| fetchfile.me/static/js/obfuscated.js?v=17 |  172.67.153.137 | 200 OK | 28 kB |
URL GET HTTP/3fetchfile.me/static/js/obfuscated.js?v=17 IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65521), with no line terminators Hash702623295a73be914c2af2784c03f3d4 faf7860d0d1c8f4f53eef49d44ff3db2844fead1 b2bf8c067be0470c2d0bed99198e03c353d5aba88418112d6dce22fe0bd4865b
GET /static/js/obfuscated.js?v=17 HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:25 GMT
content-type: application/javascript
cache-control: max-age=14400
etag: W/"45afbef57d8adb301ce940da80b866bdb24ef0481d317349212d068e07ed3eac"
expires: Tue, 16 Apr 2024 21:26:15 GMT
last-modified: Sat, 13 Apr 2024 01:24:16 GMT
permissions-policy: interest-cohort=()
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 416
server: cloudflare
cf-ray: 87574261bf391c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fetchfile.me/static/flags/4x3/us.svg | 172.67.153.137 | 200 OK | 539 kB |
URL GET HTTP/3fetchfile.me/static/flags/4x3/us.svg IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typeSVG Scalable Vector Graphics image Size539 kB (538611 bytes) Hashbfaaeb1ca82bf9541f20aa098f3e7cf2 60eaf90ffd92537efab96ca3630af5f5aa885444 553867d379deaaf0d8379531cc1f8ef3002cd13e5e006523ddc49a0204932d6c
GET /static/flags/4x3/us.svg HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/static/css/clean.css?v=17
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:25 GMT
content-type: image/svg+xml
cache-control: max-age=14400
etag: W/"45afbef57d8adb301ce940da80b866bdb24ef0481d317349212d068e07ed3eac"
expires: Tue, 16 Apr 2024 21:30:36 GMT
last-modified: Sat, 13 Apr 2024 01:24:16 GMT
permissions-policy: interest-cohort=()
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 263
server: cloudflare
cf-ray: 875742621f851c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fetchfile.me/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.153.137 | 302 Found | 0 B |
URL GET HTTP/3fetchfile.me/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Tue, 16 Apr 2024 21:27:25 GMT
content-length: 0
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js
access-control-allow-origin: *
vary: Accept-Encoding
server: cloudflare
cf-ray: 875742629fdf1c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-6KBGNNERQM | 142.250.74.168 | 200 OK | 100 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-6KBGNNERQM IP142.250.74.168:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size100 kB (100025 bytes) Hash6eec77b986a8e03a42630c9c74571811 a42feb994239f542dfcc2ff2691fdfd9343a5360 d190096c6782df428cd2af965e15ba53550b4813182dfc48fc769c3d12bb726b
GET /gtag/js?id=G-6KBGNNERQM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 16 Apr 2024 21:27:25 GMT
expires: Tue, 16 Apr 2024 21:27:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100025
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| beginnerfurglow.com/9a1d70f5dcd03fb38bf456fe7b6fe7bf/invoke.js | 192.243.59.12 | 200 OK | 9.8 kB |
URL GET HTTP/1.1beginnerfurglow.com/9a1d70f5dcd03fb38bf456fe7b6fe7bf/invoke.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectbeginnerfurglow.com Fingerprint2B:D7:E2:A4:B6:B9:2E:0C:6A:8B:FD:22:E6:27:B8:07:AD:31:2F:C1 ValidityFri, 15 Mar 2024 08:44:41 GMT - Thu, 13 Jun 2024 08:44:40 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26618), with no line terminators Hashac74c9ca7310b4f5e04dc9d56ace810a 38640dc39d17934d529ec7e86019532e6275dca9 2eaeece2c12515a8f647159a0974cf17690f82621c8cfb722e40910b4804ae50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /9a1d70f5dcd03fb38bf456fe7b6fe7bf/invoke.js HTTP/1.1
Host: beginnerfurglow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 63553d0a0c405fc60b3cde1438d78dfd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| beginnerfurglow.com/92b591e2501e354b5ffbf10229917566/invoke.js | 192.243.59.12 | 200 OK | 12 kB |
URL GET HTTP/1.1beginnerfurglow.com/92b591e2501e354b5ffbf10229917566/invoke.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectbeginnerfurglow.com Fingerprint2B:D7:E2:A4:B6:B9:2E:0C:6A:8B:FD:22:E6:27:B8:07:AD:31:2F:C1 ValidityFri, 15 Mar 2024 08:44:41 GMT - Thu, 13 Jun 2024 08:44:40 GMT
File typeJavaScript source, ASCII text, with very long lines (31289), with no line terminators Hashbf2b76d20fb5f7deade420b891bf2337 e1b18c6cfdcdb216fb51d8cd59f8be78b00ed7b6 70a293ac73721093cbed1b65e02aa351229a8ad141d37520e5ad148cab46f9f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /92b591e2501e354b5ffbf10229917566/invoke.js HTTP/1.1
Host: beginnerfurglow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fa0dfbf4c0a58c4050d07501de368bb5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| beginnerfurglow.com/7b/5d/c1/7b5dc12f03a6624a33737b4b3f843d7d.js | 192.243.59.12 | 200 OK | 16 kB |
URL GET HTTP/1.1beginnerfurglow.com/7b/5d/c1/7b5dc12f03a6624a33737b4b3f843d7d.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectbeginnerfurglow.com Fingerprint2B:D7:E2:A4:B6:B9:2E:0C:6A:8B:FD:22:E6:27:B8:07:AD:31:2F:C1 ValidityFri, 15 Mar 2024 08:44:41 GMT - Thu, 13 Jun 2024 08:44:40 GMT
File typeJavaScript source, ASCII text, with very long lines (44060), with no line terminators Hash765240da9500daf26e3e62c38981a211 8af21cb04823cfb455f9fa68782d38c6b1b58e23 3b9312349bffa834b80ac6df51f296c0203fc57ac9d54e2ba2d361024407f555
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /7b/5d/c1/7b5dc12f03a6624a33737b4b3f843d7d.js HTTP/1.1
Host: beginnerfurglow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f5d44fee6f0aa67e13240640ee6ad668
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hashb02330fe70e031c54a12c30e8436d13c 5983227c1b6fd73a71c0fb01854174aae24bc991 d8d2ee03769735fe68e9b9a89f3c508e8789c127b892dd6856141c874740c2e2
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 16 Apr 2024 21:27:26 GMT
Last-Modified: Tue, 16 Apr 2024 20:29:01 GMT
Server: ECAcc (ska/F7A5)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sk8Ri2-WctiU02Oh9VTwAw2eMcUg7wNgWaxb-TK-cxbchUr5dVBH0Q==
Age: 3505
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hashb02330fe70e031c54a12c30e8436d13c 5983227c1b6fd73a71c0fb01854174aae24bc991 d8d2ee03769735fe68e9b9a89f3c508e8789c127b892dd6856141c874740c2e2
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 16 Apr 2024 21:27:26 GMT
Last-Modified: Tue, 16 Apr 2024 20:29:19 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8weWm5NjvPDPCX1cTWuxUHi3q7fvuC--HmDYxhfTPQ8dzC9FGN-YQw==
Age: 3487
|
|
| fetchfile.me/share.html | 172.67.153.137 | 200 OK | 10 kB |
IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typeASCII text, with very long lines (24632), with no line terminators Hash511afd085a8d0e9f0d076aa23eaea16f 7159773160b989ebdfa862c3c144c5f93634bdbd 9e3bc0695f3da474143b7c5e164d137ba70212f905286f06c3ec89cb29816239
GET /share.html HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=600
expires: Tue, 16 Apr 2024 21:37:26 UTC
last-modified: Sat, 13 Apr 2024 01:29:54 GMT
permissions-policy: interest-cohort=()
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87574262f8291c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| proftrafficcounter.com/stats |  18.185.247.192 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.247.192:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash3f9ba925e1e53e1e5d2abc8ffb65cca4 720b15793ca036f0b2d083c3cc94a6f9052f134a e8fafb280540c995b7ffbc9a991f6ab535490a356c3180a9671d43a31f5deabe
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://fetchfile.me
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=86d73bee-7044-4c26-908a-73dbfd1c6e05:3:1; expires=Fri, 14 Apr 2034 21:27:26 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 18.185.247.192 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.247.192:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash26c46dbff92d5e1de972da68fb0944bd 91d6dca6e1d3642c30eddcc8666f7eb45ff33f75 a09a3552dea982236c53a6a935662ce2086517a1b3fc4bf8b1733acdd15efd94
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://fetchfile.me
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9:2:1; expires=Fri, 14 Apr 2034 21:27:26 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 18.185.247.192 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.247.192:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash67047c5a436a00eba0080da40e8f5d06 afbb3de1e580345f34d412e233437c1da185336b b8bb537527cc7a09be82418408cd0920a2e91d15f6eb7215e25f41ba85578571
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://fetchfile.me
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; expires=Fri, 14 Apr 2034 21:27:26 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 172.67.180.87 | 200 OK | 28 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP172.67.180.87:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: e4e9ed1d63e8edee4088a181185bc1c2
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 16 Apr 2024 21:27:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EY9rQ0JdafgfiKuuvTt9Te7bzLezwk%2BixfH%2BrxktfIA%2FSLo6BsaTqwE9Kcf%2FKeck5zOFq%2FayrmuKbv7I3%2FB5rXa07kbH04qGpV%2BEfuQliRa%2FgaZ0rMYOTNvaqHxiNWMffUnYlaKnYTQCYAWr86GvNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8757426669461c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| traileroutlinerefreshments.com/ntv.json?key=9a1d70f5dcd03fb38bf456fe7b6fe7bf&vstc=4 | 172.240.108.68 | 200 OK | 18 kB |
URL GET HTTP/1.1traileroutlinerefreshments.com/ntv.json?key=9a1d70f5dcd03fb38bf456fe7b6fe7bf&vstc=4 IP172.240.108.68:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjecttraileroutlinerefreshments.com Fingerprint41:1C:77:30:20:CC:E4:2C:E0:A5:21:6A:38:56:D8:6B:1D:FD:3A:43 ValidityTue, 16 Apr 2024 13:29:30 GMT - Mon, 15 Jul 2024 13:29:29 GMT
Hashb438d54f7348ca7f439f93605bda6c34 168329cf9f084d9b87bf64a1cf94f7bc2ceb9a8d a71c8e5582777927184b37d46f3345fc01d619df1d1b176cf3de62ad134246b1
GET /ntv.json?key=9a1d70f5dcd03fb38bf456fe7b6fe7bf&vstc=4 HTTP/1.1
Host: traileroutlinerefreshments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 16 Apr 2024 21:27:26 GMT
Content-Type: application/json
Content-Length: 17892
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://fetchfile.me
Access-Control-Allow-Origin: https://fetchfile.me
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=19110719; expires=Wed, 17 Apr 2024 21:27:26 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 17 Apr 2024 21:27:26 GMT; secure; SameSite=None
uncs=1; expires=Wed, 17 Apr 2024 21:27:26 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 17 Apr 2024 21:27:26 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 17 Apr 2024 21:27:26 GMT; secure; SameSite=None
nlec9a1d70f5dcd03fb38bf456fe7b6fe7bf=[4991489,3635874,3637745,4991488]; expires=Tue, 16 Apr 2024 21:27:31 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3181348139b54eed90c51b88eea2f968
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| universitypermanentlyhusk.com/watch.840885846370.js?key=92b591e2501e354b5ffbf10229917566&kw=%5B%22%E2%80%8Dtwitter%22%2C%22broadcast%E2%80%8D%22%2C%22video%22%2C%22loader%22%2C%22%E2%80%94%22%2C%22fetchfile%22%5D&refer=https%3A%2F%2Ffetchfile.me%2Fdownload-twitter-broadcast%2F%3Furl%3Dhttps%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&tz=0&dev=e&res=14.2071&uuid=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9%3A2%3A1 | 192.243.59.12 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1universitypermanentlyhusk.com/watch.840885846370.js?key=92b591e2501e354b5ffbf10229917566&kw=%5B%22%E2%80%8Dtwitter%22%2C%22broadcast%E2%80%8D%22%2C%22video%22%2C%22loader%22%2C%22%E2%80%94%22%2C%22fetchfile%22%5D&refer=https%3A%2F%2Ffetchfile.me%2Fdownload-twitter-broadcast%2F%3Furl%3Dhttps%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&tz=0&dev=e&res=14.2071&uuid=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9%3A2%3A1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectuniversitypermanentlyhusk.com Fingerprint35:AE:DE:9A:A8:51:0B:CD:1E:CB:9A:1F:6C:87:EE:4C:0C:5C:A1:6B ValidityTue, 16 Apr 2024 13:50:42 GMT - Mon, 15 Jul 2024 13:50:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.840885846370.js?key=92b591e2501e354b5ffbf10229917566&kw=%5B%22%E2%80%8Dtwitter%22%2C%22broadcast%E2%80%8D%22%2C%22video%22%2C%22loader%22%2C%22%E2%80%94%22%2C%22fetchfile%22%5D&refer=https%3A%2F%2Ffetchfile.me%2Fdownload-twitter-broadcast%2F%3Furl%3Dhttps%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&tz=0&dev=e&res=14.2071&uuid=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9%3A2%3A1 HTTP/1.1
Host: universitypermanentlyhusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://fetchfile.me
Access-Control-Allow-Origin: https://fetchfile.me
Access-Control-Allow-Credentials: true
Location: https://universitypermanentlyhusk.com/watch.840885846370.js?dev=e&key=92b591e2501e354b5ffbf10229917566&kw=%5B%22%E2%80%8Dtwitter%22%2C%22broadcast%E2%80%8D%22%2C%22video%22%2C%22loader%22%2C%22%E2%80%94%22%2C%22fetchfile%22%5D&pst=1713302907&refer=https%3A%2F%2Ffetchfile.me%2Fdownload-twitter-broadcast%2F%3Furl%3Dhttps%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&res=14.2071&rmtc=t&shu=f01a2fa901fffdf795d7ece131b185ca4a83378d5832641ce464a05d6c264121162c31e9ae6379cadd07b1245d8d49531cc4a23dc4112186fabe6f83265d0cca4693e01f769e24e2fd91defa74690da40b13bd12a0139ffc04a30cb1a362b3&tz=0&uuid=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9%3A2%3A1
Set-Cookie: u_pl=17876580; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.AZ4hfuiGszVTy4ag5A79yLJoLBuUNPfTYnWDzaIL2hQ; expires=Tue, 16 Apr 2024 21:28:27 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c018b9a45eedbd39bc06d30a07229121
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXuekICjrSZQBD%2Boik%2B6ZSXdmF1xcY5Zg3Ky7it6kuqt6Uqa6q6nqmp6MINEF2Yswghf10vkmP1DDon%2BAi0wWRAJC%2BpbDBvwDPIiwZ%2BkxOPqg%2B72vvlfwfe%2FVZzv2jLRh6enyW2okpKQLiy23%2BdL7nneluSZSO2wOl%2FwP%2FO6Vph5c7vkt9%2BXmdR5tqoW267mu53rNFaF5rIYLNQmRHfa8Vs9tddstb7GLof4%2FNtaBoQ7Y4Iw8DcGqxgPnIkQ0RZr8sMzNZq6yV95IrKS50hiwg3fTzVQVKZJ5GWsHcXpw3g1lTlbuQ6V7M7lQg38bQ1ER55f7CNODc5EIB7sznaEETxGyJ1AMpuByCkGniNQdCHZCgIjhxjrSZP%2BG0gXd%2BoelNVuRxqO%2FIIqKNB5eRJrcuybFsHlbSZsLlRoM4xJiOIXoT5HZI%2BSjCxDFEaL8Uwj2G1l4tIY02V03UkGwcuZdiClEPIXkY1DjwNafcGBjBzZzkLDTZuR5XuCyiLpLvSjqsICHPnM9GsQe9Vx%2FCTaq5Y2RZ2NEcoxIbyPT29gUX5x4Z9D2Z5iNEoY5MHlFnLe3MWAlCk5QGIKCEhSCoMgJikG5x6Rpm3KfSWND7zy3z3OnnKi8v0P3VN7nKQHVY2hW7mRn5Kl6RM4L31zFJj9t9qjHAjdeZBFzO3HYWQrj7qIf8yCc%2FWIYUUKYCzPXI1GR5150kImKNC7vI6RHMPIIkXgG1HqgRQm6UWKUHsY8jzZiIXkr4WCqRJY3kG85O%2FKMPDtb0tolBzw6vpqPfr9%2B7%2BJHiHSJTJf4UDwg6Mu7k1uqILu3VGHIj%2BtZLhIxovUCb%2Bc054999ybfKpRmq8tm%2FO1rUU3U5eE73ORrNGUi7Rvy%2FTXBGNcrSkec%2FLRq3uPhTWs2rlmd2mzt5usrq0mmuTFCpVPQ2tTxFiJRkScffjx7m5fs5xB6Cm1LJPaYnAeEOkKUbcNkc%2F1GEWg57wkzB4UtJ7odzg%2BlIJB8jmlYwvwHh%2FN6oml9m4pyx9xFXzdA8ztIkxIDXWIgS1A5hrGPT%2FJMH1%2F99as6vkYoG5NQ6sZuKLX8cjbmigQjVCT45M8aEhhx2gw6HZf6vUUvCCgPwm57KfY9Rmm767d9n3aQmyp%2B%2Fo9X%2FwYAAP%2F%2FAQAA%2F%2F%2BsJ7AUfwQAAA%3D%3D | 172.240.108.68 | 200 OK | 7 B |
URL GET HTTP/1.1traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXuekICjrSZQBD%2Boik%2B6ZSXdmF1xcY5Zg3Ky7it6kuqt6Uqa6q6nqmp6MINEF2Yswghf10vkmP1DDon%2BAi0wWRAJC%2BpbDBvwDPIiwZ%2BkxOPqg%2B72vvlfwfe%2FVZzv2jLRh6enyW2okpKQLiy23%2BdL7nneluSZSO2wOl%2FwP%2FO6Vph5c7vkt9%2BXmdR5tqoW267mu53rNFaF5rIYLNQmRHfa8Vs9tddstb7GLof4%2FNtaBoQ7Y4Iw8DcGqxgPnIkQ0RZr8sMzNZq6yV95IrKS50hiwg3fTzVQVKZJ5GWsHcXpw3g1lTlbuQ6V7M7lQg38bQ1ER55f7CNODc5EIB7sznaEETxGyJ1AMpuByCkGniNQdCHZCgIjhxjrSZP%2BG0gXd%2BoelNVuRxqO%2FIIqKNB5eRJrcuybFsHlbSZsLlRoM4xJiOIXoT5HZI%2BSjCxDFEaL8Uwj2G1l4tIY02V03UkGwcuZdiClEPIXkY1DjwNafcGBjBzZzkLDTZuR5XuCyiLpLvSjqsICHPnM9GsQe9Vx%2FCTaq5Y2RZ2NEcoxIbyPT29gUX5x4Z9D2Z5iNEoY5MHlFnLe3MWAlCk5QGIKCEhSCoMgJikG5x6Rpm3KfSWND7zy3z3OnnKi8v0P3VN7nKQHVY2hW7mRn5Kl6RM4L31zFJj9t9qjHAjdeZBFzO3HYWQrj7qIf8yCc%2FWIYUUKYCzPXI1GR5150kImKNC7vI6RHMPIIkXgG1HqgRQm6UWKUHsY8jzZiIXkr4WCqRJY3kG85O%2FKMPDtb0tolBzw6vpqPfr9%2B7%2BJHiHSJTJf4UDwg6Mu7k1uqILu3VGHIj%2BtZLhIxovUCb%2Bc054999ybfKpRmq8tm%2FO1rUU3U5eE73ORrNGUi7Rvy%2FTXBGNcrSkec%2FLRq3uPhTWs2rlmd2mzt5usrq0mmuTFCpVPQ2tTxFiJRkScffjx7m5fs5xB6Cm1LJPaYnAeEOkKUbcNkc%2F1GEWg57wkzB4UtJ7odzg%2BlIJB8jmlYwvwHh%2FN6oml9m4pyx9xFXzdA8ztIkxIDXWIgS1A5hrGPT%2FJMH1%2F99as6vkYoG5NQ6sZuKLX8cjbmigQjVCT45M8aEhhx2gw6HZf6vUUvCCgPwm57KfY9Rmm767d9n3aQmyp%2B%2Fo9X%2FwYAAP%2F%2FAQAA%2F%2F%2BsJ7AUfwQAAA%3D%3D IP172.240.108.68:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjecttraileroutlinerefreshments.com Fingerprint41:1C:77:30:20:CC:E4:2C:E0:A5:21:6A:38:56:D8:6B:1D:FD:3A:43 ValidityTue, 16 Apr 2024 13:29:30 GMT - Mon, 15 Jul 2024 13:29:29 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXuekICjrSZQBD%2Boik%2B6ZSXdmF1xcY5Zg3Ky7it6kuqt6Uqa6q6nqmp6MINEF2Yswghf10vkmP1DDon%2BAi0wWRAJC%2BpbDBvwDPIiwZ%2BkxOPqg%2B72vvlfwfe%2FVZzv2jLRh6enyW2okpKQLiy23%2BdL7nneluSZSO2wOl%2FwP%2FO6Vph5c7vkt9%2BXmdR5tqoW267mu53rNFaF5rIYLNQmRHfa8Vs9tddstb7GLof4%2FNtaBoQ7Y4Iw8DcGqxgPnIkQ0RZr8sMzNZq6yV95IrKS50hiwg3fTzVQVKZJ5GWsHcXpw3g1lTlbuQ6V7M7lQg38bQ1ER55f7CNODc5EIB7sznaEETxGyJ1AMpuByCkGniNQdCHZCgIjhxjrSZP%2BG0gXd%2BoelNVuRxqO%2FIIqKNB5eRJrcuybFsHlbSZsLlRoM4xJiOIXoT5HZI%2BSjCxDFEaL8Uwj2G1l4tIY02V03UkGwcuZdiClEPIXkY1DjwNafcGBjBzZzkLDTZuR5XuCyiLpLvSjqsICHPnM9GsQe9Vx%2FCTaq5Y2RZ2NEcoxIbyPT29gUX5x4Z9D2Z5iNEoY5MHlFnLe3MWAlCk5QGIKCEhSCoMgJikG5x6Rpm3KfSWND7zy3z3OnnKi8v0P3VN7nKQHVY2hW7mRn5Kl6RM4L31zFJj9t9qjHAjdeZBFzO3HYWQrj7qIf8yCc%2FWIYUUKYCzPXI1GR5150kImKNC7vI6RHMPIIkXgG1HqgRQm6UWKUHsY8jzZiIXkr4WCqRJY3kG85O%2FKMPDtb0tolBzw6vpqPfr9%2B7%2BJHiHSJTJf4UDwg6Mu7k1uqILu3VGHIj%2BtZLhIxovUCb%2Bc054999ybfKpRmq8tm%2FO1rUU3U5eE73ORrNGUi7Rvy%2FTXBGNcrSkec%2FLRq3uPhTWs2rlmd2mzt5usrq0mmuTFCpVPQ2tTxFiJRkScffjx7m5fs5xB6Cm1LJPaYnAeEOkKUbcNkc%2F1GEWg57wkzB4UtJ7odzg%2BlIJB8jmlYwvwHh%2FN6oml9m4pyx9xFXzdA8ztIkxIDXWIgS1A5hrGPT%2FJMH1%2F99as6vkYoG5NQ6sZuKLX8cjbmigQjVCT45M8aEhhx2gw6HZf6vUUvCCgPwm57KfY9Rmm767d9n3aQmyp%2B%2Fo9X%2FwYAAP%2F%2FAQAA%2F%2F%2BsJ7AUfwQAAA%3D%3D HTTP/1.1
Host: traileroutlinerefreshments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=19110719; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec9a1d70f5dcd03fb38bf456fe7b6fe7bf=[4991489,3635874,3637745,4991488]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0d5ec87231080ee27742b4bc04ffcc74
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| api.fetchfile.me/img?url=https%3A%2F%2Fprod-fastly-sa-east-1.video.pscp.tv%2FTranscoding%2Fv1%2Flive_thumbnail%2Fsa-east-1%2FeyJkIjoxMjh9%2Ftb7AmHEqQZh_URVBuTz6PDOdn5bpLNlx7NROSiRhPe1t1Bv_jURUe_j_zHrejKix0VF8oBtMHcoYV_KPdIqiHQ%2Flatest.jpg%3Ftoken%3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsInZlcnNpb24iOiIyIn0.eyJBbGxvd2VkUHJvdG9jb2xzIjpbInRodW1iIl0sIkJyb2FkY2FzdElkIjoiMVprS3pqVnBqRGRLdiIsIkdyYW50VHlwZSI6InJlYWQiLCJHcmFudGVkQXQiOjE3MTMzMDI4MDYsIkdyYW50ZWRUbyI6InR3LTg1NjU0NDQwODI0OTk1ODQwMSIsIlN0cmVhbU5hbWUiOiJ0YjdBbUhFcVFaaF9VUlZCdVR6NlBET2RuNWJwTE5seDdOUk9TaVJoUGUxdDFCdl9qVVJVZV9qX3pIcmVqS2l4MFZGOG9CdE1IY29ZVl9LUGRJcWlIUSIsImV4cCI6MTcxMzQ3NTYwNn0.8gFo-kGsU0I9_3e10s_ZfOMp3mAxua_7rkaTLj8l8Y4%26service%3Dproxsee%26digest%3DD0TaYRCOUXc-BZTfPpysFe6U1uCflRQ2ZUHLRcfo0IA%26ts%3D856651403 | 172.67.153.137 | 200 OK | 5.3 kB |
URL GET HTTP/3api.fetchfile.me/img?url=https%3A%2F%2Fprod-fastly-sa-east-1.video.pscp.tv%2FTranscoding%2Fv1%2Flive_thumbnail%2Fsa-east-1%2FeyJkIjoxMjh9%2Ftb7AmHEqQZh_URVBuTz6PDOdn5bpLNlx7NROSiRhPe1t1Bv_jURUe_j_zHrejKix0VF8oBtMHcoYV_KPdIqiHQ%2Flatest.jpg%3Ftoken%3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsInZlcnNpb24iOiIyIn0.eyJBbGxvd2VkUHJvdG9jb2xzIjpbInRodW1iIl0sIkJyb2FkY2FzdElkIjoiMVprS3pqVnBqRGRLdiIsIkdyYW50VHlwZSI6InJlYWQiLCJHcmFudGVkQXQiOjE3MTMzMDI4MDYsIkdyYW50ZWRUbyI6InR3LTg1NjU0NDQwODI0OTk1ODQwMSIsIlN0cmVhbU5hbWUiOiJ0YjdBbUhFcVFaaF9VUlZCdVR6NlBET2RuNWJwTE5seDdOUk9TaVJoUGUxdDFCdl9qVVJVZV9qX3pIcmVqS2l4MFZGOG9CdE1IY29ZVl9LUGRJcWlIUSIsImV4cCI6MTcxMzQ3NTYwNn0.8gFo-kGsU0I9_3e10s_ZfOMp3mAxua_7rkaTLj8l8Y4%26service%3Dproxsee%26digest%3DD0TaYRCOUXc-BZTfPpysFe6U1uCflRQ2ZUHLRcfo0IA%26ts%3D856651403 IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typeJPEG image data, comment: "Lavc59.13.100", baseline, precision 8, 128x72, components 3 Hashbcc91d282d00c346e6acdfc12c7ada42 f36af3178a05aab327cbe7b043cc68e003f72792 795026355b77e5bd2aceef1ced0499f2b42a1c7500b3894823ea406c61d36bd8
GET /img?url=https%3A%2F%2Fprod-fastly-sa-east-1.video.pscp.tv%2FTranscoding%2Fv1%2Flive_thumbnail%2Fsa-east-1%2FeyJkIjoxMjh9%2Ftb7AmHEqQZh_URVBuTz6PDOdn5bpLNlx7NROSiRhPe1t1Bv_jURUe_j_zHrejKix0VF8oBtMHcoYV_KPdIqiHQ%2Flatest.jpg%3Ftoken%3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsInZlcnNpb24iOiIyIn0.eyJBbGxvd2VkUHJvdG9jb2xzIjpbInRodW1iIl0sIkJyb2FkY2FzdElkIjoiMVprS3pqVnBqRGRLdiIsIkdyYW50VHlwZSI6InJlYWQiLCJHcmFudGVkQXQiOjE3MTMzMDI4MDYsIkdyYW50ZWRUbyI6InR3LTg1NjU0NDQwODI0OTk1ODQwMSIsIlN0cmVhbU5hbWUiOiJ0YjdBbUhFcVFaaF9VUlZCdVR6NlBET2RuNWJwTE5seDdOUk9TaVJoUGUxdDFCdl9qVVJVZV9qX3pIcmVqS2l4MFZGOG9CdE1IY29ZVl9LUGRJcWlIUSIsImV4cCI6MTcxMzQ3NTYwNn0.8gFo-kGsU0I9_3e10s_ZfOMp3mAxua_7rkaTLj8l8Y4%26service%3Dproxsee%26digest%3DD0TaYRCOUXc-BZTfPpysFe6U1uCflRQ2ZUHLRcfo0IA%26ts%3D856651403 HTTP/1.1
Host: api.fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: cf_clearance=838T8o_YWQukLPTg9nldyVvJtgwYG7aZUZXCtUCwDlQ-1713302846-1.0.1.1-b89x7lEQ3DHerQILT03q85CIj5mk300d2UdNatKeGWalFzASe2MOZAG7qVhb7UOmglaEFyAoQy_iGSAEhTwNSA; _ga_6KBGNNERQM=GS1.1.1713302846.1.0.1713302846.0.0.0; _ga=GA1.1.1657483280.1713302846
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/jpeg
content-length: 5262
cf-ray: 87574266bac61c16-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=14400, s-max-age=2
expires: Tue, 16 Apr 2024 21:27:26 GMT
last-modified: Tue, 16 Apr 2024 21:27:27 GMT
vary: Origin, Accept-Encoding
via: 1.1 varnish, 1.1 varnish
pscp-streamname: tb7AmHEqQZh_URVBuTz6PDOdn5bpLNlx7NROSiRhPe1t1Bv_jURUe_j_zHrejKix0VF8oBtMHcoYV_KPdIqiHQ
x-amzn-trace-id: Root=1-661eed3d-2ece8a2e57529fd69a39d109
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-served-by: cache-gru-sbsp2090065-GRU, cache-osl6546-OSL
x-timer: S1713302847.603317,VS0,VE587
x-robots-tag: noindex, nofollow
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudimagesb.com/si/b9/5d/e2/b95de288caeec55111c172964c8a9c84/1662036680.jpg | 45.133.44.9 | 200 OK | 21 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/b9/5d/e2/b95de288caeec55111c172964c8a9c84/1662036680.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash8f4953c1b8baece7bb7d226247561ce2 da5d440970606602026d7900a55ae2fd27a3f170 8fd9df7d8e48ff2519631e82e01519d4f1c65abd41ec977c18abb58df9832919
GET /si/b9/5d/e2/b95de288caeec55111c172964c8a9c84/1662036680.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/jpeg
content-length: 20566
server: nginx/1.21.6
last-modified: Thu, 01 Sep 2022 12:51:28 GMT
etag: "6310aad0-5056"
expires: Thu, 18 Apr 2024 21:27:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| api.fetchfile.me/fetch?url=https%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&hash=1Onm3OiXn7aXnruXnrvm497m4Nrkmtjh2Zqkst6XnrvU3uTT0NjT3%2Bnlkae4nc%2Fdt%2B%2FcwuXcsNm94g%3D%3D&c=0&clientip=91.90.42.154 |  104.21.90.58 | 200 OK | 1.9 kB |
URL GET HTTP/2api.fetchfile.me/fetch?url=https%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&hash=1Onm3OiXn7aXnruXnrvm497m4Nrkmtjh2Zqkst6XnrvU3uTT0NjT3%2Bnlkae4nc%2Fdt%2B%2FcwuXcsNm94g%3D%3D&c=0&clientip=91.90.42.154 IP104.21.90.58:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
Hash39dd74df31666e0697050e6f64646ddf e12787d0f193c8c3d2ea157d667ea45abc53fce2 6450cc12ad50b00d92fdc9371f49bc6496e1b6c20a503ec60b327746c8ec0e68
GET /fetch?url=https%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&hash=1Onm3OiXn7aXnruXnrvm497m4Nrkmtjh2Zqkst6XnrvU3uTT0NjT3%2Bnlkae4nc%2Fdt%2B%2FcwuXcsNm94g%3D%3D&c=0&clientip=91.90.42.154 HTTP/1.1
Host: api.fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: application/json;charset=UTF-8
access-control-allow-origin: https://fetchfile.me
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
server: cloudflare
cf-ray: 875742655f2b7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| universitypermanentlyhusk.com/watch.840885846370.js?dev=e&key=92b591e2501e354b5ffbf10229917566&kw=%5B%22%E2%80%8Dtwitter%22%2C%22broadcast%E2%80%8D%22%2C%22video%22%2C%22loader%22%2C%22%E2%80%94%22%2C%22fetchfile%22%5D&pst=1713302907&refer=https%3A%2F%2Ffetchfile.me%2Fdownload-twitter-broadcast%2F%3Furl%3Dhttps%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&res=14.2071&rmtc=t&shu=f01a2fa901fffdf795d7ece131b185ca4a83378d5832641ce464a05d6c264121162c31e9ae6379cadd07b1245d8d49531cc4a23dc4112186fabe6f83265d0cca4693e01f769e24e2fd91defa74690da40b13bd12a0139ffc04a30cb1a362b3&tz=0&uuid=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9%3A2%3A1 | 192.243.59.12 | 200 OK | 2.0 kB |
URL GET HTTP/1.1universitypermanentlyhusk.com/watch.840885846370.js?dev=e&key=92b591e2501e354b5ffbf10229917566&kw=%5B%22%E2%80%8Dtwitter%22%2C%22broadcast%E2%80%8D%22%2C%22video%22%2C%22loader%22%2C%22%E2%80%94%22%2C%22fetchfile%22%5D&pst=1713302907&refer=https%3A%2F%2Ffetchfile.me%2Fdownload-twitter-broadcast%2F%3Furl%3Dhttps%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&res=14.2071&rmtc=t&shu=f01a2fa901fffdf795d7ece131b185ca4a83378d5832641ce464a05d6c264121162c31e9ae6379cadd07b1245d8d49531cc4a23dc4112186fabe6f83265d0cca4693e01f769e24e2fd91defa74690da40b13bd12a0139ffc04a30cb1a362b3&tz=0&uuid=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9%3A2%3A1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectuniversitypermanentlyhusk.com Fingerprint35:AE:DE:9A:A8:51:0B:CD:1E:CB:9A:1F:6C:87:EE:4C:0C:5C:A1:6B ValidityTue, 16 Apr 2024 13:50:42 GMT - Mon, 15 Jul 2024 13:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (2521) Hash1fca184f875a7001b1c0f744229a06c9 147b5fdc7e6db27f8f654a4631f39d42e3c0e80b 805b22776afc847c912fd097392e9bb515cbfed88f5775bd86e5fc470987560f
GET /watch.840885846370.js?dev=e&key=92b591e2501e354b5ffbf10229917566&kw=%5B%22%E2%80%8Dtwitter%22%2C%22broadcast%E2%80%8D%22%2C%22video%22%2C%22loader%22%2C%22%E2%80%94%22%2C%22fetchfile%22%5D&pst=1713302907&refer=https%3A%2F%2Ffetchfile.me%2Fdownload-twitter-broadcast%2F%3Furl%3Dhttps%3A%2F%2Ftwitter.com%2Fi%2Fbroadcasts%2F1ZkKzjVpjDdKv&res=14.2071&rmtc=t&shu=f01a2fa901fffdf795d7ece131b185ca4a83378d5832641ce464a05d6c264121162c31e9ae6379cadd07b1245d8d49531cc4a23dc4112186fabe6f83265d0cca4693e01f769e24e2fd91defa74690da40b13bd12a0139ffc04a30cb1a362b3&tz=0&uuid=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9%3A2%3A1 HTTP/1.1
Host: universitypermanentlyhusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
Referer: https://fetchfile.me/
DNT: 1
Connection: keep-alive
Cookie: u_pl=17876580; ain=eyJhbGciOiJIUzI1NiJ9.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.AZ4hfuiGszVTy4ag5A79yLJoLBuUNPfTYnWDzaIL2hQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://fetchfile.me
Access-Control-Allow-Origin: https://fetchfile.me
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=f3b8d7aa-234a-41ba-8bb4-8b8f9db9e2c9:2:1; expires=Tue, 23 Apr 2024 21:27:27 GMT; secure; SameSite=None
iprc298d46a2acc856a8ca118c77f175a2d9=4471849; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
uncs=1; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
pdhtkv23=true; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
uncs23=1; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 184486d9f3079efe0f6d79cff910c6cd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| fetchfile.me/cdn-cgi/challenge-platform/h/b/jsd/r/8757425fdde9b523 | 172.67.153.137 | 200 OK | 21 kB |
URL POST HTTP/3fetchfile.me/cdn-cgi/challenge-platform/h/b/jsd/r/8757425fdde9b523 IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
Hashe505b38817dd615400ad93b6357991eb 9f891a967ca7886d6d2d2a6a958f9cee048e3eee ef5cd3d0f316b829ca80d5f31747391b6660c902d6527c9ded3d4d176391af4a
POST /cdn-cgi/challenge-platform/h/b/jsd/r/8757425fdde9b523 HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12232
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=838T8o_YWQukLPTg9nldyVvJtgwYG7aZUZXCtUCwDlQ-1713302846-1.0.1.1-b89x7lEQ3DHerQILT03q85CIj5mk300d2UdNatKeGWalFzASe2MOZAG7qVhb7UOmglaEFyAoQy_iGSAEhTwNSA; path=/; expires=Wed, 16-Apr-25 21:27:26 GMT; domain=.fetchfile.me; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8757426438f51c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudimagesb.com/si/62/f3/af/62f3afd73bea7438e3cb091f669622ff/1710839646.png | 45.133.44.9 | 200 OK | 120 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/62/f3/af/62f3afd73bea7438e3cb091f669622ff/1710839646.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced Size120 kB (119965 bytes) Hashc5a83c3079df6439410f74f3e8de6930 66dab231922cc92db7c41f49d7bdb7da1dfde08a ee0745b5678c7e4277047ba8f87d53ee77e60a4985dace65c73b970521dbf1f8
GET /si/62/f3/af/62f3afd73bea7438e3cb091f669622ff/1710839646.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/png
content-length: 119965
server: nginx/1.21.6
last-modified: Tue, 19 Mar 2024 09:14:15 GMT
etag: "65f95767-1d49d"
expires: Thu, 18 Apr 2024 21:27:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.dropbox.com/static/metaserver/static/images/widgets/dbx-saver-status.png | 162.125.71.18 | 200 OK | 1.6 kB |
URL GET HTTP/2www.dropbox.com/static/metaserver/static/images/widgets/dbx-saver-status.png IP162.125.71.18:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerDigiCert Inc Subject*.dropbox.com Fingerprint17:55:A3:E8:7A:9A:D8:FF:86:5A:8E:81:2C:30:73:6B:8A:88:10:43 ValidityTue, 31 Oct 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
File typePNG image data, 60 x 14, 8-bit/color RGBA, interlaced Hash39d44ef447c5f699f9ef29882af94099 bfc04bdd572e4e0c7ea40634ae6814fc6a52eba5 5709724be2becfb616253dc882e31aaf806d58bb09688ac5b87484ae0501c0df
GET /static/metaserver/static/images/widgets/dbx-saver-status.png HTTP/1.1
Host: www.dropbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: envoy
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/png
content-length: 1630
last-modified: Tue, 16 Apr 2024 08:30:20 GMT
x-content-type-options: nosniff
x-cached: HIT
expires: Wed, 17 Apr 2024 21:27:27 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: no-cache, no-store
x-dropbox-response-origin: remote
x-dropbox-request-id: 1af0bada1caf48f7998a240267d0a2ce
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/df/e4/cd/dfe4cd324c2c05ad9bd4f1bcb4d0a97d/1707940211.png | 45.133.44.9 | 200 OK | 184 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/df/e4/cd/dfe4cd324c2c05ad9bd4f1bcb4d0a97d/1707940211.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced Size184 kB (183812 bytes) Hashadc709f858c8b4ff4ce26a2757b75131 c91b170aba4aafdca5690d29e17f61b6505e15c1 ad475e95022da6d65aec3479ad3b4ff6d36dc85bbc634d750cdd575ea1a985ce
GET /si/df/e4/cd/dfe4cd324c2c05ad9bd4f1bcb4d0a97d/1707940211.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/png
content-length: 183812
server: nginx/1.21.6
last-modified: Wed, 14 Feb 2024 19:50:20 GMT
etag: "65cd197c-2ce04"
expires: Thu, 18 Apr 2024 21:27:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/cti/4d/d9/00/4dd9001a8b835337ba6f030efe1c7f96/1711621579.jpg | 45.133.44.9 | 200 OK | 64 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/4d/d9/00/4dd9001a8b835337ba6f030efe1c7f96/1711621579.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, baseline, precision 8, 728x90, components 3 Hashc416d00adf54f22a0a7059110288f1ba 041feade34f9021e60d153b9d82d3d2c5ac8c945 3d5e90fa0e3b161d4b31e354eefebe2e01913b4510ef7975a88be2a39a711d93
GET /cti/4d/d9/00/4dd9001a8b835337ba6f030efe1c7f96/1711621579.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/jpeg
content-length: 63639
server: nginx/1.21.6
last-modified: Thu, 28 Mar 2024 10:26:28 GMT
etag: "660545d4-f897"
expires: Thu, 18 Apr 2024 21:27:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pleasantpaltryconnections.com/sbar.json?key=7b5dc12f03a6624a33737b4b3f843d7d&uuid=329291c4-c7dd-4e2f-81ad-f8ff17f8658e%3A2%3A1 | 192.243.59.20 | 200 OK | 8.2 kB |
URL GET HTTP/1.1pleasantpaltryconnections.com/sbar.json?key=7b5dc12f03a6624a33737b4b3f843d7d&uuid=329291c4-c7dd-4e2f-81ad-f8ff17f8658e%3A2%3A1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
Hashd7ef91457d335c7cb1a227202dd43e37 fb45c12e25da2058c15e9b4d977db66ad35ef89c 13ab5c1cf9fbf9c99b7faae5f124dbb7d7dd6b1d22be8bd4075763527a981fd5
GET /sbar.json?key=7b5dc12f03a6624a33737b4b3f843d7d&uuid=329291c4-c7dd-4e2f-81ad-f8ff17f8658e%3A2%3A1 HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://fetchfile.me
Access-Control-Allow-Origin: https://fetchfile.me
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17433343; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; expires=Tue, 23 Apr 2024 21:27:27 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
uncs=1; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 17 Apr 2024 21:27:27 GMT; secure; SameSite=None
slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]; expires=Tue, 16 Apr 2024 21:27:32 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5e5c6651940cf5cadf2a6e0791cffec7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3p2LPy7KepJdBjy4KzLpnpl0Z3bBYIyRYNzsD0UPglR3VU%2FKVHc1Vd3TkzlFF2VPOoIX9dL5Jj9Qg%2BhtLy7SWRAJCOlbDuYfEA8i7ll6DMZ90P3eV99X8L336uOt7IS0kdHjxTfUSEhJZ2ZbdvPyO45zrbki4mzYHM6577nda009uNpzW%2FaV5ms8WFczbduxbcd2mktC81ANZ2oSItnvOa2e3eq2W85sF0P9KDaZBUMtsMEJeRqCVY0H1gWIoEQcfb%2FIzXqqkhdfjTJJU6UxYHtvxeuxymNEZ2WoLYTx3qkayhwt3YeKd6Z2oQb%2FCX1REevn%2B%2FDjvVOT8AfbU5%2B%2BBI%2FhsyeQD0pwWULQEoG6A8GOCBAwXF9FHO1eVzqnG%2F%2BytGYr0nj4F0RekcZvFxBH3y1IMWzeVjJLhYoNhmEBMSwh%2BiWS7ADp6BxEfoAg%2FRCC%2FUpmHq4gjrZXjVQQrJj2LkQJEZaQfAxqLGT1JyxkoYUssRCx42bgOI5ns4Dac70g6DCP%2By6zHeqFDnVsdw5ZUNsbI03GCOQYgd5EojexLj47ck6gs59g1goYZsGkFbFubmLACuScIDcEOSXIBUGeEuSDYodJ0zbFLpMm853T3D7NnWKi0v4W3VFpn8cEVI%2BhWbGVnJCn6hFZz301j3V%2B3OxRh3l2OMsCZndCvzPnh91ZN%2BSeP%2F2FMKKAMOemXY9ERS4%2BbyERFWlc3YVPD2DkAQLxDGjmgOYF6FqBUbwf8jRYC4XkrYiDqQJJ2kC6YW3JE%2FLsdEneB3%2BCB4fz%2B5f%2FLj999woCXSDRBd4XDwj68u7klsrJ9i2VG%2FLDapKKSIxovcDbKU35%2BW9e5xu50mx50Yy%2Ffjmoibrcf5ObdIXGTMR9Q75dEIxxvaR0wMmPy%2BZt7t%2FIzNpCpuMsWbnxytJylGhujFBxCSqOniwRiIo8drg4fZkXl9YgdAmdFYiyQ3IaEOoAQbIJkxzOf3Lv5u8fXboHowi0PNP4yXnkWTHRbf%2FsUAoCyc8w9QuY%2F2H%2FrJ5oWt%2Bmotgyd9HXDdD0DuKowEAXGMgCVI5hsscnaaIP53%2F5oo4v4cvGxJe6se1LLT%2BvyMoLVkW8EabjriGBEcdNr9OxqdubdTyPcs%2FvtudC12GUtrtu23VpB6mpwkt%2FvPQPAAAA%2F%2F8BAAD%2F%2F04fjIR9BAAA | 192.243.59.13 | 200 OK | 7 B |
URL GET HTTP/1.1traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3p2LPy7KepJdBjy4KzLpnpl0Z3bBYIyRYNzsD0UPglR3VU%2FKVHc1Vd3TkzlFF2VPOoIX9dL5Jj9Qg%2BhtLy7SWRAJCOlbDuYfEA8i7ll6DMZ90P3eV99X8L336uOt7IS0kdHjxTfUSEhJZ2ZbdvPyO45zrbki4mzYHM6577nda009uNpzW%2FaV5ms8WFczbduxbcd2mktC81ANZ2oSItnvOa2e3eq2W85sF0P9KDaZBUMtsMEJeRqCVY0H1gWIoEQcfb%2FIzXqqkhdfjTJJU6UxYHtvxeuxymNEZ2WoLYTx3qkayhwt3YeKd6Z2oQb%2FCX1REevn%2B%2FDjvVOT8AfbU5%2B%2BBI%2FhsyeQD0pwWULQEoG6A8GOCBAwXF9FHO1eVzqnG%2F%2BytGYr0nj4F0RekcZvFxBH3y1IMWzeVjJLhYoNhmEBMSwh%2BiWS7ADp6BxEfoAg%2FRCC%2FUpmHq4gjrZXjVQQrJj2LkQJEZaQfAxqLGT1JyxkoYUssRCx42bgOI5ns4Dac70g6DCP%2By6zHeqFDnVsdw5ZUNsbI03GCOQYgd5EojexLj47ck6gs59g1goYZsGkFbFubmLACuScIDcEOSXIBUGeEuSDYodJ0zbFLpMm853T3D7NnWKi0v4W3VFpn8cEVI%2BhWbGVnJCn6hFZz301j3V%2B3OxRh3l2OMsCZndCvzPnh91ZN%2BSeP%2F2FMKKAMOemXY9ERS4%2BbyERFWlc3YVPD2DkAQLxDGjmgOYF6FqBUbwf8jRYC4XkrYiDqQJJ2kC6YW3JE%2FLsdEneB3%2BCB4fz%2B5f%2FLj999woCXSDRBd4XDwj68u7klsrJ9i2VG%2FLDapKKSIxovcDbKU35%2BW9e5xu50mx50Yy%2Ffjmoibrcf5ObdIXGTMR9Q75dEIxxvaR0wMmPy%2BZt7t%2FIzNpCpuMsWbnxytJylGhujFBxCSqOniwRiIo8drg4fZkXl9YgdAmdFYiyQ3IaEOoAQbIJkxzOf3Lv5u8fXboHowi0PNP4yXnkWTHRbf%2FsUAoCyc8w9QuY%2F2H%2FrJ5oWt%2Bmotgyd9HXDdD0DuKowEAXGMgCVI5hsscnaaIP53%2F5oo4v4cvGxJe6se1LLT%2BvyMoLVkW8EabjriGBEcdNr9OxqdubdTyPcs%2FvtudC12GUtrtu23VpB6mpwkt%2FvPQPAAAA%2F%2F8BAAD%2F%2F04fjIR9BAAA IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjecttraileroutlinerefreshments.com Fingerprint41:1C:77:30:20:CC:E4:2C:E0:A5:21:6A:38:56:D8:6B:1D:FD:3A:43 ValidityTue, 16 Apr 2024 13:29:30 GMT - Mon, 15 Jul 2024 13:29:29 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3p2LPy7KepJdBjy4KzLpnpl0Z3bBYIyRYNzsD0UPglR3VU%2FKVHc1Vd3TkzlFF2VPOoIX9dL5Jj9Qg%2BhtLy7SWRAJCOlbDuYfEA8i7ll6DMZ90P3eV99X8L336uOt7IS0kdHjxTfUSEhJZ2ZbdvPyO45zrbki4mzYHM6577nda009uNpzW%2FaV5ms8WFczbduxbcd2mktC81ANZ2oSItnvOa2e3eq2W85sF0P9KDaZBUMtsMEJeRqCVY0H1gWIoEQcfb%2FIzXqqkhdfjTJJU6UxYHtvxeuxymNEZ2WoLYTx3qkayhwt3YeKd6Z2oQb%2FCX1REevn%2B%2FDjvVOT8AfbU5%2B%2BBI%2FhsyeQD0pwWULQEoG6A8GOCBAwXF9FHO1eVzqnG%2F%2BytGYr0nj4F0RekcZvFxBH3y1IMWzeVjJLhYoNhmEBMSwh%2BiWS7ADp6BxEfoAg%2FRCC%2FUpmHq4gjrZXjVQQrJj2LkQJEZaQfAxqLGT1JyxkoYUssRCx42bgOI5ns4Dac70g6DCP%2By6zHeqFDnVsdw5ZUNsbI03GCOQYgd5EojexLj47ck6gs59g1goYZsGkFbFubmLACuScIDcEOSXIBUGeEuSDYodJ0zbFLpMm853T3D7NnWKi0v4W3VFpn8cEVI%2BhWbGVnJCn6hFZz301j3V%2B3OxRh3l2OMsCZndCvzPnh91ZN%2BSeP%2F2FMKKAMOemXY9ERS4%2BbyERFWlc3YVPD2DkAQLxDGjmgOYF6FqBUbwf8jRYC4XkrYiDqQJJ2kC6YW3JE%2FLsdEneB3%2BCB4fz%2B5f%2FLj999woCXSDRBd4XDwj68u7klsrJ9i2VG%2FLDapKKSIxovcDbKU35%2BW9e5xu50mx50Yy%2Ffjmoibrcf5ObdIXGTMR9Q75dEIxxvaR0wMmPy%2BZt7t%2FIzNpCpuMsWbnxytJylGhujFBxCSqOniwRiIo8drg4fZkXl9YgdAmdFYiyQ3IaEOoAQbIJkxzOf3Lv5u8fXboHowi0PNP4yXnkWTHRbf%2FsUAoCyc8w9QuY%2F2H%2FrJ5oWt%2Bmotgyd9HXDdD0DuKowEAXGMgCVI5hsscnaaIP53%2F5oo4v4cvGxJe6se1LLT%2BvyMoLVkW8EabjriGBEcdNr9OxqdubdTyPcs%2FvtudC12GUtrtu23VpB6mpwkt%2FvPQPAAAA%2F%2F8BAAD%2F%2F04fjIR9BAAA HTTP/1.1
Host: traileroutlinerefreshments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=19110719; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec9a1d70f5dcd03fb38bf456fe7b6fe7bf=[4991489,3635874,3637745,4991488]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f9c31854b6e59042b32cb7fd5519be29
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3t9cfupFWU%2Byy4gH%2FyCT7plJd2YXDMaYJRg3u1lFb1LdVT0pU93VVHVPT8ZLdFH2JCN4US%2Bdb%2FIHNSx624uLdBZkCQjpWw4GPIsHEfYsPQajD7rf%2B%2Br7Cr73Xn2ynZ2SNjJ6svimGgkp6cxsy26%2B8K7jXG2uiDgbNodz7ntu92pTD6703Jb9YvMaDzbUTNt2bNuxneaS0DxUw5mahEgOek6rZ7e67ZYz28VQ%2FxebzIKhFtjglDwFwarGA%2BsiRFAijr5b5GYjVcnLr0eZpKnSGLD9t%2BONWOUxovMy1BbCeP9MDWWOl%2B5DxbtTu1CDf4S%2BqIj103348f6ZSfiDnalPX4LH8NnjyAcluCwhaIlA3YZgxwQIGK6vIo72riud082%2FWVqzFWk8%2BhMir0jjl4uIo7sLUgybt5TMUqFig2FYQAxLiH6JJDtEOroAkR8iSD%2BCYD%2BTmUcriKOdVSMVBCumvQtRQoQlJB%2BDGgtZ%2FQkLWWghSyxE7KQZOI7j2Syg9lwvCDrM477LbId6oUMd251DFtT2xkiTMQI5RqC3kOgtbIjPjp1T6OxHmPUChlkwaUWsm1sYsAI5J8gNQU4JckGQpwT5oNhl0rRNscekyXznLLfPcqeYqLS%2FTXdV2ucxAdVjaFZsJ6fkyXpE1nNfzWODnzR71GGeHc6ygNmd0O%2FM%2BWF31g25509%2FIYwoIMyFadcjUZFLz1tIREUaV%2Fbg00MYeYhAPA2aOaB5AbpeYBQfhDwN1kMheSviYKpAkjaQblrb8pQ8M12SNwJ4cDT%2F6b2bv318%2BR4CXSDRBd4XDwj68s5kTeVkZ03lhny%2FmqQiEiNaL%2FBWSlP%2Bv2%2Fe4Ju50mx50Yy%2FfjWoibo8eIubdIXGTMR9Q75dEIxxvaR0wMkPy%2BYd7t%2FIzPpCpuMsWbnx2tJylGhujFBxCSqOnygRiIr8%2F%2BGz05d5aWENQpfQWYEoOyJnAaEOESRbMMnRfDr69drdix%2FAKAItzzV%2BcgF5Vkx02z8%2FlIJA8nNM%2FQLmX9g%2Fryea1repKLbNHfR1AzS9jTgqMNAFBrIAlWOY7LFJmuij%2BYdf1PElfNmY%2BFI3dnyp5ecVWXnJmk66It6Hf9SQwIiTptfp2NTtzTqeR7nnd9tzoeswSttdt%2B26tIPUVOHl31%2F5CwAA%2F%2F8BAAD%2F%2F6mgrpd9BAAA | 192.243.59.13 | 200 OK | 7 B |
URL GET HTTP/1.1traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3t9cfupFWU%2Byy4gH%2FyCT7plJd2YXDMaYJRg3u1lFb1LdVT0pU93VVHVPT8ZLdFH2JCN4US%2Bdb%2FIHNSx624uLdBZkCQjpWw4GPIsHEfYsPQajD7rf%2B%2Br7Cr73Xn2ynZ2SNjJ6svimGgkp6cxsy26%2B8K7jXG2uiDgbNodz7ntu92pTD6703Jb9YvMaDzbUTNt2bNuxneaS0DxUw5mahEgOek6rZ7e67ZYz28VQ%2FxebzIKhFtjglDwFwarGA%2BsiRFAijr5b5GYjVcnLr0eZpKnSGLD9t%2BONWOUxovMy1BbCeP9MDWWOl%2B5DxbtTu1CDf4S%2BqIj103348f6ZSfiDnalPX4LH8NnjyAcluCwhaIlA3YZgxwQIGK6vIo72riud082%2FWVqzFWk8%2BhMir0jjl4uIo7sLUgybt5TMUqFig2FYQAxLiH6JJDtEOroAkR8iSD%2BCYD%2BTmUcriKOdVSMVBCumvQtRQoQlJB%2BDGgtZ%2FQkLWWghSyxE7KQZOI7j2Syg9lwvCDrM477LbId6oUMd251DFtT2xkiTMQI5RqC3kOgtbIjPjp1T6OxHmPUChlkwaUWsm1sYsAI5J8gNQU4JckGQpwT5oNhl0rRNscekyXznLLfPcqeYqLS%2FTXdV2ucxAdVjaFZsJ6fkyXpE1nNfzWODnzR71GGeHc6ygNmd0O%2FM%2BWF31g25509%2FIYwoIMyFadcjUZFLz1tIREUaV%2Fbg00MYeYhAPA2aOaB5AbpeYBQfhDwN1kMheSviYKpAkjaQblrb8pQ8M12SNwJ4cDT%2F6b2bv318%2BR4CXSDRBd4XDwj68s5kTeVkZ03lhny%2FmqQiEiNaL%2FBWSlP%2Bv2%2Fe4Ju50mx50Yy%2FfjWoibo8eIubdIXGTMR9Q75dEIxxvaR0wMkPy%2BYd7t%2FIzPpCpuMsWbnx2tJylGhujFBxCSqOnygRiIr8%2F%2BGz05d5aWENQpfQWYEoOyJnAaEOESRbMMnRfDr69drdix%2FAKAItzzV%2BcgF5Vkx02z8%2FlIJA8nNM%2FQLmX9g%2Fryea1repKLbNHfR1AzS9jTgqMNAFBrIAlWOY7LFJmuij%2BYdf1PElfNmY%2BFI3dnyp5ecVWXnJmk66It6Hf9SQwIiTptfp2NTtzTqeR7nnd9tzoeswSttdt%2B26tIPUVOHl31%2F5CwAA%2F%2F8BAAD%2F%2F6mgrpd9BAAA IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjecttraileroutlinerefreshments.com Fingerprint41:1C:77:30:20:CC:E4:2C:E0:A5:21:6A:38:56:D8:6B:1D:FD:3A:43 ValidityTue, 16 Apr 2024 13:29:30 GMT - Mon, 15 Jul 2024 13:29:29 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3t9cfupFWU%2Byy4gH%2FyCT7plJd2YXDMaYJRg3u1lFb1LdVT0pU93VVHVPT8ZLdFH2JCN4US%2Bdb%2FIHNSx624uLdBZkCQjpWw4GPIsHEfYsPQajD7rf%2B%2Br7Cr73Xn2ynZ2SNjJ6svimGgkp6cxsy26%2B8K7jXG2uiDgbNodz7ntu92pTD6703Jb9YvMaDzbUTNt2bNuxneaS0DxUw5mahEgOek6rZ7e67ZYz28VQ%2FxebzIKhFtjglDwFwarGA%2BsiRFAijr5b5GYjVcnLr0eZpKnSGLD9t%2BONWOUxovMy1BbCeP9MDWWOl%2B5DxbtTu1CDf4S%2BqIj103348f6ZSfiDnalPX4LH8NnjyAcluCwhaIlA3YZgxwQIGK6vIo72riud082%2FWVqzFWk8%2BhMir0jjl4uIo7sLUgybt5TMUqFig2FYQAxLiH6JJDtEOroAkR8iSD%2BCYD%2BTmUcriKOdVSMVBCumvQtRQoQlJB%2BDGgtZ%2FQkLWWghSyxE7KQZOI7j2Syg9lwvCDrM477LbId6oUMd251DFtT2xkiTMQI5RqC3kOgtbIjPjp1T6OxHmPUChlkwaUWsm1sYsAI5J8gNQU4JckGQpwT5oNhl0rRNscekyXznLLfPcqeYqLS%2FTXdV2ucxAdVjaFZsJ6fkyXpE1nNfzWODnzR71GGeHc6ygNmd0O%2FM%2BWF31g25509%2FIYwoIMyFadcjUZFLz1tIREUaV%2Fbg00MYeYhAPA2aOaB5AbpeYBQfhDwN1kMheSviYKpAkjaQblrb8pQ8M12SNwJ4cDT%2F6b2bv318%2BR4CXSDRBd4XDwj68s5kTeVkZ03lhny%2FmqQiEiNaL%2FBWSlP%2Bv2%2Fe4Ju50mx50Yy%2FfjWoibo8eIubdIXGTMR9Q75dEIxxvaR0wMkPy%2BYd7t%2FIzPpCpuMsWbnx2tJylGhujFBxCSqOnygRiIr8%2F%2BGz05d5aWENQpfQWYEoOyJnAaEOESRbMMnRfDr69drdix%2FAKAItzzV%2BcgF5Vkx02z8%2FlIJA8nNM%2FQLmX9g%2Fryea1repKLbNHfR1AzS9jTgqMNAFBrIAlWOY7LFJmuij%2BYdf1PElfNmY%2BFI3dnyp5ecVWXnJmk66It6Hf9SQwIiTptfp2NTtzTqeR7nnd9tzoeswSttdt%2B26tIPUVOHl31%2F5CwAA%2F%2F8BAAD%2F%2F6mgrpd9BAAA HTTP/1.1
Host: traileroutlinerefreshments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=19110719; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec9a1d70f5dcd03fb38bf456fe7b6fe7bf=[4991489,3635874,3637745,4991488]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 12d1085b13aab60b6ae72bc0fa51ad6e
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| pleasantpaltryconnections.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skxR%2Btns3p%2B%2FWirCdZmcOCCmbSPybdM7uHxbhGFuNm2XXRm1RXVU%2FKVHc1Vd3Tk5yCC7IHD6M3PXXe5AdqEP0DDDJZEA0IGU85GP8CT8JelRmDo5%2FL5%2FPqvYJX71Mf7ZYXxEdJz2%2B%2FrbelUnRpueU2X37P824212RWDpqDTvh%2B2L7ZNP0b3bDlvtJ8U7BNveS7nut6rtdclUYkerA0JSHzo67X6rqttt%2FyltsYmP9iWzqw1AHvX5DnIPlk4YlzFZKNkaXf3BZ2s9D5q2%2BkpaKFNujzw4fZZqarDOl8TIyDJDu8VEPbs9Vj6Gx%2FZhe6%2F48wlhPi%2FHCMODu8NIm4vzfzGSuIDDH%2FP6r%2BGEKNIekYTD%2BC5GcEYBx315GlB3e1qejW3yydshOy8PQPyGpCFn69iiz9ekXJQfOBVmUhdWYxSGrIwRiyN0ZenqDYbkBWJ2DFh5D8Z7L0dA1ZurdulYbk59cDv%2Bt3PdZeZBHni23hJ4sdj%2FLFpJMkXpR0wuWOmAUk5RgyGUOJIahtoLQOSumgTByUuYOUnzeZ53mRyxl1O13GAh6JOOSuR6PEo54bdlCy6RuGKPIhmBqCmR3kZgeb8pMz7wKm%2FB52o4blDmxB0Oc1KkFQWYKKElSSoCoIqn69z5X1bX3AlS1j77L7lz2oR7ro7dJ9XfRERkDNEIbXu%2FkFeXaaofO%2Fxp%2FYFOfNKF7mzPMTN6Bh6LdpEERBFLfjIOm0Ax5xWFlD2gaodbAtJ%2BTaSw5yOSELNw4Q0xNYdQImnwctr4FWNehGje3sKBEF20ikEq1UgOsaebGAYsvZVRfkhdkWV5ZSCHZ668fPpvU5mKmRmxofyCcEPfV4dF9XZO%2B%2Briz5dj0vZCq36XTDDwpaiCtfviW2Km34ndt2%2BMVrbEpMx6N3hC3WaMZl1rPkqxXJuTCr2jBBvrtj3xXxvdJurJQmK%2FO1e6%2Bv3klzI6yVOhuDyjP7MZickGce%2FjT7utfTA0gzhilrpOUpuSxIPQbLd2DzuXurCYyaa%2BLcQVXWI%2BPH80MlCZSYYxrXsP%2FC8XweGTq9TWW9ax%2BjZxqgxSNkaY2%2BqdFXNagawpZXRkVuTm%2F9EswKsWqMYmUae7Ey6tNZyBNy9%2Fg3WHnejILApWF32YsiKqK47XeS0OOU%2Bu3QD0MaoLCT5MXfb%2F0FAAD%2F%2FwEAAP%2F%2F7Lql4JQEAAA%3D | 192.243.59.20 | 200 OK | 7 B |
URL GET HTTP/1.1pleasantpaltryconnections.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skxR%2Btns3p%2B%2FWirCdZmcOCCmbSPybdM7uHxbhGFuNm2XXRm1RXVU%2FKVHc1Vd3Tk5yCC7IHD6M3PXXe5AdqEP0DDDJZEA0IGU85GP8CT8JelRmDo5%2FL5%2FPqvYJX71Mf7ZYXxEdJz2%2B%2FrbelUnRpueU2X37P824212RWDpqDTvh%2B2L7ZNP0b3bDlvtJ8U7BNveS7nut6rtdclUYkerA0JSHzo67X6rqttt%2FyltsYmP9iWzqw1AHvX5DnIPlk4YlzFZKNkaXf3BZ2s9D5q2%2BkpaKFNujzw4fZZqarDOl8TIyDJDu8VEPbs9Vj6Gx%2FZhe6%2F48wlhPi%2FHCMODu8NIm4vzfzGSuIDDH%2FP6r%2BGEKNIekYTD%2BC5GcEYBx315GlB3e1qejW3yydshOy8PQPyGpCFn69iiz9ekXJQfOBVmUhdWYxSGrIwRiyN0ZenqDYbkBWJ2DFh5D8Z7L0dA1ZurdulYbk59cDv%2Bt3PdZeZBHni23hJ4sdj%2FLFpJMkXpR0wuWOmAUk5RgyGUOJIahtoLQOSumgTByUuYOUnzeZ53mRyxl1O13GAh6JOOSuR6PEo54bdlCy6RuGKPIhmBqCmR3kZgeb8pMz7wKm%2FB52o4blDmxB0Oc1KkFQWYKKElSSoCoIqn69z5X1bX3AlS1j77L7lz2oR7ro7dJ9XfRERkDNEIbXu%2FkFeXaaofO%2Fxp%2FYFOfNKF7mzPMTN6Bh6LdpEERBFLfjIOm0Ax5xWFlD2gaodbAtJ%2BTaSw5yOSELNw4Q0xNYdQImnwctr4FWNehGje3sKBEF20ikEq1UgOsaebGAYsvZVRfkhdkWV5ZSCHZ668fPpvU5mKmRmxofyCcEPfV4dF9XZO%2B%2Briz5dj0vZCq36XTDDwpaiCtfviW2Km34ndt2%2BMVrbEpMx6N3hC3WaMZl1rPkqxXJuTCr2jBBvrtj3xXxvdJurJQmK%2FO1e6%2Bv3klzI6yVOhuDyjP7MZickGce%2FjT7utfTA0gzhilrpOUpuSxIPQbLd2DzuXurCYyaa%2BLcQVXWI%2BPH80MlCZSYYxrXsP%2FC8XweGTq9TWW9ax%2BjZxqgxSNkaY2%2BqdFXNagawpZXRkVuTm%2F9EswKsWqMYmUae7Ey6tNZyBNy9%2Fg3WHnejILApWF32YsiKqK47XeS0OOU%2Bu3QD0MaoLCT5MXfb%2F0FAAD%2F%2FwEAAP%2F%2F7Lql4JQEAAA%3D IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skxR%2Btns3p%2B%2FWirCdZmcOCCmbSPybdM7uHxbhGFuNm2XXRm1RXVU%2FKVHc1Vd3Tk5yCC7IHD6M3PXXe5AdqEP0DDDJZEA0IGU85GP8CT8JelRmDo5%2FL5%2FPqvYJX71Mf7ZYXxEdJz2%2B%2FrbelUnRpueU2X37P824212RWDpqDTvh%2B2L7ZNP0b3bDlvtJ8U7BNveS7nut6rtdclUYkerA0JSHzo67X6rqttt%2FyltsYmP9iWzqw1AHvX5DnIPlk4YlzFZKNkaXf3BZ2s9D5q2%2BkpaKFNujzw4fZZqarDOl8TIyDJDu8VEPbs9Vj6Gx%2FZhe6%2F48wlhPi%2FHCMODu8NIm4vzfzGSuIDDH%2FP6r%2BGEKNIekYTD%2BC5GcEYBx315GlB3e1qejW3yydshOy8PQPyGpCFn69iiz9ekXJQfOBVmUhdWYxSGrIwRiyN0ZenqDYbkBWJ2DFh5D8Z7L0dA1ZurdulYbk59cDv%2Bt3PdZeZBHni23hJ4sdj%2FLFpJMkXpR0wuWOmAUk5RgyGUOJIahtoLQOSumgTByUuYOUnzeZ53mRyxl1O13GAh6JOOSuR6PEo54bdlCy6RuGKPIhmBqCmR3kZgeb8pMz7wKm%2FB52o4blDmxB0Oc1KkFQWYKKElSSoCoIqn69z5X1bX3AlS1j77L7lz2oR7ro7dJ9XfRERkDNEIbXu%2FkFeXaaofO%2Fxp%2FYFOfNKF7mzPMTN6Bh6LdpEERBFLfjIOm0Ax5xWFlD2gaodbAtJ%2BTaSw5yOSELNw4Q0xNYdQImnwctr4FWNehGje3sKBEF20ikEq1UgOsaebGAYsvZVRfkhdkWV5ZSCHZ668fPpvU5mKmRmxofyCcEPfV4dF9XZO%2B%2Briz5dj0vZCq36XTDDwpaiCtfviW2Km34ndt2%2BMVrbEpMx6N3hC3WaMZl1rPkqxXJuTCr2jBBvrtj3xXxvdJurJQmK%2FO1e6%2Bv3klzI6yVOhuDyjP7MZickGce%2FjT7utfTA0gzhilrpOUpuSxIPQbLd2DzuXurCYyaa%2BLcQVXWI%2BPH80MlCZSYYxrXsP%2FC8XweGTq9TWW9ax%2BjZxqgxSNkaY2%2BqdFXNagawpZXRkVuTm%2F9EswKsWqMYmUae7Ey6tNZyBNy9%2Fg3WHnejILApWF32YsiKqK47XeS0OOU%2Bu3QD0MaoLCT5MXfb%2F0FAAD%2F%2FwEAAP%2F%2F7Lql4JQEAAA%3D HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=17433343; uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a690e69d19d8d2d8b537e976f02e2ba1
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fetchfile.me/apple-touch-icon.png | 172.67.153.137 | 200 OK | 11 kB |
URL GET HTTP/3fetchfile.me/apple-touch-icon.png IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashfee08f03716cc553d8a8e0734214ddfa 34b25b1cc36f29e4225d33fa18208d9265dc6dc4 f7cca35b9a89295be6616c53975f9bcccfe4b77c47661469601c8fed69f61ed1
GET /apple-touch-icon.png HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv
Cookie: cf_clearance=838T8o_YWQukLPTg9nldyVvJtgwYG7aZUZXCtUCwDlQ-1713302846-1.0.1.1-b89x7lEQ3DHerQILT03q85CIj5mk300d2UdNatKeGWalFzASe2MOZAG7qVhb7UOmglaEFyAoQy_iGSAEhTwNSA; _ga_6KBGNNERQM=GS1.1.1713302846.1.0.1713302846.0.0.0; _ga=GA1.1.1657483280.1713302846; dom3ic8zudi28v8lr6fgphwffqoz0j6c=329291c4-c7dd-4e2f-81ad-f8ff17f8658e%3A2%3A1; sb_main_7b5dc12f03a6624a33737b4b3f843d7d=1; sb_count_7b5dc12f03a6624a33737b4b3f843d7d=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=traileroutlinerefreshments.com; pbpr0tpuw4isk85t8yg3jb2lj5vqf=pleasantpaltryconnections.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/png
content-length: 11267
cache-control: max-age=14400
etag: "45afbef57d8adb301ce940da80b866bdb24ef0481d317349212d068e07ed3eac"
expires: Tue, 16 Apr 2024 21:28:18 GMT
last-modified: Sat, 13 Apr 2024 01:29:54 GMT
permissions-policy: interest-cohort=()
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 263
accept-ranges: bytes
server: cloudflare
cf-ray: 8757426de82a1c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fetchfile.me/static/favicon-16x16.png | 172.67.153.137 | 200 OK | 567 B |
URL GET HTTP/3fetchfile.me/static/favicon-16x16.png IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash0f94f48f9d04e79bb066a1c789b0a211 93b312c15ba4e5f40c42151c791564b15ce1a1ee a0cb5f0be84b15275078b3887aa77b0fb5a548cd08d2b4fc286e4845fb07b01e
GET /static/favicon-16x16.png HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv
Cookie: cf_clearance=838T8o_YWQukLPTg9nldyVvJtgwYG7aZUZXCtUCwDlQ-1713302846-1.0.1.1-b89x7lEQ3DHerQILT03q85CIj5mk300d2UdNatKeGWalFzASe2MOZAG7qVhb7UOmglaEFyAoQy_iGSAEhTwNSA; _ga_6KBGNNERQM=GS1.1.1713302846.1.0.1713302846.0.0.0; _ga=GA1.1.1657483280.1713302846; dom3ic8zudi28v8lr6fgphwffqoz0j6c=329291c4-c7dd-4e2f-81ad-f8ff17f8658e%3A2%3A1; sb_main_7b5dc12f03a6624a33737b4b3f843d7d=1; sb_count_7b5dc12f03a6624a33737b4b3f843d7d=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=traileroutlinerefreshments.com; pbpr0tpuw4isk85t8yg3jb2lj5vqf=pleasantpaltryconnections.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/png
content-length: 567
cache-control: max-age=14400
etag: "45afbef57d8adb301ce940da80b866bdb24ef0481d317349212d068e07ed3eac"
expires: Tue, 16 Apr 2024 21:23:51 GMT
last-modified: Sat, 13 Apr 2024 01:24:16 GMT
permissions-policy: interest-cohort=()
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 263
accept-ranges: bytes
server: cloudflare
cf-ray: 8757426de82d1c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fb6%2Fcf%2F48%2Fb6cf48ca3e8ab4bdbcfaa2279b0fb2bc%2F1613726822.html&l=1274&fd=119 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fb6%2Fcf%2F48%2Fb6cf48ca3e8ab4bdbcfaa2279b0fb2bc%2F1613726822.html&l=1274&fd=119 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fb6%2Fcf%2F48%2Fb6cf48ca3e8ab4bdbcfaa2279b0fb2bc%2F1613726822.html&l=1274&fd=119 HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=17433343; uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fetchfile.me/static/css/clean.css?v=17 | 172.67.153.137 | 200 OK | 92 kB |
URL GET HTTP/3fetchfile.me/static/css/clean.css?v=17 IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typeASCII text, with very long lines (48267), with no line terminators Hashfea6950e82554d0c44f907a5e0b737da 53d802371b258f11c23f3b0260579de0a05cbf58 76585d94e5b28a55136c659e13b35c1eca581a1687b8f60692845b4b1627fa33
GET /static/css/clean.css?v=17 HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:25 GMT
content-type: text/css; charset=utf-8
cache-control: max-age=14400
etag: W/"45afbef57d8adb301ce940da80b866bdb24ef0481d317349212d068e07ed3eac"
expires: Tue, 16 Apr 2024 21:22:23 GMT
last-modified: Sat, 13 Apr 2024 01:24:16 GMT
permissions-policy: interest-cohort=()
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 416
server: cloudflare
cf-ray: 87574261bf381c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/img/close.svg |  188.114.96.1 | 200 OK | 1.1 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/img/close.svg IP188.114.96.1:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeSVG Scalable Vector Graphics image Hash9b6de0f3dcaf1865d3c9e4de8056f645 fd4ac1731b122cca5e6f211470d7bf51f6ba0403 57227495afbf96096535f7fc5f814627ea0498c97d75fc74a88cbc8a2417f0f5
GET /sb/ssp/utility/social-media/facebook/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/svg+xml
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: W/"65aa8500-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5381871
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ASIB4WacUVq0BadETMUf2XDqOzh%2FLFSONHsY9uCqvkzFegt5XpLOS7g2Zd9ZtdNEaqO%2BnlGkBwLnOV6niiU8BGDT87ygkMoRVR%2BwE1purEDPrhUgn03JdaI5uzEqSlv0uN2Y2Cipk5mz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8757426ea9fb56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fjs%2Fscript.js&l=444&fd=331 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fjs%2Fscript.js&l=444&fd=331 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fjs%2Fscript.js&l=444&fd=331 HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=17433343; uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/animate.css | 188.114.96.1 | 200 OK | 4.9 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/animate.css IP188.114.96.1:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash3d4123dbfb33d27a5cfdfcfa91df6783 e7d0eeeec54b848f0bc3da8685fa3bc88429d660 cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887
GET /sb/ssp/utility/social-media/facebook/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:28 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: W/"65aa8500-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xeRssVrjzQg5bhWszPn04OuygQUKw32ZqHONtdxHvYCWxqrvwCDUQXty6Ui1Dubu%2Bq1UJa17UJtBA%2BFC286y88hK%2Bk3N9RJS8sWR2Tm40WHbkKwkxJwA6LqmMEP%2B5kIlPe5H%2BlTBSG5Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8757426e393a56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:54:31 GMT
expires: Wed, 16 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 70377
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 17990
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pleasantpaltryconnections.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuuns3p9%2FOirCdZmcOCCmbSPT2fu4fFuEaCMVl2XfQm9dWTMtVdTVX39CSn4ILswcPoTU%2BdZ%2FKBGkT%2FAINMFkQDQsZTDsa%2FwJOwV2XG4Oh7ed%2Bnnqfgqeetj%2FbyS1JHTi%2Fuvm12lNZ0qVnzqy%2B%2FFwS3q2sqyQfVQaf1fqtxu2r7t7qtmv9K9U3Jt8xS3Q98P%2FCD6oqyMjKDpSkJlR53g1rXrzXqtaDZwMD%2BF7vcg6MeRP%2BSPAclJgtPvOtQfIwk%2FuaudFuZSV99I841zYxFXxw9TLYSUySI52NkPUTJ0ZUaxp2vnMAkBzO7MP1%2FhExNiPfDCVhydGUSrL8%2F88k0ZAIm%2Fo%2BiP4bUYyg6BjePoMQ5AbjA%2BgaS%2BHDd2IJu%2F83SKTshC0%2F%2FgComZOHX60jir5e1GlQfGJ1nyiQOg6iEGoyhemOk%2BSmynQpUcQqefQglfiZLT9eQxPsbThsocXEzrHfr3YA3FnlbiMWGrEeLnYCKxagTRUE76rSaHTkLSKkxVDSGlkNQV0HuPOTKQx55yFMPsbio8iAI2r7g1O90OQ9FW7KW8APajgIa%2BK0Ocj59wxBZOgTXQ3C7i9TuYkt9ch5cwubfw22WcMKDywj6okQhCQpHUFCCQhEUGUHRLw%2BEdnVXHgrtchZc9fpVD8uRyXp79MBkPZkQUDuEFeVeekmenWbo%2Fa%2FyJ7bkRbXNmoIH9cgPaatVb9AwbIdt1mBh1GmEoi3gVAnlKqDOw46akBsveUjVhCzcOgSjp3D6FFw9D5rfAC1K0M0SO8lxJDO%2BGSkta7GEMCXSbAHZtrenL8kLsy0uL8WQ%2FOzOj59N63NwWyK1JT5QTwh6%2BvHovinI%2Fn1TOPLtRpqpWO3Q6YYfZDST1758S24XxorVu274xWt8SkzH43eky9ZoIlTSc%2BSrZSWEtCvGckm%2BW3XvSnYvd5vLuU3ydO3e6yurcWqlc8okY1B17j4GVxPyzMOfZl%2F3ZnwIZceweYk4PyNXBWXG4OkuXDp37wyB1XMNSz0UeTmydTY%2F1IpAyzmmrIT7F2bzeWTp9DZV5Z57jJ6tgGaPkMQl%2BrZEX5egegiXXxtlqT2780s4KzBdGTFtK%2FtMW%2F3pLOQJWT%2F5DU5dVENftJmMZJvJRrMRSS5Ys8l8HnEWik6HI3OT6MXf7%2FwFAAD%2F%2FwEAAP%2F%2FbG5wCJQEAAA%3D | 192.243.59.20 | 200 OK | 7 B |
URL GET HTTP/1.1pleasantpaltryconnections.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuuns3p9%2FOirCdZmcOCCmbSPT2fu4fFuEaCMVl2XfQm9dWTMtVdTVX39CSn4ILswcPoTU%2BdZ%2FKBGkT%2FAINMFkQDQsZTDsa%2FwJOwV2XG4Oh7ed%2Bnnqfgqeetj%2FbyS1JHTi%2Fuvm12lNZ0qVnzqy%2B%2FFwS3q2sqyQfVQaf1fqtxu2r7t7qtmv9K9U3Jt8xS3Q98P%2FCD6oqyMjKDpSkJlR53g1rXrzXqtaDZwMD%2BF7vcg6MeRP%2BSPAclJgtPvOtQfIwk%2FuaudFuZSV99I841zYxFXxw9TLYSUySI52NkPUTJ0ZUaxp2vnMAkBzO7MP1%2FhExNiPfDCVhydGUSrL8%2F88k0ZAIm%2Fo%2BiP4bUYyg6BjePoMQ5AbjA%2BgaS%2BHDd2IJu%2F83SKTshC0%2F%2FgComZOHX60jir5e1GlQfGJ1nyiQOg6iEGoyhemOk%2BSmynQpUcQqefQglfiZLT9eQxPsbThsocXEzrHfr3YA3FnlbiMWGrEeLnYCKxagTRUE76rSaHTkLSKkxVDSGlkNQV0HuPOTKQx55yFMPsbio8iAI2r7g1O90OQ9FW7KW8APajgIa%2BK0Ocj59wxBZOgTXQ3C7i9TuYkt9ch5cwubfw22WcMKDywj6okQhCQpHUFCCQhEUGUHRLw%2BEdnVXHgrtchZc9fpVD8uRyXp79MBkPZkQUDuEFeVeekmenWbo%2Fa%2FyJ7bkRbXNmoIH9cgPaatVb9AwbIdt1mBh1GmEoi3gVAnlKqDOw46akBsveUjVhCzcOgSjp3D6FFw9D5rfAC1K0M0SO8lxJDO%2BGSkta7GEMCXSbAHZtrenL8kLsy0uL8WQ%2FOzOj59N63NwWyK1JT5QTwh6%2BvHovinI%2Fn1TOPLtRpqpWO3Q6YYfZDST1758S24XxorVu274xWt8SkzH43eky9ZoIlTSc%2BSrZSWEtCvGckm%2BW3XvSnYvd5vLuU3ydO3e6yurcWqlc8okY1B17j4GVxPyzMOfZl%2F3ZnwIZceweYk4PyNXBWXG4OkuXDp37wyB1XMNSz0UeTmydTY%2F1IpAyzmmrIT7F2bzeWTp9DZV5Z57jJ6tgGaPkMQl%2BrZEX5egegiXXxtlqT2780s4KzBdGTFtK%2FtMW%2F3pLOQJWT%2F5DU5dVENftJmMZJvJRrMRSS5Ys8l8HnEWik6HI3OT6MXf7%2FwFAAD%2F%2FwEAAP%2F%2FbG5wCJQEAAA%3D IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuuns3p9%2FOirCdZmcOCCmbSPT2fu4fFuEaCMVl2XfQm9dWTMtVdTVX39CSn4ILswcPoTU%2BdZ%2FKBGkT%2FAINMFkQDQsZTDsa%2FwJOwV2XG4Oh7ed%2Bnnqfgqeetj%2FbyS1JHTi%2Fuvm12lNZ0qVnzqy%2B%2FFwS3q2sqyQfVQaf1fqtxu2r7t7qtmv9K9U3Jt8xS3Q98P%2FCD6oqyMjKDpSkJlR53g1rXrzXqtaDZwMD%2BF7vcg6MeRP%2BSPAclJgtPvOtQfIwk%2FuaudFuZSV99I841zYxFXxw9TLYSUySI52NkPUTJ0ZUaxp2vnMAkBzO7MP1%2FhExNiPfDCVhydGUSrL8%2F88k0ZAIm%2Fo%2BiP4bUYyg6BjePoMQ5AbjA%2BgaS%2BHDd2IJu%2F83SKTshC0%2F%2FgComZOHX60jir5e1GlQfGJ1nyiQOg6iEGoyhemOk%2BSmynQpUcQqefQglfiZLT9eQxPsbThsocXEzrHfr3YA3FnlbiMWGrEeLnYCKxagTRUE76rSaHTkLSKkxVDSGlkNQV0HuPOTKQx55yFMPsbio8iAI2r7g1O90OQ9FW7KW8APajgIa%2BK0Ocj59wxBZOgTXQ3C7i9TuYkt9ch5cwubfw22WcMKDywj6okQhCQpHUFCCQhEUGUHRLw%2BEdnVXHgrtchZc9fpVD8uRyXp79MBkPZkQUDuEFeVeekmenWbo%2Fa%2FyJ7bkRbXNmoIH9cgPaatVb9AwbIdt1mBh1GmEoi3gVAnlKqDOw46akBsveUjVhCzcOgSjp3D6FFw9D5rfAC1K0M0SO8lxJDO%2BGSkta7GEMCXSbAHZtrenL8kLsy0uL8WQ%2FOzOj59N63NwWyK1JT5QTwh6%2BvHovinI%2Fn1TOPLtRpqpWO3Q6YYfZDST1758S24XxorVu274xWt8SkzH43eky9ZoIlTSc%2BSrZSWEtCvGckm%2BW3XvSnYvd5vLuU3ydO3e6yurcWqlc8okY1B17j4GVxPyzMOfZl%2F3ZnwIZceweYk4PyNXBWXG4OkuXDp37wyB1XMNSz0UeTmydTY%2F1IpAyzmmrIT7F2bzeWTp9DZV5Z57jJ6tgGaPkMQl%2BrZEX5egegiXXxtlqT2780s4KzBdGTFtK%2FtMW%2F3pLOQJWT%2F5DU5dVENftJmMZJvJRrMRSS5Ys8l8HnEWik6HI3OT6MXf7%2FwFAAD%2F%2FwEAAP%2F%2FbG5wCJQEAAA%3D HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=17433343; uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 696df4d4d0c5aad47d36d7cfd65b0c43
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6293&fd=368 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6293&fd=368 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6293&fd=368 HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=17433343; uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unseenreport.com/pxf.gif?uuid=329291c4-c7dd-4e2f-81ad-f8ff17f8658e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=7b5dc12f03a6624a33737b4b3f843d7d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 | 192.243.59.12 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=329291c4-c7dd-4e2f-81ad-f8ff17f8658e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=7b5dc12f03a6624a33737b4b3f843d7d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=329291c4-c7dd-4e2f-81ad-f8ff17f8658e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=7b5dc12f03a6624a33737b4b3f843d7d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:28 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: db332f43c6dd6ce27029e495721762ed
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/style.css | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/style.css IP188.114.96.1:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash1f7699db33ef5b846d47d1e225d0984d a7fe7c4422836192a36fc58f4132d5b48b599e46 86d6631b2cc909227986545fd302ba9daaba9701445526be21d70a4c24923486
GET /sb/ssp/utility/social-media/facebook/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:28 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: W/"65aa8500-1895"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jd4DoFRqhDqm%2BCa0KNGWzMNxX9cnB6oRthbNgsOG8OeGceAMj3UNgoWu8KhHtALpyVHxhoFbARdb6b9RZcrmpBb4YXuQAxtElqc8xcm%2BuFCk4KSwK0Dy5kyNLlYy54UooptXQkFEFBA%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8757426e394256bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html | 45.133.44.3 | 200 OK | 6.7 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html IP45.133.44.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3 ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT
File typegzip compressed data, from Unix Hashf34b57f041a1795cdd280ce3273c5e75 5c404dda13c0341b848e13e4348db80842b100a2 678b21b55857c3e021b218c0c27f7c1f9adbc15f9644ca6826b6aacd4a67e0ae
GET /sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Fri, 19 Feb 2021 09:27:09 GMT
etag: W/"602f846d-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 16 Apr 2024 22:27:27 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| www.dropbox.com/static/api/2/dropins.js | 162.125.71.18 | 200 OK | 37 kB |
URL GET HTTP/2www.dropbox.com/static/api/2/dropins.js IP162.125.71.18:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerDigiCert Inc Subject*.dropbox.com Fingerprint17:55:A3:E8:7A:9A:D8:FF:86:5A:8E:81:2C:30:73:6B:8A:88:10:43 ValidityTue, 31 Oct 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (37090) Hash0bdf18053c293ea847225dfaac8e0bb8 9ad984eee866f769f68c6c5aad836498ffa6410d c5240c4c2d0698ef54c04ab88c1e48a1d33c27b1ac1dc418f4ffbbda240a5f26
GET /static/api/2/dropins.js HTTP/1.1
Host: www.dropbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: envoy
date: Tue, 16 Apr 2024 21:27:26 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 16 Apr 2024 20:19:37 GMT
x-content-type-options: nosniff
x-cached: HIT
expires: Tue, 16 Apr 2024 22:27:26 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
content-encoding: br
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: no-cache, no-store
x-dropbox-response-origin: remote
x-dropbox-request-id: c0801b35634b43378b84fbbe8a3285cc
X-Firefox-Spdy: h2
|
|
| traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXuekICjxJMqAB3WRSffMZDqzCwZjzBKMm3VX0ZtUd1VPylR3NVVd05MRJLoge%2FAwghf10vkmP1DDon%2BAi0wWRAJC%2BpbDBvwDPIiwZ%2BnZ4LgPut979b2C7%2FtefbFrz0kTlp6tvKOGQko6v9Bw66986HlX6%2BsisYP6YLHzUad9ta77V7qdhvtq%2FRoPt9R80%2FVc13O9%2BqrQPFKD%2BQqESI%2B6XqPrNtrNhrfQxkA%2F3hvrwFAHrH9OnoVgZe2%2BMwcRTpDEP61ws5Wp9LW3YitppjT67PD9ZCtReYJ4VkbaQZQcXkxDmdPVe1DJ%2FpQuVP%2B%2FwUCUxPntHoLk8IIkgv7elGcgwRME7Cnk%2FQm4nEDQCUJ1G4KdEiBkuL6BJD64rnROtx%2BhtEJLUnv4D0RektqDOSTx3WUpBvVbStpMqMRgEBUQgwlEb4LUHiMbXoLIjxFmn0OwP8j8w3Uk8d6GkQqCFVPtQkwgogkkH4EaB7b6hAMbObCpg5id1UPP83yXhdRd7IZhi%2Fk86DDXo37kUc%2FtLMKGFb0RsnSEUI4Q6h2kegdb4qtT7xza%2FgqzWcAwByYrifPuDvqsQM4JckOQU4JcEOQZQd4v9pk0TVMcMGls4F3k5kVuFWOV9Xbpvsp6PCGgegTNit30nDxTWeS89N0StvhZvUs95rvRAguZ24qC1mIQtRc6EfeD6S%2BCEQWEuTRVPRQleeFlB6koSe3KAQJ6DCOPEYrnQK0HmhegmwWGyVHEs3AzEpI3Yg6mCqRZDdm2syvPyfPTJa1fJuDhyVI2%2FPPa3blPEOoCqS7wsbhP0JN3xjdVTvZuqtyQnzfSTMRiSKsF3spoxp%2F44W2%2BnSvN1lbM6Ps3wgqoyqP3uMnWacJE0jPkx2XBGNerSoec%2FLJmPuDBDWs2l61ObLp%2B483VtTjV3BihkgloJepkG6EoydMPPp2%2Bzcv2Swg9gbYFYntCLgJCHSNMd2DSGX%2BjCLSczQRpDbktxroZzA6lIJB81tOggPlfH8zqsabVbSqKXXMHPV0DzW4jiQv0dYG%2BLEDlCMY%2BOc5SfbL0%2BzdVfItA1saB1LW9QGr5dWWzUxJ%2FiJL4n%2F39yHUjzup%2Bq%2BXSTnfB833K%2FaDdXIw6HqO02e40Ox3aQmbK6MW%2FXv8XAAD%2F%2FwEAAP%2F%2FWsCisn8EAAA%3D | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1traileroutlinerefreshments.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXuekICjxJMqAB3WRSffMZDqzCwZjzBKMm3VX0ZtUd1VPylR3NVVd05MRJLoge%2FAwghf10vkmP1DDon%2BAi0wWRAJC%2BpbDBvwDPIiwZ%2BnZ4LgPut979b2C7%2FtefbFrz0kTlp6tvKOGQko6v9Bw66986HlX6%2BsisYP6YLHzUad9ta77V7qdhvtq%2FRoPt9R80%2FVc13O9%2BqrQPFKD%2BQqESI%2B6XqPrNtrNhrfQxkA%2F3hvrwFAHrH9OnoVgZe2%2BMwcRTpDEP61ws5Wp9LW3YitppjT67PD9ZCtReYJ4VkbaQZQcXkxDmdPVe1DJ%2FpQuVP%2B%2FwUCUxPntHoLk8IIkgv7elGcgwRME7Cnk%2FQm4nEDQCUJ1G4KdEiBkuL6BJD64rnROtx%2BhtEJLUnv4D0RektqDOSTx3WUpBvVbStpMqMRgEBUQgwlEb4LUHiMbXoLIjxFmn0OwP8j8w3Uk8d6GkQqCFVPtQkwgogkkH4EaB7b6hAMbObCpg5id1UPP83yXhdRd7IZhi%2Fk86DDXo37kUc%2FtLMKGFb0RsnSEUI4Q6h2kegdb4qtT7xza%2FgqzWcAwByYrifPuDvqsQM4JckOQU4JcEOQZQd4v9pk0TVMcMGls4F3k5kVuFWOV9Xbpvsp6PCGgegTNit30nDxTWeS89N0StvhZvUs95rvRAguZ24qC1mIQtRc6EfeD6S%2BCEQWEuTRVPRQleeFlB6koSe3KAQJ6DCOPEYrnQK0HmhegmwWGyVHEs3AzEpI3Yg6mCqRZDdm2syvPyfPTJa1fJuDhyVI2%2FPPa3blPEOoCqS7wsbhP0JN3xjdVTvZuqtyQnzfSTMRiSKsF3spoxp%2F44W2%2BnSvN1lbM6Ps3wgqoyqP3uMnWacJE0jPkx2XBGNerSoec%2FLJmPuDBDWs2l61ObLp%2B483VtTjV3BihkgloJepkG6EoydMPPp2%2Bzcv2Swg9gbYFYntCLgJCHSNMd2DSGX%2BjCLSczQRpDbktxroZzA6lIJB81tOggPlfH8zqsabVbSqKXXMHPV0DzW4jiQv0dYG%2BLEDlCMY%2BOc5SfbL0%2BzdVfItA1saB1LW9QGr5dWWzUxJ%2FiJL4n%2F39yHUjzup%2Bq%2BXSTnfB833K%2FaDdXIw6HqO02e40Ox3aQmbK6MW%2FXv8XAAD%2F%2FwEAAP%2F%2FWsCisn8EAAA%3D IP172.240.108.68:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjecttraileroutlinerefreshments.com Fingerprint41:1C:77:30:20:CC:E4:2C:E0:A5:21:6A:38:56:D8:6B:1D:FD:3A:43 ValidityTue, 16 Apr 2024 13:29:30 GMT - Mon, 15 Jul 2024 13:29:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXuekICjxJMqAB3WRSffMZDqzCwZjzBKMm3VX0ZtUd1VPylR3NVVd05MRJLoge%2FAwghf10vkmP1DDon%2BAi0wWRAJC%2BpbDBvwDPIiwZ%2BnZ4LgPut979b2C7%2FtefbFrz0kTlp6tvKOGQko6v9Bw66986HlX6%2BsisYP6YLHzUad9ta77V7qdhvtq%2FRoPt9R80%2FVc13O9%2BqrQPFKD%2BQqESI%2B6XqPrNtrNhrfQxkA%2F3hvrwFAHrH9OnoVgZe2%2BMwcRTpDEP61ws5Wp9LW3YitppjT67PD9ZCtReYJ4VkbaQZQcXkxDmdPVe1DJ%2FpQuVP%2B%2FwUCUxPntHoLk8IIkgv7elGcgwRME7Cnk%2FQm4nEDQCUJ1G4KdEiBkuL6BJD64rnROtx%2BhtEJLUnv4D0RektqDOSTx3WUpBvVbStpMqMRgEBUQgwlEb4LUHiMbXoLIjxFmn0OwP8j8w3Uk8d6GkQqCFVPtQkwgogkkH4EaB7b6hAMbObCpg5id1UPP83yXhdRd7IZhi%2Fk86DDXo37kUc%2FtLMKGFb0RsnSEUI4Q6h2kegdb4qtT7xza%2FgqzWcAwByYrifPuDvqsQM4JckOQU4JcEOQZQd4v9pk0TVMcMGls4F3k5kVuFWOV9Xbpvsp6PCGgegTNit30nDxTWeS89N0StvhZvUs95rvRAguZ24qC1mIQtRc6EfeD6S%2BCEQWEuTRVPRQleeFlB6koSe3KAQJ6DCOPEYrnQK0HmhegmwWGyVHEs3AzEpI3Yg6mCqRZDdm2syvPyfPTJa1fJuDhyVI2%2FPPa3blPEOoCqS7wsbhP0JN3xjdVTvZuqtyQnzfSTMRiSKsF3spoxp%2F44W2%2BnSvN1lbM6Ps3wgqoyqP3uMnWacJE0jPkx2XBGNerSoec%2FLJmPuDBDWs2l61ObLp%2B483VtTjV3BihkgloJepkG6EoydMPPp2%2Bzcv2Swg9gbYFYntCLgJCHSNMd2DSGX%2BjCLSczQRpDbktxroZzA6lIJB81tOggPlfH8zqsabVbSqKXXMHPV0DzW4jiQv0dYG%2BLEDlCMY%2BOc5SfbL0%2BzdVfItA1saB1LW9QGr5dWWzUxJ%2FiJL4n%2F39yHUjzup%2Bq%2BXSTnfB833K%2FaDdXIw6HqO02e40Ox3aQmbK6MW%2FXv8XAAD%2F%2FwEAAP%2F%2FWsCisn8EAAA%3D HTTP/1.1
Host: traileroutlinerefreshments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=19110719; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec9a1d70f5dcd03fb38bf456fe7b6fe7bf=[4991489,3635874,3637745,4991488]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 16 Apr 2024 21:27:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: de55f6550cdf26804370fed658f3fb2d
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.74 | 200 OK | 7.0 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.74:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 16 Apr 2024 21:27:27 GMT
date: Tue, 16 Apr 2024 21:27:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fetchfile.me/static/css/fonts/icofont.woff2 | 172.67.153.137 | 200 OK | 538 kB |
URL GET HTTP/3fetchfile.me/static/css/fonts/icofont.woff2 IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 537868, version 1.0 Size538 kB (537868 bytes) Hash50a4ab76e700a83e649be213f820fbbd 28ad9e9ac82f86c50eb4dd3d713a0698473bdbb3 242e542871bd77c8ff6375418e349ef6b3a32a208e15ca1441166641d212a6a1
GET /static/css/fonts/icofont.woff2 HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/static/css/clean.css?v=17
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:25 GMT
content-type: font/woff2
content-length: 537868
cache-control: max-age=14400
etag: "45afbef57d8adb301ce940da80b866bdb24ef0481d317349212d068e07ed3eac"
expires: Tue, 16 Apr 2024 21:31:50 GMT
last-modified: Sat, 13 Apr 2024 01:24:16 GMT
permissions-policy: interest-cohort=()
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 263
accept-ranges: bytes
server: cloudflare
cf-ray: 875742623f981c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 1.1.1.1/cdn-cgi/trace | 1.1.1.1 | 200 OK | 246 B |
IP1.1.1.1:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerDigiCert Inc Subjectcloudflare-dns.com FingerprintAE:19:17:2E:6B:EB:DC:B2:49:25:F5:E9:48:57:7A:9E:62:C7:41:71 ValiditySat, 30 Dec 2023 00:00:00 GMT - Tue, 21 Jan 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hashc53e3216d273c67fc16a2adb1a285fb2 e94a7e650c1955dc8236df85862d4d8a48c57a5d c79fc12ae6dbccd8ea0e25c2b067070c197de84f8ffe10e2a3da08b44dcd2432
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/trace HTTP/1.1
Host: 1.1.1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:25 GMT
content-type: text/plain
access-control-allow-origin: *
server: cloudflare
cf-ray: 875742631a8d56a9-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/ae/10/c2/ae10c2c562a3fb12278dc6b472da2520/1661948209.jpg | 45.133.44.9 | 200 OK | 21 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/ae/10/c2/ae10c2c562a3fb12278dc6b472da2520/1661948209.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash8f4953c1b8baece7bb7d226247561ce2 da5d440970606602026d7900a55ae2fd27a3f170 8fd9df7d8e48ff2519631e82e01519d4f1c65abd41ec977c18abb58df9832919
GET /si/ae/10/c2/ae10c2c562a3fb12278dc6b472da2520/1661948209.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/jpeg
content-length: 20566
server: nginx/1.21.6
last-modified: Wed, 31 Aug 2022 12:16:57 GMT
etag: "630f5139-5056"
expires: Thu, 18 Apr 2024 21:27:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pleasantpaltryconnections.com/pixel/sbs?c=1 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1pleasantpaltryconnections.com/pixel/sbs?c=1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=17433343; uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/js/script.js | 188.114.96.1 | 200 OK | 444 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/js/script.js IP188.114.96.1:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (458), with no line terminators Hash982ab6e275f01f07609f7a83b9ded288 00cae17857fd26867610c5287a75c107ab8a150f 2f60a6c44dff7939447126884982a613420b55459abf4ddc27144c2d09fe992c
GET /sb/ssp/utility/social-media/facebook/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fetchfile.me
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: W/"65aa8500-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=slnYJH3yZZm8kwAAyLY9ALpKKrJW027rPIh8n6NYyTIwPg0vCK2y8gZA%2FTlcpYaKIRCMGdDriZt%2F3YixuxUc5ck%2BirDIRUqLXe23xjrHKpFlixNENnQgbxOCF2VVbOTxGsTgjxqt0lNP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8757426e394056bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv | 172.67.153.137 | 200 OK | 22 kB |
URL User Request GET HTTP/2fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv IP172.67.153.137:443
CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:25 GMT
content-type: text/html; charset=utf-8
cf-ray: 8757425fdde9b523-OSL
cf-cache-status: HIT
cache-control: max-age=14400, s-maxage=86400, s-maxage=86400
expires: Tue, 16 Apr 2024 04:44:58 GMT
last-modified: Sat, 13 Apr 2024 01:24:48 GMT
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-robots-tag: noindex, nofollow
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fetchfile.me/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js | 172.67.153.137 | 200 OK | 7.8 kB |
URL GET HTTP/3fetchfile.me/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js IP172.67.153.137:443
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectfetchfile.me Fingerprint92:D8:58:73:93:AF:01:50:0D:21:1A:DC:26:82:3D:83:6C:C4:3A:48 ValiditySat, 13 Apr 2024 17:43:37 GMT - Fri, 12 Jul 2024 17:43:36 GMT
File typeJavaScript source, ASCII text, with very long lines (7827), with no line terminators Hash387762391edea00b9c38bb8e4c34fc89 8e5b5d58d90184ddd0f6876ca6c4d93ef0dd85cc f73e6639d1301699eca56e4966e7629d1d8a68c560adf5709ea40dca545d20a3
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js HTTP/1.1
Host: fetchfile.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 21:27:25 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
vary: accept-encoding
cache-control: max-age=14400, public
server: cloudflare
cf-ray: 8757426308391c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudimagesb.com/si/3c/66/7d/3c667d813a42fa758fc4bf7a0efaf494/1686219226.png | 45.133.44.9 | 200 OK | 79 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/3c/66/7d/3c667d813a42fa758fc4bf7a0efaf494/1686219226.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash17406123bee2dbadacb3ec1cc1cf9416 110f5eb9fbc4178b3a5eb21863d2f4215bf637b3 18defce371b91ade824ab08dc96b1e7b95c8b804f898a694dffb4047bdd2df8b
GET /si/3c/66/7d/3c667d813a42fa758fc4bf7a0efaf494/1686219226.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 21:27:27 GMT
content-type: image/png
content-length: 79040
server: nginx/1.21.6
last-modified: Thu, 08 Jun 2023 10:13:54 GMT
etag: "6481a9e2-134c0"
expires: Thu, 18 Apr 2024 21:27:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=78689&fd=353 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1pleasantpaltryconnections.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=78689&fd=353 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://fetchfile.me/download-twitter-broadcast/?url=https://twitter.com/i/broadcasts/1ZkKzjVpjDdKv CertificateIssuerLet's Encrypt Subjectpleasantpaltryconnections.com Fingerprint99:F7:20:AC:E5:CE:C1:BC:60:70:9B:07:CF:5F:D0:2C:74:19:AE:30 ValidityTue, 16 Apr 2024 10:20:13 GMT - Mon, 15 Jul 2024 10:20:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=78689&fd=353 HTTP/1.1
Host: pleasantpaltryconnections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fetchfile.me/
Cookie: u_pl=17433343; uid_id2=329291c4-c7dd-4e2f-81ad-f8ff17f8658e:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec7b5dc12f03a6624a33737b4b3f843d7d=[5160671]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 16 Apr 2024 21:27:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
0.0.0.0