| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash577f20b1ad1240dc12215f4d93e53b8f 4fb6d79b9c4adb8f712073e9662ceae41a4f097c 523bc00bcd3cc12a640ebce3df80c0aed9fc552c4be5bae1831c00b9027ce0c0
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "523BC00BCD3CC12A640EBCE3DF80C0AED9FC552C4BE5BAE1831C00B9027CE0C0"
Last-Modified: Wed, 24 Jul 2024 18:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6287
Expires: Sat, 27 Jul 2024 04:05:31 GMT
Date: Sat, 27 Jul 2024 02:20:44 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash559312780d7c69aabb31f612abe74b95 0d0356dc28789b5b2b0164783f2c79b6b7b82f6a 20293009653baaf415bde5c2223feb0a6562281a1dfbcc6af42d844341da6d26
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "20293009653BAAF415BDE5C2223FEB0A6562281A1DFBCC6AF42D844341DA6D26"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15983
Expires: Sat, 27 Jul 2024 06:47:07 GMT
Date: Sat, 27 Jul 2024 02:20:44 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8f4e7b75de1ed909fa79bbcdafccceac 274c1ea75520a0ea06e19a7e692c034baae2cdc1 62cc974e51b62480f576b53853f8f24bfc873687c02bc23c1713956d4b96c0b1
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "62CC974E51B62480F576B53853F8F24BFC873687C02BC23C1713956D4B96C0B1"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6701
Expires: Sat, 27 Jul 2024 04:12:25 GMT
Date: Sat, 27 Jul 2024 02:20:44 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0b6f864b0a3d0cf483b0830bdb98cded 12564f2826ce74a640c3b65ef52d12f21c8e6f3c d32892cb09f33f4057712b1c1b511af5ea5528cd0f23ba90858d659ec4fcd190
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D32892CB09F33F4057712B1C1B511AF5EA5528CD0F23BA90858D659EC4FCD190"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2174
Expires: Sat, 27 Jul 2024 02:56:58 GMT
Date: Sat, 27 Jul 2024 02:20:44 GMT
Connection: keep-alive
|
|
| datanodes.to/images/logo.png?v=1 |  104.21.7.111 | 200 OK | 15 kB |
URL GET HTTP/3datanodes.to/images/logo.png?v=1 IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typePNG image data, 364 x 230, 8-bit/color RGBA, non-interlaced Hashc9338a5cbd74ee24aee2175a5ac9cfac eb519e37c50d2dd8908d80a2dd203879f2a430c9 e73da34c3963cd34608bc4016fd1060cf58de21ef14321a153ec45bc004ff56e
GET /images/logo.png?v=1 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:45 GMT
content-type: image/png
content-length: 15350
last-modified: Tue, 16 Jan 2024 14:16:42 GMT
etag: "65a68fca-3bf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1640
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SpHjlxrSoVZEeAjrcgphTO0CBot2glPMhPpIC%2BABNAjiFYXfpXTQ6myE11qf4aktMKhZ1nfxhpa6ChOnU9XE0jGuwaltPVsrPsgHGER%2BN6PWofSvVduecNjyDlZPrjk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f1c9105687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| datanodes.to/theme_2023/src/assets/images/virus-scan.png | 104.21.7.111 | 200 OK | 34 kB |
URL GET HTTP/3datanodes.to/theme_2023/src/assets/images/virus-scan.png IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashed8693e5b49bbfec66898fd26b979317 0fe86ee5614e13c3c93672a4d57ef69555f3e701 5b6ef28011995150a50e6e59ca8728a5f0f92c7dfe27f08433e398a7fc177a9d
GET /theme_2023/src/assets/images/virus-scan.png HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:45 GMT
content-type: image/png
content-length: 33827
last-modified: Wed, 31 Jan 2024 09:41:40 GMT
etag: "65ba15d4-8423"
cache-control: max-age=14400
cf-cache-status: HIT
age: 769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2BSQHMtbwEkPOw0qyO0A8xARBnof9Qaor6AQfZJnzBoafwU%2Bvq22gIIoHY7YMQqARuilM2z1KdPrNOsDnYkZpBXVHBBY8YHA1OdC6ZuvFz9%2BpWpYcNl7MkFVJHXsasA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f1c9115687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashce72bbaeba3ec328d4f20536c649d40c 55924239a101eec6a603216f9daa95a45bf0ad5a 0735b2f69ed1f91010eb946396c8ce797676c582cd9415e1045277057017c63e
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0735B2F69ED1F91010EB946396C8CE797676C582CD9415E1045277057017C63E"
Last-Modified: Wed, 24 Jul 2024 19:22:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9324
Expires: Sat, 27 Jul 2024 04:56:09 GMT
Date: Sat, 27 Jul 2024 02:20:45 GMT
Connection: keep-alive
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash9276bc9b37a1b0d47c79d1d02a817684 9ab218111320ad197ea57f46d8388e8557e05204 e4b2b1a80566d301a39dd95de18763446fd29bd52334784c49661311e24b75dc
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hasha46f438744de77d25f713cbfc2ae6453 47dfad0727eb35cde2c29ebd81691529ef90f828 a348780a38652d1c2d8b6a983e32302be66abec1ea05d268d9e2e141f621613d
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash4408ab03c04807f7744690784f7e3da5 dd44cece05a29780cab2cf465e9852e4de112694 f6f9349db4dbfb965d468fd0d81a34d0475de3d505b2582f805454eeba5c1dbf
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| scarcerpokomoo.com/1clkn/31269 |  23.109.170.154 | 200 OK | 26 B |
URL GET HTTP/1.1scarcerpokomoo.com/1clkn/31269 IP23.109.170.154:443
Requested byhttps://datanodes.to/download CertificateIssuerLet's Encrypt Subjectscarcerpokomoo.com FingerprintCE:27:5F:6E:9A:E8:4A:74:21:C2:01:98:EE:43:9D:B2:3A:37:E9:CE ValidityMon, 15 Jul 2024 22:49:34 GMT - Sun, 13 Oct 2024 22:49:33 GMT
File typeASCII text, with no line terminators Hash9082dc37e5e8046929da411544ad071a 41e0e3963ed94e59e8a2f115994c382712411537 b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1clkn/31269 HTTP/1.1
Host: scarcerpokomoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Jul 2024 02:20:45 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sun, 28-Jul-2024 02:20:45 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 28-Jul-2024 02:20:45 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF | 142.250.74.40 | 200 OK | 104 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF IP142.250.74.40:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintA0:62:49:BF:3C:47:B8:D6:25:E2:FE:2A:24:2F:96:19:50:7A:22:6C ValidityMon, 01 Jul 2024 06:35:01 GMT - Mon, 23 Sep 2024 06:35:00 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size104 kB (103727 bytes) Hash2e2a5df767db3991af4f085d0f090d55 d9abb979a1a1770a0b16d2ee7f204dbf8e2d59eb 10e4a50e83cbc94868552be7d9498062f18727f83baaca0f464471038ab20ed7
GET /gtag/js?id=G-7DP7NV2LKF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 27 Jul 2024 02:20:45 GMT
expires: Sat, 27 Jul 2024 02:20:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103727
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash9276bc9b37a1b0d47c79d1d02a817684 9ab218111320ad197ea57f46d8388e8557e05204 e4b2b1a80566d301a39dd95de18763446fd29bd52334784c49661311e24b75dc
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash2467698d7f074dde984010f088f5f2ed feead14ddbb4e0ac8190b473a64df73b425589a9 a847cabc3c7f1c6ec0598075b0644f439ae529fba86f1bfd6ad5579e1e7d9e76
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash4408ab03c04807f7744690784f7e3da5 dd44cece05a29780cab2cf465e9852e4de112694 f6f9349db4dbfb965d468fd0d81a34d0475de3d505b2582f805454eeba5c1dbf
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash35ff7daa9fc4b449eb24337f651326b3 676d634234644f1abd67f88e9054ab76a4e53a74 102c7c5828dbd6a143fbe7ebebfb45a349b3dd4b5c00bd9e4964d129d6f77831
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash35ff7daa9fc4b449eb24337f651326b3 676d634234644f1abd67f88e9054ab76a4e53a74 102c7c5828dbd6a143fbe7ebebfb45a349b3dd4b5c00bd9e4964d129d6f77831
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Jul 2024 08:26:50 GMT
expires: Sat, 26 Jul 2025 08:26:50 GMT
cache-control: public, max-age=31536000
age: 64436
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Jul 2024 11:34:58 GMT
expires: Wed, 23 Jul 2025 11:34:58 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 312348
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Jul 2024 01:30:26 GMT
expires: Wed, 23 Jul 2025 01:30:26 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 348620
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash35ff7daa9fc4b449eb24337f651326b3 676d634234644f1abd67f88e9054ab76a4e53a74 102c7c5828dbd6a143fbe7ebebfb45a349b3dd4b5c00bd9e4964d129d6f77831
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Jul 2024 04:18:20 GMT
expires: Fri, 25 Jul 2025 04:18:20 GMT
cache-control: public, max-age=31536000
age: 165746
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash35ff7daa9fc4b449eb24337f651326b3 676d634234644f1abd67f88e9054ab76a4e53a74 102c7c5828dbd6a143fbe7ebebfb45a349b3dd4b5c00bd9e4964d129d6f77831
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js | 104.21.7.111 | 200 OK | 551 B |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeASCII text, with no line terminators Hash25c44a4d11f7e944406f01074fe0df06 61c0bc8d24552a6f45d1d32254c3cb496e3e5b31 cf746f12cd0ee4dee69487db4bc45659a433ff3e24d4595533cb66f4a0d9f0f3
GET /theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-aabc1c49.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=91
etag: W/"6697a0ce-5b"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VNVaXVjQvcJhjiTjMMhafpzQjjOUDpyNi0n9VUAWoloRhegEJ3EegwQFAtQ0NCYc2QmveMh%2B0wKa4ubCDXuK6RlvCikx5eV6w2lydEY9jSTEmNBF09wLjrtrVmk8kSw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f49a055687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=541555081.1722046846>m=45je47o0v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1&npa=1&frm=0&z=969857363 | 142.250.74.67 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=541555081.1722046846>m=45je47o0v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1&npa=1&frm=0&z=969857363 IP142.250.74.67:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.no FingerprintE7:4E:8F:8B:5A:93:39:37:6B:DB:2E:08:32:6F:E1:2D:E6:59:E7:08 ValidityMon, 01 Jul 2024 07:46:20 GMT - Mon, 23 Sep 2024 07:46:19 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=541555081.1722046846>m=45je47o0v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1&npa=1&frm=0&z=969857363 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 27 Jul 2024 02:20:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Util-bf03b1c6.js | 104.21.7.111 | 200 OK | 1.3 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/Util-bf03b1c6.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2854), with no line terminators Hash53263a0f6b7d0b346680d20b7e16f582 854d7043fb910316a5d916f4138d1acc10f6f71a 6bd42893d429039b326ce9a7e0326992e0002111c3d2f15f1811af4e7b8cd354
GET /theme_2023/dist/assets/Util-bf03b1c6.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-050dd263.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D; _ga_7DP7NV2LKF=GS1.1.1722046846.1.0.1722046846.60.0.0; _ga=GA1.1.541555081.1722046846
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2857
etag: W/"6697a0ce-b29"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DbrLXztiA5yxC%2BELkvNdkfBKSsq1Eif7NXdL0IA57eZ6KvQ32ci5SI%2BDfTdM94XORBKgtOg%2BgjqKNFyau7d8dBU%2BETNO4K9dR4e%2BBXUhQ0tWD3RKIOQrgOfLepmvx0s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f57a3e5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.7.111 | 200 OK | 230 kB |
URL User Request GET HTTP/2IP104.21.7.111:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3602) Size230 kB (230546 bytes) Hashdc08fe85438e97004f0f1da999f54e92 2d9175cf36eb6cbf62da88e2d959b06823391d35 a404a54ce69ee16a653c0e2d8df4d8524614281f9002e8d31fe43bb4b137e1ab
GET /download HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Jul 2024 02:20:45 GMT
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
set-cookie: affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D; domain=.datanodes.to; path=/; expires=Sat, 10-Aug-2024 02:20:45 GMT
expires: Fri, 26 Jul 2024 02:20:45 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DgJoIUREs423gRyrno4F8vQ0OyHvDuxrTNCwJBpGk1%2BtaUEC4xgQoYqd26nnWV9ymsi7e0zDlAkgFJWcYhttnX9AVpdj9NI4vfSzMXYGJhx26spQTPkhVUs%2BUij4P70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a9926ee8c7a0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash5fc6a050d9a0dbff5e940bf207fc6b76 201c7493e7bf49b9f31c776c64dcbfa7e96bbbeb 243061f789498d9cebf1d315f651a567f0569acb99e111f04e8fab258ed5945a
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 Jul 2024 02:20:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| datanodes.to/theme_2023/dist/assets/VirusScan-aabc1c49.js | 104.21.7.111 | 200 OK | 1.1 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/VirusScan-aabc1c49.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeASCII text, with very long lines (1119), with no line terminators Hash9949394e8745bb180575829fe18ed28f 13fc509622d2e49cfb78462494a13b9cb1f526a0 afa919f686054d6e0e4d504206e88a122734dc01469926b6ea2535da2f3ee8fd
GET /theme_2023/dist/assets/VirusScan-aabc1c49.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-afc25dff.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1120
etag: W/"6697a0ce-460"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZDuPBmvflJLeURgqTv%2FSuD%2FgUaV6T96AR6weeYYo%2BsUzA25lBQ8ceyL5w63GjhjhJGzsW7jYTAhGDzVacRMd6id9fI%2FAGH4tKaAez6pEOGj3QaLyTkol0jglgBUsKY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f429dd5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash91392416ed946eb8b26810ff46d7e57e 8ce21a441df1ac09da4ebf098eaf47e2d74bbff0 5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6810
Expires: Sat, 27 Jul 2024 04:14:16 GMT
Date: Sat, 27 Jul 2024 02:20:46 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash91392416ed946eb8b26810ff46d7e57e 8ce21a441df1ac09da4ebf098eaf47e2d74bbff0 5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6809
Expires: Sat, 27 Jul 2024 04:14:16 GMT
Date: Sat, 27 Jul 2024 02:20:47 GMT
Connection: keep-alive
|
|
| ptfvbttd.pro/?params=aD01YmJiZTQ1MjM4OGRlMDZkZWExNWVhZDFlZmViN2ViNiZ1c2VyPTE5NyZzaWQ9OTUmdHlwZT1jJmFkY29kZT0zJnRtcD01 | 172.67.150.62 | 200 OK | 6.6 kB |
URL GET HTTP/2ptfvbttd.pro/?params=aD01YmJiZTQ1MjM4OGRlMDZkZWExNWVhZDFlZmViN2ViNiZ1c2VyPTE5NyZzaWQ9OTUmdHlwZT1jJmFkY29kZT0zJnRtcD01 IP172.67.150.62:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectptfvbttd.pro Fingerprint1B:DD:8D:9D:20:F8:74:5F:35:71:84:26:9C:41:5B:12:E5:54:72:41 ValiditySun, 16 Jun 2024 13:16:35 GMT - Sat, 14 Sep 2024 13:16:34 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash365b605d917dc1e228c425932ddbdec9 58a971d9d704f978bb4e9c271dcd2fc736b190f3 29e12db6338884c4a600e5ce90a0679e5a1772b09340be305dfc1710ef92c35b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?params=aD01YmJiZTQ1MjM4OGRlMDZkZWExNWVhZDFlZmViN2ViNiZ1c2VyPTE5NyZzaWQ9OTUmdHlwZT1jJmFkY29kZT0zJnRtcD01 HTTP/1.1
Host: ptfvbttd.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
x-powered-by: PHP/8.1.29
access-control-allow-origin: *
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IjRZaUdrSlM5bExQVjFJaitubTlYS0E9PSIsInZhbHVlIjoiRHJwNGdISTVhd2dYcGpNRVI3akJnWDBrekVGYklDYTJQUC9SNWpBNkM2MGNDQnRiWkRGWmJTSTlWNUdwTnE1ak5VT0Q0cFNYY2xOL25SSUhwNS9CeEo4VVhqNkdtckF4aEw2VjVOSG44eDd1SUhVaTZyMmtOVnQrZVJ6VURUVlYiLCJtYWMiOiJiMzZlMWE4ZDUxMzUxZDc2NTkxODRjOTdhODA1ZDc2MjM4OTQ2NjNmOWMyYjUzM2E3ODM1NjcxMzIyMzQzNTM0IiwidGFnIjoiIn0%3D; expires=Sat, 27-Jul-2024 04:20:46 GMT; Max-Age=7200; path=/; samesite=lax; secure
laravel_session=eyJpdiI6IkNxWERtakZ4NjdJWE1IZWV0b01oQlE9PSIsInZhbHVlIjoiUGc1WHpjMFZIQ0puajNOTFpQUkFtTHVqSE5QcmdpVTdPL1U5NFBzaUdtUFZQVko1elJ6Rjl5VU5tY2tSL1FPK21SbWJWajFPRlhObksvcjl4WUg3TUUwUkNqQUtwOTBOQXh0cjdIWlFRcXlGMDBwSDJlUldrQ01JbjE4RHJTRlMiLCJtYWMiOiI2M2Q5YjdmMDQ4MDBmZmI1ZDFlMmYzNjk2N2ZkOWU5YTBkYWI5NzMzYTg3ZTYzODZiNzY3MmE3ZWMxOWU3MjM1IiwidGFnIjoiIn0%3D; expires=Sat, 27-Jul-2024 04:20:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dSJ1HQ4%2FP%2FhWMwWz8mOpkL2GmyeBP%2Bw%2FeJOs0OtQw0xfS0qslno4r%2BgmAlL7dNzq9w9RgK6nx11v4imyKgGU1IniNUsspQQyV8Bz6WKQP6eJtv31fFETDAiGW43iJPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a9926f4793a56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/styles__ltr.css | 142.250.74.67 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/styles__ltr.css IP142.250.74.67:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeASCII text, with very long lines (56359), with no line terminators Hash4adccf70587477c74e2fcd636e4ec895 af63034901c98e2d93faa7737f9c8f52e302d88b 0e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d
GET /recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24613
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Jul 2024 11:58:01 GMT
expires: Sat, 26 Jul 2025 11:58:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Jul 2024 21:52:36 GMT
content-type: text/css
vary: Accept-Encoding
age: 51766
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/recaptcha__en.js | 142.250.74.67 | 200 OK | 215 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/recaptcha__en.js IP142.250.74.67:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeJavaScript source, ASCII text, with very long lines (678) Size215 kB (215075 bytes) Hash2ea96f82197c227ad3d999f6a6fcf54d dc1499948a1822d16cab150eaee16f4ab8c028d8 e1d667d61bb50e0a815101a7d0d7f379b7219776fee856eedbe965a049db8d44
GET /recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 215075
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Jul 2024 02:09:35 GMT
expires: Wed, 23 Jul 2025 02:09:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Jul 2024 21:52:36 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 346272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Jul 2024 00:57:49 GMT
expires: Fri, 25 Jul 2025 00:57:49 GMT
cache-control: public, max-age=31536000
age: 177778
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Jul 2024 21:23:03 GMT
expires: Sat, 26 Jul 2025 21:23:03 GMT
cache-control: public, max-age=31536000
age: 17864
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.67 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.67:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Jul 2024 08:41:39 GMT
expires: Fri, 02 Aug 2024 08:41:39 GMT
cache-control: public, max-age=604800
age: 63548
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/0dKosa6Lh2NxpFh0svIz4L-wz65qkRTTn4jOj6ZWQ1s.js | 142.250.74.164 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/0dKosa6Lh2NxpFh0svIz4L-wz65qkRTTn4jOj6ZWQ1s.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint0E:B6:5C:7B:0B:AC:B5:AF:1F:DF:47:14:61:B7:0D:4C:41:6F:47:53 ValidityMon, 01 Jul 2024 06:35:43 GMT - Mon, 23 Sep 2024 06:35:42 GMT
File typeJavaScript source, ASCII text, with very long lines (17661) Hash6f2415d78a81478937ed57418fc720d6 6198da214539d4ef2bff03b2f3bb2a0ec475a599 d1d2a8b1ae8b876371a45874b2f233e0bfb0cfae6a9114d39f88ce8fa656435b
GET /js/bg/0dKosa6Lh2NxpFh0svIz4L-wz65qkRTTn4jOj6ZWQ1s.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7513
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Jul 2024 05:12:46 GMT
expires: Wed, 23 Jul 2025 05:12:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Jul 2024 11:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 335281
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/recaptcha__en.js | 142.250.74.67 | 200 OK | 215 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/recaptcha__en.js IP142.250.74.67:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79 ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT
File typeJavaScript source, ASCII text, with very long lines (678) Size215 kB (215075 bytes) Hash2ea96f82197c227ad3d999f6a6fcf54d dc1499948a1822d16cab150eaee16f4ab8c028d8 e1d667d61bb50e0a815101a7d0d7f379b7219776fee856eedbe965a049db8d44
GET /recaptcha/releases/Xv-KF0LlBu_a0FJ9I5YSlX5m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 215075
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Jul 2024 02:09:35 GMT
expires: Wed, 23 Jul 2025 02:09:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Jul 2024 21:52:36 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 346272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/app-afc25dff.js | 104.21.7.111 | 200 OK | 69 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/app-afc25dff.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeJavaScript source, ASCII text, with very long lines (37383) Hash274e66c3d74f97a79338c92c4703a8c9 b025e14409b49be498dfb47d0e5030a2309d3507 528b0503a79af023679bb702edb41fe48bc634de78fef6334d407332e7c2c52d
GET /theme_2023/dist/assets/app-afc25dff.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=177925
etag: W/"6697a0ce-2b705"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0uJ2sFFjk4oXIkBf1YBncSxJO8UpfHdaG6j3nsaGWsaa6BXdt3d8gF2uWBTHeUzeh8DOrj2Q61dPWIEZVmLDXnPErMsq1lj%2Bcsa1ssuNvRYj1qNdRysXDJIT3A1%2Fgws%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f1c9145687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je47o0v9175474265za200&_p=1722046845991&gcd=13l3l3l2l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=95250752&cid=541555081.1722046846&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1722046846&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20ASKA%20rar&en=scroll&epn.percent_scrolled=90&tfd=6338 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je47o0v9175474265za200&_p=1722046845991&gcd=13l3l3l2l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=95250752&cid=541555081.1722046846&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1722046846&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20ASKA%20rar&en=scroll&epn.percent_scrolled=90&tfd=6338 IP216.239.34.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintA0:62:49:BF:3C:47:B8:D6:25:E2:FE:2A:24:2F:96:19:50:7A:22:6C ValidityMon, 01 Jul 2024 06:35:01 GMT - Mon, 23 Sep 2024 06:35:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je47o0v9175474265za200&_p=1722046845991&gcd=13l3l3l2l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=95250752&cid=541555081.1722046846&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1722046846&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20ASKA%20rar&en=scroll&epn.percent_scrolled=90&tfd=6338 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://datanodes.to
date: Sat, 27 Jul 2024 02:20:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/transition-1214961b.js | 104.21.7.111 | 200 OK | 28 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/transition-1214961b.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeJavaScript source, ASCII text, with very long lines (27942), with no line terminators Hashc2eb685cb40a42c9180f86e64af600fd 8d2466d759c7c3753ad99e9694c7a53481830d66 d9c7a46a0f4d5d97d1be84bcc1f11881d10bab0f63d23e9347281cc5f1cbc66c
GET /theme_2023/dist/assets/transition-1214961b.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-050dd263.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D; _ga_7DP7NV2LKF=GS1.1.1722046846.1.0.1722046846.60.0.0; _ga=GA1.1.541555081.1722046846
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=27943
etag: W/"6697a0ce-6d27"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BwcGND1dGidpdnyGmRGgbf77bTurKPTYY5IONVJon1Ed%2BnNV7ra7S%2Fg59lOaQVT62ag5i%2Bm6oAvAYcl%2BbNhJtDbQlu4wx%2FPkpKAJqn1Xrccek4OrwpxCgGOQFh4XW9c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f58a415687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| datanodes.to/2x2q8mgifuzj/ASKA.rar | 104.21.7.111 | 302 Found | 13 kB |
URL User Request GET HTTP/2datanodes.to/2x2q8mgifuzj/ASKA.rar IP104.21.7.111:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2x2q8mgifuzj/ASKA.rar HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 27 Jul 2024 02:20:45 GMT
location: https://datanodes.to/download
cf-cache-status: BYPASS
set-cookie: file_code=2x2q8mgifuzj; domain=.datanodes.to; path=/; expires=Sat, 27-Jul-2024 03:20:45 GMT
lang=english; domain=.datanodes.to; path=/
file_name=ASKA.rar; domain=.datanodes.to; path=/; expires=Sat, 27-Jul-2024 03:20:45 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4KwT6yinrtweq6YKdbvStw8kMfJJgUfSiLjq80r1N6wSqqyYQnAmuvnda7fBC%2BsvLy%2B2MIne3bgTUm8QNrMY4Ifiolr%2BiZmoT43fY2NHe25ErwagmVoQvXwEsWgTfqc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926edac480b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/LoadingIcon-4dd4ee09.js | 104.21.7.111 | 200 OK | 666 B |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/LoadingIcon-4dd4ee09.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeASCII text, with very long lines (712), with no line terminators Hashcc979edbcdd8f6ca01d6b6d9ddfcceb9 3270f88ba8ade3a509d5371e98e6093f5298785c 9155d6664eb24cee1fc0c1ebd99d3111f132627a58e37a02fa5e130629c55488
GET /theme_2023/dist/assets/LoadingIcon-4dd4ee09.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-aabc1c49.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=667
etag: W/"6697a0ce-29b"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQRnEQZe%2FowvQshPRgeFuMLRVFoAzIBbzIR%2Bcqg6ArF%2FcG4ZoysRhQiPnOpYrHsS%2F%2FGvDNysQNAHoFIS7NvljYitpy7zaQM4ETwtZNYYqt4XYKAxDHl3q%2F2HlQI%2BiAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f49a035687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css | 104.21.7.111 | 200 OK | 369 B |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeASCII text, with very long lines (369), with no line terminators Hash6102ef36fa1954ef82018f9c25dd058b 5dc929531c4c39913909f34a49b21be453a6e0e1 e77c43fcfbc318b69f2611613df843ea3345682a26687bc695d7f72023141607
GET /theme_2023/dist/assets/Tooltip-4872b02d.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=372
etag: W/"6697a0ce-174"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3898
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qTgEgAgGC1yvYsbrMBf5%2BfX3qcUH2bXJZvxRP0hCKigg6C7sZQ6dRX5LyBYw3cA8zIBOcNvOnN%2F2a%2FhJrBkvvsvWf2k8%2BVwNF7V91MMIfj6lvjSLpKgSj%2FWZqIBymKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f419d75687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| datanodes.to/theme_2023/dist/assets/FileActions-050dd263.js | 104.21.7.111 | 200 OK | 52 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/FileActions-050dd263.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2023/dist/assets/FileActions-050dd263.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-afc25dff.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=51915
etag: W/"6697a0ce-cacb"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dmapc4Fh6shQ23rF6jI2%2FXATZHfqye6W2PnRpieQCfmcDat8TIkC%2BwQkiJWsaW9%2FsP%2B%2FN1sGlGSts%2FNDak7h%2FsmyYcMVBHL8Wvy0MY5AmBGysBCA16jcAop4qi69rE8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f49a025687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-d23db7fa.js | 104.21.7.111 | 200 OK | 17 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/Tooltip-d23db7fa.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeJavaScript source, ASCII text, with very long lines (16550), with no line terminators Hash4760131aeba88c08b8db5e11cb7da097 6c48a682d39f8353d2cad255835c23b0385c0d0c c35efff78d79ec706048ddf9fbe57af1db7b42cf14f20d99d37fa0db8e815267
GET /theme_2023/dist/assets/Tooltip-d23db7fa.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-050dd263.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D; _ga_7DP7NV2LKF=GS1.1.1722046846.1.0.1722046846.60.0.0; _ga=GA1.1.541555081.1722046846
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=16551
etag: W/"6697a0ce-40a7"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TQBT9zDsMHAAR%2FWoQtuNE6NydJxOK1tYJ3amBdMEqNWfkQzAomgm8A8UeQklOBJBaCsJs0Sgxo%2B7BUrFGjM99yGlaEyUdB567TXNi95CcvO9U04PtBBw3NGZhsgrVLg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f58a405687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap | 142.250.74.74 | 200 OK | 5.5 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap IP142.250.74.74:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint05:EB:36:6C:36:86:24:74:94:BB:40:A9:5B:70:D4:0B:D6:3D:9E:39 ValidityMon, 01 Jul 2024 07:31:02 GMT - Mon, 23 Sep 2024 07:31:01 GMT
File typeASCII text, with very long lines (5641), with no line terminators Hash35b66465b230fcf9cde32761a6187553 23aeb1a7e72b51f65b0ffa6f16c2c43bc1b97e99 61a937f2c296ef8887d128d83dd76b7efb5e17f60e375fdeea4731a290b67d07
GET /css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 Jul 2024 02:20:45 GMT
date: Sat, 27 Jul 2024 02:20:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/app-8feab043.css | 104.21.7.111 | 200 OK | 59 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/app-8feab043.css IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2023/dist/assets/app-8feab043.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:45 GMT
content-type: text/css
cf-bgj: minify
etag: W/"6697a0ce-e6b7"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3898
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UIyEqWzaP7eFRCSpxJYV6050p4s6%2FYJeA3f6NnWT1wzg9Uwj1vqolYJwYDHW5ojT3zv1SQ9p6eyegbTB5rCFgfIaiEOHcVi%2B21wOWgaBKBpkNUGMqyU3kGuHmZ%2B%2BjDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f1c90f5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m | 142.250.74.164 | 200 OK | 102 B |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint0E:B6:5C:7B:0B:AC:B5:AF:1F:DF:47:14:61:B7:0D:4C:41:6F:47:53 ValidityMon, 01 Jul 2024 06:35:43 GMT - Mon, 23 Sep 2024 06:35:42 GMT
File typeASCII text, with no line terminators Hash487a5328afcf6c20ddc11ca1b46a4a44 f37e030501a0a3ff828bef96481ac1c71043999f de9539c3628315c1a7d33dc3e09dd75767bce3868c188cdc7c90ff207da0fec3
GET /recaptcha/api2/webworker.js?hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 27 Jul 2024 02:20:47 GMT
date: Sat, 27 Jul 2024 02:20:47 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR | 142.250.74.164 | 200 OK | 0 B |
URL POST HTTP/3www.google.com/recaptcha/api2/clr?k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint0E:B6:5C:7B:0B:AC:B5:AF:1F:DF:47:14:61:B7:0D:4C:41:6F:47:53 ValidityMon, 01 Jul 2024 06:35:43 GMT - Mon, 23 Sep 2024 06:35:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1558
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33
Cookie: _GRECAPTCHA=09AD4nbXRcReVIIyesqF3QW8wZfTJfvCIwiC9Zx0tcKK4xqfROmLDLCvQZlM_FYV9TRhJpDo8qVUDImd_uTfauLpg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
date: Sat, 27 Jul 2024 02:20:48 GMT
expires: Sat, 27 Jul 2024 02:20:48 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 0
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je47o0v9175474265za200&_p=1722046845991&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=95250752&cid=541555081.1722046846&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1722046846&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20ASKA%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1242 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je47o0v9175474265za200&_p=1722046845991&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=95250752&cid=541555081.1722046846&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1722046846&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20ASKA%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1242 IP216.239.34.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintA0:62:49:BF:3C:47:B8:D6:25:E2:FE:2A:24:2F:96:19:50:7A:22:6C ValidityMon, 01 Jul 2024 06:35:01 GMT - Mon, 23 Sep 2024 06:35:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je47o0v9175474265za200&_p=1722046845991&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=95250752&cid=541555081.1722046846&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1722046846&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20ASKA%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1242 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://datanodes.to
date: Sat, 27 Jul 2024 02:20:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/favicon.ico | 104.21.7.111 | 200 OK | 2.5 kB |
IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashc813091dc9f029ba08588f60cc450755 d2b2f0efc676eff758c4194d80ff2e9ee973f556 682e513cfa795efc1e53c502e9a8aa3d91db160b7fd15f94de2a4156a6961474
GET /favicon.ico HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D; _ga_7DP7NV2LKF=GS1.1.1722046846.1.0.1722046846.60.0.0; _ga=GA1.1.541555081.1722046846
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: image/x-icon
last-modified: Thu, 01 Sep 2022 19:47:58 GMT
etag: W/"63110c6e-99d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ug3UmecLXEqE9RpT%2F%2Be%2Bo3LS4TLmKT717e5Z7LKiMt%2FvRhGa4jaVWLdT3GYzB2a94cQVG%2BtzUVotOz4vb48%2FuqOaTP7296RFeQt9W8lSFrKdztpuZ5MDqRQ%2BVMOZQw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f64a6d5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js | 104.21.7.111 | 200 OK | 570 B |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeJavaScript source, ASCII text, with very long lines (576), with no line terminators Hash4e530f44457efeedabe2ec88443090db a3e5603e9df990a4b77703f5892fa1da79e02d2b c4f14ca9be78b70015e5043d9e51f423cbe1d5499e6edbd788a1a354e80064dd
GET /theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-aabc1c49.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=571
etag: W/"6697a0ce-23b"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qz2txF35ktD%2FSm%2BFX2kmFkM6MHtSHIclhJJDRgoPTBTMASskeLJdkZ0LiPUNu74lQaL0DLFry8eoAJPa%2BrR4XqHe%2B6AuDLHxeCjLGXSvLXfBw4rGGU9rRxb%2FLXLmEhs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f49a065687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api.js?render=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR | 142.250.74.164 | 200 OK | 904 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?render=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR IP142.250.74.164:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint74:37:47:BC:66:E7:8E:38:8E:7A:DA:D3:FD:C8:B6:C7:BE:59:38:20 ValidityMon, 01 Jul 2024 07:34:52 GMT - Mon, 23 Sep 2024 07:34:51 GMT
File typeJavaScript source, ASCII text, with very long lines (904), with no line terminators Hash367360f7311307753bb695bda2e0e53e 6654942c1642e3b21e874f3bfed7ddd63a2b4527 0a1ea02a1c32a17ecbecc17ec64833db84da29ca0d24da7db6ec1f8d9df1de7a
GET /recaptcha/api.js?render=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 27 Jul 2024 02:20:45 GMT
date: Sat, 27 Jul 2024 02:20:45 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/open-closed-56ee71d9.js | 104.21.7.111 | 200 OK | 3.5 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/open-closed-56ee71d9.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeJavaScript source, ASCII text, with very long lines (3593), with no line terminators Hash35263c3dd21e469bb3484348c69c172f 5452c4b4e06c9bb1b7dc205d33372ba8770a0472 0837f0228d53c5991bfeb759df042f2cb8ad91a265170023046e01ef69a8bbc3
GET /theme_2023/dist/assets/open-closed-56ee71d9.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-050dd263.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D; _ga_7DP7NV2LKF=GS1.1.1722046846.1.0.1722046846.60.0.0; _ga=GA1.1.541555081.1722046846
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3487
etag: W/"6697a0ce-d9f"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oqY5ak16HauBE3SXeMXYgvxJym5WSKzPhQxBKOByLNxOjyIvfwj8wxRpy5BWjqM5zvx61dPYINe8lAXr55t8%2Fxg94q1502EjpXIr%2Falc2P8fwuKwvOqALF00hO56MYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f58a435687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 | 142.250.74.164 | 200 OK | 49 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 IP142.250.74.164:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint0E:B6:5C:7B:0B:AC:B5:AF:1F:DF:47:14:61:B7:0D:4C:41:6F:47:53 ValidityMon, 01 Jul 2024 06:35:43 GMT - Mon, 23 Sep 2024 06:35:42 GMT
File typeHTML document, ASCII text, with very long lines (39883) Hash9462076e58cba8bd93c9c52d51940320 65b37ae2c861f0b734e79c73eed4fad7f75d6012 402a5c276166a00ac1c1b1957b2c78af9e9f7cdd7e79353a01cf4adee9718dd0
GET /recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 27 Jul 2024 02:20:46 GMT
content-security-policy: script-src 'nonce-aaCp2flsiEKJum71sF9nNw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/index-fea4678f.js | 104.21.7.111 | 200 OK | 6.4 kB |
URL GET HTTP/3datanodes.to/theme_2023/dist/assets/index-fea4678f.js IP104.21.7.111:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint3A:0A:DD:34:3F:F9:E9:70:D3:0A:1C:BA:E0:BF:DE:53:CF:1F:A0:F2 ValidityTue, 18 Jun 2024 22:55:08 GMT - Mon, 16 Sep 2024 22:55:07 GMT
File typeASCII text, with very long lines (6805), with no line terminators Hash0fdfb17dec08662cbe019b693a4b3e04 95c80c5eaae2bf18cd9c0588ede1517060c4c887 b26de4ccaad994efce2da375f57ddecd24030094af7427456886c2ab04fe0f69
GET /theme_2023/dist/assets/index-fea4678f.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-aabc1c49.js
Cookie: file_code=2x2q8mgifuzj; lang=english; file_name=ASKA.rar; affiliate=uc2JH4jdMs0J2fSUcUnMp9FiYsAj9hwioroLN97JX0IRLQXcS%2BLtlVI9GtLW0Uru7VVQhHUBKm7AucSINlDkOW47TvDmjTQkyQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jul 2024 02:20:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6400
etag: W/"6697a0ce-1900"
last-modified: Wed, 17 Jul 2024 10:45:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RE0946IwCSY48D87R0gIHz2u%2BQ0qFskG4QlvQ5s4lRK0voU2xRXPXjZs0Gr%2BlYzlSwiATw5lB0K%2BO8WNwK78m0NEBLT4jbiuBcWQfhIZOg28zmDwLuNB15XuXSV4G14%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9926f49a045687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/reload?k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR | 142.250.74.164 | 200 OK | 13 kB |
URL POST HTTP/3www.google.com/recaptcha/api2/reload?k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint0E:B6:5C:7B:0B:AC:B5:AF:1F:DF:47:14:61:B7:0D:4C:41:6F:47:53 ValidityMon, 01 Jul 2024 06:35:43 GMT - Mon, 23 Sep 2024 06:35:42 GMT
File typeASCII text, with very long lines (13179) Hashae33510765b25f6a17e3baaffd612e14 f2e524238284bcf93e2661830cd73d8cc78f332b 1f729a15c6230f7f9beef0b39bdb5c24270e28dc765bfbf210f388672a962bfe
POST /recaptcha/api2/reload?k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 10775
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeTjhIqAAAAAG43CbV5r862vfZRSswHa9WcBwIR&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Xv-KF0LlBu_a0FJ9I5YSlX5m&size=invisible&cb=gksrp036yu33
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
content-encoding: gzip
date: Sat, 27 Jul 2024 02:20:48 GMT
expires: Sat, 27 Jul 2024 02:20:48 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AD4nbXRcReVIIyesqF3QW8wZfTJfvCIwiC9Zx0tcKK4xqfROmLDLCvQZlM_FYV9TRhJpDo8qVUDImd_uTfauLpg; Expires=Thu, 23-Jan-2025 02:20:48 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|