{"report_id":"2fa4a310-279b-4a8e-9d6b-1dc81e73bc57","version":6,"status":"done","tags":[],"date":"2025-10-12T09:11:45Z","url":{"schema":"http","addr":"y2down.cc/en/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"title":"YouTube Downloader: Convert to MP3/MP4 in 4K \u0026 HD Quality"},"submit":{"url":{"schema":"http","addr":"y2down.cc/en/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-16T09:11:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"y2down.cc","ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-30","domain_rank":80949,"first_seen":"2022-06-02T13:53:40Z","last_seen":"2025-10-07T05:39:22.786665Z","alert_count":0,"request_count":7,"received_data":800726,"sent_data":3298,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":1,"received_data":400687,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-05T22:13:51.058913Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"push-sdk.com","ip":{"addr":"157.90.33.122","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-10-25","domain_rank":36212,"first_seen":"2022-12-23T14:43:48Z","last_seen":"2025-10-06T16:43:56.532444Z","alert_count":0,"request_count":2,"received_data":55825,"sent_data":867,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"689497df33660bf527f52b4af9a4cb36","sha1":"ec5ae0d0344ccc1ec204eb86038f29108bc30863","sha256":"31f125a33ea064ae852aaa46d5730ff2e693124de0788f7ad9d873d22954be50","sha512":"766ca255afc5ffd8cfa0cc3784dba1b69136ad00f3a3d6536df65ea8ffe2bff700594d4d6fdaf0f319e22b8b289eafa234941a9475f87ed9f1c34c0b32019e88","ssdeep":"","tlshash":"d8a0025829bb1040901b7827426f002624607127041d4d04348c67c54f25c344553a0d","size":72,"data":"","first_seen":"2023-03-08T20:44:32Z","last_seen":"2026-04-04T23:09:44.801388Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17da44c84465d6410d6eb06699e066c9","sha1":"df60c2cd80ee8c7a67b2e749b9fd98d5da723886","sha256":"74b02326aa5607ec2918d345371cf230f87b00dfaad9072124509a4d06d2533a","sha512":"448027e633144937c259adaad671151dd02604ba5d492bda10728ce3728a0777cdd287c15221fb3466026c59e48e062d7b6d53c4b038dd5be8345c363e74964f","ssdeep":"","tlshash":"53d08c8c265b0cb045b73a554b7f6100b00a6123a0a04d217d1ea3c88f20e27eb54904","size":233,"data":"","first_seen":"2025-06-07T16:52:00.844654Z","last_seen":"2025-12-02T20:34:53.353506Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02cad6faf8667d79738ee529ed2dc04d","sha1":"85641aae0f1a29fee3dde1efcf4f74105a7fdfc9","sha256":"9ebafcc22353e550ba595a096ee7a3e291756b44447ffd35fb141c19ef514280","sha512":"16bfebef17ccb8db1dc7f2977eace34e40b012509b46405c2637fad45b632fe5aacd1a752990c6ce496d74e0d8b8953aa2f638d5ed04e32d0197a82c657bda9e","ssdeep":"","tlshash":"6b51590ae3f710771073722d539baa522d7340875088ca717dbe838e2fc15a499a2fda","size":2783,"data":"","first_seen":"2025-10-07T05:39:23.725003Z","last_seen":"2026-04-04T23:09:44.802556Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09635e8d067ccc549db172039bae8f6c","sha1":"48f17903fe1c2d814c8a4b1bceaa859b053510cb","sha256":"ea06a9ffbfbd7202e2e22ff8aa0f626ed10298b43cf6c6f634fbbde1c7b5d366","sha512":"cfe22d2ebf2096a71575bcba417078a4a9637bb0488215dd511baa50bfe194737e7f9378198cce091a5a38c75224310d38f8be16cf0b957dc8a9aa5648a16c91","ssdeep":"384:ZYsBzMEXSr/SRhsa0UIJ/Jh4dYIPVEzyeWcxRtcpdypL1pbyb/FnQB:ZYsBzF2a0UIFIKr/tcInbyxnc","tlshash":"4ff2205ca8fb60a1a627323c8f5f5019b2358417850dce647d4c67e0afe183957eabec","size":34801,"data":"","first_seen":"2025-10-09T18:08:36.013201Z","last_seen":"2026-04-04T23:09:44.803887Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0467c625542d5e6b28f5347a9112727d","sha1":"8cf65bcdce70b9a2ff195c8be22d7bf31e5c728c","sha256":"65754546e94929d657f4162d89513b98f3ea20fa4dea4811a6f1de261837eda3","sha512":"cfc1e66f15110f36f571774e2c7ca0abaaa91d13b979878e73ac7d1343e03a9762636c3aff69754787dc0dfa1d6f50885184e8f41b6f5877417013f1fc0d93a3","ssdeep":"","tlshash":"8290044c00570050c131d7d05f571451141035777053d57c350cc14c1f173044001047","size":54,"data":"","first_seen":"2023-08-03T14:32:33Z","last_seen":"2026-04-04T23:09:44.805313Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7EK4N0Y4LJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c58cf051b7690e1c423d91f0ea374bc","sha1":"93dc8422ced815f6b9089c1247b84cbe8ea5ccd9","sha256":"78ca1d27927d48d6ea2f09ab29175aaac124b45de653bdeb97bc502dc45d050a","sha512":"99d9a54a045058b267fbe57a92943102df8962c4e67f65d92edc01ac11855d56eb669b92a0763c807159d548c16679b306be742e3e04dc5c6db5156043a1101e","ssdeep":"6144:DsY/yp2j4tk0uwbWZJT+Nju5204OaNhYXdXAQ1:DeY8m0KZJu0NJ","tlshash":"388409ce73d674664396f078503f018ba57b28a2b44cc899f189cde52e74a9a4237f7c","size":400083,"data":"","first_seen":"2025-10-12T09:11:49.860585Z","last_seen":"2025-10-12T09:11:49.860585Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbe5de016bc7b56d5745976b8bd6132a","sha1":"03d0d0ae622797a7c5a9f19a720c7106e32867f5","sha256":"b1e80c559a78870069352475613411d64bc2d679f4f37b6905a28a6e9f76cca5","sha512":"d0e02140105277a29a17cf7840bed7044ada0cc7dccad1a2d6987429b4db4ba06ff1b2fcf364a440383405fb526aaa5ea586115d9e6e98e38385c92a530a186f","ssdeep":"1536:t+4WTDEqphzQVDHh1XvK0YxihtvmqcyguPvqDhjhEPRQk+Ekvq:egIgrXvK0YkLcyBANS24","tlshash":"d0b3f82da8f204325633616f6b6f9244bb25a007924dc8117c6dc348bfb4d64d5bbbeb","size":114927,"data":"","first_seen":"2025-10-09T18:08:36.015264Z","last_seen":"2025-10-31T23:47:41.970198Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1081333","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"157.90.33.122","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","size":54787,"data":"","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-09T08:44:02.253095Z","times_seen":7977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-09T13:19:06.234786Z","times_seen":331162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"y2down.cc/en/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T09:11:19.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2down.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:26:20 GMT","end":"Tue, 30 Dec 2025 20:21:46 GMT"},"fingerprint":{"sha1":"5E:EC:AF:C5:1A:16:40:0C:94:E9:01:DC:B3:56:B2:DA:DA:16:5C:93","sha256":"22:D6:56:20:A8:78:5B:08:2C:35:D4:7B:4B:6B:41:40:FC:30:06:EF:66:50:23:38:FF:78:C9:A3:36:1B:C7:C1"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: y2down.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 09:11:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://y2down.cc/en9K/\r\nserver: cloudflare\r\ncache-control: public, max-age=3600\r\nage: 9097\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nserver-timing: cfCacheStatus;desc=\"HIT\", cfEdge;dur=6,cfOrigin;dur=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecvO%2FQZhqvZQZrzTsrIv5RiQmRM4Z5XhDk9vvaxDuhrooIbcbqt1idElUlRTQH%2BJrPgtPiHPwtjSpXOk86hvqWE0oJVwdEc%3D\"}]}\r\ncf-ray: 98d5781a2a8556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376950,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":154,"dns":0,"connect":3,"send":0,"wait":10,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/en9K/","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T09:11:19.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2down.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:26:20 GMT","end":"Tue, 30 Dec 2025 20:21:46 GMT"},"fingerprint":{"sha1":"5E:EC:AF:C5:1A:16:40:0C:94:E9:01:DC:B3:56:B2:DA:DA:16:5C:93","sha256":"22:D6:56:20:A8:78:5B:08:2C:35:D4:7B:4B:6B:41:40:FC:30:06:EF:66:50:23:38:FF:78:C9:A3:36:1B:C7:C1"}}},"request":{"raw":"GET /en9K/ HTTP/1.1\r\nHost: y2down.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 09:11:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkxMdCn7v1jXCUQbEGr0kV7BqKNBSHSDUMBbTllTxAaZeHrnbvEENw5T%2FFPoHQ%2FwPLzioZLvSGI450Vti%2BN2D%2BViSrOR1a8%3D\"}]}\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sun, 12 Oct 2025 09:11:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"EXPIRED\", cfEdge;dur=8,cfOrigin;dur=398\r\ncontent-encoding: br\r\ncf-ray: 98d5781a4aa556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":376950,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"b7a52ef1bd2024e73edeac0ccea746d5","sha1":"76d6af5a65b9743e4ecbea5fa02b8eaa52d93dda","sha256":"ebd4f00a19081862f73ba47eb442133d2b3c7b62528c3eb1cf660ab882f3cce1","sha512":"18d9a8155b28b010b3036eebc945219f37190bee75ebc79e7ee10b523aebf4cdb581d320ad63851c99d8869a7fc73d71c8b282a308a1cdaedbd430ab80152848","ssdeep":"3072:V7/oz17OEBqOMwAxtgIgrXvK0YkLcyBANS26:V7Az17OEBq7yy6","tlshash":"0484f86d65f244712d13a1f9abaf6108b32aa047ca0ded543ddc42489fd46b8c8a37df","first_seen":"2025-10-12T09:11:49.856666Z","last_seen":"2025-10-13T07:34:19.537548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7EK4N0Y4LJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-7EK4N0Y4LJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\nexpires: Sun, 12 Oct 2025 09:11:20 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 135905\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":400083,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"4c58cf051b7690e1c423d91f0ea374bc","sha1":"93dc8422ced815f6b9089c1247b84cbe8ea5ccd9","sha256":"78ca1d27927d48d6ea2f09ab29175aaac124b45de653bdeb97bc502dc45d050a","sha512":"99d9a54a045058b267fbe57a92943102df8962c4e67f65d92edc01ac11855d56eb669b92a0763c807159d548c16679b306be742e3e04dc5c6db5156043a1101e","ssdeep":"6144:DsY/yp2j4tk0uwbWZJT+Nju5204OaNhYXdXAQ1:DeY8m0KZJu0NJ","tlshash":"388409ce73d674664396f078503f018ba57b28a2b44cc899f189cde52e74a9a4237f7c","first_seen":"2025-10-12T09:11:49.860585Z","last_seen":"2025-10-12T09:11:49.860585Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":104,"dns":1,"connect":10,"send":0,"wait":36,"receive":26,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://y2down.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98d5781f5a2e0b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-09T13:19:06.234786Z","times_seen":331162,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":41,"dns":4,"connect":1,"send":0,"wait":14,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/ads.js","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2down.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:26:20 GMT","end":"Tue, 30 Dec 2025 20:21:46 GMT"},"fingerprint":{"sha1":"5E:EC:AF:C5:1A:16:40:0C:94:E9:01:DC:B3:56:B2:DA:DA:16:5C:93","sha256":"22:D6:56:20:A8:78:5B:08:2C:35:D4:7B:4B:6B:41:40:FC:30:06:EF:66:50:23:38:FF:78:C9:A3:36:1B:C7:C1"}}},"request":{"raw":"GET /ads.js HTTP/1.1\r\nHost: y2down.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/en9K/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=3600\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4LfpmOZmeC4BWSIpNav1MLjnhHlLthbBb8%2FtJ1IT1BFxSy6njFfXr1mOwSw1mlouOLy7OXtDfGcPq3hF7urRIPmWozFWIHRPw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d5781f6fa35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-09T12:33:26.168923Z","times_seen":6882,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1081333","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"157.90.33.122","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 11:06:22 GMT","end":"Tue, 25 Nov 2025 11:06:21 GMT"},"fingerprint":{"sha1":"BD:DD:75:88:5F:0F:2F:A6:EA:FF:1B:29:49:86:BB:EC:C1:90:4A:79","sha256":"89:8C:73:02:C1:8B:65:46:0D:EE:E7:41:24:34:AE:25:5A:28:56:20:4F:E2:7C:EB:1C:D8:91:6C:BC:2A:16:12"}}},"request":{"raw":"GET /f/sdk.js?z=1081333 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15242\r\ncontent-encoding: gzip\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":54787,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54745), with no line terminators","md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-09T08:44:02.253095Z","times_seen":7977,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":70,"dns":1,"connect":33,"send":0,"wait":37,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/cdn-cgi/trace","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2down.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:26:20 GMT","end":"Tue, 30 Dec 2025 20:21:46 GMT"},"fingerprint":{"sha1":"5E:EC:AF:C5:1A:16:40:0C:94:E9:01:DC:B3:56:B2:DA:DA:16:5C:93","sha256":"22:D6:56:20:A8:78:5B:08:2C:35:D4:7B:4B:6B:41:40:FC:30:06:EF:66:50:23:38:FF:78:C9:A3:36:1B:C7:C1"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: y2down.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://y2down.cc/en9K/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\nif-modified-since: off\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhtWe2ek0KAPO94RtHj8IDsF9Diu0x1QCyRBMFEt3BpENK%2FXDWcuqcBqUbpz2UTTSIraFMq%2F%2BfePyAhEM15yOT0zlqW6XVKhvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\ncf-ray: 98d5781fbfaf5fac-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"0cc177daec5daa14c874faada635397a","sha1":"0cf3bc88d1f717d2f787a1292f74c86078fdb07e","sha256":"6c9f22468eb397767ee091324732dfe2f2bc9dc88d16363e33afebeb28b1d06e","sha512":"6249f8c9fa061584c5efcecdf1819c14811d72892e1ec28b02a71c10ac9ae3f7ad69cc221b0ee546f9f31481e390d367dd97d7aad4050f6637c51066d7156358","ssdeep":"","tlshash":"4cd02bdfc229141c245c95090aea9341c761524b85af6d21fce14608afc92d614d9df0","first_seen":"2025-10-12T09:11:49.871776Z","last_seen":"2025-10-12T09:11:49.871776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/assets/firefox.svg","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2down.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:26:20 GMT","end":"Tue, 30 Dec 2025 20:21:46 GMT"},"fingerprint":{"sha1":"5E:EC:AF:C5:1A:16:40:0C:94:E9:01:DC:B3:56:B2:DA:DA:16:5C:93","sha256":"22:D6:56:20:A8:78:5B:08:2C:35:D4:7B:4B:6B:41:40:FC:30:06:EF:66:50:23:38:FF:78:C9:A3:36:1B:C7:C1"}}},"request":{"raw":"GET /assets/firefox.svg HTTP/1.1\r\nHost: y2down.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/en9K/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 08:05:46 GMT\r\nvary: Accept-Encoding\r\netag: \"6895afda-83f9\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4qSmujKNB85K%2FXHG7j4WDeK0hwgpOLlYrpaeOtqXTMHj6WS8%2B0PeEU%2FV%2FC4bQTkD7r6qBo358D1pk20sLCjsT4iywBpsBTq6w%3D%3D\"}]}\r\ncf-ray: 98d5781fcfb15fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c214d7548e9dfe83e9093eb04407262e","sha1":"7078117a4bf243ba663ae44e576032cc79826b4e","sha256":"10d54aa020a7363073ef8c137808861137dc6e6fffd3d0f8c95f0a6d15e716e2","sha512":"53fd88d6f1d55528cb93ddb44bb805f53face26df805ca0ff17638dd813409828cb6d63d1d55846dd88aa106a5e8dab986597836b0ef43920b20fed30fc7f9cc","ssdeep":"384:paQDkjJVRcHW1WGIRvvlCEYTtYMaEMDmvTHei1B0zAKYS+6w+j:0QA9QBFATtDr10zAKYS+Lw","tlshash":"c6e263aac73c6973e1dfc2bced5184a5321e51ab99c0c39996b9df1f18285c35d0cba0","first_seen":"2023-07-31T16:54:37Z","last_seen":"2026-04-04T23:09:44.797513Z","times_seen":171,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/event?z=1081333","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"157.90.33.122","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 11:06:22 GMT","end":"Tue, 25 Nov 2025 11:06:21 GMT"},"fingerprint":{"sha1":"BD:DD:75:88:5F:0F:2F:A6:EA:FF:1B:29:49:86:BB:EC:C1:90:4A:79","sha256":"89:8C:73:02:C1:8B:65:46:0D:EE:E7:41:24:34:AE:25:5A:28:56:20:4F:E2:7C:EB:1C:D8:91:6C:BC:2A:16:12"}}},"request":{"raw":"POST /event?z=1081333 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 83\r\nOrigin: https://y2down.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://y2down.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/favicon.svg","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2down.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:26:20 GMT","end":"Tue, 30 Dec 2025 20:21:46 GMT"},"fingerprint":{"sha1":"5E:EC:AF:C5:1A:16:40:0C:94:E9:01:DC:B3:56:B2:DA:DA:16:5C:93","sha256":"22:D6:56:20:A8:78:5B:08:2C:35:D4:7B:4B:6B:41:40:FC:30:06:EF:66:50:23:38:FF:78:C9:A3:36:1B:C7:C1"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: y2down.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/en9K/\r\nCookie: countryCookie=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 08:05:46 GMT\r\nvary: Accept-Encoding\r\netag: \"6895afda-5f4\"\r\ncontent-encoding: gzip\r\nage: 2972\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4GhfXc9lIPreAUD5kT00kXYEea3zudGJHK2JHYIKzuKwZw2vqMOE62uLaX73zqalkBdQ6RUgHovlWDNwfFFU6pWVOqWvjjZyeg%3D%3D\"}]}\r\ncf-ray: 98d57820ffcb5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1821c958bbe5e0a6a4563025af907760","sha1":"26ced4c88143889bf6b5b246b28e4203f3dd6087","sha256":"17e50649ce0babbf448e8a728d4475192b60b4d096a7d9414df727128435519e","sha512":"ccf8489c1aa1917f596c0e0a691706e2180235d2ed318653c5606ddc0a12ad0fe210b3bc53c76b2b748d2fe8c3853cc37bd1eaafda40cfedf99b8bd641cf02a2","ssdeep":"","tlshash":"263145feb799dc67e0ccc2da9e019479287454f7ac898150c0d49f5e2c658d56c0bbe2","first_seen":"2023-05-20T23:52:27Z","last_seen":"2026-04-09T06:46:40.922946Z","times_seen":126,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2down.cc/cdn-cgi/rum?","fqdn":"y2down.cc","domain":"y2down.cc","tld":"cc"},"ip":{"addr":"104.21.85.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y2down.cc/en9K/","date":"2025-10-12T09:11:20.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2down.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:26:20 GMT","end":"Tue, 30 Dec 2025 20:21:46 GMT"},"fingerprint":{"sha1":"5E:EC:AF:C5:1A:16:40:0C:94:E9:01:DC:B3:56:B2:DA:DA:16:5C:93","sha256":"22:D6:56:20:A8:78:5B:08:2C:35:D4:7B:4B:6B:41:40:FC:30:06:EF:66:50:23:38:FF:78:C9:A3:36:1B:C7:C1"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: y2down.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1025\r\nOrigin: https://y2down.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y2down.cc/en9K/\r\nCookie: countryCookie=NO; _ga_7EK4N0Y4LJ=GS2.1.s1760260280$o1$g0$t1760260280$j60$l0$h0; _ga=GA1.1.1261144526.1760260281\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://y2down.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJCLT2xGloPYlJqNkvQLN17AqICtfUKmDldvOCtY0LWev%2FeuUlGsAMrXvkVB9z%2Ff%2FTUF8U0Tk6nyhZ1Rn2iCPngAeapgGo3%2F%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 12 Oct 2025 09:11:20 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98d578219fd05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
