| GET y2down.cc/assets/firefox.svg | 172.67.202.71 | 200 OK | 34 kB |
URL GET y2down.cc/assets/firefox.svg IP 172.67.202.71:443
CertificateIssuerGoogle Trust Services Subjecty2down.cc Fingerprint52:30:BF:12:E3:4D:98:67:BF:8F:19:A8:98:2F:6A:A4:2C:81:C4:8C ValidityThu, 05 Jun 2025 16:28:48 GMT - Wed, 03 Sep 2025 17:26:39 GMT
File typeSVG Scalable Vector Graphics image Hashc214d7548e9dfe83e9093eb04407262e 7078117a4bf243ba663ae44e576032cc79826b4e 10d54aa020a7363073ef8c137808861137dc6e6fffd3d0f8c95f0a6d15e716e2
GET /assets/firefox.svg HTTP/1.1
Host: y2down.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://y2down.cc/enXE/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Jun 2025 00:42:41 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c3lgUbl4lJidyA4GjyZIfeHUjws6VgjpjiCF3CZ9ByzlVlGjOBn%2BvxtCBbPIQd7esl72qO0fH49XJjdpSxvFKWoW8LzViqgHrE9BghIv0yMIEe4y%2Fbetgwq1xsg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 10 Apr 2024 21:22:34 GMT
vary: Accept-Encoding
etag: "6617031a-83f9"
content-encoding: gzip
age: 8182
cache-control: max-age=3600
cf-cache-status: HIT
cf-ray: 9537b508aae5568e-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=763&min_rtt=0&rtt_var=346&sent=182&recv=144&lost=0&retrans=0&sent_bytes=105643&recv_bytes=8796&delivery_rate=15373577&ss_exit_cwnd=14895&ss_exit_reason=2&cwnd=16706&unsent_bytes=0&cid=b5d173e59660ffd1&ts=768&inflight_dur=54&x=44"
|
|
| POST push-sdk.com/event?z=1081333 | 157.90.33.72 | 200 OK | 0 B |
URL POST push-sdk.com/event?z=1081333 IP 157.90.33.72:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectpush-sdk.com Fingerprint2E:9A:67:76:0E:42:81:D5:30:A2:76:47:85:CA:6C:D7:FD:FF:38:9C ValidityThu, 05 Jun 2025 03:47:05 GMT - Wed, 03 Sep 2025 03:47:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event?z=1081333 HTTP/1.1
Host: push-sdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 83
Origin: https://y2down.cc
DNT: 1
Connection: keep-alive
Referer: https://y2down.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Angie
date: Sun, 22 Jun 2025 00:42:41 GMT
content-length: 0
access-control-allow-origin: https://y2down.cc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
X-Firefox-Spdy: h2
|
|
| GET y2down.cc/images/banner-3.jpg | 172.67.202.71 | 200 OK | 91 kB |
URL GET y2down.cc/images/banner-3.jpg IP 172.67.202.71:443
CertificateIssuerGoogle Trust Services Subjecty2down.cc Fingerprint52:30:BF:12:E3:4D:98:67:BF:8F:19:A8:98:2F:6A:A4:2C:81:C4:8C ValidityThu, 05 Jun 2025 16:28:48 GMT - Wed, 03 Sep 2025 17:26:39 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3 Hash029a9f2187bc07ed9e1b9a3823613937 dc2225c262ad27a2a7f6a5973a96d860c3a0ba9d 9c0969647cf8bf7f4c2f934baffc46497c2da405822ce29fc014e201560d3447
GET /images/banner-3.jpg HTTP/1.1
Host: y2down.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://y2down.cc/enXE/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Jun 2025 00:42:41 GMT
content-type: image/jpeg
content-length: 91223
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BF33PITqaPXok3wovRmDKrtJ%2BQkDyNOOuBqIIHQfkQFv72UAhD%2Bpl6bo0Wm9p75ZHB%2BrLW8Xszrwf6bNeA9yAs4HbUk5uZTZxBj%2BI8mh3I88Ywm64IIo0Oco9A0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 02 Sep 2024 14:52:33 GMT
etag: "66d5d131-16457"
accept-ranges: bytes
age: 8366
cache-control: max-age=3600
cf-cache-status: HIT
cf-ray: 9537b5081ae0568e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2887&min_rtt=579&rtt_var=2728&sent=96&recv=123&lost=0&retrans=0&sent_bytes=8280&recv_bytes=7170&delivery_rate=567633&ss_exit_cwnd=14895&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=b5d173e59660ffd1&ts=681&inflight_dur=30&x=44"
|
|
| GET push-sdk.com/f/sdk.js?z=1081333 | 157.90.33.72 | 200 OK | 55 kB |
URL GET push-sdk.com/f/sdk.js?z=1081333 IP 157.90.33.72:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectpush-sdk.com Fingerprint2E:9A:67:76:0E:42:81:D5:30:A2:76:47:85:CA:6C:D7:FD:FF:38:9C ValidityThu, 05 Jun 2025 03:47:05 GMT - Wed, 03 Sep 2025 03:47:04 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (54745), with no line terminators Hashf4d87b22393ed5eef57d01d86c6a88f6 5e1aaee78cd735c23cc423fc863decca30aee219 91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee
GET /f/sdk.js?z=1081333 HTTP/1.1
Host: push-sdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://y2down.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Angie
date: Sun, 22 Jun 2025 00:42:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 15242
content-encoding: gzip
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| GET y2down.cc/cdn-cgi/trace | 172.67.202.71 | 200 OK | 266 B |
IP 172.67.202.71:443
CertificateIssuerGoogle Trust Services Subjecty2down.cc Fingerprint52:30:BF:12:E3:4D:98:67:BF:8F:19:A8:98:2F:6A:A4:2C:81:C4:8C ValidityThu, 05 Jun 2025 16:28:48 GMT - Wed, 03 Sep 2025 17:26:39 GMT
Hashe87b1874636de0520a80636d043dd395 a11f82bc00374f53e3cf537a3f74be4bc80882cc 2030939bbe6793cd443024832a94ad611485b5b2566ab995bbc61f2b9b104817
GET /cdn-cgi/trace HTTP/1.1
Host: y2down.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://y2down.cc/enXE/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Jun 2025 00:42:41 GMT
content-type: text/plain
cache-control: no-cache
content-encoding: gzip
access-control-allow-origin: *
server: cloudflare
cf-ray: 9537b5089ae4568e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| GET y2down.cc/ads.js | 172.67.202.71 | 404 Not Found | 6.6 kB |
IP 172.67.202.71:443
CertificateIssuerGoogle Trust Services Subjecty2down.cc Fingerprint52:30:BF:12:E3:4D:98:67:BF:8F:19:A8:98:2F:6A:A4:2C:81:C4:8C ValidityThu, 05 Jun 2025 16:28:48 GMT - Wed, 03 Sep 2025 17:26:39 GMT
File typeHTML document, ASCII text, with very long lines (5391) Hash543ac81966d87ac815e08eb0e436d719 e35bb4e32ccf08c11a3935084b50660feb835350 8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968
GET /ads.js HTTP/1.1
Host: y2down.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://y2down.cc/enXE/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 22 Jun 2025 00:42:41 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zMWxNd2lFdcvD%2Bx6MtAZo%2FCR9Xl6iCj64%2B2HvjXVza5Sp%2BVeVT9nN1rkDXvFs2%2FiyQKt79cyNY6N5Utfe4D%2FK5Lyh%2Fgrwtzvl7PApjXRKVuLXDhbrZhHgPiD1M%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
cache-control: public, max-age=3600
age: 8365
cf-cache-status: HIT
content-encoding: br
cf-ray: 9537b5086ae2568e-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=709&min_rtt=0&rtt_var=317&sent=176&recv=141&lost=0&retrans=0&sent_bytes=102507&recv_bytes=8218&delivery_rate=15373577&ss_exit_cwnd=14895&ss_exit_reason=2&cwnd=16706&unsent_bytes=0&cid=b5d173e59660ffd1&ts=726&inflight_dur=51&x=44"
|
|
| GET y2down.cc/favicon.svg | 172.67.202.71 | 200 OK | 1.5 kB |
IP 172.67.202.71:443
CertificateIssuerGoogle Trust Services Subjecty2down.cc Fingerprint52:30:BF:12:E3:4D:98:67:BF:8F:19:A8:98:2F:6A:A4:2C:81:C4:8C ValidityThu, 05 Jun 2025 16:28:48 GMT - Wed, 03 Sep 2025 17:26:39 GMT
File typeSVG Scalable Vector Graphics image Hash1821c958bbe5e0a6a4563025af907760 26ced4c88143889bf6b5b246b28e4203f3dd6087 17e50649ce0babbf448e8a728d4475192b60b4d096a7d9414df727128435519e
GET /favicon.svg HTTP/1.1
Host: y2down.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://y2down.cc/enXE/
Cookie: countryCookie=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Jun 2025 00:42:41 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prExc2rw5bV0AKs8VRlbstflPLl90sRCrtA%2FER4XIqtIYf%2FyNMWmkFD9mEunH6qU8chx7kR951w2o%2BmJmRGgbxo5IPB8CYmRAyIMhAXMyzvU9pTP8PGG607WDv4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 10 Apr 2024 21:22:34 GMT
vary: Accept-Encoding
etag: "6617031a-5f4"
content-encoding: gzip
age: 7610
cache-control: max-age=3600
cf-cache-status: HIT
cf-ray: 9537b509eae8568e-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=748&min_rtt=0&rtt_var=289&sent=193&recv=146&lost=0&retrans=0&sent_bytes=117221&recv_bytes=9129&delivery_rate=15373577&ss_exit_cwnd=14895&ss_exit_reason=2&cwnd=16706&unsent_bytes=0&cid=b5d173e59660ffd1&ts=966&inflight_dur=71&x=44"
|
|
| | 172.67.202.71 | 301 Moved Permanently | 328 kB |
IP 172.67.202.71:443
CertificateIssuerGoogle Trust Services Subjecty2down.cc Fingerprint52:30:BF:12:E3:4D:98:67:BF:8F:19:A8:98:2F:6A:A4:2C:81:C4:8C ValidityThu, 05 Jun 2025 16:28:48 GMT - Wed, 03 Sep 2025 17:26:39 GMT
Size328 kB (328258 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/ HTTP/1.1
Host: y2down.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 22 Jun 2025 00:42:40 GMT
content-type: text/html; charset=utf-8
location: https://y2down.cc/enXE/
server: cloudflare
cache-control: public, max-age=3600
cf-cache-status: EXPIRED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2FhNTC1L3MeIAUftudmM4muEkaD3lEUAVp9R7YIPlcKhwilet5%2BpBOKi2%2Bkkpqp5M5E25XDslXwQGDGf7edye5mRUpMDkT4%3D"}]}
cf-ray: 9537b502ec9a56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| | 172.67.202.71 | 200 OK | 328 kB |
IP 172.67.202.71:443
CertificateIssuerGoogle Trust Services Subjecty2down.cc Fingerprint52:30:BF:12:E3:4D:98:67:BF:8F:19:A8:98:2F:6A:A4:2C:81:C4:8C ValidityThu, 05 Jun 2025 16:28:48 GMT - Wed, 03 Sep 2025 17:26:39 GMT
File typeHTML document, ASCII text, with very long lines (1854) Size328 kB (328258 bytes) Hash29ce035a5e1f738fb07619675886c3f2 a09bda0a3f0ef9a3a80762eb61e0c30e0f1155a5 3901e2c49b1e3d72667afda05f9ec9550efb65234b6fdd7c72732a1b25815c8f
GET /enXE/ HTTP/1.1
Host: y2down.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Jun 2025 00:42:40 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
cache-control: public, max-age=3600
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=05qEspQ6ZXec%2FCUb3eUZVDkovQIW8C78UI%2Bu2I6yEZeFogUpNdkFqkWs6Sc7nk1LINPmTG9Ib2lJTYRjwNPN8751EBuCPnA%3D"}]}
cf-cache-status: EXPIRED
last-modified: Sun, 22 Jun 2025 00:42:40 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9537b503ed2756b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.googletagmanager.com/gtag/js?id=G-7EK4N0Y4LJ | 142.250.74.168 | 200 OK | 375 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-7EK4N0Y4LJ IP 142.250.74.168:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5913) Size375 kB (375295 bytes) Hashc19ebd05c1292c6a4bdbee45aa4febd7 1d4031ab3c9c185ca3aaf2e74d81f667f158387b 5f9eeb0f4d5f9e386f5c6a5c4329f3164c056e0695c8698fd2f1b8c08ed43809
GET /gtag/js?id=G-7EK4N0Y4LJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://y2down.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 22 Jun 2025 00:42:41 GMT
expires: Sun, 22 Jun 2025 00:42:41 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 127726
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|