pointedpleasure.com/bl3mV.0nP-2plqjrPsX_BuzvJwmx9-0zPAUBNCn_SEkFRGRHU-kJlKKLWMW_5OKPdQlRl-XTUUmVlWZ_VYzZVarbS-2dleCfagE_1iUjWkmlt-anRo0pZqo_WsWtpurvd-0x9yXzUAX_lCZDMElFl-5HTIjJJKa_aMlNpOUPT-TRFSNTMUl_lW5XTYmZ1-Sbac0d1et_Wgmh1iNja-klNmJnLon_AquresEtJ-qvawix5yv_UAUB5CJDQ-lFEGtHLIS_ZKyLcMmNl-kPPQWRYS1_ZUGVQW5XY-zZdalbMc2_Ie3fOgThA-0jZkTlcm1_Yozpkq3rO-DthumvNwT_hyhzYATBY-zDZEmFIG4_JInJZK0LP-TNEO3PMQT_MS4TOUTVY-3XMYTZIat_McGdVeifZ-ThRiijZkD_cm0nNompZ-lrMsWtYu4_YwTxFylzN-jBJCiDNED_AG4HNIWJR-iLOMGNZOk_MQTRASmTe-mV9WuXZYW_lakbPcTdQ-4fMgThgi0_MkjlkmtnN-DpgqxrOsD_QuzvMwAx?ce=lnk&cel=https://manhwatop.com/manga/i-upgrade-by-rewarding-apprentices/chapter-83/&dseq=1&rsrc=popscript_popunder&sseq=1
88.85.94.249 0 B URL pointedpleasure.com/bl3mV.0nP-2plqjrPsX_BuzvJwmx9-0zPAUBNCn_SEkFRGRHU-kJlKKLWMW_5OKPdQlRl-XTUUmVlWZ_VYzZVarbS-2dleCfagE_1iUjWkmlt-anRo0pZqo_WsWtpurvd-0x9yXzUAX_lCZDMElFl-5HTIjJJKa_aMlNpOUPT-TRFSNTMUl_lW5XTYmZ1-Sbac0d1et_Wgmh1iNja-klNmJnLon_AquresEtJ-qvawix5yv_UAUB5CJDQ-lFEGtHLIS_ZKyLcMmNl-kPPQWRYS1_ZUGVQW5XY-zZdalbMc2_Ie3fOgThA-0jZkTlcm1_Yozpkq3rO-DthumvNwT_hyhzYATBY-zDZEmFIG4_JInJZK0LP-TNEO3PMQT_MS4TOUTVY-3XMYTZIat_McGdVeifZ-ThRiijZkD_cm0nNompZ-lrMsWtYu4_YwTxFylzN-jBJCiDNED_AG4HNIWJR-iLOMGNZOk_MQTRASmTe-mV9WuXZYW_lakbPcTdQ-4fMgThgi0_MkjlkmtnN-DpgqxrOsD_QuzvMwAx?ce=lnk&cel=https://manhwatop.com/manga/i-upgrade-by-rewarding-apprentices/chapter-83/&dseq=1&rsrc=popscript_popunder&sseq=1
IP 88.85.94.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /bl3mV.0nP-2plqjrPsX_BuzvJwmx9-0zPAUBNCn_SEkFRGRHU-kJlKKLWMW_5OKPdQlRl-XTUUmVlWZ_VYzZVarbS-2dleCfagE_1iUjWkmlt-anRo0pZqo_WsWtpurvd-0x9yXzUAX_lCZDMElFl-5HTIjJJKa_aMlNpOUPT-TRFSNTMUl_lW5XTYmZ1-Sbac0d1et_Wgmh1iNja-klNmJnLon_AquresEtJ-qvawix5yv_UAUB5CJDQ-lFEGtHLIS_ZKyLcMmNl-kPPQWRYS1_ZUGVQW5XY-zZdalbMc2_Ie3fOgThA-0jZkTlcm1_Yozpkq3rO-DthumvNwT_hyhzYATBY-zDZEmFIG4_JInJZK0LP-TNEO3PMQT_MS4TOUTVY-3XMYTZIat_McGdVeifZ-ThRiijZkD_cm0nNompZ-lrMsWtYu4_YwTxFylzN-jBJCiDNED_AG4HNIWJR-iLOMGNZOk_MQTRASmTe-mV9WuXZYW_lakbPcTdQ-4fMgThgi0_MkjlkmtnN-DpgqxrOsD_QuzvMwAx?ce=lnk&cel=https://manhwatop.com/manga/i-upgrade-by-rewarding-apprentices/chapter-83/&dseq=1&rsrc=popscript_popunder&sseq=1 HTTP/1.1
Host: pointedpleasure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 23 Apr 2024 20:46:50 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-frame-options: DENY
location: https://pointedpleasure.com/bL3MV_0.PO3PJQyRa-WTQU9VZWj_VYkZZaDbl-jdNe2fUgz_Yijjck5lM-DnRolpNqz_VsjtOuTvc-4xOyGzYA1_OCGDFEhFN-jHNImJYKj_gMmNcOnPN-yRYSzT1Uw_bW3XBYzZY-3bJcpdceH_RgfhciGj9-wldmWn5ok_ZqXrIsmtc-2vlwkxPyT_QA4BMCTDg-0FMGjHkIm_dKHLZMyNP-TPAQmReSm_9UuVZWWXl-kZPaTbIc1_MeTfUgxhO-Djck
referrer-policy: no-referrer
x-content-type-options: nosniff
X-Firefox-Spdy: h2
deywepri.com/l?v=E8aBqXpt
88.85.69.213200 OK 3.9 kB URL User Request POST HTTP/1.1 deywepri.com/l?v=E8aBqXpt
IP 88.85.69.213:443
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type HTML document, ASCII text, with very long lines (921)
Hash c117bb625dc3c259b04fab30607ec275
483a5f920df39ac676f8a1688c25167452b54194
9d46266abc29c0bc98e86f783ec01a7ba5dd2f3a22a60c9fe97535c5be303823
POST /l?v=E8aBqXpt HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 858
Origin: null
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
pointedpleasure.com/favicon.ico
88.85.94.249 0 B URL pointedpleasure.com/favicon.ico
IP 88.85.94.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: pointedpleasure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: uniqCookie=04b46c325ff522091fbec5f8a5ccf488; kadCCap=304628:1:1710655006; kadACap=527756:1:1706321074; kadASCap=346327:1:1713905210; kadRPixJ=bnVsbA==; kadUnP3=CBAQ3++bsQYaDQjIuf4BEAIYiL2bsQYaCwi1CBAJGMOmnbEGGg0I88GZARABGLq8oLEGGg0I9oj/ARAEGN/vm7EGIgoIAxAQGN/vm7EGKgwIuI4lEAQY3++bsQYqCwjpAhAJGMOmnbEGKgwI9JYlEAIYiL2bsQYqDAiMvRIQARi6vKCxBg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 23 Apr 2024 20:46:50 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
deywepri.com/views/grecaptcha/css/style.css
88.85.69.213200 OK 599 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/css/style.css
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
Hash 27eac474447efeacaa8d51b91912b26d
f630300c7d5c71d2d87472512f4ed4d5fbb5b89a
69790d23d3ec08dbfa6909de36996b4cd3b0154e57b78ccb0e8a281f5e6e72ce
GET /views/grecaptcha/css/style.css HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: text/css
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-67e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/css/mainstream.css
88.85.69.213200 OK 170 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/css/mainstream.css
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
Hash 52b8c08e14b61f9dec8aa0ca6243dea2
1afe3e1ec5ea900ddbbca25fa085f898fdca6856
c19a3b5e10e979b08b2bcb55f68849e96e390c9bfd0b323a64a451bfbb95bf1c
GET /views/grecaptcha/css/mainstream.css HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: text/css
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-2d1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/recaptcha.min.js?v=1713879066375997772
88.85.69.213200 OK 546 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/recaptcha.min.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (1115)
Hash 26ba95d3318a71a043b60f28d2a4ef62
2a60fcd6c6ffd1a9b1268507db9c8e56a232b4df
e935e010bb697396b415fecbdc8e92dc4a3d7277649dfea0c70631fbe5c67505
GET /views/grecaptcha/js/recaptcha.min.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-4f6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/debugMode.js?v=1713879066375997772
88.85.69.213200 OK 434 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/debugMode.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
Hash 9e39ff189e016a78bc35c603f434eae3
8082d791393f3f08aaec171491d57b76d6d6d5aa
22f93a906aa144d4a67e38e0ad3eb6d5b7338949a66390864dec7d3131e362ff
GET /views/grecaptcha/js/debugMode.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-553"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/botDetect.min.js?v=1713879066375997772
88.85.69.213200 OK 9.0 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/botDetect.min.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (29124)
Hash f7687ff36d6654cde4e042385c02d11f
92b2adb164f45ac1dbc5538b9f3ffdccfed8e482
ba9b728987cd01302f5a311e28bf6513dc2b04d43c8b47743e206ccc7608522e
GET /views/grecaptcha/js/botDetect.min.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-7225"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/hanalytics.min.js?v=1713879066375997772
88.85.69.213200 OK 3.0 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/hanalytics.min.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (8053)
Hash 3c12e7c0ee844149c50f2c547c979c0a
0e257907505db9ce27e9386da79c8db883455ca3
f70d91cf7c7080ac7863b956f3caaf55546f1b1021b70ea3ae9d1627e2f46788
GET /views/grecaptcha/js/hanalytics.min.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-1fa8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/touchEvent.min.js?v=1713879066375997772
88.85.69.213200 OK 5.3 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/touchEvent.min.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (20222)
Hash da7c38d2a4e1f5d413629b404cb01836
3be32f1e0c02ae5b2f4401e8a3ee1f67f14822e7
69b3260be19acba9e09cbcd30fc608e0f60fbe7cb097483dc906827e8429e3a0
GET /views/grecaptcha/js/touchEvent.min.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:51 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-4f92"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
pointedpleasure.com/ckG.Flzmcnz-9pkqarXsQ_9uMvTwcxx-MzzAkBwCN_TEIFxGMHD-EJ1KOLDMA_zONPjQcRw-MTSUZVkWd_GYtZuaPbW-NdoebfXgJ_Qicjlkdlq-OnEoEpyqb_WsZthuMvD-Ex0yWzjAh_VCTDUExFj-SH0IMJ1KY_kMdNaOdPE-RRkSJTnUB_0WbXjY1ZD-Zb0cpdPeV_HghhJiSjl-llumSnnoZ_ZqVr1sJtp-WvVwcx1ya_0AtBpCQDT-VFaGRH1Ik_zKTLmM1NO-bPEQ1RXSV_mUpVPWRXE-VZ5aTbWcp_FeMfEg9hE-Sjmkplama_loZppqWrV-RtkubvUw1_XyUzXAlBO-eDkEUFxGT_UIRJDKNLn-ZNLOQP3Qh_CSaTmUkVz-bX1YFZSaQ_Tcgd4eRf1-phBiUjSk0_tmJnnoJpy-ZrXsFtouP_WwZxlyNzz-ZBjCNDGEZ_kGNHWIIJw-ZLTMkN5OZ_TQAR5SZTj-ZVlWMXzYc_xaZbDcMd1-NfDgEhwiY_TkVljmJnn-JpyqarWsQ_9uZvjwVxk-ZzDAlBjCN_2EUFzGYHj-cJ5KMLDMR_lONPzQVRj-OTTUcV4WO_GYYZ1aObG-FdheNfjgN_miYjjkglm-cnnoNpyqY_zs1twubv3-BxzyYz3AJ_pCcDHERFf-cHGI9JwKd_WM5NkOZPX-IRmScT2Ul_kWPXTYQZ4-MbTcgd0eM_jgkhmidjH-ZlymPnToA_mqerms9tu-ZvWwlxkyP_TAIB1CMDT-UFxGOHDIc_
88.85.94.249 3.3 kB URL pointedpleasure.com/ckG.Flzmcnz-9pkqarXsQ_9uMvTwcxx-MzzAkBwCN_TEIFxGMHD-EJ1KOLDMA_zONPjQcRw-MTSUZVkWd_GYtZuaPbW-NdoebfXgJ_Qicjlkdlq-OnEoEpyqb_WsZthuMvD-Ex0yWzjAh_VCTDUExFj-SH0IMJ1KY_kMdNaOdPE-RRkSJTnUB_0WbXjY1ZD-Zb0cpdPeV_HghhJiSjl-llumSnnoZ_ZqVr1sJtp-WvVwcx1ya_0AtBpCQDT-VFaGRH1Ik_zKTLmM1NO-bPEQ1RXSV_mUpVPWRXE-VZ5aTbWcp_FeMfEg9hE-Sjmkplama_loZppqWrV-RtkubvUw1_XyUzXAlBO-eDkEUFxGT_UIRJDKNLn-ZNLOQP3Qh_CSaTmUkVz-bX1YFZSaQ_Tcgd4eRf1-phBiUjSk0_tmJnnoJpy-ZrXsFtouP_WwZxlyNzz-ZBjCNDGEZ_kGNHWIIJw-ZLTMkN5OZ_TQAR5SZTj-ZVlWMXzYc_xaZbDcMd1-NfDgEhwiY_TkVljmJnn-JpyqarWsQ_9uZvjwVxk-ZzDAlBjCN_2EUFzGYHj-cJ5KMLDMR_lONPzQVRj-OTTUcV4WO_GYYZ1aObG-FdheNfjgN_miYjjkglm-cnnoNpyqY_zs1twubv3-BxzyYz3AJ_pCcDHERFf-cHGI9JwKd_WM5NkOZPX-IRmScT2Ul_kWPXTYQZ4-MbTcgd0eM_jgkhmidjH-ZlymPnToA_mqerms9tu-ZvWwlxkyP_TAIB1CMDT-UFxGOHDIc_
IP 88.85.94.249:0
File type HTML document, ASCII text, with very long lines (899)
Hash 12d3f5b3f6baf1a1dbe1f1d6c1f4c6ef
461d4f150295e623f950ff6f2ac3323355eb3621
67facf7bc5abc1fa4971758a3fb0337d9ec201bc2ec83bbda4fe8a1cae5718c8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /ckG.Flzmcnz-9pkqarXsQ_9uMvTwcxx-MzzAkBwCN_TEIFxGMHD-EJ1KOLDMA_zONPjQcRw-MTSUZVkWd_GYtZuaPbW-NdoebfXgJ_Qicjlkdlq-OnEoEpyqb_WsZthuMvD-Ex0yWzjAh_VCTDUExFj-SH0IMJ1KY_kMdNaOdPE-RRkSJTnUB_0WbXjY1ZD-Zb0cpdPeV_HghhJiSjl-llumSnnoZ_ZqVr1sJtp-WvVwcx1ya_0AtBpCQDT-VFaGRH1Ik_zKTLmM1NO-bPEQ1RXSV_mUpVPWRXE-VZ5aTbWcp_FeMfEg9hE-Sjmkplama_loZppqWrV-RtkubvUw1_XyUzXAlBO-eDkEUFxGT_UIRJDKNLn-ZNLOQP3Qh_CSaTmUkVz-bX1YFZSaQ_Tcgd4eRf1-phBiUjSk0_tmJnnoJpy-ZrXsFtouP_WwZxlyNzz-ZBjCNDGEZ_kGNHWIIJw-ZLTMkN5OZ_TQAR5SZTj-ZVlWMXzYc_xaZbDcMd1-NfDgEhwiY_TkVljmJnn-JpyqarWsQ_9uZvjwVxk-ZzDAlBjCN_2EUFzGYHj-cJ5KMLDMR_lONPzQVRj-OTTUcV4WO_GYYZ1aObG-FdheNfjgN_miYjjkglm-cnnoNpyqY_zs1twubv3-BxzyYz3AJ_pCcDHERFf-cHGI9JwKd_WM5NkOZPX-IRmScT2Ul_kWPXTYQZ4-MbTcgd0eM_jgkhmidjH-ZlymPnToA_mqerms9tu-ZvWwlxkyP_TAIB1CMDT-UFxGOHDIc_ HTTP/1.1
Host: pointedpleasure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4
Origin: null
DNT: 1
Connection: keep-alive
Cookie: uniqCookie=04b46c325ff522091fbec5f8a5ccf488
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:46:50 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Tue, 23 Apr 2024 20:46:50 GMT
x-frame-options: DENY
referrer-policy: no-referrer
set-cookie: uniqCookie=04b46c325ff522091fbec5f8a5ccf488; max-age=1716497210; path=/
kadCCap=304628:1:1710655006;297598:1:1709010601;92483:1:1710872369;302229:1:1708471967;299350:1:1706555990;202595:1:1709992005;304964:1:1710654478;302235:1:1713686924;187148:1:1713464170;275289:1:1713507831;299449:1:1705926986;306059:1:1710654081;306061:1:1710731070;72756:1:1713074935;177035:1:1706501169;194136:1:1713036790;167396:1:1710688139;300232:1:1712519628;172036:1:1709828111;302693:1:1710565607;172538:1:1710694090; max-age=1745441210; path=/
kadACap=527756:1:1706321074;573687:1:1713593561;549476:1:1706118432;446716:1:1708572237;568887:1:1710655509;390509:1:1712296979;476401:1:1711816317;485314:1:1713565748;554019:1:1705360254;389299:1:1707044221;569002:1:1710652356;401659:1:1713565739;541894:1:1708818399;546469:1:1712521499;538554:1:1709054072;384007:1:1708465107;554022:1:1708580619;570849:1:1711832651;568153:1:1710656213;568563:1:1710656089;549268:1:1708902007;571367:1:1712479497;512686:1:1708976361;556979:1:1706484191;560695:1:1708788656;346327:1:1713905210;555251:1:1710732541;567383:1:1710655103;507635:1:1708697267;556978:1:1706563203;552534:1:1708914590;423696:1:1706446332;571344:1:1712690771;311465:1:1706407641;384014:2:1707787885;563768:1:1708494601;424443:1:1709761550;560125:1:1710731318;568171:1:1710656151;534545:1:1708573127;543468:1:1707996438;568897:1:1710655416;446878:1:1708355888;535727:1:1709155560;527586:1:1706524805;555457:1:1712029120;554020:1:1708898241;419293:1:1709163865;569003:1:1710683861;543470:1:1707943142;450323:1:1710655621;549263:1:1708567453;562522:1:1713118668;507067:1:1712370307;538572:1:1709244744;437741:2:1708788989;568907:1:1710655326;410254:1:1705906571;521688:1:1706405390;560123:1:1706598707;564809:1:1708121502;520642:1:1706196894;419291:1:1709495068; max-age=1745441210; path=/
kadASCap=346327:1:1713905210; path=/
kadRPixJ=bnVsbA==; max-age=1745441210; path=/
kadUnP3=CBAQ3++bsQYaDQjIuf4BEAIYiL2bsQYaCwi1CBAJGMOmnbEGGg0I88GZARABGLq8oLEGGg0I9oj/ARAEGN/vm7EGIgoIAxAQGN/vm7EGKgwIuI4lEAQY3++bsQYqCwjpAhAJGMOmnbEGKgwI9JYlEAIYiL2bsQYqDAiMvRIQARi6vKCxBg==; max-age=1745441210; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
deywepri.com/views/grecaptcha/js/cacheIcon.min.js?v=1713879066375997772
88.85.69.213200 OK 900 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/cacheIcon.min.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (1999), with no line terminators
Hash 6bc1f7fded5a7e3131bd940ed293ea49
bbd6df8fd579acecfb773d6074abe1d44f4ac46b
eda54e4682f917bf18bf48619ad08dcb5035c26b271a55e55feffcd9a75ec237
GET /views/grecaptcha/js/cacheIcon.min.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-7cf"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/checkLogin.min.js?v=1713879066375997772
88.85.69.213200 OK 663 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/checkLogin.min.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (1804), with no line terminators
Hash 1e3212d9af95966463cfe347669ac693
b14c94dc2c743ba816419275c349ad15f85e906c
f4c922a7f3513aa6574af7930e8884f972f9cfd2670b50a56d861a1328798e0a
GET /views/grecaptcha/js/checkLogin.min.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-70c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/extFpHash.js?v=1713879066375997772
88.85.69.213200 OK 97 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/extFpHash.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (65465)
Hash d0ab0c5780d9c77ab54e202c769b1433
c298c6ed6cfb8d35efcbe967344d2684347fd791
970fc826d5ed2e9acdd93772526abb6941c0735c6a76621969f47a1e1e1d0ae1
GET /views/grecaptcha/js/extFpHash.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-41f2c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
dull-egg.pro/aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 61
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:46:51 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
vary: Origin
last-modified: Tue, 23 Apr 2024 20:46:51 GMT
access-control-allow-origin: https://deywepri.com
x-content-type-options: nosniff
X-Firefox-Spdy: h2
deywepri.com/favicon.ico
88.85.69.213200 OK 19 kB IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type ASCII text, with very long lines (19321), with no line terminators
Hash b8511bc84d69b72d0194c29a3ce52968
9d7935e6aef48e623fdf1432d8847a83c44bf0ae
fbc556740a68a3c5b4dc61c37baa5c74fbb1c9fd4420811b625e557dee86fd53
GET /favicon.ico HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:51 GMT
Content-Type: image/x-icon
Content-Length: 19321
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
deywepri.com/views/grecaptcha/img/mainstream/laptop.png
88.85.69.213200 OK 1.2 MB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/img/mainstream/laptop.png
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type PNG image data, 1436 x 1025, 8-bit/color RGBA, non-interlaced
Size 1.2 MB (1192830 bytes)
Hash 64c05ce3df8cc7e9f2d6a828a5de9bb9
193d3891f2d1e8aa3ea0efdad64c0dadc8e2ce3e
940e231d1846ab2e4091fff0840fd4e68fc04742098006d81a6cfe463f236dd5
GET /views/grecaptcha/img/mainstream/laptop.png HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/views/grecaptcha/css/mainstream.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:53 GMT
Content-Type: image/png
Content-Length: 1192830
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Connection: keep-alive
ETag: "65fd5f98-12337e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
deywepri.com/bdt
88.85.69.213200 OK 2 B IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /bdt HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2100
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:53 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
dull-egg.pro/Y.m-Rx0yPz3Ap_vCbDmEVFJ-ZHDI0JyKN_TMEN1OMPT-gR3SJTmUF_kWSXWYQZ9-MbzcQd2eM_zgIh3iJjn-NlJmZnDo0_0qOrDsEt4-NvDwIx5yJ_nANBJCZDD-IF9GJHnIN_JKZLDMMN9-JPnQJRySa_WUQV9WZXj-VZkaZbDcl_jeNf2gUhz-Yjjkcl5mM_DoRplqNrz-VtjuOvTwc_4yOzGAYB1-ODGEFFhGN_jINJmKYLj-gNmOdPWQ5_pScTUUJV5-VXHYlZwaZ_Tc0dweJfn-VhuiajXkF_CmenVoppv-brmsUt9uM_CwZx1ybzm-lBxCQDnEl_GGZHWIVJk-PLTMANmOd_WQ5RpScTU-JV5WRXmY9_yabbWcFd0-PfTgAhmic_HkQl9mMnC-Zpyqdrjs0_wuJvmwhxz-PzXAFBhCJ_mExFwGaHT-0JzKMLjMU_yOJPmQhRp-dTEUlVkWP_TYUZzaYbz-Ed5eYfzgB_kiZjmkRll-YnzoRpjqY_TsltmuOvW-RxjyMzjAZ_iCYDjEYFy-NHWIFJiKZ_DMAN5OJPn-JRlSZTkUR_vWbXWYFZp-bbjc0d
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/Y.m-Rx0yPz3Ap_vCbDmEVFJ-ZHDI0JyKN_TMEN1OMPT-gR3SJTmUF_kWSXWYQZ9-MbzcQd2eM_zgIh3iJjn-NlJmZnDo0_0qOrDsEt4-NvDwIx5yJ_nANBJCZDD-IF9GJHnIN_JKZLDMMN9-JPnQJRySa_WUQV9WZXj-VZkaZbDcl_jeNf2gUhz-Yjjkcl5mM_DoRplqNrz-VtjuOvTwc_4yOzGAYB1-ODGEFFhGN_jINJmKYLj-gNmOdPWQ5_pScTUUJV5-VXHYlZwaZ_Tc0dweJfn-VhuiajXkF_CmenVoppv-brmsUt9uM_CwZx1ybzm-lBxCQDnEl_GGZHWIVJk-PLTMANmOd_WQ5RpScTU-JV5WRXmY9_yabbWcFd0-PfTgAhmic_HkQl9mMnC-Zpyqdrjs0_wuJvmwhxz-PzXAFBhCJ_mExFwGaHT-0JzKMLjMU_yOJPmQhRp-dTEUlVkWP_TYUZzaYbz-Ed5eYfzgB_kiZjmkRll-YnzoRpjqY_TsltmuOvW-RxjyMzjAZ_iCYDjEYFy-NHWIFJiKZ_DMAN5OJPn-JRlSZTkUR_vWbXWYFZp-bbjc0d
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Y.m-Rx0yPz3Ap_vCbDmEVFJ-ZHDI0JyKN_TMEN1OMPT-gR3SJTmUF_kWSXWYQZ9-MbzcQd2eM_zgIh3iJjn-NlJmZnDo0_0qOrDsEt4-NvDwIx5yJ_nANBJCZDD-IF9GJHnIN_JKZLDMMN9-JPnQJRySa_WUQV9WZXj-VZkaZbDcl_jeNf2gUhz-Yjjkcl5mM_DoRplqNrz-VtjuOvTwc_4yOzGAYB1-ODGEFFhGN_jINJmKYLj-gNmOdPWQ5_pScTUUJV5-VXHYlZwaZ_Tc0dweJfn-VhuiajXkF_CmenVoppv-brmsUt9uM_CwZx1ybzm-lBxCQDnEl_GGZHWIVJk-PLTMANmOd_WQ5RpScTU-JV5WRXmY9_yabbWcFd0-PfTgAhmic_HkQl9mMnC-Zpyqdrjs0_wuJvmwhxz-PzXAFBhCJ_mExFwGaHT-0JzKMLjMU_yOJPmQhRp-dTEUlVkWP_TYUZzaYbz-Ed5eYfzgB_kiZjmkRll-YnzoRpjqY_TsltmuOvW-RxjyMzjAZ_iCYDjEYFy-NHWIFJiKZ_DMAN5OJPn-JRlSZTkUR_vWbXWYFZp-bbjc0d HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1431
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:46:53 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
vary: Origin
last-modified: Tue, 23 Apr 2024 20:46:53 GMT
access-control-allow-origin: https://deywepri.com
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
x-content-type-options: nosniff
X-Firefox-Spdy: h2
dull-egg.pro/aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 6519
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:46:53 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-origin: https://deywepri.com
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
vary: Origin
last-modified: Tue, 23 Apr 2024 20:46:53 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/yD/r/d4ZIVX-5C-b.ico
31.13.72.12404 Not Found 0 B URL GET HTTP/2 static.xx.fbcdn.net/rsrc.php/yD/r/d4ZIVX-5C-b.ico
IP 31.13.72.12:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerDigiCert Inc
Subject*.facebook.com
FingerprintBC:F3:32:77:35:B2:9D:D7:40:42:CD:86:26:C4:13:92:0E:AB:75:5B
ValidityThu, 01 Feb 2024 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rsrc.php/yD/r/d4ZIVX-5C-b.ico HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
x-fatal-request: static.xx.fbcdn.net
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
timing-allow-origin: *
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
content-security-policy-report-only: default-src data: blob: chrome-extension: 'unsafe-inline' 'unsafe-eval';report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self';script-src *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src 'unsafe-inline';connect-src *.fbcdn.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-xss-protection: 0
content-type: text/html; charset="utf-8"
x-fb-debug: t8U2Gf7EbuFAe8aFv9FOpn8D/9RLVBz+o3luB2IVWvaRxYoDyv2eOmRcnP0jLKlVhKy8+HUHxBV0xxO6u1JbYw==
content-length: 0
proxy-status: http_request_error; e_fb_configversion="AcLCBlUrILfWQWtx05Nvv8_bDSNKO-irqUiGLwL0l8T5r6AbgDLZ4B3L4zNU2w"; e_clientaddr="AcKI_n6VdyAYgkj-VJF369JWOR2MfQIqozN8mr7NWiSBH782pJNBBoq8RHDVc19Nhv6aBRZaNPlT_J_usVaWEfaH9tG8cjD7oDMXkD0r_zw3hmfk"; e_fb_vipport="AcJIqSPjI9_Esm35neGeHG42E_thGkp7Gvrsffp-gP7LDvn35qHx07nl5k0V"; e_upip="AcIvEl9YgZede2ghM2S3_9GJJzHl5ZuHHZND16BBqTtzABk16tNQ0mSHyAsWVIUM-9_oxwJg5WQN93DdR1AY6cekrXTma1oxBQE"; e_fb_requestsequencenumber="AcIY_k5HJUSP_taqXOvehrSPzZXN5iL7K7pn27teuySS6ywfNfYatHH4xr4"; e_fb_hostheader="AcKM5RabMYpHtpI3ME5l_KdIw502Zu6Akw5klbfrHNiWzlyquXfVd6fPfukkwsvEu6G9KxmzmkTYSf3zhA"; e_fb_vipaddr="AcKqQ3nJb8soraUY2ccM78VxXrnmypTJv1vlCyuPHA2tu1vql4I07u7jim1Tg-i9NkjKE0DlDvS9LcNE1nvTPBMHi301DUxqsQ"; e_fb_requesthandler="AcIERv86gtPioqN6lXrwEYjTInbf1wKVgdateVnkC6-wiFjWkGszyILjEX56EaUVo0J3Ngvf5HM"; e_fb_requesttime="AcL06c33hRGiulnRcr3fLjVQQqGBwCGYQYMNbSjzmGlhr_isguQK-XLG65jfTaKVdCmANHDFTg"; e_fb_builduser="AcKqa0LaPtFi6xuKoNnvzug7kdm149vctyLPXP9mob68VOIbpfZ5qmOko2IkyercGqs"; e_fb_httpversion="AcJEtHS4lIkL4X5njnI-28hwRNHI0Cy6uC7JsLDc40V9pvC7FooqerSSZGPe"; e_fb_binaryversion="AcLnxw1DeRTQmg7BoeujIxA3tVp2gYmv9ArZJmX-rCbNtiCc9c1gPxbzeLOu1HDZp7zcuWtbV5PZFg1saRTkvyg5LV8hH5F7qvY"; e_proxy="AcLMwrky958YRH7LovKvVQ9ozwChkp19TnuakVzAKthrYK1AXDKLh6KrTbHm4Z5DYnJ12mMm1ERUORJB0i7F", http_request_error; e_fb_configversion="AcKsZ8HivXUyzcLqbqX08gJouYEFt1srKFrdB2Jk7QFAqXFCL2vCv4vt0NO8iA"; e_clientaddr="AcLwCQgeBLCdu4wEnd84yYj1bd_M5K3e63rV9MeTde9YeJfpk7wtbHRe0xi7LfNOOQzoXtIclwrcsuws"; e_fb_vipport="AcKyNLvrkZgTgr96H7-xXan-oh6iAtzz3az5ZinXGuLsSiIJciykrxRrZjDj"; e_fb_requestsequencenumber="AcIh6rB15MeV8_Es55Ddt0MA-exiWjMZySOkgHSdbNOXrO92zjeS6uCU_Q"; e_fb_hostheader="AcKMX3zRE5kV5K5OGxfgLilvD3RO1Ez7ekkhr9MA9GacE2yFRwezujbT0rhwBaaVoD-05d_ncE1aQiMLYA"; e_fb_vipaddr="AcKcucyD8mYnSNKui9RZYWp8utavMgRPlT6q_duwsCs9qUyCZAr6hVmkWK70YOXim3Re0uI"; e_fb_requesthandler="AcKlFnSCvRxd3x-HRvUggIq4AWVr9ilKyt1y35j_LrcI467hmrvrYRG0JHcUIOQQ38komURM9XhT3w"; e_fb_requesttime="AcLoSCeFTqF4DdQGhFxai5m80viFh3W6WDYAItUPV17ZuQ6qS1fW0BGZMg-T3VtTgoUWFZaqPA"; e_fb_builduser="AcLghH-IObyOyOlne98p7DsJw5iSmLdnFudWSt0T3CJzMzNvVUmL90ZscnimeMkDjf8"; e_fb_httpversion="AcJBLU17XcwqkbBJwkZyuDy1zgdFpRvuLJLEkez55DtVrZ47B8enfMYm9ufr"; e_fb_binaryversion="AcJxSDCYlFIXC_CJHPXz4UchKVd5821ayjQU7VHRa0O5JwLaatxxfHnxVrTEgTi719ZY5LHlKE0ZuPKpQoDA0bR5zzufcLA7g8I"; e_proxy="AcJ798Rj6yrZbax8UQh5lXh6GIGsibzcH0MPqIjjVz1OzbjxC3y0KPIb2xDh-ebpETbFuObnE0wQQyVh"
date: Tue, 23 Apr 2024 20:46:53 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=3360, tp=-1, tpl=-1, uplat=0, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.amazon.com/favicon.ico
23.52.85.233 2.5 kB URL GET www.amazon.com/favicon.ico
IP 23.52.85.233:0
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint16:61:C8:C4:18:95:4A:31:9B:C4:3F:AD:F7:97:7F:5C:A7:2F:09:A0
ValidityTue, 06 Feb 2024 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
File type MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Hash ca6619b86c2f6e6068b69ba3aaddb7e4
c44a1bb9d14385334eb851fbb0afb19d961c1ee7
17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09
GET /favicon.ico HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Server
content-type: image/x-icon
x-amz-rid: WWD1FV4MDV48C7NQ8T7N
accept-ranges: bytes
etag: "4486-490c87c5a6340"
last-modified: Tue, 21 Sep 2010 17:37:41 GMT
x-content-type-options: nosniff
strict-transport-security: max-age=47474747; includeSubDomains; preload
x-frame-options: SAMEORIGIN
content-encoding: gzip
content-length: 2477
date: Tue, 23 Apr 2024 20:46:53 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
x-amzn-cdn-id: ak-0.3a321060.1713905213.10439198
x-cache: Hit from child
X-Firefox-Spdy: h2
www.google.com/favicon.ico
142.250.74.164 1.5 kB URL GET www.google.com/favicon.ico
IP 142.250.74.164:0
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73
ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash f3418a443e7d841097c714d69ec4bcb8
49263695f6b0cdd72f45cf1b775e660fdc36c606
6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
GET /favicon.ico HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1494
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 14:35:32 GMT
expires: Wed, 01 May 2024 14:35:32 GMT
cache-control: public, max-age=691200
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
content-type: image/x-icon
vary: Accept-Encoding
age: 22281
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dull-egg.pro/aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aHG-EJ/Ke.mL9Mu_ZOUPlQkRP-TTIU1VMWT_UYxZOaDbc-mdYeWfRgJ_ZiDj0kzlN-DnYozpMqj_csmtcu0vl-kxPyTzQA4_MCTDgE0FM-jHkImJcK0_lMkNMOjP0-mRcS0TlUk_MWzX0YmZc-nbJcpdZeD_1gmhNiWjR-klOmWnMo3_ZqTrNsitN-zvkwwxNyG_UA3BNCWDM-5FNGzHgI4_ZKjLUM4NY-WPEQ2RMS2_ZUiVOWCXZ-1Zbamblcx_QenflgUhe-XjBkllPmT_AompdqWr5-ptcuUvJw5_Wymz9AuBZ-TD0EwFJGn_VIuJaKXLF-CNeOUPZQl_ZSWTQU9VM-CXZY1Zbam_lcxdQenfl-Ghbi3jJkt_YmXnQo9pM-CrZswtduD_0wwxJynzJ-2BPCTDAEm_aGHHMI9Jc-WLEMmNbOH_BQpRPSTTM-yVNWTXIYm_aaGblc0dS-WfQg9hNiT_NkjlMmTnl-jpMqGrRsm_ZuGvVwjxN-GzNAhBOCW_YE5FZGGHM-yJNKmLJMi_NOjPIQ1RY-WTJUkVMWD_kYmZcambV-mdReGf9gt_YiWjlkulP-Qn HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 163
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:46:54 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
vary: Origin
last-modified: Tue, 23 Apr 2024 20:46:54 GMT
access-control-allow-origin: https://deywepri.com
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.baidu.com/favicon.ico
103.235.46.40 2.0 kB URL GET www.baidu.com/favicon.ico
IP 103.235.46.40:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Hash 717b138033a41361b32b60fc5062ab2a
af9841b6f0923f890f41feec52c94a0cd68f01d8
c70088079fe9441a726c66ce0e73ae38315ec80051d3dd542c41b82fa0a1993a
GET /favicon.ico HTTP/1.1
Host: www.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1966
Content-Type: image/x-icon
Date: Tue, 23 Apr 2024 20:46:54 GMT
Etag: "423e-5bd257db4e500"
Last-Modified: Wed, 10 Mar 2021 02:33:24 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: Apache
Set-Cookie: BAIDUID=00AE1464A5CA01D1D33CB7D9209F7547:FG=1; expires=Wed, 23-Apr-25 20:46:54 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Vary: Accept-Encoding,User-Agent
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
173.194.222.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:37MdSv1QTmQwxRHFjGnm2Ft82kbTLA:ATzsTfnn7vSZdXac; Expires=Thu, 23-Apr-2026 20:46:55 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AaSxoQzyMT6ysDaaT1hRwOl5goXKRYTveipBC8SkM6umDiyf2D1dfXs9AfUdXKAYtRV4tFszrDEe
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-5YMHd63FzcGctOd1YsEHzw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
173.194.222.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:wfCruV8yMHWHq4m92lV16NV2X2gJuQ:GHGrxvVCvPo-f0RA; Expires=Thu, 23-Apr-2026 20:46:55 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQyr6QjDaXeyH9udVgHm7e46_6bsSqr-CcGSBi7sZOCpt0oM_DVebDdpDYwvbCF5-gADSv8K-A
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-OclUyFVrqybZex67mUiw5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?service=blogger&hl=de&passive=1209600&continue=https://www.blogger.com/favicon.ico
173.194.222.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?service=blogger&hl=de&passive=1209600&continue=https://www.blogger.com/favicon.ico
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?service=blogger&hl=de&passive=1209600&continue=https://www.blogger.com/favicon.ico HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:ABfC-TtwsJ1TDQ_UtWtbJX5GThu3_g:9DHu7jzStoHKeem9; Expires=Thu, 23-Apr-2026 20:46:55 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=AaSxoQxGpvwW1JTyAKZZxHH8-flF_rp1Y94hh8Q3X1mOaQdNvBXRLj_43YhA3GHVzDD0dJv29RUAhA
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-Uxl92cMsMO4_Bchozejugg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.amazon.com/ap/signin/178-4417027-1316064?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico
23.52.85.233 2.4 kB URL GET www.amazon.com/ap/signin/178-4417027-1316064?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico
IP 23.52.85.233:0
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint16:61:C8:C4:18:95:4A:31:9B:C4:3F:AD:F7:97:7F:5C:A7:2F:09:A0
ValidityTue, 06 Feb 2024 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (916)
Hash 12d684071f3e0853458491c4d57a8521
1246b598b1b0f655f3f9e996250fc4ac1f9ad75d
8fbf43f7de6b9b51c84af5bfe5b56f3aba465392defa582c37154a6f2c827c02
GET /ap/signin/178-4417027-1316064?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: Server
content-type: text/html
x-amz-rid: 1AEFQ5J5EQVDAVQMZG3B
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
content-encoding: gzip
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
x-frame-options: SAMEORIGIN
content-length: 2375
date: Tue, 23 Apr 2024 20:46:55 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
x-amzn-cdn-id: ak-0.3a321060.1713905215.10439448
x-cache: NotCacheable from child
mail.yandex.ru/?retpath=https://mail.yandex.ru/favicon.ico?666
77.88.21.37 60 B URL GET mail.yandex.ru/?retpath=https://mail.yandex.ru/favicon.ico?666
IP 77.88.21.37:0
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGlobalSign nv-sa
Subjectmail.yandex.ru
Fingerprint9F:BB:D2:D1:C8:B0:07:2D:1C:25:B9:DD:C2:EF:A8:AE:9F:A3:4E:9A
ValidityMon, 16 Oct 2023 07:59:00 GMT - Fri, 17 May 2024 07:59:00 GMT
File type ASCII text, with no line terminators
Hash 3ce3efffbe76c9e8938ee4068be0887e
c87dbc227147babc95d061c8acdefa75d275bed4
b287f90a45063299afd73544f5f78c33842fb8d230223a822df96c29300dbe8f
GET /?retpath=https://mail.yandex.ru/favicon.ico?666 HTTP/1.1
Host: mail.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 23 Apr 2024 20:46:55 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 60
Connection: keep-alive
Set-Cookie: yandexuid=1281307921713905215; Domain=.yandex.ru; Path=/; Expires=Sun, 23 Apr 2034 20:46:55 GMT
Location: https://360.yandex.ru/mail
Vary: Accept
NEL: {"report_to": "network-errors", "max_age": 604800, "success_fraction": 0.005, "failure_fraction": 0.5}
Report-To: {"group": "network-errors", "max_age": 604800, "endpoints": [{"url": "https://dr.yandex.net/ya360/nel", "priority": 1}, {"url": "https://dr2.yandex.net/ya360/nel", "priority": 2}]}
x-dns-prefetch-control: off
Cache-Control: private,no-cache,no-store,must-revalidate,max-age=0
X-Request-Id: 1b8b0e2db6e3387efc19b9469db01c3a
Strict-Transport-Security: max-age=315360000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AaSxoQzyMT6ysDaaT1hRwOl5goXKRYTveipBC8SkM6umDiyf2D1dfXs9AfUdXKAYtRV4tFszrDEe
173.194.222.84302 Found 427 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AaSxoQzyMT6ysDaaT1hRwOl5goXKRYTveipBC8SkM6umDiyf2D1dfXs9AfUdXKAYtRV4tFszrDEe
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type HTML document, ASCII text, with very long lines (402)
Hash 09c44207084c75a2ed62d1975534253e
fe4b68ba534be5b1e4e1bbc1359d31f42565b327
9418791d8325f9a6ba8feed5c17ae26e8b32ae4e389ab0e09b2388363d18708a
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AaSxoQzyMT6ysDaaT1hRwOl5goXKRYTveipBC8SkM6umDiyf2D1dfXs9AfUdXKAYtRV4tFszrDEe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:6BdYGyg7-Ywn1GNOP5omqO1SX5eBsA:oNMaexjvGtorWQsh;Path=/;Expires=Thu, 23-Apr-2026 20:46:55 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQweAHQTnZYFebvb_qNCGsSRfZWVuJNHhH3l2RPq3dcv0IkM4zE-MJJm3wI0h9_8aS9MOLoqPg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-16436812%3A1713905215312505&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-hPITY_xVE-jTwHiYew2oGw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 427
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQyr6QjDaXeyH9udVgHm7e46_6bsSqr-CcGSBi7sZOCpt0oM_DVebDdpDYwvbCF5-gADSv8K-A
173.194.222.84302 Found 430 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQyr6QjDaXeyH9udVgHm7e46_6bsSqr-CcGSBi7sZOCpt0oM_DVebDdpDYwvbCF5-gADSv8K-A
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type HTML document, ASCII text, with very long lines (407)
Hash ff74e4f4daa262c124262050b63b8f12
c40ae1a1d805724a3850deff22adcf114b0deb50
db002a49f641b96f672c477813161d4f491903226676922375e98e6c53cffb35
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQyr6QjDaXeyH9udVgHm7e46_6bsSqr-CcGSBi7sZOCpt0oM_DVebDdpDYwvbCF5-gADSv8K-A HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:KCXLLFhUWlzTIBW869u27oAG8I2Itg:RXD-f6Io4j3SHrAg;Path=/;Expires=Thu, 23-Apr-2026 20:46:55 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQwM2NjbXEz96KUGTz_KsUuKMYXiFQN6bMRYBVVypjgXhsKPaKLa-gX_Orsuuf2sDTHQ63Y3Sw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2097423251%3A1713905215325481&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-vtPehJ7mvJjmSJEDNRiOsw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 430
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=AaSxoQxGpvwW1JTyAKZZxHH8-flF_rp1Y94hh8Q3X1mOaQdNvBXRLj_43YhA3GHVzDD0dJv29RUAhA
173.194.222.84302 Found 427 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=AaSxoQxGpvwW1JTyAKZZxHH8-flF_rp1Y94hh8Q3X1mOaQdNvBXRLj_43YhA3GHVzDD0dJv29RUAhA
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type HTML document, ASCII text, with very long lines (398)
Hash 4559c2bfa31b9f5a2fb614def541dbb9
1d428904e263d0292a8e21b202a90a70bb26449c
4466f6ebb567162f2aeccff2c2b5661d8290e9d31d2fef8d35f0bfe90545cece
GET /InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=AaSxoQxGpvwW1JTyAKZZxHH8-flF_rp1Y94hh8Q3X1mOaQdNvBXRLj_43YhA3GHVzDD0dJv29RUAhA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:4CuMLgWw3gSbAz66NHYLwchabuxlAg:lAATAMDWbZvQLJBp;Path=/;Expires=Thu, 23-Apr-2026 20:46:55 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=AaSxoQypUXKr_d8aF7EISMPFV8-MgHZtT6qRKYbRCtLlOcMSTI7u2PRkz_ESj1wlyU0tEvm2FaE9vg&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-251408046%3A1713905215331002&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-_mhfz_v9EVSY5wczy5iKKw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 427
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
360.yandex.ru/mail
87.250.250.16 40 B IP 87.250.250.16:0
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGlobalSign nv-sa
Subject360.yandex.ru
FingerprintD4:DC:19:D2:42:2B:BC:88:69:10:FA:94:1C:78:04:49:44:B5:AD:58
ValidityThu, 28 Mar 2024 09:45:22 GMT - Mon, 28 Oct 2024 09:45:22 GMT
File type ASCII text, with no line terminators
Hash e5c431fe834b596bb79ac5cac9ade0b3
530bb7036f70dcf9da12d12f3b33eef5597b4c91
a269514d773dc4dc17f124145fe88233f069ba836ca53da28bf2489b1a8c5d3a
GET /mail HTTP/1.1
Host: 360.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 40
Content-Type: text/plain; charset=utf-8
Date: Tue, 23 Apr 2024 20:46:55 GMT
Location: /mail/
Set-Cookie: _yasc=k5fk7TbQRmMHRTCG85Bjuq5EZiewneOCLoSXUnuwgWM6DGoXLl3SNPKphXoJssZaFQ==; domain=.yandex.ru; path=/; expires=Fri, 21 Apr 2034 20:46:55 GMT; secure
i=m+jXFUAdqvidmW+S5AKiA6QBXrBvkboTP53LPlPMZwOedBFWnUEKrI6kxHgZA/ZB2RkJgvENDQ7DS+zeIyF1gkQg7EE=; Expires=Thu, 23-Apr-2026 20:46:55 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=4549090451713905215; Expires=Thu, 23-Apr-2026 20:46:55 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
Vary: Accept
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQweAHQTnZYFebvb_qNCGsSRfZWVuJNHhH3l2RPq3dcv0IkM4zE-MJJm3wI0h9_8aS9MOLoqPg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-16436812%3A1713905215312505&theme=mn&ddm=0
173.194.222.84403 Forbidden 808 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQweAHQTnZYFebvb_qNCGsSRfZWVuJNHhH3l2RPq3dcv0IkM4zE-MJJm3wI0h9_8aS9MOLoqPg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-16436812%3A1713905215312505&theme=mn&ddm=0
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators
Hash a5faa24e7986d23e91959a64e7e33344
f61f17b84c44fdf3e5a684b1cc20b6115b950c9b
9288c12b75a86867c3a82f625e4f5013dc2de4592ef739daa96c9328f03bbd13
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQweAHQTnZYFebvb_qNCGsSRfZWVuJNHhH3l2RPq3dcv0IkM4zE-MJJm3wI0h9_8aS9MOLoqPg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-16436812%3A1713905215312505&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-Ruc5sBwSwVOKAfjS7qqWSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
360.yandex.ru/mail/
87.250.250.16 43 kB IP 87.250.250.16:0
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGlobalSign nv-sa
Subject360.yandex.ru
FingerprintD4:DC:19:D2:42:2B:BC:88:69:10:FA:94:1C:78:04:49:44:B5:AD:58
ValidityThu, 28 Mar 2024 09:45:22 GMT - Mon, 28 Oct 2024 09:45:22 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (19823)
Hash 8a93a72ba83052945979a49f368d5da9
adb4f59d8cf0fbef4c14791a5bf94a38e13b4ce8
c4e6bbe5524cf9b890b19fc90a377a1781827887f29c746609953c922cf5a8a1
GET /mail/ HTTP/1.1
Host: 360.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate, proxy-revalidate, no-cache, no-store, private
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'unsafe-eval' 'nonce-iPq3+wCzDflRsd6zrVD7rA==' 'self' 'unsafe-inline' mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru yastatic.net; style-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'unsafe-inline' 'self' fonts.googleapis.com; font-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ fonts.gstatic.com; media-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'unsafe-inline' 'self' storage.yandexcloud.net s3.mds.yandex.net; img-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'self' data: blob: mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru yastatic.net downloader.disk.yandex.ru downloader.disk.yandex.net yandex.ru favicon.yandex.net storage.yandexcloud.net s3.mds.yandex.net avatars.mds.yandex.net *.storage.yandex.net *.disk.yandex.net; connect-src yandex.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru yandexmetrica.com:* 'self' api.passport.yandex.ru mail.yandex.ru https://pdd.yandex.ru:* https://pdd.yandex.com:* api-stable.dst.yandex.ru cloud-api.yandex.ru yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/; frame-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'self' blob: mc.yandex.ru forms.yandex.ru www.youtube.com yandex.ru trust.yandex.ru; child-src 'self' blob: mc.yandex.ru; base-uri 'self'; frame-ancestors 'self' https://*.webvisor.com https://metrika.yandex.com https://metrika.yandex.ru; report-uri https://csp.yandex.net/csp?from=tuning&project=tuning&yandex_login=&yandexuid=8607788111713905215;
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Apr 2024 20:46:55 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Pragma: no-cache
Set-Cookie: _yasc=0qP4m3s0sATXL+DIUTxKbECiclT7f6enTDCMevfZ9rfVO+pNS0KskwdWdou/rU60TA==; domain=.yandex.ru; path=/; expires=Fri, 21 Apr 2034 20:46:55 GMT; secure
i=IcqJhWby7/0J3uEt3xMeIO8ODzhKFwepq3mbyR2OWsQLL/CjADmQApdH+hoognU9T+svBybO4Ntxx/f6zq/a3q0jeS8=; Expires=Thu, 23-Apr-2026 20:46:55 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8607788111713905215; Expires=Thu, 23-Apr-2026 20:46:55 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Response-With: YMail
passport.baidu.com//v2/?login&redirect_to=https://www.baidu.com/favicon.ico
103.235.46.9301 Moved Permanently 184 B URL GET HTTP/1.1 passport.baidu.com//v2/?login&redirect_to=https://www.baidu.com/favicon.ico
IP 103.235.46.9:443
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 2b7e31ced8db56cadcc7127bfabe57c1
5b4be340df4fe663cafd5cada2945c743e711f36
66448fc8a8e49044e7619323442c4e74392249928f5f5ef0853e62b9ffe9fb82
GET //v2/?login&redirect_to=https://www.baidu.com/favicon.ico HTTP/1.1
Host: passport.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Content-Length: 184
Content-Type: text/html
Date: Tue, 23 Apr 2024 20:46:56 GMT
Location: https://passport.baidu.com/v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: BWS
Set-Cookie: BAIDUID=61A0A0B14B5BC7E7AA72C4CE55B2B16F:FG=1; expires=Wed, 23-Apr-25 20:46:56 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Strict-Transport-Security: max-age=31536000
Tracecode: 36780193962650844682042404
passport.baidu.com/v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico
103.235.46.9200 OK 6.3 kB URL GET HTTP/1.1 passport.baidu.com/v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico
IP 103.235.46.9:443
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (1336)
Hash 21bb474b72766ae7011a1773e26311f5
cf68b604dac7878bf7ff62c6b893962f807450fc
1aca3ee5b9f6cd3ec5d4ba2f4b9a6e5ca5b6bd13569146cd1119be6b5ec53ac7
GET /v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico HTTP/1.1
Host: passport.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Trace-ID
Connection: keep-alive
Content-Security-Policy-Report-Only: object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' wappass.baidu.com:* passport.baidu.com:* wappass.bdimg.com:* passport.bdimg.com:* ppui-static-wap.cdn.bcebos.com:* ppui-static-pc.cdn.bcebos.com:* hm.baidu.com:* fe.bdimg.com:* msg.baidu.com:* pdc.baidu.com:* img.baidu.com:* openapi.baidu.com:* res.wx.qq.com:* qqq.gtimg.cn:* s.bdstatic.com:* ufosdk.baidu.com:* qapm.baidu.com:* libs.baidu.com:* ext.baidu.com:* apps.baidu.com:* s3.pstatp.com:* tb2.bdstatic.com:* b.bdstatic.com:* msg.baidu.com:* www.baidu.com:* po.srf.baidu.com:* pan.baidu.com:* play.baidu.com:* tb1.bdstatic.com:* dup.baidustatic.com:* static.tieba.baidu.com:* gss2.bdstatic.com:* blob: baiduboxapp: bootupbaiduhd: sofire.bdstatic.com:* id6.me:* opencloud.wostore.cn:* nisbj2.10010.com:* nisbj3.10010.com:* verify.cmpassport.com:* www.cmpassport.com:* nisbj1.10010.com:* mbd.baidu.com:* dlswbr.baidu.com:* dmpstatic.cdn.bcebos.com:* cdn.bootcss.com:* safe.cdn.bcebos.com:*; report-uri https://report-uri.baidu.com/report?app=passport;
Content-Type: text/html
Date: Tue, 23 Apr 2024 20:46:57 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Referrer-Policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
Server: BWS
Set-Cookie: BAIDUID=A7B859ACA90221AE3F39536B7D307A7B:FG=1; expires=Wed, 23-Apr-25 20:46:57 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Strict-Transport-Security: max-age=31536000
Trace-Id: B62EFE01
Tracecode: 41626673610699575562042404
Vary: Accept-Encoding
Transfer-Encoding: chunked
dull-egg.pro/Y.m-Rx0yPz3Ap_vCbDmEVFJ-ZHDI0JyKN_TMEN1OMPT-gR3SJTmUF_kWSXWYQZ9-MbzcQd2eM_zgIh3iJjn-NlJmZnDo0_0qOrDsEt4-NvDwIx5yJ_nANBJCZDD-IF9GJHnIN_JKZLDMMN9-JPnQJRySa_WUQV9WZXj-VZkaZbDcl_jeNf2gUhz-Yjjkcl5mM_DoRplqNrz-VtjuOvTwc_4yOzGAYB1-ODGEFFhGN_jINJmKYLj-gNmOdPWQ5_pScTUUJV5-VXHYlZwaZ_Tc0dweJfn-VhuiajXkF_CmenVoppv-brmsUt9uM_CwZx1ybzm-lBxCQDnEl_GGZHWIVJk-PLTMANmOd_WQ5RpScTU-JV5WRXmY9_yabbWcFd0-PfTgAhmic_HkQl9mMnC-Zpyqdrjs0_wuJvmwhxz-PzXAFBhCJ_mExFwGaHT-0JzKMLjMU_yOJPmQhRp-dTEUlVkWP_TYUZzaYbz-Ed5eYfzgB_kiZjmkRll-YnzoRpjqY_TsltmuOvW-RxjyMzjAZ_iCYDjEYFy-NHWIFJiKZ_DMAN5OJPn-JRlSZTkUR_vWbXWYFZp-bbjc0d
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/Y.m-Rx0yPz3Ap_vCbDmEVFJ-ZHDI0JyKN_TMEN1OMPT-gR3SJTmUF_kWSXWYQZ9-MbzcQd2eM_zgIh3iJjn-NlJmZnDo0_0qOrDsEt4-NvDwIx5yJ_nANBJCZDD-IF9GJHnIN_JKZLDMMN9-JPnQJRySa_WUQV9WZXj-VZkaZbDcl_jeNf2gUhz-Yjjkcl5mM_DoRplqNrz-VtjuOvTwc_4yOzGAYB1-ODGEFFhGN_jINJmKYLj-gNmOdPWQ5_pScTUUJV5-VXHYlZwaZ_Tc0dweJfn-VhuiajXkF_CmenVoppv-brmsUt9uM_CwZx1ybzm-lBxCQDnEl_GGZHWIVJk-PLTMANmOd_WQ5RpScTU-JV5WRXmY9_yabbWcFd0-PfTgAhmic_HkQl9mMnC-Zpyqdrjs0_wuJvmwhxz-PzXAFBhCJ_mExFwGaHT-0JzKMLjMU_yOJPmQhRp-dTEUlVkWP_TYUZzaYbz-Ed5eYfzgB_kiZjmkRll-YnzoRpjqY_TsltmuOvW-RxjyMzjAZ_iCYDjEYFy-NHWIFJiKZ_DMAN5OJPn-JRlSZTkUR_vWbXWYFZp-bbjc0d
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Y.m-Rx0yPz3Ap_vCbDmEVFJ-ZHDI0JyKN_TMEN1OMPT-gR3SJTmUF_kWSXWYQZ9-MbzcQd2eM_zgIh3iJjn-NlJmZnDo0_0qOrDsEt4-NvDwIx5yJ_nANBJCZDD-IF9GJHnIN_JKZLDMMN9-JPnQJRySa_WUQV9WZXj-VZkaZbDcl_jeNf2gUhz-Yjjkcl5mM_DoRplqNrz-VtjuOvTwc_4yOzGAYB1-ODGEFFhGN_jINJmKYLj-gNmOdPWQ5_pScTUUJV5-VXHYlZwaZ_Tc0dweJfn-VhuiajXkF_CmenVoppv-brmsUt9uM_CwZx1ybzm-lBxCQDnEl_GGZHWIVJk-PLTMANmOd_WQ5RpScTU-JV5WRXmY9_yabbWcFd0-PfTgAhmic_HkQl9mMnC-Zpyqdrjs0_wuJvmwhxz-PzXAFBhCJ_mExFwGaHT-0JzKMLjMU_yOJPmQhRp-dTEUlVkWP_TYUZzaYbz-Ed5eYfzgB_kiZjmkRll-YnzoRpjqY_TsltmuOvW-RxjyMzjAZ_iCYDjEYFy-NHWIFJiKZ_DMAN5OJPn-JRlSZTkUR_vWbXWYFZp-bbjc0d HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 86
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:47:14 GMT
content-length: 0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
access-control-allow-credentials: true
vary: Origin
last-modified: Tue, 23 Apr 2024 20:47:14 GMT
access-control-allow-origin: https://deywepri.com
p3p: CP="CUR ADM OUR NOR STA NID"
x-content-type-options: nosniff
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=AaSxoQypUXKr_d8aF7EISMPFV8-MgHZtT6qRKYbRCtLlOcMSTI7u2PRkz_ESj1wlyU0tEvm2FaE9vg&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-251408046%3A1713905215331002&theme=mn&ddm=0
173.194.222.84403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=AaSxoQypUXKr_d8aF7EISMPFV8-MgHZtT6qRKYbRCtLlOcMSTI7u2PRkz_ESj1wlyU0tEvm2FaE9vg&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-251408046%3A1713905215331002&theme=mn&ddm=0
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=AaSxoQypUXKr_d8aF7EISMPFV8-MgHZtT6qRKYbRCtLlOcMSTI7u2PRkz_ESj1wlyU0tEvm2FaE9vg&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-251408046%3A1713905215331002&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-kQ0iSp6HjmTyhuzIqQw3iw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
104.18.124.91200 OK 1.7 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
IP 104.18.124.91:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type HTML document, ASCII text, with very long lines (1768), with no line terminators
Hash 825c2f21a9a22bd9911e6686ced37ded
74f703bdafeabb1aad6a04b073d1745298c111dc
0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:46:53 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 20:46:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8790b4a04dc5568d-OSL
content-encoding: br
newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
104.18.124.91200 OK 1.7 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
IP 104.18.124.91:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type HTML document, ASCII text, with very long lines (1768), with no line terminators
Hash 825c2f21a9a22bd9911e6686ced37ded
74f703bdafeabb1aad6a04b073d1745298c111dc
0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:46:53 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 20:46:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8790b4a04dc6568d-OSL
content-encoding: br
deywepri.com/views/grecaptcha/js/events.min.js?v=1713879066375997772
88.85.69.213200 OK 7.1 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/events.min.js?v=1713879066375997772
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (7436), with no line terminators
Hash aca3fd52acfe8412b350de33122f2730
c9754440703fb3d9c9c36303acf43472cb7897af
8433966db75a2a9e4e431cde70b8a76ac642e0dec6923ff8d37ee0c192bab4a1
GET /views/grecaptcha/js/events.min.js?v=1713879066375997772 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=E8aBqXpt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 20:46:50 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-1bd6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
104.18.124.91200 OK 387 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0ab1vxp92zt&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size 387 kB (387091 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:46:53 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 20:46:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8790b4a10e80568d-OSL
content-encoding: br
newassets.hcaptcha.com/c/e78a38c/hsw.js
104.18.124.91200 OK 528 kB URL GET HTTP/3 newassets.hcaptcha.com/c/e78a38c/hsw.js
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0ab1vxp92zt&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size 528 kB (528392 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/e78a38c/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:46:54 GMT
content-type: application/javascript
etag: W/"4342b00f906eea1d05b94293d52aa8b3"
cache-control: public, max-age=3024000
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 28 May 2024 20:46:54 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8790b4a378e4568d-OSL
content-encoding: br
wavylandscape.pro/buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM
88.85.94.240200 OK 168 B URL GET HTTP/2 wavylandscape.pro/buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM
IP 88.85.94.240:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectwavylandscape.pro
Fingerprint78:9F:25:4A:A8:04:C7:7F:D6:2E:E5:67:9F:55:21:65:94:8C:1D:C6
ValiditySun, 25 Feb 2024 00:50:41 GMT - Sat, 25 May 2024 00:50:40 GMT
File type HTML document, ASCII text, with no line terminators
Hash 9e0c04f6a728b6a6b4cf6033ef73800b
eb16f7f814f9960764a7fcf7d1d8e9a86afc728f
b7d9c4839c6c376dee60d4c451e6ba68b4d1883e60d7187ccdd1575befca836d
GET /buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM HTTP/1.1
Host: wavylandscape.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deywepri.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:46:51 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
api2.hcaptcha.com/checksiteconfig?v=b1c589a&host=deywepri.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&sc=1&swa=1&spst=0
104.18.124.91200 OK 718 B URL POST HTTP/3 api2.hcaptcha.com/checksiteconfig?v=b1c589a&host=deywepri.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&sc=1&swa=1&spst=0
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0ab1vxp92zt&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type troff or preprocessor input, ASCII text, with very long lines (734), with no line terminators
Hash 30905ce77f3dbb0556a3f641a3b7fcbf
106c4bb0c64e96fbfdad4d8a73d6bde0ff70cbf9
f7644085e280ee6847875caca99c5472916397bcc27af7dc8e446bd755010452
POST /checksiteconfig?v=b1c589a&host=deywepri.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&sc=1&swa=1&spst=0 HTTP/1.1
Host: api2.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:46:53 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28vk2VKwPbLoawFj9mU2fhedYxxWRCw1SEXoqxZAm; SameSite=None; Secure; path=/; expires=Tue, 23-Apr-24 21:16:53 GMT; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8790b4a2f848568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.hcaptcha.com/1/api.js?v=1713879066375997772
104.18.124.91200 OK 387 kB URL GET HTTP/2 www.hcaptcha.com/1/api.js?v=1713879066375997772
IP 104.18.124.91:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size 387 kB (387091 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/api.js?v=1713879066375997772 HTTP/1.1
Host: www.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:46:51 GMT
content-type: application/javascript
cf-ray: 8790b490ca5856c9-OSL
cf-cache-status: HIT
age: 0
cache-control: max-age=300
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
expires: Tue, 07 May 2024 12:32:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
deliverytraffico.com/0b085559bbdffdb520aa77a4607ee9f9/
146.190.238.229302 Found 168 B URL GET HTTP/2 deliverytraffico.com/0b085559bbdffdb520aa77a4607ee9f9/
IP 146.190.238.229:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeliverytraffico.com
Fingerprint18:75:66:3D:C9:14:8C:B8:55:F8:F0:77:8B:61:60:A0:3E:B2:48:8F
ValiditySun, 25 Feb 2024 12:47:33 GMT - Sat, 25 May 2024 12:47:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0b085559bbdffdb520aa77a4607ee9f9/ HTTP/1.1
Host: deliverytraffico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 23 Apr 2024 20:46:51 GMT
content-type: text/html; charset=UTF-8
location: https://wavylandscape.pro/buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM
access-control-allow-origin: https://deywepri.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQwM2NjbXEz96KUGTz_KsUuKMYXiFQN6bMRYBVVypjgXhsKPaKLa-gX_Orsuuf2sDTHQ63Y3Sw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2097423251%3A1713905215325481&theme=mn&ddm=0
173.194.222.84403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQwM2NjbXEz96KUGTz_KsUuKMYXiFQN6bMRYBVVypjgXhsKPaKLa-gX_Orsuuf2sDTHQ63Y3Sw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2097423251%3A1713905215325481&theme=mn&ddm=0
IP 173.194.222.84:443
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQwM2NjbXEz96KUGTz_KsUuKMYXiFQN6bMRYBVVypjgXhsKPaKLa-gX_Orsuuf2sDTHQ63Y3Sw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2097423251%3A1713905215325481&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 23 Apr 2024 20:46:55 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: script-src 'nonce-NCldkKNcVutunDRH9WpK8A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
deliverytraffico.com/37a21b48e24ed1184aa8b073cbd7f7f6/?rid=60Uucxr3FIlnE6rxguObAjkke2tLYMfu&host=landings-eu01.sdkl.info
146.190.238.229200 OK 14 B URL GET HTTP/2 deliverytraffico.com/37a21b48e24ed1184aa8b073cbd7f7f6/?rid=60Uucxr3FIlnE6rxguObAjkke2tLYMfu&host=landings-eu01.sdkl.info
IP 146.190.238.229:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://deywepri.com/l?v=E8aBqXpt
Certificate IssuerLet's Encrypt
Subjectdeliverytraffico.com
Fingerprint18:75:66:3D:C9:14:8C:B8:55:F8:F0:77:8B:61:60:A0:3E:B2:48:8F
ValiditySun, 25 Feb 2024 12:47:33 GMT - Sat, 25 May 2024 12:47:32 GMT
File type ASCII text, with no line terminators
Hash c7a2377feeb4a2ea7470a8f3361cadd4
90978eb556bfdc5b8d5c827d77d3f7893349d606
5a6a29ee17ce768dda0fb65615d1d2ae4490f9ce1c33b30c2341a856bd3dc8c0
GET /37a21b48e24ed1184aa8b073cbd7f7f6/?rid=60Uucxr3FIlnE6rxguObAjkke2tLYMfu&host=landings-eu01.sdkl.info HTTP/1.1
Host: deliverytraffico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:46:51 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
104.18.124.91200 OK 387 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=checkbox&id=0ab1vxp92zt&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size 387 kB (387091 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:46:53 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 20:46:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8790b4a10e88568d-OSL
content-encoding: br