Report - experimentalpersecute.com/443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=["deep","blackhead","on","skin","3","%E2%80%93","camdope"]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke

Report Overview

Submitted URL
experimentalpersecute.com/443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=["deep","blackhead","on","skin","3","%E2%80%93","camdope"]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke_layer&tz=2&v=24.4.7925
IP
192.243.61.227
ASN
#39572 DataWeb Global Group B.V.
Submitted
2024-04-26 20:00:07
Access
public
Website Title
Click Allow if you are not a robot
Final URL
rqqlj.check-tl-ver-94-2.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824&nrid=1eb612679cb242d6a4c795c4f180cc08&hash=fC7euQT12MUnxll-xpSurw&exp=1714161904
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nylonnickel.xyz	unknown	2024-01-02	2024-01-02	2024-04-09	9.7 kB	6.0 kB	192.64.81.118
rqqlj.check-tl-ver-94-2.com	unknown	unknown	No data	No data	9.2 kB	128 kB	104.21.33.96
tb.check-tl-ver-154-1.com	unknown	unknown	No data	No data	2.0 kB	53 kB	188.114.97.1
rqqlj.check-tl-ver-154-1.com	unknown	unknown	No data	No data	8.2 kB	189 kB	188.114.97.1
fb.check-tl-ver-154-1.com	unknown	unknown	No data	No data	2.0 kB	40 kB	188.114.97.1
tb.check-tl-ver-94-2.com	unknown	unknown	No data	No data	3.9 kB	103 kB	104.21.33.96
ib.check-tl-ver-154-1.com	unknown	unknown	No data	No data	2.0 kB	25 kB	188.114.97.1
qa.check-tl-ver-154-1.com	unknown	unknown	No data	No data	1.8 kB	25 kB	188.114.97.1
qb.check-tl-ver-154-1.com	unknown	unknown	No data	No data	1.1 kB	12 kB	188.114.97.1
db.check-tl-ver-94-1.com	unknown	unknown	No data	No data	1.3 kB	4.0 kB	188.114.96.1
wa.check-tl-ver-94-2.com	unknown	unknown	No data	No data	5.3 kB	101 kB	104.21.33.96
cdnstatic.check-tl-ver-94-2.com	unknown	2024-04-09	2024-04-16	2024-04-18	5.0 kB	145 kB	104.21.33.96
cdnstatic.check-tl-ver-154-1.com	unknown	2024-04-15	2024-04-17	2024-04-17	5.4 kB	80 kB	188.114.97.1
ia.check-tl-ver-154-1.com	unknown	unknown	No data	No data	2.0 kB	34 kB	188.114.97.1
rqqlj.canopusacrux.com	unknown	unknown	No data	No data	6.2 kB	10 kB	188.114.96.1
ta.check-tl-ver-154-1.com	unknown	unknown	No data	No data	2.0 kB	55 kB	188.114.97.1
qa.check-tl-ver-94-1.com	unknown	unknown	No data	No data	3.2 kB	44 kB	172.67.147.142
ta.check-tl-ver-94-2.com	unknown	unknown	No data	No data	2.7 kB	66 kB	104.21.33.96
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	3.3 kB	98 kB	216.58.207.227
rqqlj.check-tl-ver-94-1.com	unknown	unknown	No data	No data	7.7 kB	143 kB	188.114.96.1
da.check-tl-ver-94-1.com	unknown	unknown	No data	No data	2.0 kB	27 kB	188.114.96.1
www.profitablegatecpm.com	unknown	2024-02-05	2024-02-06	2024-04-25	17 kB	27 kB	192.243.59.13
qb.check-tl-ver-94-1.com	unknown	unknown	No data	No data	3.3 kB	42 kB	172.67.147.142
cdnstatic.check-tl-ver-94-1.com	unknown	unknown	No data	No data	1.8 kB	30 kB	188.114.96.1
fa.check-tl-ver-154-1.com	unknown	unknown	No data	No data	1.4 kB	15 kB	188.114.97.1
experimentalpersecute.com	unknown	unknown	No data	No data	3.1 kB	4.6 kB	192.243.59.20
www.gstatic.com	unknown	2008-02-11	2016-07-26	2024-04-26	19 kB	443 kB	142.250.74.35
wb.check-tl-ver-94-2.com	unknown	unknown	No data	No data	5.9 kB	120 kB	104.21.33.96

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	experimentalpersecute.com	Sinkholed
2024-04-26	medium	experimentalpersecute.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ	0 B	2023-03-07	2024-05-07
Pretty URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ IP 192.243.59.13 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 22:50:00 Times Seen37420208 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (204)

URL IP Response Size

experimentalpersecute.com/443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=[%22deep%22,%22blackhead%22,%22on%22,%22skin%22,%223%22,%22%E2%80%93%22,%22camdope%22]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke_layer&tz=2&v=24.4.7925

192.243.59.20

1.6 kB

URL
experimentalpersecute.com/443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=[%22deep%22,%22blackhead%22,%22on%22,%22skin%22,%223%22,%22%E2%80%93%22,%22camdope%22]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke_layer&tz=2&v=24.4.7925
IP
192.243.59.20:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (786)
Size
1.6 kB (1624 bytes)
Hash
74e5e17b5fddba7318c0fa2fc5759f36
6a37693e1f596400398166788dda0e07e1a9f4ba
ca1400dbd81fe83f3c9681d0c0d9aea646a4fb62dd5978731348cd9ae58e5698

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=[%22deep%22,%22blackhead%22,%22on%22,%22skin%22,%223%22,%22%E2%80%93%22,%22camdope%22]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke_layer&tz=2&v=24.4.7925 HTTP/1.1
Host: experimentalpersecute.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:59:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17154615; expires=Sat, 27 Apr 2024 19:59:41 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.8Cl6C6DJqGFTg_7sfUAYjPS74hRNE4vYeV7secWMxvc; expires=Fri, 26 Apr 2024 20:00:41 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a80b06af46e1b1a0d6c33c4394304599
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

experimentalpersecute.com/api/users?token=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&uuid=&pii=&in=false

172.240.253.132

0 B

URL
experimentalpersecute.com/api/users?token=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&uuid=&pii=&in=false
IP
172.240.253.132:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=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&uuid=&pii=&in=false HTTP/1.1
Host: experimentalpersecute.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://experimentalpersecute.com/api/users?token=LzQ0M2NkODNkP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxNTQ2MTU
Cookie: u_pl=17154615; ain=eyJhbGciOiJIUzI1NiJ9.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.8Cl6C6DJqGFTg_7sfUAYjPS74hRNE4vYeV7secWMxvc; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:41 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:41 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:41 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:41 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:41 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0caa265cd447f12bc01ec970ef6ed567
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://experimentalpersecute.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh98plp-xr46-0-usgm6o-9rib8n-9ribwj-c95d4d; expires=Sat, 27-Apr-2024 19:59:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://experimentalpersecute.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 Apr 2024 19:59:42 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:42 GMT; path=/; samesite=lax
__cap=1; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G8k%2Fu%2BsRXmqu8OOqQzKKH9H4eShkZKx10DlA7cObD7sTnsf12zHs6OORzrAJVJfT5LPaC1VGV9YXgkvH8KAco01%2FMoS1Ci6qtDdB9kzJM%2F0eeDXVxllrvs%2FqOnSifSLyucOGltCeiuZi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a1ee3eb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rqqlj.check-tl-ver-94-2.com/space-robot/assets/corner.png

104.21.33.96

300 B

URL
rqqlj.check-tl-ver-94-2.com/space-robot/assets/corner.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0nfKeDOcXlmGRluP2oIT7RhqEo1mdsl8s6ZNyrob6KvD7vNMdczcpSaa4AYRxDfCo97vY6sz7DFyJlQoiiVgm5vWkymu0H%2FR7lyjNrihe%2FZ0Mp5agvrniG11%2BiAMUuSwXAkgOGrC8evcqgKAfrY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9c1568e-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js

104.21.33.96

20 kB

URL
rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
20 kB (20517 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MH08dF7TIrVMQWA7%2BijyxtVRHdA%2FIQjtQpeA2qjMIybFTnf34BlG2rLDfv%2Bom8JYB01dSB5S8b%2FrjX6qp%2FD7Et8l%2BGphdNY3UF4y7HpVtNJlm%2Bou71p3rPkCEsWJHC1Y9uLoGh5teom7ul2x8Zw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9b7568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4

104.21.33.96

39 kB

URL
rqqlj.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6532), with CRLF line terminators
Size
39 kB (38727 bytes)
Hash
8335155a7c4004d8296b7727a24273c4
387b7723ba35057b631809e1437c64cdd89f13bb
0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e

HTTP Headers

GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ks2ee1WJf4GSyIrpWwIHaCPHoLYqYY0F3pif8BYqe9lNIC5vX8M2lZx8m88tNhLtU4g8BOpHWiLOhb3%2Br%2Bk8A7%2Bm7V6L5SsrYJWKKe4R1aIjtwnzOpVCsYiNClQFq%2BHrFDR36U49u3EgpZtgbCA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9bc568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png

104.21.33.96

1.2 kB

URL
rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Pl%2BtqPHhO519fFh4f0BwqGxemVbUM5FtPyRcwuXSiODpCtNahWs2zxhf4keQwvs491mSQgokBPqTlnPl58kBnyCK3%2BgeMzaQJFXXb4XKKgWPzL95ZpG%2FKk%2BNSdObJK%2B%2FxbYgHoct%2BRWqNUm%2Bpg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a4dad7568e-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148341
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

wa.check-tl-ver-94-2.com/space-robot/assets/corner.png

104.21.33.96

300 B

URL
wa.check-tl-ver-94-2.com/space-robot/assets/corner.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7gcZjgORP9PtvZDkwrqzNzmzPHgD3%2F7qvkrygqKVQ8eP%2BtSSP53qsb7FkojveVHa65yJ%2FkxZ0%2FobUov2TV4F0ICP282O5gR7w7qsVdn80oCtOgLCfuSyAR0DWyqfq%2B%2BTbDIbcNESM37pWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a6bd1a568e-OSL
alt-svc: h3=":443"; ma=86400

wa.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3

104.21.33.96

17 kB

URL
wa.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
17 kB (16578 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NdSaErmHioXr1YvrOqFmbdGs%2F9C%2F%2B9p8SwI7qgW%2B4nviuFxjh0EWXySpvW0sa%2BIYIJd3XI6Xhvjj9i1tKSD7yCCj%2BZ%2B7agwGqb%2Fc9PnCkd8Mk9cBu8GuVuEfd9eFn5CRQYHrVng%2FfkgCB84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a6cd22568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=e94bdec004ef4a49a14064b067a05785

104.21.33.96

15 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=e94bdec004ef4a49a14064b067a05785
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33136), with no line terminators
Size
15 kB (14855 bytes)
Hash
505334375790aecc513ab621f1e2b0dd
4d20453405ad124920ddd70bc0330ea2af70938c
e37976cb7feaa36e8b4b3f39f01b9fbf9f2c47ea60d42c215a5d820e30c1c7db

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=e94bdec004ef4a49a14064b067a05785 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lBrrOlwuVIdG2qk1LItExPsI8eKqFVVEnZa4GjwXHLzVaAVFThonkI%2FVqMN%2Ffe%2Fp%2Fx33oYqJjaZpUmitPVg0EHAdxuuzZ4vAtyUO2e%2Bbgi5I155eDL0MzB3KquPe87XH14zvDMOKn2ywL%2FgRrH%2FmMlP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a73d93568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

wa.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png

104.21.33.96

23 kB

URL
wa.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BFZk1Kb4dJUEoWfP95oiKu1hnlBI8xw0gO82%2Buc17Ah086Z2Pi8htomjIIbgWuvdtdr2qXTgESeJQLxFdlSrXv%2F1qQhR6QQ0IZ%2Fnz22TcXd8DMjNUy3RW15AclWd0Dxa9SFgxxkDoDxDyK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a79e05568e-OSL
alt-svc: h3=":443"; ma=86400

wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882

104.21.33.96

14 kB

URL
wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
14 kB (14047 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IqVxAdQHijfCKkK%2FqsR7IHcg6E7rYTig2h3dNoFZIRO4xUZl1MTq79UTZ8p8tmqrDOWq7UrpN6j0%2BuduqyzjM%2BXkiMR0uBj7GTvkt6OdyCHycOQNLVl59NhTuO3QV0cpe0rHO6ZSdpquIFo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a62c50568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148341
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

wb.check-tl-ver-94-2.com/space-robot/assets/corner.png

104.21.33.96

300 B

URL
wb.check-tl-ver-94-2.com/space-robot/assets/corner.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2BDc1rb%2BrVa2UoixlJfZpUiCwp7QmX81K749IOhwyLYpq3WjCh44ZZIi82J1fWRjIX1n3mnKS1WePzCBw0IzOOMj6J%2F6TkP2wvaALZDixgEW258yh6WV%2Fjgr0S7%2FPMJv9tBvTn000yxTqhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffc9568e-OSL
alt-svc: h3=":443"; ma=86400

wb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3

104.21.33.96

17 kB

URL
wb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
17 kB (16578 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmNinQvq6iqPXunov8t9jxqNfQsb17tGMJYPfAzvAzp8GD%2FpoT9nSrqY8ZZlZOVgtIPtNNA15%2F%2FJ5uiCCRIZkwQwIFiikYfhqpw7CwoVPSZXqfZw6UIZwuzxUCbCuSPurNgfvX9S1ox7Ra0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffce568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

wb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png

104.21.33.96

1.2 kB

URL
wb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNo7v%2BZnpZ0QSOoJVsnPy4ROAAJzed6%2BNPuYrIrhjsHoVnTCDnYlewHmraHuwQOsGkbqFDeorM4dVhoRvnp4dzTTvHQZdaXjbHdqxfBUSn6o3izu1cmb4L28hz75ALGNZd9mEE1%2B72sm%2BYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a9e8ff568e-OSL
alt-svc: h3=":443"; ma=86400

wb.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png

104.21.33.96

23 kB

URL
wb.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nhgU1FiisCQK%2F1b2eZEYv8H1VmdXGNXYS4p6Eh0whgU5iNIYr9GN3WjD1CrzsAZfoiTAZ86JTK%2BhJMkZkEq9tHf9HfM%2BGqzHDUkXxugbNR3oz9A30Iv5a1CLItziBjxiU836zc2TIkfsAnE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a9e8fa568e-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

104.21.33.96

9.5 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9qGMEyfBP86vmacHSq4d7y749ZkOSvObXRhL7UA5vhwsqY4O1Arb6jqDMn8LhiCzTY6pa0lTGtUdJJtzk0JNloyebLzkzYJnKMYhms0jxwhuFZ7CLXQz57QnnNFNGmAnCTKo0dFZG%2F4RGUNRPN3sAh9H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a9e907568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148341
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

192.243.59.13

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
192.243.59.13:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (402)
Size
1.3 kB (1336 bytes)
Hash
e4a765fc104bdc00f1ab37ed0deadf81
1ceb27ca31e8793fc0efe087a3357ad0841e9eb4
58f8ad856a35d9ded35228a7f2964632ae36210d5c0d7da6737c4c3b4334a24e

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:59:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17136824; expires=Sat, 27 Apr 2024 19:59:44 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; expires=Fri, 26 Apr 2024 20:00:44 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eaed5c68fe533654460947b758d9b742
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0NCZybXRjPXQmc2h1PWJkOWU5NzQyNjIzNTc1NGU4MzEyMzM2MDllYzljNTE0NmIwYjQ0NWRjM2Q5YzJhZDQwZWYwYWE2ZWY1NDY1NDNiMjI3NmM4ZDFhZWVkYzliYTYzNzliODIwOTZmOTFmNzI5NjNiYmI3M2U1ZmE4ODY3NDA0YTgzNmU2MjFlZTY3NTZmYjZmNzUxMDdkMWFiZDE2NGUzNDEwMGU4YmI2MWE0NDMxYjYxOWVmZjY3OTBiMzg3ZjE5NzU0OQ&uuid=&pii=&in=false

172.240.127.234

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0NCZybXRjPXQmc2h1PWJkOWU5NzQyNjIzNTc1NGU4MzEyMzM2MDllYzljNTE0NmIwYjQ0NWRjM2Q5YzJhZDQwZWYwYWE2ZWY1NDY1NDNiMjI3NmM4ZDFhZWVkYzliYTYzNzliODIwOTZmOTFmNzI5NjNiYmI3M2U1ZmE4ODY3NDA0YTgzNmU2MjFlZTY3NTZmYjZmNzUxMDdkMWFiZDE2NGUzNDEwMGU4YmI2MWE0NDMxYjYxOWVmZjY3OTBiMzg3ZjE5NzU0OQ&uuid=&pii=&in=false
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0NCZybXRjPXQmc2h1PWJkOWU5NzQyNjIzNTc1NGU4MzEyMzM2MDllYzljNTE0NmIwYjQ0NWRjM2Q5YzJhZDQwZWYwYWE2ZWY1NDY1NDNiMjI3NmM4ZDFhZWVkYzliYTYzNzliODIwOTZmOTFmNzI5NjNiYmI3M2U1ZmE4ODY3NDA0YTgzNmU2MjFlZTY3NTZmYjZmNzUxMDdkMWFiZDE2NGUzNDEwMGU4YmI2MWE0NDMxYjYxOWVmZjY3OTBiMzg3ZjE5NzU0OQ&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:45 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:45 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:45 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:45 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:45 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 04f9699d124b3f4fad68b17cbeb2c43f
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh98plp-xr46-0-usgm6o-9rib8n-9ribwj-c95d4d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:45 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9xo8r-xr46-0-usgm6o-9rib8n-9ribwj-3c88f3; expires=Sat, 27-Apr-2024 19:59:45 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:45 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:45 GMT; path=/; samesite=lax
__cap=2; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GUq0x1BKFUOzF2k0oB%2FFHc4eKNNciIt6H5ee9W%2FTcC6u9K75xi%2BhTjkwsk%2BPqMC1kmQzyiVuJ2b6m7ouC8oQbs0sADYAtqDiypGtJWEP8ONrY6ueBsAUHhqgUe5vIijY%2F0fkWT5m3Ss2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927b478ac56b7-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css

188.114.97.1

16 kB

URL
rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
16 kB (16225 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3295
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hf5UmUVHndr0PFoIi0swh1pxXnuKA7XRVEYEnFX4UZmAPQAUzdmHxtORUGGDy5pY1%2F18oVL8pzpT0upry2FX8WZy0hEHGsJeg6k%2Fg4I0HxSTAHSWaAiGrfYbP%2FCp8qoRMWNa9tn5LXlt3r%2Bpmjw6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b68c3eb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95678
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

rqqlj.check-tl-ver-154-1.com/favicon.ico

188.114.97.1

0 B

URL
rqqlj.check-tl-ver-154-1.com/favicon.ico
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:45 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1751
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MQ2f6D%2BWjIJqX8Iv5SE7biLuEyHuwZRHHKbNozZ3B0V0X2e%2FHe%2BzlOJA6cnJ%2Bz4E7yKdjnSUjknrD2wVFpRHqEE3wQNOjV2PbSJ3yEDvDvXhTodto9i8jP9j0km8%2F2mept4moQZKtIAaqZ%2BbGiW0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b79d66b52d-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

9.5 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALzV0g00imDIMAuqdqsWRQNneo1RuwjecRMNNblQUlO98zgATkAPR6Q0b8r5Kw3tv9pack012aW5DCUeuZGnlEo137sfIdJ66tlzhXyR4a1b4oACfpQ1E4%2FAtkxkcxwHxb067N0ji%2BZUl223hyfC50T1CQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b79d6cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148343
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ta.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95679
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted

ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885

188.114.97.1

22 kB

URL
ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
22 kB (21847 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 HTTP/1.1
Host: ta.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0SvuQiuX5I%2F3D3hwXLhLSHxt9QwE53MfpDm0OgHiy0Pz9%2B9vwMKKco%2FuHK9K4YK3mo9nOr5KKAIcV%2BeVB6jYwnVaUsOaO%2FsVupJe41AGdvf%2BhJX0JFvoFY%2BJrDJ5T9JQLizGr7xZWupYMMP%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927b90f2eb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ta.check-tl-ver-154-1.com/blue-robot/assets/trls.js

188.114.97.1

15 kB

URL
ta.check-tl-ver-154-1.com/blue-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
15 kB (15297 bytes)
Hash
a1172576cb7f22b41247c5571d2f6d9e
8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c
2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: ta.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qC9f%2Fhw%2Botnp2zC2H2P8OjM58DpVkpTa%2BLXco4WUnIohk4OUC8bOurB5CW8EQxe%2Bp8aDCR0IwUH4%2FtpJGeP9XqJYWnH2sBRdoXzm7UGEt8K0j1V%2FUk2lCY32YvixgDaMGse2jUsTGF6wSB9i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b98800b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

9.5 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0AQNkK%2BR36M3Yx%2F38GPfcbpMWvCv7rZ6x%2BaripCUX5qWR9Y7hZgko4hWD3wJAf2J7bjOAwGwMwdZxdrhcM2eUbZqRKQ8XLtNpPRPRKb2EZdKbnd3tJ3V%2BXK2%2Fi%2BAN0unW2sx0p1D%2B70jJfmCzDJGk2BEQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ba6923b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148344
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

tb.check-tl-ver-154-1.com/blue-robot/assets/style.css

188.114.97.1

16 kB

URL
tb.check-tl-ver-154-1.com/blue-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
16 kB (16225 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: tb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8piOqQV8nbodcEv%2F9p%2BPIalsobqdqchg4bvRRUGLsRNYIu94ar8y5pa7geQCuMLUv%2By0Vd%2BK4nUiFuqAUZG8OJ3xRO%2FZ3OrCNWvdgsfmXyHGTxcxQlECegugEtJiz8t7tjocbRBaIRB%2B8T4o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927bc0b0cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tb.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95679
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

tb.check-tl-ver-154-1.com/blue-robot/assets/trls.js

188.114.97.1

15 kB

URL
tb.check-tl-ver-154-1.com/blue-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
15 kB (15297 bytes)
Hash
a1172576cb7f22b41247c5571d2f6d9e
8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c
2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: tb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ANSYQBnCCHPrBV6VBEntDRn1m2wNmcA385dsQglirUZhA75GlBF75Eg8hiQx9HTmrBszCW0hAQoiNazAuUVd4LNFajtUd4OkrYtknpmlasYA7iTMxz8atEJt7SmrKWU3EDl9Fek0r2ycm%2BWJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927bc0b07b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49595
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148344
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

172.240.127.234

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (412)
Size
1.3 kB (1338 bytes)
Hash
dff46674992c118f5d562b22065d1422
faead609425c106b549eb1e281303dd270a45b83
d3096dd286534f2fd7405be579badda430047dc589102dcc9546d1abd7199020

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:46 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:46 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6a8be09399c31d975662fec4b78b9d19
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882

104.21.33.96

3.5 kB

URL
rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
3.5 kB (3526 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://experimentalpersecute.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AiMNRcbQphnl4LDc9qF8qkBr0Z3jthLh45atSE8WmPT3U9sCIo9eutb5UKaUIx0Ty824S%2FS3vQprw9cIYl6vsGgpGt%2FdgMLiwU9V0ekERKuIvUhiJKJAe7sey5mqizGTtEAg2W1IG9LjzWgNyBI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a28c0d1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3912d58cf5e36c11b5213250d32c2dfd&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3912d58cf5e36c11b5213250d32c2dfd&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3912d58cf5e36c11b5213250d32c2dfd&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9xo8r-xr46-0-usgm6o-9rib8n-9ribwj-3c88f3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:48 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9xoej-xr46-0-usgm6o-9rib8n-9ribwj-bdeab3; expires=Sat, 27-Apr-2024 19:59:48 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:48 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3%2C5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:48 GMT; path=/; samesite=lax
__cap=3; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXiME4ORsoMLu2Imk%2BOaF9tveQPXaaB8PMb1b4rDA%2FQW8Wvqwhta2SKbQUKZa1u2lKEyiPD22MdfhCFd4snWoZC3WaFa1WhiOtR9a%2BnRj%2BHeYmRzA8j8Xj2h8sUJ2zHpjnJ3r0W3fqcW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927c84ea756b7-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png

188.114.97.1

1.1 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5761
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R7CRP6jAxSflrHmvrWN%2Bm3c67NMElh1RFK4o46CBOT55l%2Bu9l8wvHqMxSqYCDrhLrnNeMYwTNUwY9sa5BrkpbiGBmZg2tPR6HJhyWug0zEpKUqjMm%2FsytkVBOZXRwnbMOo5CceymrklYoHBRgUgf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927c99b52b52d-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/1.png

188.114.97.1

11 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/1.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5761
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TsrJhUN3ZAouztjAs019kv%2BM%2Fgswa605MQeUn5iq1Cg%2B66qi9eUqBr%2FBnECteW3uac8YeWZvD5AQD%2FuahK9rCtG0kKEZNANg20k45w%2BRSUys32JtjR26l3RPyOUEfuXZNSbCDJqx2zwsVfrN%2Fr8l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927c99b50b52d-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png

188.114.97.1

11 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 260, 8-bit colormap, non-interlaced
Size
11 kB (11043 bytes)
Hash
ca1f4de0ad1d4fad72d299a6411e6959
c9f6d409f09264a34ee8bac4265233c56c280d1a
f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f

HTTP Headers

GET /eyes-robot/assets/image.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5201
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gYqgigKt03er2vOT1pzEhoJ9XnLbCJU3lkZfFkJfljaq6ziOOKyE%2FwXbDsNFszp5MSX21Ug37LBlv9xWe0wEi7APRvV1D4YEBWA4d2raGv3RpnG878ScHHalw74lClViXxMSlWGQxD0nwSROACam"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927c9db8db52d-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888

188.114.97.1

16 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
16 kB (15882 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888 HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yHZ4l4zzGe2w1vYIk6FpekuoBArkrlWf40yem70Pv1BKy2vQwhoETtA1iVB2ZxZkEXK0EoTyOP%2FBM0q5bF02aGGy%2BG7CEt8Rm3PKtbdtM1uK8ixHmkmiyGO8hEoFdwrc52mqwnP9Jo8grFMsJyW%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927c89a07b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

10 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
10 kB (10162 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bf2brGh80vOEpQ4%2FlR9ARsNmau3a1SUWeCPwD3tVfRXbpE4FNmByDgq9Grt3XlakHfuUbbSBEW%2BHz1vTkZaq8j8R2VYzB%2BwdY5svs45Lrh%2BPOB06Fy3GncFALki9PKact6fObxuz9ELqMyZHAth3Ftv6Tg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ca4c1ab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-154-1.com/eyes-robot/assets/2.png

188.114.97.1

1.1 kB

URL
qa.check-tl-ver-154-1.com/eyes-robot/assets/2.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: qa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ia2%2FL9M%2FpUxg98RMEL7n7spstg71Dh0C78Rke28%2BfL9sLlV5xkNZ3xY4x6weHeYxKfYpr%2BLWJqhz9i%2B4hcW%2BxwHhXwReVB%2B4IuLgWeSbVFJjMz4a9uzwEeJ1TASp%2BZtFRdPDlMhE3gYGNYyV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cc4e6fb52d-OSL
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-154-1.com/eyes-robot/assets/1.png

188.114.97.1

11 kB

URL
qa.check-tl-ver-154-1.com/eyes-robot/assets/1.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: qa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fdh6TTEk1gJiE%2BflVHgyXeTP%2BVNn9nbeWuGqGd154s8WEES68Wb2%2F9GfmO64KmJLbDYc4YDynMG4FAMBkDmvB%2F6pYbeDZXt2aS3KJWEV358%2BRVqPoSGYK3CIRG35n%2BSAPKyaDm913xY7b1Bw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cc3e67b52d-OSL
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-154-1.com/eyes-robot/assets/image.png

188.114.97.1

11 kB

URL
qa.check-tl-ver-154-1.com/eyes-robot/assets/image.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 260, 8-bit colormap, non-interlaced
Size
11 kB (11043 bytes)
Hash
ca1f4de0ad1d4fad72d299a6411e6959
c9f6d409f09264a34ee8bac4265233c56c280d1a
f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f

HTTP Headers

GET /eyes-robot/assets/image.png HTTP/1.1
Host: qa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nUVaeCWFNa%2FFYZM35idv0HkiKLk9B2BeNG%2FUcc2oeGSPS0l5Bo8Qk3N9I5FqHOqXUGVUvAstaheg5BSqZ1JMZOjhjrIM74xcQYWlrHkPEqVUvhJbmOVwNvY6jf%2B8ZTLOwRfi2u4qADjVTjzj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ccaee9b52d-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=ed6e06db888944498357b77d77127fff

188.114.97.1

14 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=ed6e06db888944498357b77d77127fff
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33137), with no line terminators
Size
14 kB (13706 bytes)
Hash
6a1d9bb844c21f09288e2c72ae8ed579
f811cf02d9a4e19a0fa8a510588b7bd8b22c2de1
7ed42bd82db32e4cfbe9df1a91377dcd91d9af751a21bba713141523bb0b0033

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=ed6e06db888944498357b77d77127fff HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hvsTI3HacaZzXSMklF2bH1mFjYDVfP2EyQkRHmRjXtS2Irw1bnjwRe%2B7DD2ibbgPbQ4UOv7c0G2HwDqQgHtSB0dX%2Fa7dDLG4NkclDP8GTUUAkO1yQuW6q4%2FqW7qy7kXZiqB8ThxLiKB41TycpNTTXqDNnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ccbef6b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49598
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148347
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882

104.21.33.96

28 kB

URL
wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
28 kB (27840 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xb3lQXViKPhVRDJ%2ByiwCPHXurOGw0Jst26AESJZZlRU5D3izdDE9Qz9d8wDRXuXp3ZlWloKxoWo4T%2BDvH3Qo%2BfkBxVaL4MxKrX5dhmkFSAwY6X4lNYew8nFikczPp6LzRlIJN1J181m2wjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a86f11568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

wb.check-tl-ver-94-2.com/space-robot/assets/trls.js

104.21.33.96

16 kB

URL
wb.check-tl-ver-94-2.com/space-robot/assets/trls.js
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
16 kB (15556 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xDEaBHqD%2BS3SrbW6HYpoXMEYU3KXlxHPGHco1DK651EVST9JEUxJkA3FvpUFf7InEoZe41KmaeaAoHA0dyx%2FNJwyJmGRV5rkRQKL0U6fPEY49ahnibP9lp0DBv3s9BxF6warmmEYTyN%2FIAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffc1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2

104.21.33.96

2.3 kB

URL
rqqlj.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
2.3 kB (2274 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4007
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXzgRnivcYuc0YZSFBOq%2ByUXUBfaodTkyY4NthK%2FX%2BBia72WbITDkOUsFl7p942%2FKh73lky3x4d3ih13qKMBGU8XK8YDE%2B74X5Pi0%2F8iU%2FhBfLXjaH9VqBmtLlSZQvx0boFD0ZWqY3r5K3DB%2BXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a409c9568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-154-1.com/eyes-robot/assets/image.png

188.114.97.1

11 kB

URL
qb.check-tl-ver-154-1.com/eyes-robot/assets/image.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 260, 8-bit colormap, non-interlaced
Size
11 kB (11043 bytes)
Hash
ca1f4de0ad1d4fad72d299a6411e6959
c9f6d409f09264a34ee8bac4265233c56c280d1a
f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f

HTTP Headers

GET /eyes-robot/assets/image.png HTTP/1.1
Host: qb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4579
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7xV3YZdJNCCmdlkE2OuqtWXrsp5Vs9R1T4%2ByeH0BY1niQqVA2LxPTP%2B7sQzYSR0BRP8%2BK8awmZEaV2du9kBugRUc7Lvy4gpfOe4sdR8LIR%2B8iSy96Z3Uz8IPaFlh3HPYJybucL8pxFJNZAaL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cf09a5b52d-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-154-1.com/favicon.ico

188.114.97.1

0 B

URL
qb.check-tl-ver-154-1.com/favicon.ico
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: qb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:49 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4579
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KAl3ztXdDwh6R%2BjMMFfUHQqkrlKJVvAEpCS95M%2Bgws12j6%2FMxSc0KHjv453FfKoMfUfJk7aPa%2FpQPXE8bCYEDyvG7jhpUXLSJueKRd%2FC0y1gjD%2BXd9eW2EN%2FmZDtfu2351dk%2F%2Bk7hexN5hdB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cf6a59b52d-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49598
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148347
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3

104.21.33.96

3.3 kB

URL
rqqlj.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
3.3 kB (3302 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rjcw3JBPTngPu%2BVR4kgNiWZpVgjTRA%2B5pH0WIem9eB9ut0hJ2FQnR%2Fl8ENhj49Q2W%2BeKB39A%2FsJMZy0jSv2UJdubTg5PKyyBp7Rdlt%2FI92LxvsLUhlZeb1K4Zw0KGFnEf%2FY%2Fj3C3FOfpHYWiwXI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9c3568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0OSZybXRjPXQmc2h1PWRhMWZlNTk3NjYzYzUyOTQ0ZDk1YTAyZGFlNzQ5YjQzOTJmZWY0YjljNzMwYzZiY2YwZjU3ZWY0OGYwY2JhYTE2MmUzY2I2MGU4ZjZmYThmMWZjYzE5MTg0M2E0M2NmMWNmMzExZDJjOTVjYzNmOTYxMGFjNzM2MWJiYzkxMzUxM2JjZjg5OGNhNGQwM2VlZDBkNDRkMTAxZGNkOWI2MzYyMDM5ZjlkYmI1YTQ0MjliZmJmMmEwNWYyMmQyOWVjZDY2&uuid=&pii=&in=false

172.240.127.234

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0OSZybXRjPXQmc2h1PWRhMWZlNTk3NjYzYzUyOTQ0ZDk1YTAyZGFlNzQ5YjQzOTJmZWY0YjljNzMwYzZiY2YwZjU3ZWY0OGYwY2JhYTE2MmUzY2I2MGU4ZjZmYThmMWZjYzE5MTg0M2E0M2NmMWNmMzExZDJjOTVjYzNmOTYxMGFjNzM2MWJiYzkxMzUxM2JjZjg5OGNhNGQwM2VlZDBkNDRkMTAxZGNkOWI2MzYyMDM5ZjlkYmI1YTQ0MjliZmJmMmEwNWYyMmQyOWVjZDY2&uuid=&pii=&in=false
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0OSZybXRjPXQmc2h1PWRhMWZlNTk3NjYzYzUyOTQ0ZDk1YTAyZGFlNzQ5YjQzOTJmZWY0YjljNzMwYzZiY2YwZjU3ZWY0OGYwY2JhYTE2MmUzY2I2MGU4ZjZmYThmMWZjYzE5MTg0M2E0M2NmMWNmMzExZDJjOTVjYzNmOTYxMGFjNzM2MWJiYzkxMzUxM2JjZjg5OGNhNGQwM2VlZDBkNDRkMTAxZGNkOWI2MzYyMDM5ZjlkYmI1YTQ0MjliZmJmMmEwNWYyMmQyOWVjZDY2&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:50 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:50 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:50 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:50 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:50 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1c652f8aec60c173d49d9a43006571dd
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9xoej-xr46-0-usgm6o-9rib8n-9ribwj-bdeab3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:50 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9k2j6-xr46-0-usgm6o-9rib8n-9ribwj-50333f; expires=Sat, 27-Apr-2024 19:59:50 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3%2C5; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:50 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:50 GMT; path=/; samesite=lax
__cap=4; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xFu5TpBx545kdJLc%2BM8SAB41lSF8VodnHmiYqeHKF4CuG73dlqk2LbzjTiHGPfDwiCpnZwQRbwrIvCtnLXhhL%2BKEvkQHFOdTziCHbntnC59XS%2FPBkJuXtDPiedSSLrUY2okANtWzH2XH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927d6ad8056b7-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png

188.114.96.1

300 B

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4bpFkaMuFb3t4Tj7rXNqtLojvk%2BxZU4s%2B015fDtgmn5TWPvkpLLLU3HDqCi%2FmzvGeMCvBx8mqmxPtnJ42pfhzy1KGaXw3%2F%2BOGqpSh0UPJ9SzGaman%2FaFFkUsI4MyyzX7HnTyeGUa83wWrbgAZ8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88ceb0b31-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95684
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

rqqlj.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png

188.114.96.1

1.2 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4430
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0jGATXsvbPZ6%2FONpTAcq74jPtvdHZ%2F4wVpieCzZjSDls%2FZpGmeD2ABoXwXhQzB%2FCUbFv2K77UPv4wVZuuseBbNT48nB26%2BVB1767vT5OXnXjgw9ZQgGbFZlnvXnsD2kw19ED8v2vacHfWRhPGxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d99e190b31-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/blue-robot/assets/trls.js

188.114.97.1

38 kB

URL
rqqlj.check-tl-ver-154-1.com/blue-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
38 kB (38474 bytes)
Hash
a1172576cb7f22b41247c5571d2f6d9e
8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c
2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3295
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eKvuwOOBIaT62cCT4OJZI2YEcJ2bToxM3%2FNc0nbdij1i2dpvr5qUukfDrMdmEe2u1rVB2NzV2mfiWBVRZNIvNEUS1WPPx1ia7dq7iSvew1NVK4aCahmqBxEVmYrc8w8fZ9IVmOWIV4ouj1tXTxB1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b67c37b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/main.js?v=3

188.114.96.1

10 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/main.js?v=3
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
10 kB (10334 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bx2f%2F16QUDWLPtMTuozPqlGKHGYEkKHYbYlbsJ84PC2KbkuyzcKuyAnpVYXsQ0cMYf%2F8DcG%2B0u0%2BmHV40frlzIwW66uATgsjpKEV2vtKboElRezxDxwWsZC%2B5UgMbahFXSaWXGcvxEQQoYby3QA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88cec0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148349
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted

da.check-tl-ver-94-1.com/space-robot/assets/corner.png

188.114.96.1

300 B

URL
da.check-tl-ver-94-1.com/space-robot/assets/corner.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: da.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UzoF1wyLASx5L0%2FzYso4PlB13IvkC%2BpXmYgiwFdkr6a3Cb5Ok9BvxxEw7QqexYPXzVxqhN1zkG8ICsDptyfXhcTzSwADj8JHRwMmp06omG3SJiA1o%2FZ9vOElBElKNVkekHqg1UZu2Asy2Jc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927dbc85e0b31-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://da.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95684
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

da.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png

188.114.96.1

23 kB

URL
da.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: da.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1765
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rNVsOtk%2BU5qnThn5oCRIPxY6PpLpfuFC4AT0dETGR3mbC5JVVyzmRhO7diTJWKCRX2%2B0kzX1Ay%2F16kLFpl78%2Bz7F8Xak6LOFn8kvuxF7B%2BcMNePX3aN3ca2%2FqVDlwupl3WbETpl3JCmP4c8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927dcb9530b31-OSL
alt-svc: h3=":443"; ma=86400

da.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png

188.114.96.1

1.2 kB

URL
da.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: da.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wcq3Eit6p%2FXsm20nCEHhSEdpp0nplY013L3fg91g24Eb9SeaGmaTIekC%2F3bOyVpN7b%2Fg6WYPd0nrjbv%2FsAcBcSUBYEysFQr4eKfwqwfLIffVufR6rranBI2v%2BrxSNzL6Z9FKWwCD7UrQjeQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927dcb9540b31-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148349
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

db.check-tl-ver-94-1.com/space-robot/assets/corner.png

188.114.96.1

300 B

URL
db.check-tl-ver-94-1.com/space-robot/assets/corner.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: db.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:52 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u52OG7caEjDRH3EL4NV2GV%2B9Zk8h8TIg%2F%2FVkuw0FvTStq3SRPKHiM%2BJdSwK%2FD2pgUJ%2FSzzXP0GS0ccC5qABWX%2FJ0HUbBJLuOMf3nFlRb0m3t3Yz3iQZrR37b4AJbJGP6zhIEtZ7UatforPU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927de1ab40b31-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://db.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95685
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ta.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2

188.114.97.1

16 kB

URL
ta.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
16 kB (16071 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: ta.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5726
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dz5q1u2Nxja3rAZngMZ2ws8NZNazrlcd5hbCxQ7FpYB5JWu%2FaPz8u3lfDTwL9G6H5l0t4EhGmRr28dbT%2Fz48qOotGmHmp83cJFsDJiabUN4yumr5uiDWQfY2%2FoHcd0ZFJqIiBHmMUPrTOUiF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b9881bb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2

188.114.97.1

25 kB

URL
rqqlj.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
25 kB (25416 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3939
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2F5IFTnE9RDf5K2%2Boflg%2BNIF7tcYgnz9PXl61PfmT13WFEVFhfm5hInazP%2BDPhYedQgyt%2Fy15gZZJd9qpgBceEXDufgILOPkmqSPT27ed7g4s%2Fy%2FTRYKWVYYgXYqu8JZpaM%2FxNmRI9Ncbfdu9miM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b68c43b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49601
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148350
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

172.240.127.234

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (412)
Size
1.3 kB (1345 bytes)
Hash
a2c096fe31edef4c112691c5d69bb336
8e47603f1f825ccfd987f26582e365e8f360f129
45a1645dd1c23eb232f0ea53850a0fac5fb70f4cdd3f4bcd482c9d9a62dc227b

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:52 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 700c8d5707bf1f7bfe4ccede11f2ff08
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1MiZybXRjPXQmc2h1PWZiMTAzN2Q1OTA0NDExY2IzMmE4NWUyOGMzMTQyNzQ2NzNhMDRjOTk1ZTc3ZTcyZmJhM2RjZTk0ZWQxZDg1NDVmZTBlYTc5ZWI3MzUxZDUxMjYzYzJiYmMyYmY5OGJlYzljYWZkZjljNmUyMTYzYTQxY2NkYzcyMzIwOGNiYTJiMzBjNzZiNDNhYWMzZjYzMTAyZTM4OTdiMTc4NGM0ZTc0NjJkOWY5YjdjMjZhMjBhODI4M2E5ZmFkMTVkMmY2MDQy&uuid=&pii=&in=false

172.240.127.234

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1MiZybXRjPXQmc2h1PWZiMTAzN2Q1OTA0NDExY2IzMmE4NWUyOGMzMTQyNzQ2NzNhMDRjOTk1ZTc3ZTcyZmJhM2RjZTk0ZWQxZDg1NDVmZTBlYTc5ZWI3MzUxZDUxMjYzYzJiYmMyYmY5OGJlYzljYWZkZjljNmUyMTYzYTQxY2NkYzcyMzIwOGNiYTJiMzBjNzZiNDNhYWMzZjYzMTAyZTM4OTdiMTc4NGM0ZTc0NjJkOWY5YjdjMjZhMjBhODI4M2E5ZmFkMTVkMmY2MDQy&uuid=&pii=&in=false
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1MiZybXRjPXQmc2h1PWZiMTAzN2Q1OTA0NDExY2IzMmE4NWUyOGMzMTQyNzQ2NzNhMDRjOTk1ZTc3ZTcyZmJhM2RjZTk0ZWQxZDg1NDVmZTBlYTc5ZWI3MzUxZDUxMjYzYzJiYmMyYmY5OGJlYzljYWZkZjljNmUyMTYzYTQxY2NkYzcyMzIwOGNiYTJiMzBjNzZiNDNhYWMzZjYzMTAyZTM4OTdiMTc4NGM0ZTc0NjJkOWY5YjdjMjZhMjBhODI4M2E5ZmFkMTVkMmY2MDQy&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:53 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:53 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:53 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:53 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: acda6368f90094690dfde9031b9e7567
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9k2j6-xr46-0-usgm6o-9rib8n-9ribwj-50333f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:53 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh97sy9-xr46-0-usgm6o-9rib8n-9ribwj-669aa3; expires=Sat, 27-Apr-2024 19:59:53 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:53 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:53 GMT; path=/; samesite=lax
__cap=5; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lT3vKXCKv5TgnYDlYuHPuB2nOiInc7HKU99DPWmaguzyBgpAU9ss1sZgw%2BqVhknV5CqVT7VuU%2FBK9%2B5o98ogmpPMrxS8RJlL3%2BNOqjJuPxJ8AYhrTn9GmlxSTclF9JuiUvCZJ8Eje349"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927e63bd256b7-OSL
alt-svc: h3=":443"; ma=86400

db.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2

188.114.96.1

2.3 kB

URL
db.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
2.3 kB (2274 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: db.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:52 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEqeV2d2lxw7n5Yzd8mTWBgF%2BmmFPyeFmpRS0DIAA1Sjss8oRAPurDXMONC5bjgD2k6DjftrWdfyeqyiFij5EcDrAvcnKpzB3NFJY2R%2BQq70msxFd2x4rBkl18zhN7ILMMSpx221iokHqKM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927de1abb0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/1.png

188.114.96.1

11 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/1.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4765
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=se5KZagunnIRYXdz03Azn2EntvoHsQKi3HhcDi3Typn%2FlmowKmielWaGMudAVaP82hDMzPM7YXb%2FvNvyHCYndY1PfQ6TiQdgBE9Nhj1g%2FolvqaTRZYN%2FB37WjWIFN%2B%2FNArAw8mo1Wy%2BnexZLL9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e78dd80b31-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/image.png

188.114.96.1

11 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/image.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 260, 8-bit colormap, non-interlaced
Size
11 kB (11043 bytes)
Hash
ca1f4de0ad1d4fad72d299a6411e6959
c9f6d409f09264a34ee8bac4265233c56c280d1a
f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f

HTTP Headers

GET /eyes-robot/assets/image.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4765
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Dxrw8z0q83RSctal6x7aGbuAZMpJaVAsOzYAfn%2B2bkgtvq2tGCrTgNE9slnmnubrnB48cK0M6cSgc7RrZX1GsJbaYQq5tzpAEPvn8gEjTRZHhg7uCwqAfhKFwiG9gU9z4TDsyUwL1cvVq%2B7O7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e7ee7c0b31-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/favicon.ico

188.114.96.1

0 B

URL
rqqlj.check-tl-ver-94-1.com/favicon.ico
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:53 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5858
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ud65Ad%2FRJCqGdTPD8dq%2BQ%2Bsw9x2VhWqyRFeEfNG9ksAecnqRhNlVXqh5B8XmEkftGat9%2BISq9mLaC%2FWUC17B2l85K9BvQTPPTAIPUUrZxPKugodka1oVewIsIqe71onwAzHUXVJ1Dzt1jhdKtv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e84f260b31-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49602
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148351
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2

188.114.96.1

12 kB

URL
rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
12 kB (11804 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1867
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FhduDAL7JBe4vn89ohElBRb0kkFzPAhE%2B4Yq%2B%2BGBXb%2BuRM%2BCAuvDJ0p5ygR2Rd7cXTWjyJIZaLYlD9IcM%2BDJ8P5WMsNwTCf024Hrrh9c5138q0IcU%2Fr8E1lBUbGinJxmnmH95WlrCJQcOEt2H0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e78de00b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-1.com/eyes-robot/assets/2.png

172.67.147.142

1.1 kB

URL
qa.check-tl-ver-94-1.com/eyes-robot/assets/2.png
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7j9KkDUf4DFAPrqieBZxKDRaaam%2BUPOeeiTvcFFfKqVLC%2BATDT89MP3rmTQvvxWxM%2BAi5X5GNiawokbMnmdglGacS97HQQ2EprB3KoftTWWOGDIwRrrzdJRXt6nhhkK5VIxuZa1aVa0TquQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e9e96c569c-OSL
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-1.com/eyes-robot/assets/style.css

172.67.147.142

12 kB

URL
qa.check-tl-ver-94-1.com/eyes-robot/assets/style.css
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
12 kB (11976 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8HXAjudIxx16Y5FVoz2eGlxHiHEj8TMEAv%2BocNvP4UpziUPl7wDM2zNThCjlvVSmEQiqL2UYlUkPFRfXO5VNcSvxCmus1cgRUVKjW5rSfgwZyBNo7vRbpfvJen%2F2cwp1RuZH8fT1B0%2Flhyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e9e961569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-1.com/favicon.ico

172.67.147.142

0 B

URL
qa.check-tl-ver-94-1.com/favicon.ico
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:54 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zaok4wJU4meRu92Pt4NUSDnG0Hvi%2FI2ZC9Bc1khL0TO9w3W0jztpOhS9woecB0ZhnMjqgPdBUT3JynMsMVVpJyYb8Lg9IY4FYSKkG6EMX4sgXZz4cGE7yv0yAVYJZC8cBTHuTnba55m7y4Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927eabad4569c-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=79c7bpmqnh9xoejd46&nrid=31a57132a2fe19f61f7228476439039c&reason=tb_exit&attempt=3

188.114.97.1

9.7 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=79c7bpmqnh9xoejd46&nrid=31a57132a2fe19f61f7228476439039c&reason=tb_exit&attempt=3
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
9.7 kB (9706 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=79c7bpmqnh9xoejd46&nrid=31a57132a2fe19f61f7228476439039c&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bhX%2BbizXpmCxbOmGqNRA%2FQycB3C7jaDRUz0HFBhoiEJ891TLjpRJcLGlQy7HFnilwajjb8FL87cFP7WlB15DVH9Zjk5ScCmV1bWDHXcOE2L9esy2zMkrVfp%2BQeRVFApqGtuHsYsAh7dMPFgz1ZukbdwOEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927d05bb0b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148352
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

qb.check-tl-ver-94-1.com/eyes-robot/assets/1.png

172.67.147.142

11 kB

URL
qb.check-tl-ver-94-1.com/eyes-robot/assets/1.png
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XeFn9VevgTHzcGjJxiNkpJV3K%2B0fBlvU%2B73OJVsV5RBcxqSefNn9AoxF2RQzDoKZ73VlmnI2AQKxIfI8gNA9KD57N%2Bs%2Fd94Q%2FkGH7vFsS1xBSRZF4lW9%2B%2Btdlemo1bi4Zcb7tDo%2FTaYyy9E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ec7df3569c-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-1.com/eyes-robot/assets/2.png

172.67.147.142

1.1 kB

URL
qb.check-tl-ver-94-1.com/eyes-robot/assets/2.png
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dfz4AyRLnZVOe6fbwXLFE7F2F7QE84xYXxHKMolXYROreQxLg89P6%2BO%2BaqQh6sNSQ2pHVstZ5h9u4Ixh8BEhx8AbHaA2I38sq8z7eS5KYvmVtsnwSnJo6dLJUOdnOYuCx2U%2F8wngzTeG%2Fss%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ec7e02569c-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893

172.67.147.142

13 kB

URL
qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
13 kB (13220 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=btMZXuZEHPqPJ9nYjDp974agB3r0S4A%2B6vmcdRB0Y%2FFGmn2oxXKMfhvwOz%2Fbmv2uRIHZgDRa1AhCblUpBChM4ivfPilQEGwIbnuyycuyg9WDvvGft8JVbGNXOCX4BUZ5Mvu9yA2uzMCTzeg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927ebfcfd569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-1.com/favicon.ico

172.67.147.142

0 B

URL
qb.check-tl-ver-94-1.com/favicon.ico
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:54 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kmpocO%2FuA0cF%2BuQM8QHgwJy83Uwu%2Ba7XmDT%2B856IKBW1CxbPgpuMX7Hp4rWO2Qkp2u83OIToV2vmou7rv9KBBB3rMcFk4VCrMmPruuNc5LMcJIhE4p%2FBxPLRhzQFIHjdM%2FTwyCKMfTf%2BUGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ed9f8a569c-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/style.css?v=4

188.114.96.1

28 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/style.css?v=4
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6532), with CRLF line terminators
Size
28 kB (27811 bytes)
Hash
8335155a7c4004d8296b7727a24273c4
387b7723ba35057b631809e1437c64cdd89f13bb
0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e

HTTP Headers

GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JBJeXtgaEdCKY7nInH0oc1HYkM5Y2JwBddReqMftcKYiJrP%2BcTryTA%2FZOCDs%2B7wGI6Ta1cH3ANcq1waP8QKc%2B4YIInndUEdd80D8GpBregRI6Z0XiToGYfWMc%2Ba8Az7XNnuzwLfcnEWfWltOU1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88ce50b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148352
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.96.1

1.6 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
1.6 kB (1568 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Cookie: __psu=0baf6f2c-55cb-4484-aae2-65d1f2b4b6b1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FYebvte%2Bzn3qw%2FaV%2FI6TfTElVOWMPKrkpZxQQnc9VjD2DcTJDHJedjRBvPelzjBAG9cTLFGcB7rdnM%2Fv20GyYL1QugmfPgcnGY5zjnN0vksfSsxvCT2XSDRnQCrpmYihJZtIMELe3MNBk6mVJ9kI%2BwCz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d9ae390b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1NCZybXRjPXQmc2h1PWZmOGIzZTM1ZGIxZTZkZDRmMzAxMDg0NDQxNWNmNTkzMTUzYTg5ZWM0YjgxOGFlY2M5MDgyM2E1MmQ2YmI0MjJiMzliMWIwNzFjZmE5ZTAwZTY3YTAyNzQzOGY0YTJmMGExMzlkZWIxOWVmZjFiYTA1NzVjMTk3MWMxZDY1ZDY0ZDBkY2IwMmI4Mjk4YTdiNGM5NzJiZTBkMDcyZjA5ODYwYjhjOWRmZmY5MTM0Y2FiMDgxMzVhZTFkNGQ1&uuid=&pii=&in=false

172.240.127.234

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1NCZybXRjPXQmc2h1PWZmOGIzZTM1ZGIxZTZkZDRmMzAxMDg0NDQxNWNmNTkzMTUzYTg5ZWM0YjgxOGFlY2M5MDgyM2E1MmQ2YmI0MjJiMzliMWIwNzFjZmE5ZTAwZTY3YTAyNzQzOGY0YTJmMGExMzlkZWIxOWVmZjFiYTA1NzVjMTk3MWMxZDY1ZDY0ZDBkY2IwMmI4Mjk4YTdiNGM5NzJiZTBkMDcyZjA5ODYwYjhjOWRmZmY5MTM0Y2FiMDgxMzVhZTFkNGQ1&uuid=&pii=&in=false
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1NCZybXRjPXQmc2h1PWZmOGIzZTM1ZGIxZTZkZDRmMzAxMDg0NDQxNWNmNTkzMTUzYTg5ZWM0YjgxOGFlY2M5MDgyM2E1MmQ2YmI0MjJiMzliMWIwNzFjZmE5ZTAwZTY3YTAyNzQzOGY0YTJmMGExMzlkZWIxOWVmZjFiYTA1NzVjMTk3MWMxZDY1ZDY0ZDBkY2IwMmI4Mjk4YTdiNGM5NzJiZTBkMDcyZjA5ODYwYjhjOWRmZmY5MTM0Y2FiMDgxMzVhZTFkNGQ1&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:55 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:55 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:55 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:55 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:55 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 86945cf72d373d13f1befcc7a1149c55
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh97sy9-xr46-0-usgm6o-9rib8n-9ribwj-669aa3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:55 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh97s15-xr46-0-usgm6o-9rib8n-9ribwj-820f62; expires=Sat, 27-Apr-2024 19:59:55 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C5; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:55 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:55 GMT; path=/; samesite=lax
__cap=6; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nl9oTgzWsZusppWpeniCaezQmave1JH1az%2Ff18%2F%2FiIoTFQtbL04%2Fgb%2BXouCshqb%2F7s1xUir2THiiAbjVRhXZu5Fw5XaDYn6%2BDh0C1QQyK0vAg1Son1B7OXKnMhoaRnww5aRElTsKGNf1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f4692556b7-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/1.png

104.21.33.96

11 kB

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/1.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 580
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=89cEVepEZWNUSepl3n6R%2FEUY7ju56pNzTv5M8RqikhCRYTlDohwaI7RpywAtMOJfAJMEpoS857wjHv8c4mXtw%2Btycj0I7solBWXaTgVIwOCKeQxVUOeGuMOhSu%2BBSpOVRauEOK%2F7pSGWfgeZpgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f5eec4568e-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/2.png

104.21.33.96

1.1 kB

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/2.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 580
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NmH2Y8DV1iPbQ6LvQOOFkNtb%2B5ou1IE5plI7juPpU6g9oRdvwWGekPN8R7%2BkeNNdJ5vlckL%2Fq9iOe14h0%2B%2F0ujMruKl5tdbhT90R%2BaeRlUtVrcbavfGZavXzLUIL8Nezy7UkFl2ODzkBM1fgAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f5eec8568e-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2

172.67.147.142

14 kB

URL
qb.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
14 kB (13989 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3330
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFLJKBfuwchBDZ7dBqlZtjoL2%2Fl%2FTBzNL9VxgbOZ14n%2FbIorsWmFMbFqXPbroFaSxLt1MPAQdBKaH5epEsz41Cz%2Bm6Fa3rLVDPsPCgo4Eshw5mOeoHS%2FAWbdLDC7IT4OQ%2BwsP6NBjzXrTi8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ec7e03569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/favicon.ico

104.21.33.96

0 B

URL
rqqlj.check-tl-ver-94-2.com/favicon.ico
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:55 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4591
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AMw%2FiLYttTy5PIiUiDEj8IszKGRGJrYMoro9Vo3iWjE3pHAjXHk9pTxVhCsADMv0zefgWDqOuumqfgN10ynL%2BwHqhofJCnlAa6QAcp%2FvBr2sAe4eMmAniQG%2B5t6KD8Ft3c6HnXVk%2FdmrcnBk2fs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f6a85c568e-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49605
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148354
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.96.1

11 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
11 kB (10819 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/
Cookie: __psu=0baf6f2c-55cb-4484-aae2-65d1f2b4b6b1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XPaiKZDggJ9QkKLuE2RPWCWKrE%2B5OJEPQq7vthbjruILV1i4wPZLuePIxd5kWM6vCaZG4tIsluAwQ5pfK7DhRmNpIWSKa%2B%2BuA%2FFqYNaQX0Hl%2Fw2WhGvgnoIeNuQ1%2B2ixo3wtmTwAKM6hr3fyf%2By3b%2Baq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ed3cd90b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

wa.check-tl-ver-94-2.com/eyes-robot/assets/2.png

104.21.33.96

1.1 kB

URL
wa.check-tl-ver-94-2.com/eyes-robot/assets/2.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1935
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YFFCtOErA6mvj2DOh5JN8whKD04dFg2cVcPrPwA%2FiMNrpisIdxr5kED8r29T7T381f1pRhuX5AOYw%2FSNdWlg0egRN7P9SrqijcVsWc57Ls9nqXiahNC9kNkUiOf5sXXV6ZG8Y9j1Z4JVMJ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f82aaf568e-OSL
alt-svc: h3=":443"; ma=86400

wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2

104.21.33.96

12 kB

URL
wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
12 kB (12256 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1917
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sO6B%2B4j0rdPgDcRcmT%2FymqiNUl0TrP%2B6tA%2BqDq%2BPzri5DSEW8wQJdLoRnlf9qpvFSAxNxctXXWrlDc1anVj3q6vNc9UXRndQmcOthn%2BH0%2Bgqn5Ai9OLcrZdiBT%2FbBTn2eZ64znb%2BQ7bu2Jw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffcf568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895

104.21.33.96

16 kB

URL
wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
16 kB (15862 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UkT63IVStkJ1C2oG8feagJll%2BvPhXcIs%2BRd%2FtwLK4If0yrxozuxYPqH0YFKqHwtsy3NYxsrxVcxB%2F%2Bm4Sip%2FNRNPYZSFv2tqqZyyaIw7ATn%2FWoh6uK87HYDvoZs9zt3wLkN%2BiUfhBiM48Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f7aa00568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49605
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148354
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

wa.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2

104.21.33.96

12 kB

URL
wa.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
12 kB (11804 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CWZeXwli3CdjOhlRRq9h5jXsd8UhDhC8ScTxNSZlWEN%2BNksk%2BWisg92nOoTZeXYMH%2B%2Bl%2FtoLP71k6zjaI5mGQML6ps%2B53yHC45TIdxdU%2BuGjo%2FR4zk1CqenCc%2B1gF4sBerhT%2B%2F%2FPb4UOk4Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f83abe568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/trls.js

188.114.96.1

18 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
18 kB (17693 bytes)
Hash
0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b

HTTP Headers

GET /eyes-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2FtBkxIPrra2QQ2mjFWzMZtAsNsvZNWSdRSskS%2B9o4CpC6Usmi0IrBughiKyX91wWq5NflN95I9X8thLL8lzVQJ0GADaHjMoC7osdegDRSqE9F3fOqoSksmGXHrvBLMY2BaB%2BG1fuqiliErc6ak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e78dd10b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

wa.check-tl-ver-94-2.com/eyes-robot/assets/style.css

104.21.33.96

13 kB

URL
wa.check-tl-ver-94-2.com/eyes-robot/assets/style.css
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
13 kB (12909 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1935
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wsrVmrlOzwVNWGOil%2Fc2XXS8cGMh4G02M54o6UAA750WM%2F1cvYUn0nz0IbcO2dIAUDIyyv8kiNv4zjSifmroLuoYQ7bMohHP6YEIgrVbzXLVTZBILWsVwSVkOfoFXE8bin4AyPcw7fh7Fyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f82aa5568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

wb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895

104.21.33.96

16 kB

URL
wb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
16 kB (15863 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5fpx1BXejzM4DH4SxDY%2FUlWkggC9giJPUeOSU6z9X%2BIMkK83qJ27BySOogeATEm6KzIb9ZefEz99essG%2B9JOmofKny%2F0kDrpXb8erqxUiCF6kANSrBaBsVbHn78NdTLE%2FnlCQm8JKOoTdY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f99ce2568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49605
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148354
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

172.240.127.234

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (412)
Size
1.3 kB (1337 bytes)
Hash
0d8fe8528b997e4cd9d2ee03572036e7
c0da3cc721dc3aedd0435b29574b25e2038a159a
51addf648f007acbea6782cca16775cba394e47be0d805a791874856dd9a0fa0

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:56 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:56 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7c7666352532df19e66c05bffc5ef13e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895

104.21.33.96

444 B

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
444 B (444 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JoEwmT3Z%2BqM0EyuRa%2BG%2B%2FgH2lsIFWcqcdB6qaMBUkvwANR1CS5s%2BDw%2FOlDjf1%2BBRI%2BzD%2Bnr1TRKh1GdVPIbwpkCRm3OpX0U2YVCjtDRKFWmwahlPqQ2UkSwIyCl8pkYHIVDQbY2TuiPGwyUJ4C4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f4bd24568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391397129380a075787fee172579838a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391397129380a075787fee172579838a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391397129380a075787fee172579838a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh97s15-xr46-0-usgm6o-9rib8n-9ribwj-820f62
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:57 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9qeb7-xr46-0-usgm6o-9rib8n-9ribwj-2ff061; expires=Sat, 27-Apr-2024 19:59:57 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:57 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:57 GMT; path=/; samesite=lax
__cap=7; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2BAB6T%2F86n1hR2rwNIrFYFt32EGi229jbAFheNVD55sNARLaCkvv8JeWbsbVB2e9pXhsTa6JKJ4s44dW02Ur348CXnf8%2BcTP%2F%2F15bgy8SgiQnTQWeJVUfJFIP%2BkgfVgMJBcKkEGpPBtp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928022d4356b7-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png

188.114.97.1

1.1 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:57 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5770
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YCmlLH2dj1tPeP26%2F8LWEYLSXIzA0amZxTo9MuTxSECHtTdEEsb%2BXFnVvCVEeLY15TDk7GRZOsu2QPIfOfvu8TtGGx4kETAjmh5tDRIRHjoxXvg9WeQbash0GHi%2BXqJOGxQyR%2BnFAAdjcOLn2iI0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9280369bcb52d-OSL
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2

172.67.147.142

12 kB

URL
qa.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
12 kB (11804 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3348
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7OaE1bsI0QXTGEJb%2BAYipfVScPet64%2BWeB0tCA6UwFvxKIfOBZr2tnvRX1YlImftW0kOzxvUhjA0SudDwfyhjNA%2FRu2I4kQ5tokzPDhQdNGu6iFog9H2aAp5dB90IPwPpi4xD%2F%2FlbkulJfY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e9e974569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png

188.114.97.1

11 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 260, 8-bit colormap, non-interlaced
Size
11 kB (11043 bytes)
Hash
ca1f4de0ad1d4fad72d299a6411e6959
c9f6d409f09264a34ee8bac4265233c56c280d1a
f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f

HTTP Headers

GET /eyes-robot/assets/image.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5211
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RIzDbCNFw3ABeXI%2FFiQiCIH444bELsphuYn7xdgxr6qiSocJz2fmM09AbsCMSIDut4tStveqGK6lHmuBuq6DY%2FiDFEElsojlKb5m0a6c2nq9WQeFMpr5NdXikeH0waDs4cv6KqH7P29iOodPSM2%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92803ca17b52d-OSL
alt-svc: h3=":443"; ma=86400

wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2

104.21.33.96

1.2 kB

URL
wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
1.2 kB (1213 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1930
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8xZe4mZXTYf0rKdIPdzulv9bgrJxd44NSfGU3hDn8qghXJox6zmXn1hrdMxhkzNrg0STi%2B2UiHPanBlxVQXPp86AoE1vm2k8rmiAA0C5GE8KsW2ErT6BJsGEggLXhFvhPeXkMdJcssHgQrc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927fa4e2e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

9.8 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.8 kB (9764 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q2mEKJgSSfSqhoxGcI3S0I7ccEficEA%2F3Yypl0Wo9iIZAJuq3TuoUgQmv%2BKKfUH2tX8m1y1%2FqcskmNSoJj%2BlqXuaTT%2Fmtge%2BMadKe1D4YQkkrmGQGDHeYFlFeP%2B43p%2BiOH9893dpVHGlTwG1fc4a52115Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cd1f6ab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148356
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css

188.114.97.1

25 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
25 kB (25229 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:57 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rLFsRAIy4g77uPxltdkdo1U6TKtVjd856FYbXidV3ABp9HdENNoKMxOTGUx5lrRWjY72apfvUJ3lAUIz8vNF%2B%2Be2Xe%2BYdR%2BLhAjGlqONsjv%2F44jYusp0Xa8heIkUyn0mQToAJT1Pve5JNzXk9KrE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9280359b3b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fa.check-tl-ver-154-1.com/eyes-robot/assets/2.png

188.114.97.1

1.1 kB

URL
fa.check-tl-ver-154-1.com/eyes-robot/assets/2.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: fa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3287
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AE%2FVlUGOCcekhxxfWRJqYrWuOdMKzka%2FSfMVRm%2FSP4rlYSPtyaRrJ5DBKKF3zc4L2gg%2FgL%2FlUKSIAV27vRRbnghHiqBppNBrthwW0sM1Vz7dRuXPCECHfRoEL%2FWs8%2FirE1ypvDY5KOgSvWxd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928061c6eb52d-OSL
alt-svc: h3=":443"; ma=86400

fa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897

188.114.97.1

12 kB

URL
fa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
12 kB (12420 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 HTTP/1.1
Host: fa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d4w%2B2Yeoy0Csp6%2BNBIYzNA4mJ0qM0v2yCY%2Fq%2FcFa1UBY5amokkFAF3CttLZF%2FfhV%2FRNZ6gJU09f5bufmZTjxJPOJLQI3YJjVXpxMkuYIOzH%2Fzdv%2F9pJZMnUhL46vV94%2FRG8bgTGvfP7bqjfy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928056bccb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/style.css

104.21.33.96

15 kB

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/style.css
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
15 kB (14640 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 580
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Emf0FIYGo4a1K8DLaSfURpdrJkquXPgT8P%2Ba%2FUI8M3h6JTNZVDTkncMlV%2BRBy0HPF0Mdkds8J7Wn%2BxKFttTcWo3E67MK%2BBosobHXbQl14kmtjjkG23BRntVaD6FvQtXpwfw%2FnoD8FA9su6eLE8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f5eebf568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

9.5 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cZeuyPYQWFL3GdHxebTr%2BFcYlQzEA9OyIP9i86%2BCOnEaG2kl%2FDsq1d3uWCI72KKy83zOvK9jdeqdkW9PwexnUbZhQ%2FpYuHdpBTeDsBlX222IVLNe7hxajTPGLhKtvpANpo1qZy4qF8gTl4PAZOOR9DYGag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92806dd41b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148356
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885

188.114.97.1

19 kB

URL
tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
19 kB (19234 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 HTTP/1.1
Host: tb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9M15D95pJa0WkeTWoJ01d%2B7MfPS9wTvjcKaSD2O26FpkZ9%2FDkhAtgpqfOwey0oVGkMmFZyyiRd%2F5tsmXjlGqfUbRqkb4NGAiuW3SMMkIPXfS2%2BA8oyG0G5372LFqVTuaLSmeKNr7ursWHgXw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927bb7a58b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890

188.114.96.1

4.6 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
4.6 kB (4587 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:59:50 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gh4PzqvLaBie14apdWQHn85CUGPK4C3s1RgrkhqrC%2Fhtt5jlFsq3PK%2FkDtwDlMvmtLcDHONvHwMe41ilR3VQN%2F4GlM5MmuY1TgmNj%2F37ghUBgt41lVP23OOYJoiuqY%2B6BnzgI%2Bf7Z8Gx3kHX4z0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927d75b12b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897

188.114.97.1

13 kB

URL
fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
13 kB (13220 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 HTTP/1.1
Host: fb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fij69eSJ%2FtLmP5ZYO5noHVVafoZE%2BG6hi3iHvi%2Bn5Mp4ROo9HdT%2F9XXfZ1pNXiNvuPGrra%2Bv4fz0YaspZOusEWINSZjGvUH2iqbap1SWJsGzyXoFxJb1%2B9qGIEzGtFWbOdkBlNT%2B6KQHujb%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a92807ee64b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fb.check-tl-ver-154-1.com/favicon.ico

188.114.97.1

0 B

URL
fb.check-tl-ver-154-1.com/favicon.ico
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:58 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6990
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FJeQ2%2BgGDiNEhKvoIqtvQ8oHEtZ2lMZEvou27mVsOVUZMaYnCpe6IIQXtYzws26gvtirLtUbSsXk6MI9GY3efbiEfzusRbv43o2co%2FGjYvpzDO6tvVOddqr00TsvXywGo4kHrR4uDesVHhb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928095854b52d-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49608
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fb.check-tl-ver-154-1.com/eyes-robot/assets/style.css

188.114.97.1

25 kB

URL
fb.check-tl-ver-154-1.com/eyes-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
25 kB (24573 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: fb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tlQ4K9VUHEWAk9pgxeOKjEwX%2BL%2Fs2tBGJpTjEQDP62THLLctR8%2Bgicm1hdUxzfLZYkp5nqAXeg2nugWYi2YO%2FFjfyOH9TRvwGrUDwKfY3UrV428F707LUcNs9MEYPRMnIRjvutmxkXVguKOe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928087f33b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

172.240.127.234

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (407)
Size
1.3 kB (1342 bytes)
Hash
3be0386bc1cc1ce3325390fc6c869694
a677326172b533a5e193f438179927cfaf262d16
d92f62dc8eb93da1a628d601469a1ebddecff9d0fc92e58cdb0a7328c968d196

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:59 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aade0349246f28cc90d13824c521f1e1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1OSZybXRjPXQmc2h1PTE2MTkxNzA5NzZkZTM4ODNiMTE5MjA4NGUxZDc3ZTI5ZmM3MDJhNzU5ZjM5M2EzNmFhMjBkZWE0NGRmY2IxOTg3N2Y3YmNjNjFiNGZkOGM2YzU0NWMxYzI1ZTNiN2I0YjYzNTA2YTk4MTk2OTRlNDgxNzQxMzEzMmZkZWU0MWNkNWUyZTg3OGVjNmVkMmFiYWVkMTk3ZjBmMTU4MGUyMmRjZDExMDJhNTJjNzIxODgyMThkNWE1M2NmZDdhZTc&uuid=&pii=&in=false

172.240.127.234

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1OSZybXRjPXQmc2h1PTE2MTkxNzA5NzZkZTM4ODNiMTE5MjA4NGUxZDc3ZTI5ZmM3MDJhNzU5ZjM5M2EzNmFhMjBkZWE0NGRmY2IxOTg3N2Y3YmNjNjFiNGZkOGM2YzU0NWMxYzI1ZTNiN2I0YjYzNTA2YTk4MTk2OTRlNDgxNzQxMzEzMmZkZWU0MWNkNWUyZTg3OGVjNmVkMmFiYWVkMTk3ZjBmMTU4MGUyMmRjZDExMDJhNTJjNzIxODgyMThkNWE1M2NmZDdhZTc&uuid=&pii=&in=false
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1OSZybXRjPXQmc2h1PTE2MTkxNzA5NzZkZTM4ODNiMTE5MjA4NGUxZDc3ZTI5ZmM3MDJhNzU5ZjM5M2EzNmFhMjBkZWE0NGRmY2IxOTg3N2Y3YmNjNjFiNGZkOGM2YzU0NWMxYzI1ZTNiN2I0YjYzNTA2YTk4MTk2OTRlNDgxNzQxMzEzMmZkZWU0MWNkNWUyZTg3OGVjNmVkMmFiYWVkMTk3ZjBmMTU4MGUyMmRjZDExMDJhNTJjNzIxODgyMThkNWE1M2NmZDdhZTc&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiIiLCJhciI6W119fQ.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:59 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:59 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:59 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:59 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 24593b215d51be1dda7e58d4038bfc6a
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9qeb7-xr46-0-usgm6o-9rib8n-9ribwj-2ff061
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 20:00:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 20:00:00 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh95m17-xr46-0-usgm6o-9rib8n-9ribwj-1400fd; expires=Sat, 27-Apr-2024 20:00:00 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=70737pmqnh95m179ab&sub_id=17136824
Strict-Transport-Security: max-age=31536000

qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893

172.67.147.142

16 kB

URL
qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
IP
172.67.147.142:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
16 kB (15863 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=26SQqkq3T8vsvYVeu%2F1lhqCmSSIEYGFgcu0tMhLI1tmSh%2Bf%2FgKq2JewFTtE3cCADdikpZ9k9CglvOl99hOb9tqcXngubuqOvs%2F4Z6Gd0f3X9qbMeWEWdjT9GR7WNrtqllbH%2FmrjEYTZQpYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927e959135693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=a85509f536b5469dab416c5c310e42e0

104.21.33.96

14 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=a85509f536b5469dab416c5c310e42e0
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators
Size
14 kB (14213 bytes)
Hash
088ad5ee23c0e24b31e3adf71c9b9e74
d0ab1fc3e7028cda884558af711fcf53782545d9
2e1df96637d12fadf02c7409f92dcd171fcc794393f852c789e6203de8043ec9

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=a85509f536b5469dab416c5c310e42e0 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QqeJnIe9KQMWfjAf0u35iIAf4zm5kKyrifO4rS0wr7Ihc3RgrOl5kx1xpZ1bx01CQ%2B%2BvSNvN6tu1nrJTrXJwsAL%2FyBDmTIV5qo%2B%2FRYf2%2Bb8%2BfRfp%2Flrj9yEECO4D5mLXKdypHFQcsN4fehIwhDesYs88"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f65fb0568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js

104.21.33.96

20 kB

URL
rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
20 kB (20517 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5056
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oasCoxd%2FbiceghtAMRQJsXgEUIBzD1nRfauWmhN1eERXUqZ3ZGxYYx3bkXQzBuN6fDgIALDAp2BVcTX0bk%2BPRMRbW8qPYxLIWqo%2F5Z7Gi%2BlTCJV1%2Fiw%2BKuclLJCbL7lYUUaB1K2Km6Hg2WpFT%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92812194f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png

104.21.33.96

1.2 kB

URL
rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4436
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TNZ6hSb0%2FwliBteUKQV3WWRVnrsJpkFDjR2sxdDtAsj5oHNCEXyOblRqmuhxQmif5uXzas137wyfnSUGJqVyxGr574WdZrB6AnA6q8vtB5XDZVlYp6J1Za2k0FtdHVjDSbIt9fPzAluLhs13fFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928130b0a568e-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263

104.21.33.96

37 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33136), with no line terminators
Size
37 kB (36871 bytes)
Hash
0a164a76dad16e439ea533cd697d70a6
9cf38a0374a09b7e760e532173c3fe65fc6d7315
ff67ffc729f92573de1cae3e9897f4b0cb4362db36837a33c852852fc96c7458

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VAiEvK5n%2BsJ7xCnMYRuR1VKisdjC1QMTG5Jvcpw8HzOK7%2Bld90lBSSO5GEO3n4X0INUG8g1DubMR2QAY6JKSGVhk4XRtcQolv%2FL9kLMJ9mwsnxYr7zW9O14233ga7qFChY6eb6a51OEvgxzW%2FOpPkqKz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92812aa52568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49609
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148358
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

104.21.33.96

528 B

URL
cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
528 B (528 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SgpsvALRyzg%2BWMdQM7g4UOFtO6mfiAU78xikHqeYTm0THS67T3lf2ruw6TbjYrptNiWJWzsiaknjXbtoidQiMjqhltVJRNXYpN7p33xKDfZd3%2BIJVhyL2gNJTjAf3tnDY5l4ZF0gRfQZgaHIiVhhI4YJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f8ebbd568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

104.21.33.96

17 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
17 kB (16993 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v8CuvYL6hl%2Bwtp8rAIss%2BvmQhdBD%2Fvbc7qBHuWN%2BQOoO%2B8SVCOmFmgzPbdw%2FXtAfa8DGMJ9XCCBIYxewpNIbDP89RsE5PgPCkjsHYDA27my2zn4nu078szWwxKQDusaxkl%2BXD9Al%2BopPliBaTHQUIBgR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927faff2d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ta.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3

104.21.33.96

24 kB

URL
ta.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
24 kB (24203 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5944
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UG4g%2F6LFf0q%2FbZSW67vh1iFxd1awQ5K8nPgJrqEs0uq54Nauam%2FEWnZxOue7sBsAQGVyhzy7XgkWIA8m4GRYauPupe0MYWjf1AxeKwTPDp4YqAr8IzT671PQCqzX4o7y54qTSDw0LcoYmks%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928149dc1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ta.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png

104.21.33.96

1.2 kB

URL
ta.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlmrUjcjoqH3FcKBUoZ2h8qai81%2FUhpCmQNBMwkP7hruKG8JVQM80GnvPXa05VemgnZGdKMe%2FK5ighMAnnnE0YsVVlDuAmn0nuiLgUsGJyPu8nq9CpDrz7TbjNFpG6KVcQRjzl871FwCa8E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928153ee5568e-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49609
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900

104.21.33.96

18 kB

URL
ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
18 kB (18425 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LF%2BNsI2hQOGDfUCuL1pPuHk3FXHBqeOLVVMOHbLIBsnHz8j4Ei6R3xHS5x8yyNObcDOmpBJiTLPKBrkrW%2Fsu6%2BVeMs%2BQzsK3lLpJdRBjWW44WN2TeKp5tyDtlWFmUu2thtEfUJ1bDvIai0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928140cc7568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-94-2.com/space-robot/assets/corner.png

104.21.33.96

300 B

URL
tb.check-tl-ver-94-2.com/space-robot/assets/corner.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lxjzI%2BXOo46X66dNrKQrPPXZiiB8wfx4FUabSa41Fq8EA7E3pa7bqe4xhjj35M%2Fo9zMiWBOUW7%2BwokzNVXQ1HjEJiMgvZYJ%2BMuhFJa5uKvTeMwUEJn7Bh3J6DYuXiP9RXo3x733QIW5IJJ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b928568e-OSL
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2

104.21.33.96

17 kB

URL
tb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
17 kB (16765 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5882
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iutiu15%2BFEDfl5eNaPQoskTWYk5z6lDkiEYVIT7UVgM5W0V80Jm43PrCvY16%2BWoeFwuNp7HxpChhKoNzSvoIG43JM%2Fapla8FvhrI9JaZ87S0pM%2BENgBVmuPWZjRhjPQOZZfr9ePONZ1dixU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b92f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png

104.21.33.96

1.2 kB

URL
tb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LaXpAsVLlyBLIz9OiFK%2B5WH2LUDq%2Bav48ihPVoc2JSGWfrHrcXaeaKsLlo%2FPY97sS6pqXFAVqX4%2BPLugMPH0gJQTIBq8ScT%2BFdf2zedKkt78fX6rQVGqhSY%2FxCIvmwQdvWs06v8UF9CH5pA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92817ba97568e-OSL
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900

104.21.33.96

45 kB

URL
tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
45 kB (45361 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1DyVWsV7FivWiYovzQwQdT9r%2BlNjf1fQFzS6%2B7orrk8NqNnQrU1Pd%2FkUB1UV5NGA9YdbDVFsM%2FK%2FAD5GFHbto%2FgqQIKc%2FhAPKhxwXKTlSJ37VKO7ExUPFkCFAfQh0O9Nyn8gpuPf2BrcIBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928161867568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49610
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148359
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

172.240.127.234

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (404)
Size
1.3 kB (1340 bytes)
Hash
801201414811ceb5eb1fada7f829b289
2304538d81370ce4ebe44159a465051f96502424
2019e49a3d778db5d8d2782c8dedebc16fe459cee3b16b07d6ab166710c56458

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 20:00:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiIiLCJhciI6W119fQ.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:01:01 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ef7aac6413a9acde4e86d5be572a2a1d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=a08e4pmqnh9qeb7945&nrid=267abec9504fcf7897b5fcc53d82e0fd&reason=tb_exit&attempt=3

188.114.97.1

170 B

URL
cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=a08e4pmqnh9qeb7945&nrid=267abec9504fcf7897b5fcc53d82e0fd&reason=tb_exit&attempt=3
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
170 B (170 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=a08e4pmqnh9qeb7945&nrid=267abec9504fcf7897b5fcc53d82e0fd&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:59 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqzIVK0GDqokQxKotcKizYj1OevGeHQUeB3%2FOA4hndaAFpiMfhV%2BlmIRsadrPakOIoIrk%2F8eVS2zV%2BtrlVIO2ONthhmZbRI8CluFRvU4uhMoP4yrp8Lb3tfKUE2btx45Pqz1ipHua5ng2XxDS2vQIFLzUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9280a2986b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39124b25421536fe742c0b619fa3c9b9&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39124b25421536fe742c0b619fa3c9b9&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39124b25421536fe742c0b619fa3c9b9&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh95m17-xr46-0-usgm6o-9rib8n-9ribwj-1400fd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 20:00:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 20:00:02 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh95mrn-xr46-0-usgm6o-9rib8n-9ribwj-01cd75; expires=Sat, 27-Apr-2024 20:00:02 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C1; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 20:00:02 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C1%2C3; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 20:00:02 GMT; path=/; samesite=lax
__cap=9; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELxQ7DwFq3jYjuJrcfoQdMZRhqxQmCv06XWUZieFkaW4bntrDmGjYMVw9roDb4m3Dyfy5b%2FfSSyxf8tVrYIR4IzwU%2Fbz9mODwfGvxBeCEo4z0jI%2FsBo9z5J3npxIJIt3Ld%2FLHGbzKE0%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9281f188956b7-OSL
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3

104.21.33.96

16 kB

URL
tb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
16 kB (16466 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ERDbK73vVvhDfFFwKVtZChNOnFXsUqllTTNaQb%2BSj0ROZ839uQ0m7jJEGoicf5MsbIIh1vEgMRPxyl02bLz6U50n0QW0%2BdQbdbm59zrL%2Fr9WenG79MC6vvEBhd%2F8DWnk9bYImFueqDCGY1M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b929568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4

104.21.33.96

19 kB

URL
tb.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6532), with CRLF line terminators
Size
19 kB (19230 bytes)
Hash
8335155a7c4004d8296b7727a24273c4
387b7723ba35057b631809e1437c64cdd89f13bb
0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e

HTTP Headers

GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b4qJ%2ByyPn%2FSf96zZSe2UbRNQj1xaMja%2BPRLOmPcppw8USNaxbPI1b4m7Edza4%2FBL8H6OWt2x2uY8MbFyLb1VJTGJXdLg2BOOFyNsOUh7PWUyQa5OVwyhPHcOtzEpwkpdUnqmrgkHtZiMxYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b917568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/favicon.ico

188.114.97.1

0 B

URL
rqqlj.check-tl-ver-154-1.com/favicon.ico
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 20:00:02 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1768
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y5lhzU5T81PI15ZrOQPkomvVEc2jiLa13Y3crP5EZhKfuoT0CX4VAhH0w9cVYWa0JZYibL82RUdyiJodXa%2BvfCMKbV0cKMEFEJwmi5WN6Mloed%2BFzJnMzi05bCWUh2wMvVqKioZdEHrPzPOxiZSv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9282149d9b52d-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css

188.114.97.1

24 kB

URL
rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
24 kB (24025 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:02 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3312
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3xt14HIPsHsxAUwSiuNDnl5Ma87T9QaRsXH1sq7B6fFE2%2Fsf3McF87JKGHnY53T%2FQ1Yav1KrcHAzvA9ES%2FOH2ITA9ev%2FCNyEts0TgQ5idJ7qLlkLt4wjysqjoOugyOhz8yiNcWTMfkMC7eBH3pT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928202801b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148360
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ia.check-tl-ver-154-1.com/blue-robot/assets/style.css

188.114.97.1

16 kB

URL
ia.check-tl-ver-154-1.com/blue-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
16 kB (16225 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: ia.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3313
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Upa52fS9vX%2FxRL90Sq%2Fa%2BdXuIzULHG9yd%2B6uVOHipS1GDh5bsG3TmvBv1%2BmnZXiumb3v%2FqcDmuCO9Wsh4orTdDuiKlGY8aFwxq0Tb2YtsmVe%2FKry4V7zUIW%2BrNV8PaB09GHwFvcFn9c9V4Qy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928232d01b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893

188.114.96.1

19 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
19 kB (18802 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kvKL%2BI1XBuhQBm7pyTmmKAdmrdW5AHJUhh8Q%2BomNsfwKtU%2BRSJnKout1WyAr2cmJ6piXJs%2BS53zZ%2FTQboHZOcJABuxvb%2B6Gc3MPJ%2Fbm6wzv0L2YOF4BPzDPUbj%2FyUOtQ%2FuR%2FNkOJH1EbYckeXAc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927e68cab0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=b5176pmqnh97sy9383&nrid=a17d5ea925cbe6dc58a18350ef130699&reason=tb_exit&attempt=3

188.114.96.1

15 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=b5176pmqnh97sy9383&nrid=a17d5ea925cbe6dc58a18350ef130699&reason=tb_exit&attempt=3
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
15 kB (15087 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=b5176pmqnh97sy9383&nrid=a17d5ea925cbe6dc58a18350ef130699&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/
Cookie: __psu=0baf6f2c-55cb-4484-aae2-65d1f2b4b6b1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZCJWcso4EoXfNQ%2F%2ByqD3dPhIDLs3JMkEBEUSyWTl%2BYwSY0FvtpvOF3gbp%2F6CCg%2F0ASdKCpwYg%2FbLUEmxkFcsqHqMB%2FUv8aEAoij%2BqqYK6lMcs9GSJUM7DEwaaXDX79v2wgkYITnZ2K5LKA%2Fc1%2ByWWOo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927ee0da80b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49612
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148361
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ib.check-tl-ver-154-1.com/blue-robot/assets/trls.js

188.114.97.1

17 kB

URL
ib.check-tl-ver-154-1.com/blue-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
17 kB (17033 bytes)
Hash
a1172576cb7f22b41247c5571d2f6d9e
8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c
2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: ib.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uT9uYzaiF%2F0z2CIRRirADHqDZvx5eYpSGTapvoOX0msSDoOMZiEJOMcAihl69x5DTvO2%2Flsou4wACWLuO3SWkOuDo8JGaRQ32IehIPThOsaW8lTUhnnNaGtpoy8vugDFvFSeeUAcPSCNnZZq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928256fc7b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/trls.js

188.114.96.1

20 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
20 kB (20517 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PIGZHAWhNModxDS50h%2Fmbzu4HHd94g466kBKaHLDH%2BDITzn306qDtreUPEzJYqNKAWeEW9WD3lF8eg3JQkxytbhkTu1mCjcWXEv946QfatJlT%2B1X31mXhKHnCMyvGy3L%2BsIC%2B0%2F24JzG1DgzQY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88ce10b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ib.check-tl-ver-154-1.com/favicon.ico

188.114.97.1

0 B

URL
ib.check-tl-ver-154-1.com/favicon.ico
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ib.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 20:00:03 GMT
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KzFyFP%2FkaBj0E0oNgNmgkjn%2BpD98SgrO76i1%2BgdaqrpPABbgt2%2B%2B33t5YrRWUQ09xbCVRHcmPL8SCmbbv%2BMfr%2FPaX8WwDHuWVMFH%2BBIrBY1at16YcPkvtTh2ETJMy1%2FrEJtf8tLCzKBs3c4l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928269974b52d-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49612
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148361
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

1.6 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
1.6 kB (1567 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OMyC1%2FTRnl%2B%2FiSUYUhMzZyMtRNsjC%2B%2BmLR%2FW0dIizkJR5U2APLrcW00eld8pMf6eSf6dBiMeIsrenWqwof%2F3fxr%2Fg9mI2IevQ%2FUxaK0FIassdUK2pQxng29hXxeEFVcCQFFqAq2zPM8PL%2FdFdEooCX9fVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928269982b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902

188.114.97.1

6.3 kB

URL
ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
6.3 kB (6312 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 HTTP/1.1
Host: ib.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vcj9RRO0j89pv%2Bl65Ho%2BOTwt5sFpOJgJ0AJt03KVMjyAG2pL6WUz87KtMPqK1XMY1AkkBxDhwa4bf6n%2FhPPEU57EpZEmVTy9A615jWAi3n8s9VSInyCmdt4iUgSMq2Fe1qpYpDd5CcBaXgOM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a92824ef0ab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914cce020adddf423624f4b419207e5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914cce020adddf423624f4b419207e5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914cce020adddf423624f4b419207e5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh95mrn-xr46-0-usgm6o-9rib8n-9ribwj-01cd75
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 20:00:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 20:00:04 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9ydhq-xr46-0-usgm6o-9rib8n-9ribwj-017791; expires=Sat, 27-Apr-2024 20:00:04 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824
Strict-Transport-Security: max-age=31536000

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ

192.243.59.13

1.3 kB

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
IP
192.243.59.13:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (443)
Size
1.3 kB (1323 bytes)
Hash
39d3738378f82c32ab6014522012665a
6e9c565fac659beb2e68fe36e75681e371d9e5de
07e81211368ec81f92afb741f8f0d50ac82dac6394250825e7192a42cb254b17

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 20:00:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=15548089; expires=Sat, 27 Apr 2024 20:00:04 GMT
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTU0ODA4OSwiayI6ImE5NjljYTVjOWFkMjYxMTc2MmYxMWI3OWE1MjZlMmQyIiwic2lkIjoiMTcxMzY4MjQiLCJpc2lkIjoyLCJhc2lkIjoxLCJ6aWQiOjEwMzczOCwicGlkIjo4MzMyMCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjoyOCwicHQiOjQsInBrIjoidm4wZGJ2eTUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6IiIsImFyIjpbXX19.3XRPKMYtAZpXHYSP3cIfoi6Y54jOXooCzC0nbGKbZDY; expires=Fri, 26 Apr 2024 20:01:04 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d8aa46e7f59f06d8688bdc33d00d24f5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824

188.114.96.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C1%2C3; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 20:00:04 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824&nrid=1eb612679cb242d6a4c795c4f180cc08&hash=fC7euQT12MUnxll-xpSurw&exp=1714161904
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=3; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 20:00:04 GMT; path=/; samesite=lax
__cap=10; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fwJ1RW5q%2B72pAp%2B70I7EGKt4DQeJ1RY%2B%2F4SQhabpd01qh3I8cvBQhsfEKBrwJ4Elny94PEN9p8bkDjLjvdBIE1422vWajxQowFCKHpoOH0JgU3cFY%2B67fMoKmj2DQi4NZD%2BBqccoyrzh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9282e38e156b7-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=908bcpmqnh97s151af&nrid=81986c5f315650f0b5b5cfc7e284c1c8&reason=tb_exit&attempt=3

104.21.33.96

18 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=908bcpmqnh97s151af&nrid=81986c5f315650f0b5b5cfc7e284c1c8&reason=tb_exit&attempt=3
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
18 kB (18252 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=908bcpmqnh97s151af&nrid=81986c5f315650f0b5b5cfc7e284c1c8&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XBvnrxg7VgzeefsxLEZqjXCpbvjOPM%2FQfMfHPJozSak6qfBrw4MR5TSthAqtGNsYd2xZ2tRXInv9A6U7MaMevskqPwmIS%2B70u1bJa7Xa3oQLQfC9IpYVVIwJ1aLXpjpYsAODqLI04rbbPdZdEYi42fz3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927fba881568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ta.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4

104.21.33.96

19 kB

URL
ta.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6532), with CRLF line terminators
Size
19 kB (19172 bytes)
Hash
8335155a7c4004d8296b7727a24273c4
387b7723ba35057b631809e1437c64cdd89f13bb
0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e

HTTP Headers

GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5944
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9EereuxqhxKRA3D39u%2B8r10MEQJZ8uKOrTKpK9jG1l343xF4GDafPJmyTg06eMljMkSUwfc8dRsTlno%2FBM5LyF4EjJNaothdLA%2B1jGJio0llR1LKa9BXAbk6J8reJHNNoFww5bYILGclaXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928149db1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

104.21.33.96

28 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
104.21.33.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
28 kB (27618 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PscJ5ipA5kgl%2F4uwCMJHll9uY5GvsIyFw1KyiOBQmmh%2FB83QpYrTLv8p%2FpQokJ2EAyTZneVYzwJOduRv6LIN0hjQQ6qL56ESCmck68ZXu7phzIbtNpqPBGMPLuGbTTWhbwlmD7YoMsimhYIDz%2F9dl%2B6v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928131b36568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902

188.114.97.1

16 kB

URL
ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
16 kB (16371 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 HTTP/1.1
Host: ia.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wiHn9jh7nD7hJ%2BcNVdunDtW1QNPMmwC7CN0r9wYbTjBNQOdhb%2BpyXf0wHnWutNQuA%2B%2FeH9MWHHj2pwD%2Fw7MmDAoNyWOYPXZZZONJP0GCFzWIiqu%2BrtDV89WN42nrc5FNG6KlKTUssffWXxt4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928229c42b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148363
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ia.check-tl-ver-154-1.com/blue-robot/assets/trls.js

188.114.97.1

200 OK

0 B

URL GET HTTP/3
ia.check-tl-ver-154-1.com/blue-robot/assets/trls.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: ia.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (204)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP