: text/html; charset=UTF-8
location: https://x.3seq.com/
cache-control: max-age=0
expires: Tue, 23 Apr 2024 21:06:50 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=51XG8J4nUiu%2FsUO4R%2Bn0vA6XmCawz9kjuRazpJuaG8K6TpNzTsL1QpL2euTN6xllCCA3yNKzuoyRfszbh10ykG%2B8zvi3%2FS%2BJ0LX997q90bEvIgju44TgqPmoTrtRmII%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2accfe3569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckZpy-.woff2

216.58.207.227

200 OK

23 kB

URL GET HTTP/2
fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckZpy-.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23024, version 1.0
Size
23 kB (23024 bytes)
Hash
626e83e847df631efbdab647e80d3602
418d6d1d86c5c6736299bc815485ef78d2d5226d
2e1683ccc9fa765af342ee498fa1c62cf569d71313bec973c38e896a81d01aa8

HTTP Headers

GET /s/changa/v27/2-cm9JNi2YuVOUckZpy-.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://x.3seq.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23024
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:28:06 GMT
expires: Wed, 23 Apr 2025 16:28:06 GMT
cache-control: public, max-age=31536000
age: 16759
last-modified: Thu, 24 Aug 2023 17:37:28 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckY5y-au8.woff2

216.58.207.227

200 OK

23 kB

URL GET HTTP/2
fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckY5y-au8.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23012, version 1.0
Size
23 kB (23012 bytes)
Hash
187491db8db7275ff71c604b20f6e65c
2bbe276e509cca71dec5465ab8d937cea65363e9
58db43356ac0ddedd9a03bcd1cd7a3e0f8ab563fb70b73b26639a2fd435451c6

HTTP Headers

GET /s/changa/v27/2-cm9JNi2YuVOUckY5y-au8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://x.3seq.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23012
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:40:00 GMT
expires: Fri, 18 Apr 2025 17:40:00 GMT
cache-control: public, max-age=31536000
age: 444445
last-modified: Thu, 24 Aug 2023 17:32:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Changa:wght@300;500;700&display=swap

216.58.207.234

200 OK

28 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Changa:wght@300;500;700&display=swap
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
28 kB (28103 bytes)
Hash
480114d4b174aeb2a4ec9762260062ae
4491e3d4bebb15fb1f4330848d115905c8e4dc2c
ef866615c2514aacccd470bb23b9f59d308c26df49b5c96a6ffaf594895b49af

HTTP Headers

GET /css2?family=Changa:wght@300;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 23 Apr 2024 21:07:25 GMT
date: Tue, 23 Apr 2024 21:07:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-BTQF22D0QH&l=dataLayer&cx=c

142.250.74.168

200 OK

89 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-BTQF22D0QH&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (5945)
Size
89 kB (88627 bytes)
Hash
71ace91ca91f821fefeede6c8a0c82f5
630b8a056535db1cd273fc5e7e7c191662481044
a4a65d70a7c81a3d30b8656dfadc645afab9017c7ead35fa0b9f72e4546033ef

HTTP Headers

GET /gtag/js?id=G-BTQF22D0QH&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 23 Apr 2024 21:07:25 GMT
expires: Tue, 23 Apr 2024 21:07:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88627
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

x.3seq.com/wp-content/uploads/2023/11/2-1.png

104.21.83.225

200 OK

826 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2023/11/2-1.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 847 x 489, 8-bit/color RGB, non-interlaced
Size
826 kB (826147 bytes)
Hash
1f5e51f87bcd05e498d8583fe83382b5
704f0e62eb4b53117178f81d5ecb5520ce65c53b
090d99e52f3ae7c0b51b6ae9c3948e81435b44088601f4aa5a505bf68f5e8363

HTTP Headers

GET /wp-content/uploads/2023/11/2-1.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Mon, 13 Nov 2023 00:38:42 GMT
etag: W/"65517012-c992c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ooIZT4Djv0oVMK08Sgq1Jdo75I7sIMJD1jS%2B8LFaCruv55lZ%2Bj8dJwuECSs%2BMdek922QT9IDK5lK%2FF2W7ugeKoqUOGcudUCr6ffaEIyW5l%2BvYpvmN%2B1jwR4%2FdDtF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b2483ab524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/111.jpg

104.21.83.225

200 OK

324 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/111.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x692, components 3
Size
324 kB (323826 bytes)
Hash
f420ac7c6dd3eda7d4548b67c0f327f9
4bb4a6ad31b8438f70089fadbb17f42bcebb2784
f57e87da25e73eb0c4de4d9a8ea84ae28447b87ce7845ed8694039a385c1164f

HTTP Headers

GET /wp-content/uploads/2024/03/111.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Fri, 01 Mar 2024 21:58:50 GMT
etag: W/"65e24f9a-4eefb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ACuamVttBhSy0jtNqVrlWiFZ0b5bO0nf19mtedtLudrIdeSWR%2FTxHScxJEzcN%2FVIE8jm1z0A2kz2U%2FXv96oWN%2BxFRvRkZp36ca4TxiCwQrKFdm%2F1CSnRuPLIWFu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b23834b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/04/444.png

104.21.83.225

200 OK

762 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/04/444.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 779 x 434, 8-bit/color RGB, non-interlaced
Size
762 kB (762386 bytes)
Hash
bf09e496eb0783e540480ef124e7849d
1a7cfb629817d6659f3c4409fa8507d6ec7f8ebe
45b5d43ff48be3b23228814efa78507cbe6cc3a93dfc09200290a1d54f52986b

HTTP Headers

GET /wp-content/uploads/2024/04/444.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Thu, 18 Apr 2024 20:31:58 GMT
etag: W/"6621833e-b86ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6fsX4Jr65VPSq%2F957MJ8iPg%2BM58AazvBKxnSOGNyaHtCXqAYF6Rl%2F2HhQ0pyHdwpxqYjQHSoj%2BasGEymMRb6N85aum3bG%2Bh0qZhAK%2BZxQVZzO8eAR0sHtPTkdYva"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b21810b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/1-1290x810.jpg

104.21.83.225

200 OK

189 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/1-1290x810.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 1290x810, components 3
Size
189 kB (189437 bytes)
Hash
fb3af69907be306069ebb9105893e696
0317bc3bc899d62a82f3fbc9f51fb783272a9c22
3a79607594544f10f8764923813193fe2b82e6c2ced1cc878b164a5ddc29cfc3

HTTP Headers

GET /wp-content/uploads/2024/03/1-1290x810.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Sat, 02 Mar 2024 19:11:01 GMT
etag: W/"65e379c5-2ccf6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B6zmsSc7UHsltznOmXR%2FhRy%2BskxrtmkaM2JqLkzAcYl1C7TeTWnCMxt%2Fld5hzuis2yqI4FDCxSt4%2FfuUecFPjKWXTiIDFZ3lC7e2gVTzsS5uvqQ5SdD%2BOY09Ve1T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b23833b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/Ghorfa-Large-1290x1000.jpg

104.21.83.225

200 OK

267 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/Ghorfa-Large-1290x1000.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1290x1000, components 3
Size
267 kB (267348 bytes)
Hash
c814103eb273f8c305a660a3e11f50ac
b5e6938af96100e561f9f5b21dc3575da2b96cec
0a957f4b4ed53ad692f244aaa061cc07b9b9b29bad9f4e489d2e074b183da6ee

HTTP Headers

GET /wp-content/uploads/2024/03/Ghorfa-Large-1290x1000.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Sat, 09 Mar 2024 20:35:18 GMT
etag: W/"65ecc806-3f56d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvm08fFKLSXV7cYCKuTk2XtufEhghpIdUpbOkS0qgTas57XK7pP1qDnBDr8crP7KUFAfk3pPIw1OVm3PBQ1%2FDQccNMMU8spQmxOAYW3LmFkAwGbl3wJNYvLCYlS3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b2382db524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/02/1-3.png

104.21.83.225

200 OK

1.1 MB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/02/1-3.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 943 x 543, 8-bit/color RGB, non-interlaced
Size
1.1 MB (1083018 bytes)
Hash
ac2b19ba0c2fa418c44cd2e7e28aaf53
ecd66fdaa5f3ff661ea66e8113f0c930caf03550
d745db247a58612c02bf1dbd5001772ae80cc0b24c917aa276841e0052ffad62

HTTP Headers

GET /wp-content/uploads/2024/02/1-3.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 28 Feb 2024 20:14:50 GMT
etag: W/"65df943a-108649"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QdmalVJtXo4UehEIsMcscMA5cZLXB88h9pbKJV4PkqmKJ0vDzJ545qDtIrxpBjrF8YNoBiMgu0rDqvm%2BzfOpmVanU2NFrQlny3%2Fs4Jd22enpzt4s7S2EZmEfOmsU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b23835b524-OSL
alt-svc: h3=":443"; ma=86400

ethaistoothi.com/?rb=v3Cw5qYBiHbokz-y-rbgXrVnDN0nXvxwbF-nO7jggDyYn0pg32q9IoOqGeeMiH6qwaYPnk380h_crcIR623iJEs7i2qxCSnC-ntb4n50vWtR4hk1QV_qg0FGLpXzi4nU9gN9a1giV-C9txxhFReXtPcSmaX1GWp9A54uXwiw-r-xHuVkndj6kY8g-Qm_Zq1wOZpu2hm-hYzlRhBxF241NAPfyv9ZyPt-zQxSq2S9VBCzIn1_NJh3Z1G7O1htaUmzXO8BGQ%3D%3D&request_ab2=0&zoneid=7226638&js_build=iclick-v1.761.2-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fx.3seq.com%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.761.2-auto&navlng=en-US&pnt=0&pnrc=0&wasm=1&bs=696029e8-e4b5-4303-bebb-50a3437c02d4&userId=008047306b1a4adae1e4db1e1cc0a43c&m=link

139.45.197.244

200 OK

7.3 kB

URL GET HTTP/2
ethaistoothi.com/?rb=v3Cw5qYBiHbokz-y-rbgXrVnDN0nXvxwbF-nO7jggDyYn0pg32q9IoOqGeeMiH6qwaYPnk380h_crcIR623iJEs7i2qxCSnC-ntb4n50vWtR4hk1QV_qg0FGLpXzi4nU9gN9a1giV-C9txxhFReXtPcSmaX1GWp9A54uXwiw-r-xHuVkndj6kY8g-Qm_Zq1wOZpu2hm-hYzlRhBxF241NAPfyv9ZyPt-zQxSq2S9VBCzIn1_NJh3Z1G7O1htaUmzXO8BGQ%3D%3D&request_ab2=0&zoneid=7226638&js_build=iclick-v1.761.2-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fx.3seq.com%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.761.2-auto&navlng=en-US&pnt=0&pnrc=0&wasm=1&bs=696029e8-e4b5-4303-bebb-50a3437c02d4&userId=008047306b1a4adae1e4db1e1cc0a43c&m=link
IP
139.45.197.244:443
ASN
#9002 RETN Limited

Requested by
https://x.3seq.com/
Certificate
IssuerLet's Encrypt
Subjectethaistoothi.com
Fingerprint3A:BC:31:17:4D:E1:F1:60:CD:AA:2C:7C:BB:7E:97:BF:09:9C:79:B3
ValidityTue, 23 Apr 2024 12:28:12 GMT - Mon, 22 Jul 2024 12:28:11 GMT

File type
gzip compressed data, max speed, from Unix
Size
7.3 kB (7274 bytes)
Hash
84c9845a3f7bf3c6470b391518292f12
fcb235b17a2e9543b396c1d70a37e26cce626d25
6709bf883643fe41f6db8c961fbb3be0543127ab2747cb38096a6e276b733e95

HTTP Headers

GET /?rb=v3Cw5qYBiHbokz-y-rbgXrVnDN0nXvxwbF-nO7jggDyYn0pg32q9IoOqGeeMiH6qwaYPnk380h_crcIR623iJEs7i2qxCSnC-ntb4n50vWtR4hk1QV_qg0FGLpXzi4nU9gN9a1giV-C9txxhFReXtPcSmaX1GWp9A54uXwiw-r-xHuVkndj6kY8g-Qm_Zq1wOZpu2hm-hYzlRhBxF241NAPfyv9ZyPt-zQxSq2S9VBCzIn1_NJh3Z1G7O1htaUmzXO8BGQ%3D%3D&request_ab2=0&zoneid=7226638&js_build=iclick-v1.761.2-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fx.3seq.com%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.761.2-auto&navlng=en-US&pnt=0&pnrc=0&wasm=1&bs=696029e8-e4b5-4303-bebb-50a3437c02d4&userId=008047306b1a4adae1e4db1e1cc0a43c&m=link HTTP/1.1
Host: ethaistoothi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://x.3seq.com/
Origin: https://x.3seq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: application/json
x-trace-id: adf0d37b4937ede2067af9bdff2e2f5b
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://x.3seq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=008047306b1a4adae1e4db1e1cc0a43c; expires=Wed, 23 Apr 2025 21:07:26 GMT; path=/; secure; SameSite=None
oaidts=1713906446; expires=Wed, 23 Apr 2025 21:07:26 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 30 Apr 2024 21:07:26 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2

x.3seq.com/wp-content/uploads/2024/01/8888888-347x520.jpg

104.21.83.225

200 OK

38 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/01/8888888-347x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 347x520, components 3
Size
38 kB (37866 bytes)
Hash
70d381502b47d86182cd61b71b35f152
4b80ddc92132d867c6abd269724421e8a530884c
484bbcd596d5f1fb5e600d44ef337d99caf0d261c05b65e9f69e6316df7e69be

HTTP Headers

GET /wp-content/uploads/2024/01/8888888-347x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Sun, 07 Jan 2024 22:34:14 GMT
etag: W/"659b26e6-93ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BRL28PYqfKMPFU9RdT3UnPa0GIaOEDQjy2Z4RzZrIMzXAPrkPCprdoypSMyyXHo6jhfTQyQUwyCo0uJxwLx7KreretF4u70SJhlm5HyExLh79l6eSjnBTrzFOhYN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e0fb524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2022/06/1071-48492441-273x520.jpg

104.21.83.225

200 OK

28 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2022/06/1071-48492441-273x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 273x520, components 3
Size
28 kB (28305 bytes)
Hash
94f7f1dbc9d2d5ff25a21dc4195ea2a3
0156715bd24bf0ae7c43dd129de9f80e96375588
49d3139daaac6b486636dcf23b4d833bd828ae6091a06f43a40d23c7dd8d210f

HTTP Headers

GET /wp-content/uploads/2022/06/1071-48492441-273x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Fri, 24 Jun 2022 17:16:50 GMT
etag: W/"62b5f182-6e91"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VGSaEbRBn84%2FmPAwtyxaQ3SayBMFN7JB%2BUs5TfM05PRkdHXiCYX6%2FrK%2Bojz7KRQrVMgDuW9R0olZk9cljNO7ntsdjU7Sufc5bMqplHUPiam2AToWJTd5hXiBeELv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e0db524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/04/258-1290x1000.png

104.21.83.225

200 OK

1.4 MB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/04/258-1290x1000.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 1290 x 1000, 8-bit/color RGBA, non-interlaced
Size
1.4 MB (1375248 bytes)
Hash
2e7c876809f9ac779d4314a1e23622b2
d0a93b4fbdfc515384eae630262fd28933d05eda
fd24a44a8df072abe262c5e0df2bbecfd55ca937dd09adbcb7b2cb2dd7c43a00

HTTP Headers

GET /wp-content/uploads/2024/04/258-1290x1000.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Sun, 14 Apr 2024 16:04:19 GMT
etag: W/"661bfe83-14fc10"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2BQwbij8lyMWo1aLtxHEv608BH6Z5QYLMILkTf88s1EdZ5t2Wtw9XqOEFPwRgJSaWbsSoVOhRsAChn1%2B64ebG1GW58IDE2C4%2FgOMTrZFa%2FUu15v811J18XQiOLyp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b22818b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/2.png

104.21.83.225

200 OK

960 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/2.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 993 x 527, 8-bit/color RGB, non-interlaced
Size
960 kB (959918 bytes)
Hash
7ae95382e1d5ec227f9c875d1f8f7ce0
35b76db0d0d738b28fb705e475c1469842b804d1
f88195e88bbbdbe94b760d170f3e9dd8882058be05f303c8357d43e5978159cf

HTTP Headers

GET /wp-content/uploads/2024/03/2.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Sat, 09 Mar 2024 23:43:59 GMT
etag: W/"65ecf43f-ea5ae"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FRJEeLt5pcuj2V9M3wcO3veNZ4CBMF%2B3v8CjF2rXcTDnXq%2BU9lD05dO9HHCTY4xWNCUpqzj%2FjzRjgzqFS73UyrclvW6dLfwqNnds5oRk4oTdqv2xKBtY8d2ivwjV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b2282ab524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/1234.png

104.21.83.225

200 OK

1.3 MB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/1234.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 1030 x 558, 8-bit/color RGB, non-interlaced
Size
1.3 MB (1324336 bytes)
Hash
42c1dc38db703fe90c7c441c56bbd92d
86613f7fc35ed3719c02bad51fd3053a2977bae4
7e781d8d7593e29f778ae72115de9ca284be12d331d1c3d12efc2895b871d172

HTTP Headers

GET /wp-content/uploads/2024/03/1234.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 26 Mar 2024 20:08:40 GMT
etag: W/"66032b48-143530"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DOM1cSfhDSmgHPhKOSma4iKnVK0H1qXxJLiBGJL3SUho%2FMxBMv%2FL3dtSkAHm2B9gCcv5fPOqG1LrtmEgwInOJLyoKIQjuazVbB8FA%2Bi9wDfNl%2FfIb%2FmKKNc6jKij"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b22824b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/La-Takhaf-Long-349x520.jpg

104.21.83.225

200 OK

49 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/La-Takhaf-Long-349x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 349x520, components 3
Size
49 kB (49168 bytes)
Hash
793f2853d027df78a3de27ea306fa68e
789134c57bb7e02ef0193490d9981a365db5b47e
d14cd681eb4b6c51d1d6c2bf3f91c23e9a9cc53ea9e0d803c8cc1a59430be73b

HTTP Headers

GET /wp-content/uploads/2024/03/La-Takhaf-Long-349x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Sat, 09 Mar 2024 23:44:15 GMT
etag: W/"65ecf44f-c010"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MLHx3PM%2BeuD%2BQQ6j3GnbRX1xbdZLSkSlxtSWceAnvyrh1rMdfK3ldPOsZEnEk%2BPXStAFqa6DkL9qVP2C5q2zIu022JafviBr3pjXKXClCGRNfeqCI3ziubwtB3mo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e15b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/04/654.png

104.21.83.225

200 OK

551 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/04/654.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 679 x 377, 8-bit/color RGB, non-interlaced
Size
551 kB (550599 bytes)
Hash
f0da62e81ece67751626566e7f04c365
cbcf48cc740483f6b7457913fd841be3b7116d02
83db125217aaccc21d94319e7b8db87f387818efe301b01c3361ddcbf825b786

HTTP Headers

GET /wp-content/uploads/2024/04/654.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Mon, 22 Apr 2024 05:00:39 GMT
etag: W/"6625eef7-866c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MAT8EvAc1d7lbLpIG5GDWJ4TMZjf3Q6tkRJpbVsxbxrw2ZNs1mMr1kkhJHw%2BZP33KXV7Sid2d7RepBzG09zK6Syne9OEUzGJqS1nXe%2Bhm54OBmJLKygyEz%2BX2rRc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b2180cb524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2023/09/cropped-55-1-192x192.png

104.21.83.225

200 OK

16 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2023/09/cropped-55-1-192x192.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
16 kB (15908 bytes)
Hash
b4aecec9f847d1ee88428e4458089fb0
ebb517556b62eecfbd071e270dbe313b6e1b9874
bfc76ce08b56e98f74ceeffd928247ff1e6b613de29028ad52234845b16a4bba

HTTP Headers

GET /wp-content/uploads/2023/09/cropped-55-1-192x192.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 20 Sep 2023 04:45:49 GMT
etag: W/"650a78fd-3e24"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2F3IxnKqaQ3dxY9L636eZPVgIkldCvzmLyAE6UWA3jtN6a%2FaxdZhKruqy20Mxu5FSCTWa0gGL%2Fy%2FckLIxgh0JZyOYxKtCA43l4MXuiibY9JBd4ARpAP3h61yjKIr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b50bd6b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2022/03/MV5BYTE0ZTk3YmItOGM0MS00MWRmLTkzOTYtZTM5N2VkMWE4ZGM2XkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR164,0,630,1200_AL_-273x520.jpg

104.21.83.225

200 OK

26 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2022/03/MV5BYTE0ZTk3YmItOGM0MS00MWRmLTkzOTYtZTM5N2VkMWE4ZGM2XkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR164,0,630,1200_AL_-273x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 273x520, components 3
Size
26 kB (25919 bytes)
Hash
26ea631fae93aefc843d4ad4f430c893
4ceb37c94f0adfb4cb1ac2d5bc76b660ad51979c
054f17363434994be9fccea7cdd3d396f4510357bd97d2bfeb0ebdee1e704d7e

HTTP Headers

GET /wp-content/uploads/2022/03/MV5BYTE0ZTk3YmItOGM0MS00MWRmLTkzOTYtZTM5N2VkMWE4ZGM2XkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR164,0,630,1200_AL_-273x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Thu, 10 Mar 2022 20:02:26 GMT
etag: W/"622a5952-653f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rWrTAKJOj3oaSeQ1um%2BOIzn2IvPQyeAZSTu8JJW2NDH6VBqMv%2BqOtHl5yco3aoPoIwblxvBxUlC30iFIzdmn9f80TcgErzXEq93YnaHur4jjDFdWzwbWe2C8mQJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e17b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/themes/vo2023/assets/bootstrap/css/bootstrap.min.css

104.21.83.225

200 OK

117 kB

URL GET HTTP/3
x.3seq.com/wp-content/themes/vo2023/assets/bootstrap/css/bootstrap.min.css
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
ASCII text, with very long lines (65371)
Size
117 kB (117150 bytes)
Hash
58a49b3689d699cb72ffda7252d99fcb
973e37a8502921d56bc02bb55321f45b072b6f71
d31bef450ee67b64f9b70bfdf41fe4e00c65438705cc1fbb48ea6026d3a5d697

HTTP Headers

GET /wp-content/themes/vo2023/assets/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/wp-content/themes/vo2023/style.css?v=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Sun, 31 May 2020 13:56:58 GMT
etag: W/"5ed3b7aa-1c99e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tx%2FeRhKzjWxUw9XGZtmREcwptib0BeDPRrEUxyie0Nd3BnP2acDnzLifkvPfpfH9aXN4FJOAowQE5GX97EkUM1rV33Jkf%2FjqMEJ73VCMP%2FXfzcEkPdewrBWCZj4m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b11e8cb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2022/10/MV5BOTk0MWFlZGYtZDNjMy00N2ZkLTk5Y2UtNWYzNmU1YTRiZmFkXkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR105,0,630,1200_AL_-273x520.jpg

104.21.83.225

200 OK

37 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2022/10/MV5BOTk0MWFlZGYtZDNjMy00N2ZkLTk5Y2UtNWYzNmU1YTRiZmFkXkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR105,0,630,1200_AL_-273x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 273x520, components 3
Size
37 kB (37281 bytes)
Hash
9d020f23e40079e0bb06e50b3e53323f
761dffac7ca724b85805e1f6d8d037ab9ca50b5d
612e38bde1f27cdf324deab90ab2dbaab39a7689857d8c1c98620dd2467b3201

HTTP Headers

GET /wp-content/uploads/2022/10/MV5BOTk0MWFlZGYtZDNjMy00N2ZkLTk5Y2UtNWYzNmU1YTRiZmFkXkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR105,0,630,1200_AL_-273x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Sat, 29 Oct 2022 00:27:27 GMT
etag: W/"635c736f-91a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dojGrnPL%2BzEiDRTKCfYe14kca2EKqfr6q%2FATg%2Fau4QTGRsXQIH9h5xhYqB9utqpjl%2Bb6wPxu4DVue7AHfgKjzhmS4oFhMMnqKOzkwCnSrl5MGOznyqOTJ9nLdXue"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b77e50b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/themes/vo2023/style.css?v=2

104.21.83.225

200 OK

74 kB

URL GET HTTP/3
x.3seq.com/wp-content/themes/vo2023/style.css?v=2
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type

Size
74 kB (73506 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/themes/vo2023/style.css?v=2 HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:24 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Mon, 05 Dec 2022 01:54:44 GMT
etag: W/"638d4f64-11f22"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tn4QCHixS4LbuuzSpamdg0Cy%2FPKTCvszNZcF2qStTwLd%2BRYNyJURobm3psWfFhGDuy13Sx9HdxRQ9yi3GrwYy7DTxuMJEMOib6jhEoembztlm8ONLAYJihBXUAKQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b04d7cb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/themes/vo2023/assets/images/logo.png

104.21.83.225

200 OK

1.3 kB

URL GET HTTP/3
x.3seq.com/wp-content/themes/vo2023/assets/images/logo.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 158 x 40, 8-bit gray+alpha, non-interlaced
Size
1.3 kB (1302 bytes)
Hash
71e95da6bc67c08bd7286c0d1797d1ef
b10f2ea9037bfb466c36b79c3957c6db304f2651
a86ac788759688b557fa9a04ee00e5ef15512cf4670661f583f89b26826faf52

HTTP Headers

GET /wp-content/themes/vo2023/assets/images/logo.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:24 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 22 Dec 2020 02:14:36 GMT
etag: W/"5fe1568c-516"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sR8qEcK0Gd7bJqyK7dsbEqjTsSHpjshkbdiRJ5qctNn1iSEGreyGztlYIJijOuvHUx6Sq41hTHeN88MW%2Bn%2BelmisC3O0FvSzB%2BRl4GXCGbyHTzrFAxb9UjDUoO5T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b04d7eb524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2022/12/Yali-Capkini-2022-1290x1000-1-1290x1000.jpg

104.21.83.225

200 OK

267 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2022/12/Yali-Capkini-2022-1290x1000-1-1290x1000.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1290x1000, components 3
Size
267 kB (267225 bytes)
Hash
42e1658eb4cac68e72ec919d0c087ec7
80fd45e214612ecb94d47d840f7f1251fee12893
cf53f59d56e513d44ec230f36bd4e2afbe3541ba976cd1677f207d66207f538e

HTTP Headers

GET /wp-content/uploads/2022/12/Yali-Capkini-2022-1290x1000-1-1290x1000.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 28 Dec 2022 12:33:11 GMT
etag: W/"63ac3787-413d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYD2Um8mAKhNpQTtX7QKWxc%2BqAFR7dCWp3xouMDnG%2B5kf%2FU6zALFZDhBYAeXq7WeXFy1yzofWAlSjUejbYC2z58uSfgJu%2F8P18cdbTdnCmv8Epyt8%2FBhUbg%2FX%2BFX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b2483cb524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2

104.21.83.225

200 OK

19 kB

URL GET HTTP/3
x.3seq.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JavaScript source, ASCII text, with very long lines (15752)
Size
19 kB (18726 bytes)
Hash
b976b651932bfd25b9ddb5b7693d88a7
7fcb7cb5c11227f9213b1e08a07d0212209e1432
4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 02 Apr 2024 20:37:44 GMT
etag: W/"660c6c98-4926"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O3xGBohWqna%2FN8rXdrqUu9H4N18sKRRSqUxGK5cZRFoGi0Rnu7lwmn4vcHOZhuXN%2Bw8bnSxHsG54SspIvQbp3JmiivZ47lG4NMkJOstfc89qGi0OXZsJPOK3SVq5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b2a8e8b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2023/09/cc-349x520.jpg

104.21.83.225

200 OK

53 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2023/09/cc-349x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 349x520, components 3
Size
53 kB (52719 bytes)
Hash
24bb27be4a8b1a9a80907c2fe4cf58e4
3a539434bd99763d6a2c6666ce2734ff1944c484
44538bb4b8d40b456a630a395cc569c759a46c97bbc7ee0c065a89e43489a68f

HTTP Headers

GET /wp-content/uploads/2023/09/cc-349x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Sun, 24 Sep 2023 22:36:50 GMT
etag: W/"6510ba02-cdef"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FHO5ONHh5kwVWDYjH52qWqPvrsaifPJLAyIHBnBQqtgRzejz2%2BkLI9w0RBK8B3%2BqRChZlabta%2FsPmWeqkAWQybEUj34ndjoEgaLLhnVaS3IPkfPnFfBffO4zKnIV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e10b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D9%84%D8%AD%D9%85%D8%A9-%D8%A7%D9%84%D8%B4%D8%AC%D8%B1%D8%A9-%D8%A7%D9%84%D8%B3%D9%88%D8%AF%D8%A7%D8%A1-363x520-1.jpg

104.21.83.225

200 OK

39 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D9%84%D8%AD%D9%85%D8%A9-%D8%A7%D9%84%D8%B4%D8%AC%D8%B1%D8%A9-%D8%A7%D9%84%D8%B3%D9%88%D8%AF%D8%A7%D8%A1-363x520-1.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 363x520, components 3
Size
39 kB (38729 bytes)
Hash
5a38e9974ebf84516cc146d2db00a4b4
2651069be315927268f6f3a5a83c04cbd82d3a79
4f08378e0b24decdf8ce2b4c236ed9d4d9702e4a569421af98107ace21712f5b

HTTP Headers

GET /wp-content/uploads/2024/03/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D9%84%D8%AD%D9%85%D8%A9-%D8%A7%D9%84%D8%B4%D8%AC%D8%B1%D8%A9-%D8%A7%D9%84%D8%B3%D9%88%D8%AF%D8%A7%D8%A1-363x520-1.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Mon, 04 Mar 2024 20:08:11 GMT
etag: W/"65e62a2b-9749"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Egg2%2FW0bSVZLURUKx8cT7C%2FZIgEdMtpBHtKkmRd%2F7uan8nk6AcpyHvUBKydkSxbx3uxB3Muq8ILngawjkrtwy343UdtMtW6EeoHYhnUOyA49VORKTeWtvuIFm5i1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e12b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2022/09/MV5BOTY4ZjQwNDktMTIxZS00NTRjLTgzM2UtMGRmZGM5NGUxZTEyXkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR165,0,630,1200_AL_-273x520.jpg

104.21.83.225

200 OK

40 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2022/09/MV5BOTY4ZjQwNDktMTIxZS00NTRjLTgzM2UtMGRmZGM5NGUxZTEyXkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR165,0,630,1200_AL_-273x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 273x520, components 3
Size
40 kB (40040 bytes)
Hash
6785b261888ac1f75def73cb64c48c5d
9f5f8b7e3b8a0be630f1038188ad920af00cca33
ac2aa5a913f3a054bf14971884ae00fa51b04d4bab6435f43188e6d026b37c88

HTTP Headers

GET /wp-content/uploads/2022/09/MV5BOTY4ZjQwNDktMTIxZS00NTRjLTgzM2UtMGRmZGM5NGUxZTEyXkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR165,0,630,1200_AL_-273x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 28 Sep 2022 11:47:49 GMT
etag: W/"63343465-9c68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9Oi4UIUprR5LR3dBpNbWi1JRgD5GRLYIaKUvn7CQ3mgCmuo6dXQKfUsqMmFSwM47CzRPHuX%2BMMOgvECaLA4QAbKYmJXPmFKnE8SP2IfriVE75GtDfscx1B1UWNh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b77e4cb524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/

104.21.83.225

200 OK

57 kB

URL User Request GET HTTP/2
x.3seq.com/
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type

Size
57 kB (56928 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 21:07:24 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
link: <https://x.3seq.com/wp-json/>; rel="https://api.w.org/"
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FkRd7zdNHui8N5HcATXQIoQYQL7c%2B7u0NQgWVBWzlLTWIahqDFuQSvbJjzz4%2Fp5%2BJn%2BiWqgQv8E5J7uBrkJhNLnvi4vprDH%2F9UaWdYR57WlwFI31M58rV%2FaX98TF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2adccf1569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

x.3seq.com/wp-content/themes/vo2023/assets/js/core.js

104.21.83.225

200 OK

5.2 kB

URL GET HTTP/3
x.3seq.com/wp-content/themes/vo2023/assets/js/core.js
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (5370), with no line terminators
Size
5.2 kB (5161 bytes)
Hash
3359f3cf17ad9f96830ea471d66522a9
3cfee71e3f506d2b0d95a0a4a287b9c46083c9be
bbf498fbecaab3842926133ac2904a166a1e24df35078f680dcf10893a56bdb4

HTTP Headers

GET /wp-content/themes/vo2023/assets/js/core.js HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Sat, 04 Sep 2021 04:48:58 GMT
etag: W/"6132faba-1429"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ejUlYeBvI7lqBqeQU7lEBpUbltd6OYKRbjuTYWjn84dOkW0m4ySxlwnqgJB4Q5J1lpWy406VTKS9pRCst2wWR7HG7%2Bd7DhwNXcWXgY%2Fn91BRi%2Fqj%2BoJIWdRCBT7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b05d8eb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/themes/vo2023/assets/fonts/iconFont.ttf?hk7yuf

104.21.83.225

200 OK

8.3 kB

URL GET HTTP/3
x.3seq.com/wp-content/themes/vo2023/assets/fonts/iconFont.ttf?hk7yuf
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, esheeq
Size
8.3 kB (8292 bytes)
Hash
b75432b39209fa6119c2ab8e0c32ec0e
6073b9414c746c700272dcfc40fd132c8cad6d3e
f603a08b20a3c752af8d690c15859cf64fae7ed1e0b82472d38ffe9582f3297f

HTTP Headers

GET /wp-content/themes/vo2023/assets/fonts/iconFont.ttf?hk7yuf HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/wp-content/themes/vo2023/style.css?v=2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: application/octet-stream
content-length: 8292
last-modified: Fri, 28 Aug 2020 06:17:48 GMT
etag: "5f48a18c-2064"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g4Gpm9WbaaNV7wtLdkRn8nscMGpYsaL5Ki4C8w5IeyDf8RihVxLKocUlKbQAH9ZG3Yf%2ByDD%2B%2BX2W87s54S6xakgRpF5O7s%2BI83Re1D0cQ6cHnsvkhGFBi4%2BiqvNh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b25855b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2023/09/cropped-55-1-32x32.png

104.21.83.225

200 OK

1.6 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2023/09/cropped-55-1-32x32.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.6 kB (1627 bytes)
Hash
7ffbd59f33ae70b0219f6a4641fe9f3b
dc481cb678578e4fe6318fa175effad95687f3be
4c2bdf75d1f3b982b730458aa6f6a4f9dca2d8ece8cc13739c98d6b84e6c8059

HTTP Headers

GET /wp-content/uploads/2023/09/cropped-55-1-32x32.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 20 Sep 2023 04:45:49 GMT
etag: W/"650a78fd-65b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FlWd9S0OWtOb%2FbbRLoOkkxngfae4i%2FA3vIrh%2BMHZy%2BzHT9GMlDfT49Z%2Fk2uuZn5YT43xgEthLXi9VShai%2FH%2BXh1f46PvXYo3ct0Lf9z3%2FsVjBIxS0RQmbkszeQG%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b61ccdb524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/themes/vo2023/assets/bootstrap/js/bootstrap.min.js?ver=2.0

104.21.83.225

200 OK

35 kB

URL GET HTTP/3
x.3seq.com/wp-content/themes/vo2023/assets/bootstrap/js/bootstrap.min.js?ver=2.0
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JavaScript source, ASCII text, with very long lines (35282), with no line terminators
Size
35 kB (35282 bytes)
Hash
fa4447550b446ac73a77aa6c7582476d
44fb7da919b5c169af65fbba84114c6b8233f704
81106ddb86f999330c3dd90e9f7315f7341ca70e74f1b129e98ce66767c7a825

HTTP Headers

GET /wp-content/themes/vo2023/assets/bootstrap/js/bootstrap.min.js?ver=2.0 HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Sun, 31 May 2020 13:56:58 GMT
etag: W/"5ed3b7aa-89d2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Sd%2FiKrXwn7ggT9Bzch5DAGxuTtVTl%2B%2BjEbqslVfxWlgEBh3YElo%2FYrqyIhD7%2FkclohhgoZIYCtjkMlUrEoL75d3GgLJPEWLOoGPH7lKgQhfG7fxuqsZQEj49NI0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b04d8bb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/03/45.png

104.21.83.225

200 OK

736 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/03/45.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 891 x 526, 8-bit/color RGB, non-interlaced
Size
736 kB (736336 bytes)
Hash
fa7c5ffc6b5615f92bd101bf558bbf80
27ef6e64239ded099bc8edb1db9e0f09275e43d0
8009a95668ca8157d496bc0037d76627feeeb149008283fda10235488042ce4c

HTTP Headers

GET /wp-content/uploads/2024/03/45.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Mon, 04 Mar 2024 20:07:41 GMT
etag: W/"65e62a0d-b3c50"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9fb6Jd%2FAOkf94XMW7muFM3jtQ7%2FmXrvWAa5gVjwX6ZkOMOQ53l0A%2FewpKi74QiO8Yfpsn9AqTUT9Xp0LfEtVWcLzNUPCrbXweE7x7dYnhCtMOG2eyqsU%2B7E2Zplx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b2382eb524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2022/03/MV5BNTM5NWU4NGItYWQwNi00YjAxLWEyYmUtYWJkODk5ZWEyYjk0XkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR165,0,630,1200_AL_-273x520.jpg

104.21.83.225

200 OK

32 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2022/03/MV5BNTM5NWU4NGItYWQwNi00YjAxLWEyYmUtYWJkODk5ZWEyYjk0XkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR165,0,630,1200_AL_-273x520.jpg
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 273x520, components 3
Size
32 kB (32374 bytes)
Hash
ada6713626849c28681fe5e814f50631
42c7412f364279e1a3385686f26201de97185dbf
f060f9000a3ea94686988a730e04f854c2d161b961c1ca4e8c5e376f5cd9c9f4

HTTP Headers

GET /wp-content/uploads/2022/03/MV5BNTM5NWU4NGItYWQwNi00YjAxLWEyYmUtYWJkODk5ZWEyYjk0XkEyXkFqcGdeQXVyMTI1NDEyNTM5._V1_UY1200_CR165,0,630,1200_AL_-273x520.jpg HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/jpeg
vary: Accept-Encoding, Accept-Encoding
last-modified: Thu, 03 Mar 2022 16:53:56 GMT
etag: W/"6220f2a4-7e76"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qfp7Nxknc3ThS0sHGytK%2B4Mvu87lkquigBayoKg2%2Fgdb1PgXPYs3o6FFUu0GqEq5FZUnnNzJPbt54wYnv9sERUIaa7mdCE2BKFzJe9fDrdEOnT%2BPo54sSQSO9JHB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e18b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2024/01/5.png

104.21.83.225

200 OK

333 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2024/01/5.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 315 x 514, 8-bit/color RGB, non-interlaced
Size
333 kB (333109 bytes)
Hash
aec7f587394a379964cb922cc3e9e23e
472ed37e25bdee8ed50d539eebcb825cfa6b0a70
e92d2ebc309d525d2b19c8884737a312b7453bb83324efcd0d9b651842c42b2f

HTTP Headers

GET /wp-content/uploads/2024/01/5.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Mon, 01 Jan 2024 21:27:15 GMT
etag: W/"65932e33-51535"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gj6LWgOfbFXhxraS3kvDYutCo0Ex8Rq6fabbpm6KGhV6wtJaQTld6LRsvE4aBN%2BzAMBU9TX9LFH3CsOJKy3VI5O6vimFUSuTIT9KHQk2TyWz7DpJv92dcsEDmb8n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e1ab524-OSL
alt-svc: h3=":443"; ma=86400

glaikrolsoa.com/5/7226638/?oo=1&js_build=iclick-v1.761.2-auto

139.45.197.242

200 OK

2.9 kB

URL GET HTTP/2
glaikrolsoa.com/5/7226638/?oo=1&js_build=iclick-v1.761.2-auto
IP
139.45.197.242:443
ASN
#9002 RETN Limited

Requested by
https://x.3seq.com/
Certificate
IssuerLet's Encrypt
Subjectglaikrolsoa.com
Fingerprint99:EF:57:41:52:8D:35:15:65:65:BF:5A:40:20:90:9F:CD:65:53:F4
ValidityTue, 02 Apr 2024 18:49:13 GMT - Mon, 01 Jul 2024 18:49:12 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (3135), with no line terminators
Size
2.9 kB (2892 bytes)
Hash
24899ec68b0f0c3b6d29633e3bb16564
3dbbea4aa483cea7cab9fe06f9c93faf99e95cdd
ac499932eb148e4a0ed03dfd4032e9e9c7f0c8ec0a55bd19d4a39b4e7bc4f2e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /5/7226638/?oo=1&js_build=iclick-v1.761.2-auto HTTP/1.1
Host: glaikrolsoa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://x.3seq.com
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: application/json
x-trace-id: 3e96125ded05970d92ffa00c0e082a8f
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://x.3seq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=008047306b1a4adae1e4db1e1cc0a43c; expires=Wed, 23 Apr 2025 21:07:25 GMT; path=/; secure; SameSite=None
oaidts=1713906445; expires=Wed, 23 Apr 2025 21:07:25 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

my.rtmark.net/gid.js?userId=008047306b1a4adae1e4db1e1cc0a43c

139.45.195.8

200 OK

65 B

URL GET HTTP/2
my.rtmark.net/gid.js?userId=008047306b1a4adae1e4db1e1cc0a43c
IP
139.45.195.8:443
ASN
#9002 RETN Limited

Requested by
https://x.3seq.com/
Certificate
IssuerLet's Encrypt
Subjectrtmark.net
FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC
ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
65 B (65 bytes)
Hash
df7bba9b62f2671525b851f3e375ecda
51c9f8a59885464b7087f73061535dc97d3659a2
75fa8580a2feae089452ea0ec1fd5daac6d4ca7e8b19f925ad04665156e53810

HTTP Headers

GET /gid.js?userId=008047306b1a4adae1e4db1e1cc0a43c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://x.3seq.com
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://x.3seq.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=008047306b1a4adae1e4db1e1cc0a43c; expires=Wed, 23 Apr 2025 21:07:26 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

x.3seq.com/wp-content/uploads/2023/01/111-393x520.png

104.21.83.225

200 OK

362 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2023/01/111-393x520.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 393 x 520, 8-bit/color RGBA, non-interlaced
Size
362 kB (362276 bytes)
Hash
51c320dc4f3f0f2551d38909a5f128e9
528d245c4ec77fe65092ea4158a5ff4fbd207f58
f41cafc12db55bdda22cad5b2da31f8b92f12c6e5da795d61f5be92836a1158b

HTTP Headers

GET /wp-content/uploads/2023/01/111-393x520.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Fri, 13 Jan 2023 21:22:40 GMT
etag: W/"63c1cba0-58724"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mvb1zpRKPBae929B1y9lBqQlaM5yChJGZ7N%2F8sz1vy9kf7Hfl5TELRzp%2BO6asNJQvawymh81BRAb7HUn6L09dnO%2FoZ5gzT0zk%2BGDlT45H%2FCD1ug1W2nhiBU%2FMUWS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b77e52b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2023/09/33-346x520.png

104.21.83.225

200 OK

300 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2023/09/33-346x520.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 346 x 520, 8-bit/color RGBA, non-interlaced
Size
300 kB (299576 bytes)
Hash
dbead7bec051bc39682d16d394464db0
04c4763e22b52d1a4289e36c1cc96c29a6cc0691
94ec6c9756403d46b6e328f11e8bcfdc27a8a9d97cbd2da273783ab8456bcbee

HTTP Headers

GET /wp-content/uploads/2023/09/33-346x520.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Sat, 09 Sep 2023 19:07:22 GMT
etag: W/"64fcc26a-49238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zYKjwxJeejsMJHzKd%2FHM1DJkZHsvAGInUVHVjcf5lcuY6vhV%2F2uDQP8IO7wQRPun%2B8ZrD%2BZl96tP9E4aKujOuZrQqduAva%2FO8308G6Jkr0h%2F8zJ9LAy8IlLzCIjg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e13b524-OSL
alt-svc: h3=":443"; ma=86400

x.3seq.com/wp-content/uploads/2023/11/58585-372x520.png

104.21.83.225

200 OK

212 kB

URL GET HTTP/3
x.3seq.com/wp-content/uploads/2023/11/58585-372x520.png
IP
104.21.83.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subject3seq.com
Fingerprint73:34:21:7B:08:FF:26:E9:D7:62:75:FA:BE:79:1F:86:DB:C9:5E:9F
ValiditySat, 30 Mar 2024 12:45:22 GMT - Fri, 28 Jun 2024 12:45:21 GMT

File type
PNG image data, 372 x 520, 8-bit/color RGBA, non-interlaced
Size
212 kB (211677 bytes)
Hash
48dee677280901cc4b623ee60ebf2ebb
4d8ea73c26e655376c6aef98bb145c924ada9e9b
2bea14e31d7b25670d6311ba8726ad5991a2c6e4cca745a40abb69656c8a89ed

HTTP Headers

GET /wp-content/uploads/2023/11/58585-372x520.png HTTP/1.1
Host: x.3seq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Cookie: _ga_BTQF22D0QH=GS1.1.1713906445.1.0.1713906445.0.0.0; _ga=GA1.1.1488573452.1713906446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 23 Apr 2024 21:07:26 GMT
content-type: image/png
vary: Accept-Encoding, Accept-Encoding
last-modified: Thu, 02 Nov 2023 21:18:02 GMT
etag: W/"6544120a-33add"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ylLCy7AMfkROYkvMwyvoVKqiLwXMSf6w%2BKB10qPV1ujOdamHUi13ZcibMcGKjoRhr3JXXy9bGGAtmdpUs3MxHy0kiftFzoQ3UoCGiaDDoEcZodMFGLpPScEh%2BHTG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b74e19b524-OSL
alt-svc: h3=":443"; ma=86400

webmid.net/tag.min.js

188.114.96.1

200 OK

80 kB

URL GET HTTP/2
webmid.net/tag.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://x.3seq.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectwebmid.net
Fingerprint79:D5:5E:F5:33:E4:E6:35:4F:5A:4B:C4:0B:C2:05:18:A3:45:EA:06
ValiditySun, 17 Mar 2024 14:06:18 GMT - Sat, 15 Jun 2024 14:06:17 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
80 kB (80451 bytes)
Hash
e6003f4635d68b0f1237d9be50735b86
a0bb298b293d507d1687e42c531567d8365b313a
b19b1a865bbc7ffbbb3874c6dc91c9c7a4b9666bd0bee4aef72a46faa332939b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tag.min.js HTTP/1.1
Host: webmid.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x.3seq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 21:07:25 GMT
content-type: application/javascript
last-modified: Thu, 04 Apr 2024 03:04:14 GMT
vary: Accept-Encoding
etag: W/"660e18ae-13a43"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1704180
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NdoiUe2vnzF9hWF2eSobBj0Ss5pllEYfq1tXA2i236NIMETvRKR0ncWT7wu%2BsgOAyri7d2TLt7gme09Db6IjNXah1PIDFNeljj7EqhdvQ7%2F53v%2FsufO22oH4sJdg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790d2b23837b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML