| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASSHykqMp81BFN6TJ2i8bjqa06RjrUuYKcT9viZ7DlJJ2aY_p9MX13DycPmLakeEUa4yzIBbRPgh&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1427463316%3A1741583103141744&ddm=1 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASSHykqMp81BFN6TJ2i8bjqa06RjrUuYKcT9viZ7DlJJ2aY_p9MX13DycPmLakeEUa4yzIBbRPgh&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1427463316%3A1741583103141744&ddm=1 IP 64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:AE:C0:D6:4D:D9:36:6A:9E:55:63:03:A2:D1:49:77:18:BD:75:08 ValidityWed, 26 Feb 2025 15:34:53 GMT - Wed, 21 May 2025 15:34:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASSHykqMp81BFN6TJ2i8bjqa06RjrUuYKcT9viZ7DlJJ2aY_p9MX13DycPmLakeEUa4yzIBbRPgh&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1427463316%3A1741583103141744&ddm=1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 10 Mar 2025 05:05:03 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-cXzfSYqi99i_wWqmb6GRBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.JkwoUECwqWs.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ndroundhertouc.com/R1pzWExoZRArcQgCOTkdKTk6CQs/aCIJPAE7QB4OBh81LS8sE1UsJSNnQml5f2xGb2o3MxdlfWEpBzk4MilOa3x3a1UxIiE1Tmh8d2tVLnF2dEBsYnRsXWxqMmdGYXl3YkFofH5uRWt+dW5VLDwmPU5pajcuBzRxdm1HaXl/aUJof3FpSw | 104.21.37.4 | 204 No Content | 0 B |
URL POST ndroundhertouc.com/R1pzWExoZRArcQgCOTkdKTk6CQs/aCIJPAE7QB4OBh81LS8sE1UsJSNnQml5f2xGb2o3MxdlfWEpBzk4MilOa3x3a1UxIiE1Tmh8d2tVLnF2dEBsYnRsXWxqMmdGYXl3YkFofH5uRWt+dW5VLDwmPU5pajcuBzRxdm1HaXl/aUJof3FpSw IP 104.21.37.4:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectndroundhertouc.com Fingerprint35:A3:A0:26:FB:38:45:B7:F7:07:33:D0:16:C5:CA:7C:BC:16:20:B1 ValidityMon, 17 Feb 2025 14:44:20 GMT - Sun, 18 May 2025 15:41:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /R1pzWExoZRArcQgCOTkdKTk6CQs/aCIJPAE7QB4OBh81LS8sE1UsJSNnQml5f2xGb2o3MxdlfWEpBzk4MilOa3x3a1UxIiE1Tmh8d2tVLnF2dEBsYnRsXWxqMmdGYXl3YkFofH5uRWt+dW5VLDwmPU5pajcuBzRxdm1HaXl/aUJof3FpSw HTTP/1.1
Host: ndroundhertouc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Mon, 10 Mar 2025 05:05:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qwxd7yRwLQ3zz2EJKLCBpocr0%2F7gvrnzrZYT8oP1%2BYF0ddaiGCobNFjGb21M1LLMMNTekEywHC9OnQlNP4S4qQthmJGhX6TW%2FCAh6LJMF8%2Fm7OOJ8%2Bk0FVGWJvMVbcuiM1XjgSM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e0465e09590b41-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=60439&min_rtt=56910&rtt_var=8442&sent=15&recv=18&lost=0&retrans=0&sent_bytes=4984&recv_bytes=1873&delivery_rate=65512&cwnd=245&unsent_bytes=0&cid=f568f8bf08a3f817&ts=1627&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 216.58.207.228 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP 216.58.207.228:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1793
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss
Cookie: _GRECAPTCHA=09AP_l5mNrcxmsDToafbv7nUk-0cHRPAjfL_-G_TgMUutD8zZHwszSgVwT5ag3w7YJADZC4eKTAfqrV7KfsL_e92Y
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
date: Mon, 10 Mar 2025 05:05:05 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5362v9175474265za200&_p=1741583099993&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&cid=1399521619.1741583101&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1741583100&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Fly%20Knight%20SteamGG%20zip&en=scroll&epn.percent_scrolled=90&tfd=7672 | 216.239.32.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5362v9175474265za200&_p=1741583099993&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&cid=1399521619.1741583101&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1741583100&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Fly%20Knight%20SteamGG%20zip&en=scroll&epn.percent_scrolled=90&tfd=7672 IP 216.239.32.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintAE:1B:D4:56:41:F7:15:A7:24:B8:F3:55:83:91:17:2C:97:12:67:6E ValidityWed, 26 Feb 2025 15:32:54 GMT - Wed, 21 May 2025 15:32:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5362v9175474265za200&_p=1741583099993&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&cid=1399521619.1741583101&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1741583100&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Fly%20Knight%20SteamGG%20zip&en=scroll&epn.percent_scrolled=90&tfd=7672 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://datanodes.to
date: Mon, 10 Mar 2025 05:05:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:136:0
report-to: {"group":"ascnsrsggc:136:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js | 104.26.14.76 | 200 OK | 1.1 kB |
URL GET datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (1175), with no line terminators Hash5552241fb700f202104206d16e48bd20 6fce7454b07364109a522cced0d401f6845ee41e 6a127e427de7fba1468b29e95cf86145a218594ca2625e1171dc98b97dff2cc4
GET /theme_2023/dist/assets/VirusScan-e53a5e80.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-460"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gw4STC8qZi9Xqzh2725I3aCfpohr6enOfiun1rlX91Kdx%2BVzwuU0KnlZ1j7vUriNRXr%2FVBnQkaEUfKH%2BUVFOrdxz08o1a415RKczzymKnCS9MnqMy8rbL38IvxQyRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e046488bcf0b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=57918&min_rtt=57223&rtt_var=100&sent=178&recv=47&lost=0&retrans=0&sent_bytes=173077&recv_bytes=2176&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=1616&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js | 104.26.14.76 | 200 OK | 17 kB |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (16550) Hashe9abb5c958cc124ca4108f522fececdb cb0430b6ad9229cf2179a201e15360e496f24491 8125fdfeff86def1e8543526af797cbb7eb4bd87a161da3f18968b3fd8a83e53
GET /theme_2023/dist/assets/Tooltip-298cb247.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-40a7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6878
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FIngbQIuWrTYjYzvFUDYLtMXWnKJ1Yb4bQ0TRY9gWciTFtCvYlfcv12LQ1Y5MyGL2nd6KKOI0exCFT%2F5%2BMcIsYKq4VxZlaTew%2BR0GfWf343zwh9g54vLHntb9zN5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e0464c5d2a0b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=59616&min_rtt=57223&rtt_var=938&sent=225&recv=69&lost=0&retrans=0&sent_bytes=209503&recv_bytes=3411&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=2225&x=0"
X-Firefox-Spdy: h2
|
|
| d8hdm94ldw8yr.cloudfront.net/?lmdhd=1158643 | 143.204.42.19 | 200 OK | 343 kB |
URL GET d8hdm94ldw8yr.cloudfront.net/?lmdhd=1158643 IP 143.204.42.19:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
Size343 kB (343016 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?lmdhd=1158643 HTTP/1.1
Host: d8hdm94ldw8yr.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 112102
date: Mon, 10 Mar 2025 05:05:01 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://datanodes.to
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: phyoRTDG274GC0osG-Ej2H_2XHQ3YBDPtqeoiV9RZleGuJypSdmcfg==
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.16.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP 104.21.16.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:02 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 150
last-modified: Mon, 10 Mar 2025 05:02:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JIC9BehtLeK0AunySRzNMVQVVZlgf%2FeRaCnjzeuUYGVswl6hWvObI%2F0CZAJr6%2FpTxqqT%2FHK6Kj3obBxnVfWkFgPyqkLfd8thgG%2Fu6urgZY43F5gz%2BFbReDfYDnURfXoAz46PtzA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04656bd3356c5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=58977&min_rtt=56305&rtt_var=23023&sent=6&recv=7&lost=0&retrans=0&sent_bytes=3294&recv_bytes=1185&delivery_rate=66494&cwnd=252&unsent_bytes=0&cid=f085538d9f422315&ts=99&x=0"
X-Firefox-Spdy: h2
|
|
| thewsere.top/pntne | 212.117.186.84 | 200 OK | 0 B |
IP 212.117.186.84:443
Requested byhttps://datanodes.to/download CertificateIssuerZeroSSL Subjectthewsere.top FingerprintA1:42:97:C7:40:92:BD:E3:E2:BE:0D:2F:6B:B4:DA:43:D6:D1:73:49 ValidityWed, 05 Mar 2025 00:00:00 GMT - Tue, 03 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
OPTIONS /pntne HTTP/1.1
Host: thewsere.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Mar 2025 05:05:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://datanodes.to
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| datanodes.to/theme_2023/dist/assets/Util-ba300788.js | 104.26.14.76 | 200 OK | 2.9 kB |
URL GET datanodes.to/theme_2023/dist/assets/Util-ba300788.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2940), with no line terminators Hash6c48312b1653befcf2adee03a49501ef 82c3a6bcfce4b219d5d37fbf9f2dcd5c508bcf48 114a397e85d5141cb6dad08c073e11e25fbdee2891681e3238f76977ada40124
GET /theme_2023/dist/assets/Util-ba300788.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-b29"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wLHImQ%2BJhpDDdEMD51IibPJnXy2Ha83YsblFl08xCw7mHknZ1x8uxCxubkhKuNa4tVYKNyNUsXGQ5507N7aTlPZVvIJVDS7T%2BlC8IjM0dBuAHiUMC7Zft%2BqaFaydSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e0464c5d270b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=59616&min_rtt=57223&rtt_var=938&sent=221&recv=68&lost=0&retrans=0&sent_bytes=207717&recv_bytes=3297&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=2224&x=0"
X-Firefox-Spdy: h2
|
|
| eflewroundand.com/TGNHM1otASReZS1eJRUvPg96FmgKRnV1PnQLI15jeA8jRGI1EWlQNiMWI1UoIw0zHTQpF2IBHAsAKnUDHTceYR4mOilwCxUqF3stBDJ2YT0oFA1xCDUEPWYiHgAXcBgPJjALaQY1CnEONRQydhgrMAlKYws3MHo+DjYCfw9+CA1WGyMVF2JvKzUFZjMGMjNwCDYyIGQYGgAhWggVJhFLKhZSJGQbfjV2dhsVMQlKNQAkIEB/fiUJdhMeJy5ELRolFmYVFBslewg/GwtlNRgxAFwSDVI/YTwULgBkMhUbCwITKCUuRzEOJg5jFgsyAmI2DgwlRAAUNi8eKichAnoNATB/cggnMTVyIgIiEmAYfyIrVwkLDhZ2CyQuMmkbGRkSdC59JAJ5Eyo7CnQcHTJweDYgOxJLbzYhLH0ILSsGdAt8MTZQDA0BAklqIjQWQx8tBCR7Cxo1dVAIDSsfdDFqCTRcNDxeJHYeOxp1AhICGwlWFRo | 108.157.214.46 | 200 OK | 3.1 kB |
URL GET eflewroundand.com/TGNHM1otASReZS1eJRUvPg96FmgKRnV1PnQLI15jeA8jRGI1EWlQNiMWI1UoIw0zHTQpF2IBHAsAKnUDHTceYR4mOilwCxUqF3stBDJ2YT0oFA1xCDUEPWYiHgAXcBgPJjALaQY1CnEONRQydhgrMAlKYws3MHo+DjYCfw9+CA1WGyMVF2JvKzUFZjMGMjNwCDYyIGQYGgAhWggVJhFLKhZSJGQbfjV2dhsVMQlKNQAkIEB/fiUJdhMeJy5ELRolFmYVFBslewg/GwtlNRgxAFwSDVI/YTwULgBkMhUbCwITKCUuRzEOJg5jFgsyAmI2DgwlRAAUNi8eKichAnoNATB/cggnMTVyIgIiEmAYfyIrVwkLDhZ2CyQuMmkbGRkSdC59JAJ5Eyo7CnQcHTJweDYgOxJLbzYhLH0ILSsGdAt8MTZQDA0BAklqIjQWQx8tBCR7Cxo1dVAIDSsfdDFqCTRcNDxeJHYeOxp1AhICGwlWFRo IP 108.157.214.46:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjecteflewroundand.com FingerprintDF:E1:5D:6F:A6:CB:AD:49:A7:73:A9:86:72:A2:2F:10:DA:DC:40:16 ValiditySun, 09 Mar 2025 00:00:00 GMT - Tue, 07 Apr 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3097), with no line terminators Hash8149a9116df011a4633fcfd95059b72a 9448c899a76c0de43005cb6dbe83fc8d4f730e7a b92437ef38a130bc99b1909354e8e21cf16554e300b33b9a036c9d442616bf5d
GET /TGNHM1otASReZS1eJRUvPg96FmgKRnV1PnQLI15jeA8jRGI1EWlQNiMWI1UoIw0zHTQpF2IBHAsAKnUDHTceYR4mOilwCxUqF3stBDJ2YT0oFA1xCDUEPWYiHgAXcBgPJjALaQY1CnEONRQydhgrMAlKYws3MHo+DjYCfw9+CA1WGyMVF2JvKzUFZjMGMjNwCDYyIGQYGgAhWggVJhFLKhZSJGQbfjV2dhsVMQlKNQAkIEB/fiUJdhMeJy5ELRolFmYVFBslewg/GwtlNRgxAFwSDVI/YTwULgBkMhUbCwITKCUuRzEOJg5jFgsyAmI2DgwlRAAUNi8eKichAnoNATB/cggnMTVyIgIiEmAYfyIrVwkLDhZ2CyQuMmkbGRkSdC59JAJ5Eyo7CnQcHTJweDYgOxJLbzYhLH0ILSsGdAt8MTZQDA0BAklqIjQWQx8tBCR7Cxo1dVAIDSsfdDFqCTRcNDxeJHYeOxp1AhICGwlWFRo HTTP/1.1
Host: eflewroundand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1215
date: Mon, 10 Mar 2025 05:05:02 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=RaI+vvbw2ypDKNk5+9xcvXcip8jM503H1+l8SXijU5p18+x+gg4jDsGlGcShesMS8iZavhyZ7WYF5okR56IjQ7F4+wDS4XGCKRcjtkVKLzONl8IC34oQpPvj7vuS; Expires=Mon, 17 Mar 2025 05:05:02 GMT; Path=/
AWSALBCORS=RaI+vvbw2ypDKNk5+9xcvXcip8jM503H1+l8SXijU5p18+x+gg4jDsGlGcShesMS8iZavhyZ7WYF5okR56IjQ7F4+wDS4XGCKRcjtkVKLzONl8IC34oQpPvj7vuS; Expires=Mon, 17 Mar 2025 05:05:02 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 797e08d987207122bff536abc6502d6c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: kEBPTFiHMFlaj6fipu02GqmRblVf7rMk0AdldafpZ3KVSJyt05gARg==
X-Firefox-Spdy: h2
|
|
| eflewroundand.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 | 108.157.214.46 | 200 OK | 3.1 kB |
URL GET eflewroundand.com/QjI0Q20jUFcuUiMPVmUYMF4JZl8EFwYFCXpaUC5Udl5QNFU7QBogAS1HUCUfLVxAbQMnRhFxKyp8WhkCDwJ+FSoTaGIlOAtUcAJYOHAEDTwAalcBOABadglcAH5wBSRwZEwkJRRLUAU6AEpXGSs1dHZyXTtxThYEFAF6dScTB0QOOnYGcCg8KWdiAg4RYW0PPykHUgpcJWBiETgsZXYVOwNfZhsoJV17JwUDcXMFGjJxTHcuFHZQACsTVnwOXBBjfBUnZwByFBUpYWMqWCN0BHMvAHN6GjoAaEMBAXZUYyoVEXVmeiwYRWYELylWWgEoGGh1cRoFZwVuGTpoQxEqCgNbMCwHeHoCLANmZgUFDlZ1CTkVAXItLwdrVRE6IXR6cgYDVlwrKhNgbjQvKnd6Fi4uaGFyHXNRdRklFXN6OS8pVnoCNQhjfDsdFXhyKCIWY3EGL3JkVws1C2N1cjgBFF4wAixCCQAnJgN4EAsYQWwNCzVUUw IP 108.157.214.46:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjecteflewroundand.com FingerprintDF:E1:5D:6F:A6:CB:AD:49:A7:73:A9:86:72:A2:2F:10:DA:DC:40:16 ValiditySun, 09 Mar 2025 00:00:00 GMT - Tue, 07 Apr 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3099), with no line terminators Hashb1ebbf7f29a71515810408de017d0353 271e36039f874cd3837c2ed7c1caaae732f809f3 a68002dce3acae5fc30db01807b36fede74bad9173c2d4fca61cda3b8c6e2b93
GET /QjI0Q20jUFcuUiMPVmUYMF4JZl8EFwYFCXpaUC5Udl5QNFU7QBogAS1HUCUfLVxAbQMnRhFxKyp8WhkCDwJ+FSoTaGIlOAtUcAJYOHAEDTwAalcBOABadglcAH5wBSRwZEwkJRRLUAU6AEpXGSs1dHZyXTtxThYEFAF6dScTB0QOOnYGcCg8KWdiAg4RYW0PPykHUgpcJWBiETgsZXYVOwNfZhsoJV17JwUDcXMFGjJxTHcuFHZQACsTVnwOXBBjfBUnZwByFBUpYWMqWCN0BHMvAHN6GjoAaEMBAXZUYyoVEXVmeiwYRWYELylWWgEoGGh1cRoFZwVuGTpoQxEqCgNbMCwHeHoCLANmZgUFDlZ1CTkVAXItLwdrVRE6IXR6cgYDVlwrKhNgbjQvKnd6Fi4uaGFyHXNRdRklFXN6OS8pVnoCNQhjfDsdFXhyKCIWY3EGL3JkVws1C2N1cjgBFF4wAixCCQAnJgN4EAsYQWwNCzVUUw HTTP/1.1
Host: eflewroundand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1216
date: Mon, 10 Mar 2025 05:05:02 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=ONUeZdayRkZ0F9+lEVAdE/HrkESqngVVK0fxX23+qE9xE4OGu86kZkbySQFW8mdv2LNbTlf6HkjkMilZOr5JERkI2IYcTMIlEIWWXo7PcPVEpoF8PdBOgkPvebkY; Expires=Mon, 17 Mar 2025 05:05:02 GMT; Path=/
AWSALBCORS=ONUeZdayRkZ0F9+lEVAdE/HrkESqngVVK0fxX23+qE9xE4OGu86kZkbySQFW8mdv2LNbTlf6HkjkMilZOr5JERkI2IYcTMIlEIWWXo7PcPVEpoF8PdBOgkPvebkY; Expires=Mon, 17 Mar 2025 05:05:02 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 797e08d987207122bff536abc6502d6c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 1KeI0DXXSg3i7F9lTSaFQVvwZuT7umrxRlsrqZKScozqlXx0yTjgIQ==
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js? | 104.26.14.76 | 200 OK | 8.4 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js? IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (8361), with no line terminators Hash7605d54885dee74bdf415b9bbef8a7c1 f4127fb45acf8d08350c50035c8076ef0b275773 767c36a54e674a7cab783c6d0b2d0c4dd8f07d3e8297e07c83347dadd01c7ebd
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js? HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vPEe1eEG1sJW8rlZx%2FEHKKaPnen7unCEQny1h4fvg7yZ7NyE2tBVaQYuRJp2THVi7%2FCg5%2BlWhtjq9bCPPgziJoND4pAsKUhKeibW%2FbbvrCaTJb6hVY0%2BHKfjd0rYVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e0464c6d310b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=59616&min_rtt=57223&rtt_var=938&sent=243&recv=70&lost=0&retrans=0&sent_bytes=227372&recv_bytes=3538&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=2233&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js | 216.58.211.3 | 200 OK | 559 kB |
URL GET www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js IP 216.58.211.3:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
Size559 kB (558808 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221042
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Mar 2025 23:09:27 GMT
expires: Sat, 07 Mar 2026 23:09:27 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 28 Feb 2025 21:01:45 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 194135
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASSHykodNcQBlfSuX7Fo9BrzRSicGW8hO1ydo0mt_L36ArJCH9in8GjMGGcCnZawa3rPHCHrV3X7fg | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASSHykodNcQBlfSuX7Fo9BrzRSicGW8hO1ydo0mt_L36ArJCH9in8GjMGGcCnZawa3rPHCHrV3X7fg IP 64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:AE:C0:D6:4D:D9:36:6A:9E:55:63:03:A2:D1:49:77:18:BD:75:08 ValidityWed, 26 Feb 2025 15:34:53 GMT - Wed, 21 May 2025 15:34:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASSHykodNcQBlfSuX7Fo9BrzRSicGW8hO1ydo0mt_L36ArJCH9in8GjMGGcCnZawa3rPHCHrV3X7fg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:LA1VK9ziSq4jz6ht0EcGjHb6-zeyxA:jM1dGrPGvp7xtE0D;Path=/;Expires=Wed, 10-Mar-2027 05:05:03 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 10 Mar 2025 05:05:03 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASSHykpKAk_0MIXervMr3VzbfTQkctOpcnx44HYgB0bodKPKjz3jAgC-Dc0ApACzP7ZcZeLG6foF&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S154312122%3A1741583103139968&ddm=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-5j8ZQOdjaSXUVufkRVqnLg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 419
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/src/assets/images/virus-scan.png | 104.26.14.76 | 200 OK | 34 kB |
URL GET datanodes.to/theme_2023/src/assets/images/virus-scan.png IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashed8693e5b49bbfec66898fd26b979317 0fe86ee5614e13c3c93672a4d57ef69555f3e701 5b6ef28011995150a50e6e59ca8728a5f0f92c7dfe27f08433e398a7fc177a9d
GET /theme_2023/src/assets/images/virus-scan.png HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:04:59 GMT
content-type: image/png
content-length: 33827
last-modified: Wed, 31 Jan 2024 09:41:40 GMT
etag: "65ba15d4-8423"
cache-control: max-age=14400
cf-cache-status: HIT
age: 194
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PydajzMMIrGpb4Lrls%2F7fg36%2BKu8SvOl%2FZnCj5M7XLwP2BKu%2B51H1XCFjamK62E9Sm2Fyq9ZTxFS68%2BwHTej2redUqce64shIzB6N5f9DtGKVLnhKc4xoAAcoohZCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e046439a740b69-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=58193&min_rtt=57766&rtt_var=1131&sent=84&recv=23&lost=0&retrans=0&sent_bytes=65755&recv_bytes=1909&delivery_rate=511480&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=826&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js | 104.26.14.76 | 200 OK | 28 kB |
URL GET datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (27942) Hash6b949827cd27578f8d96e716764745fd fc5d054a81cc11c95726bf55f11fc0c96ae0f58b 579bb21ed189cf13357365e55a2dc69ca1e3866ce7566362e163cfe86b3f3aee
GET /theme_2023/dist/assets/transition-a1567fd4.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-6d27"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6878
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lrU0iwTbgNkLazslWuwjuLJnFoh30QxzjQJedWTQEXm%2B8tKB5K5IKywG0Y6RIjsCDMsDriyY%2FK96F6NbrQc2i5OuCZI0t%2F0YsF15mbiZA5WgtWw3AYPxGhNJOtPLcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e0464c6d2d0b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=59616&min_rtt=57223&rtt_var=938&sent=233&recv=70&lost=0&retrans=0&sent_bytes=216926&recv_bytes=3538&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=2230&x=0"
X-Firefox-Spdy: h2
|
|
| d8hdm94ldw8yr.cloudfront.net/?lmdhd=1158643 | 143.204.42.19 | 200 OK | 343 kB |
URL GET d8hdm94ldw8yr.cloudfront.net/?lmdhd=1158643 IP 143.204.42.19:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
Size343 kB (343016 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?lmdhd=1158643 HTTP/1.1
Host: d8hdm94ldw8yr.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 112101
date: Mon, 10 Mar 2025 05:05:01 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q2dkpUeO1qRGPFSmjQWyC33zKGtx-WN8HGoe0Dna9J_jPt7hQAUzuQ==
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss | 216.58.207.228 | 200 OK | 73 kB |
URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss IP 216.58.207.228:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
File typeHTML document, ASCII text, with very long lines (56411) Hash56ed1b4a9241bd66a2028ac825eaaf32 e9442f64278878f6d6c210d4aa0f68be5265ee0e 52df203d4755c18626d8fbc6f767bc81b3b2ec33595c9749418365445f446116
GET /recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 10 Mar 2025 05:05:02 GMT
content-security-policy: script-src 'nonce-cwExYivr4PVSwuZML0LSfw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 216.58.211.3 | 200 OK | 2.2 kB |
URL GET www.gstatic.com/recaptcha/api2/logo_48.png IP 216.58.211.3:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Mar 2025 19:49:08 GMT
expires: Fri, 14 Mar 2025 19:49:08 GMT
cache-control: public, max-age=604800
age: 206155
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/frtuoi8swmp1/FlyKnight-SteamGG.NET.zip | 104.26.14.76 | 302 Found | 82 kB |
URL User Request GET datanodes.to/frtuoi8swmp1/FlyKnight-SteamGG.NET.zip IP 104.26.14.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /frtuoi8swmp1/FlyKnight-SteamGG.NET.zip HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 10 Mar 2025 05:04:58 GMT
location: https://datanodes.to/download
cf-cache-status: BYPASS
set-cookie: file_code=frtuoi8swmp1; domain=.datanodes.to; path=/; expires=Mon, 10-Mar-2025 06:04:58 GMT
file_name=FlyKnight-SteamGG.NET.zip; domain=.datanodes.to; path=/; expires=Mon, 10-Mar-2025 06:04:58 GMT
lang=english; domain=.datanodes.to; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j1xyode%2FoNMBk5ZDr%2FdvlhN6MYko76YW2cYFfXWZKduxXNu3DKSCusVtu84V3M4W69ImqFaVHL%2BBzm3GZoOYWwVc75RXdMFiEVB%2FSf0dyCILOZlyKwc7hfGHF%2Fexiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e0463ef8e80b69-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=58110&min_rtt=58026&rtt_var=16482&sent=8&recv=8&lost=0&retrans=0&sent_bytes=3202&recv_bytes=1151&delivery_rate=64390&cwnd=254&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=188&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/images/logo.png?v=1 | 104.26.14.76 | 200 OK | 15 kB |
URL GET datanodes.to/images/logo.png?v=1 IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typePNG image data, 364 x 230, 8-bit/color RGBA, non-interlaced Hashc9338a5cbd74ee24aee2175a5ac9cfac eb519e37c50d2dd8908d80a2dd203879f2a430c9 e73da34c3963cd34608bc4016fd1060cf58de21ef14321a153ec45bc004ff56e
GET /images/logo.png?v=1 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:04:59 GMT
content-type: image/png
content-length: 15350
last-modified: Tue, 16 Jan 2024 14:16:42 GMT
etag: "65a68fca-3bf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 568
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AbBYu%2FX2N9OMYbpw6JFqQ%2FxMyKF2B5Lc15MBzWFqOqyMyBHvyiHqNDuELxQ6OcgeBkQWyC4fnInl7mVt17x71uiF3LAlkVQ3mNCnHZ05aaYcdzPtCwsSfI0JUsGSIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e046439a720b69-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=58193&min_rtt=57766&rtt_var=1131&sent=69&recv=23&lost=0&retrans=0&sent_bytes=49790&recv_bytes=1909&delivery_rate=511480&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=824&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js | 104.26.14.76 | 200 OK | 571 B |
URL GET datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (578), with no line terminators Hash4269ae966a9de40dcc8745dc7a28e6ed e57e819dec3c4b86c663859673b3f1ed06ac0a80 da99d56059482651e6ec90085973116ebe749cb150a06381d2d968e0349912fe
GET /theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-23b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OzuXg0WRGSp8z9sTqM3aULtcJT47nEA%2FBFhYDStpG8G1xzMHD0aEwf3BQHdCFBPKQmMXya8pPrZgc4Z33Pb1R%2FopfU%2Bh0suns%2FGIZn3F4fvACxyVDknKOTJDH0M%2Bgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04649bc350b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58961&min_rtt=57223&rtt_var=1826&sent=214&recv=55&lost=0&retrans=0&sent_bytes=206264&recv_bytes=2916&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=1803&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.26.14.76 | 302 Found | 8.4 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 10 Mar 2025 05:05:00 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BHN1NBv4wiBQXv9uBTLEtCgtopFYyIzXoTplptiPcAmb6jEgd1Et4xJgb39kxw2vfzQbWaCzlKsyLXpMlKUqqmChl3%2BuNgZN%2F2cZ%2F%2Bj9ND0cunBdyrJr6GFN0Fvk9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04649ac2c0b69-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=58961&min_rtt=57223&rtt_var=1826&sent=183&recv=54&lost=0&retrans=0&sent_bytes=174249&recv_bytes=2798&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=1791&x=0"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF | 142.250.74.72 | 200 OK | 364 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF IP 142.250.74.72:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintAE:1B:D4:56:41:F7:15:A7:24:B8:F3:55:83:91:17:2C:97:12:67:6E ValidityWed, 26 Feb 2025 15:32:54 GMT - Wed, 21 May 2025 15:32:53 GMT
File typeJavaScript source, ASCII text, with very long lines (5960) Size364 kB (363963 bytes) Hashcea2a73a02e635650e821cd0108925d2 7d57e3b6f8e382dd99debeb1c4076d1ca6d339e3 e210dcc0683c4ed7d4e6f7594b8fe3c00048284a1762be2b11146b3b99e77748
GET /gtag/js?id=G-7DP7NV2LKF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 10 Mar 2025 05:04:59 GMT
expires: Mon, 10 Mar 2025 05:04:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1003:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1003:0
report-to: {"group":"ascgcycc:1003:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1003:0"}],}
server: Google Tag Manager
content-length: 120944
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js | 104.26.14.76 | 200 OK | 79 kB |
URL GET datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2023/dist/assets/FileActions-fa6032ae.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-13480"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YzsGmehxoDvvafXtIHxkXpw4CCFmG9XHwPLzzS3eUJ%2F81zSPuUuAUPeySgW0fmE9wjELLKwmkeKouFR4yvYdLupO4xVLuA1v4p85zFwH7iuhAqcX8bZmV%2BrszM3Qpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04649ac2e0b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58961&min_rtt=57223&rtt_var=1826&sent=187&recv=55&lost=0&retrans=0&sent_bytes=175712&recv_bytes=2916&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=1796&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js | 216.58.211.3 | 200 OK | 559 kB |
URL GET www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js IP 216.58.211.3:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7- CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
Size559 kB (558808 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221042
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Mar 2025 23:09:27 GMT
expires: Sat, 07 Mar 2026 23:09:27 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 28 Feb 2025 21:01:45 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 194136
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 104.26.14.76 | 200 OK | 82 kB |
IP 104.26.14.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /download HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:04:59 GMT
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
set-cookie: affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D; domain=.datanodes.to; path=/; expires=Mon, 24-Mar-2025 05:04:59 GMT
expires: Sun, 09 Mar 2025 05:04:59 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G7eOU7xL3M2Ly5tpsnXlJCvnbVYCyLLVQGPbPfR1BecrveED89kdfg%2BJV1BtIvASFunr8T2eA79yBfQDp32x88c2LJrd%2FBMza6KvvUTbkzeNWSBb8bggi9Fc4rVLjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e0464039890b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58300&min_rtt=58026&rtt_var=12741&sent=11&recv=10&lost=0&retrans=0&sent_bytes=3998&recv_bytes=1283&delivery_rate=64390&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=407&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 142.250.74.163 | 200 OK | 8.0 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP 142.250.74.163:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Mar 2025 18:41:08 GMT
expires: Sat, 07 Mar 2026 18:41:08 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:53:31 GMT
content-type: font/woff2
age: 210232
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 142.250.74.163 | 200 OK | 7.8 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP 142.250.74.163:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Mar 2025 10:24:48 GMT
expires: Fri, 06 Mar 2026 10:24:48 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:53:03 GMT
content-type: font/woff2
age: 326412
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js | 104.26.14.76 | 200 OK | 667 B |
URL GET datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (714), with no line terminators Hashb90614bc98aeca91e691d23e37c171b4 a39e57e9fea9962559b1103391f11a32ee4c2a86 d2cfe4f893fa1316bbef6ff68a069038eae5dd0cffcd5f337f01d647d5db1fcc
GET /theme_2023/dist/assets/LoadingIcon-59fcef50.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-29b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MygiWfoVF6y%2FhejxolpM3xh80g3Oemev6lHXUeT1znyIC2ogd7hLXb24DsED1OVl9u1kdw%2FHYdP2WzD3oM77opxfYEsPDh5Ws4AVQueL3uv6m4GBArftBFHFz5IOYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04649ac2f0b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58961&min_rtt=57223&rtt_var=1826&sent=184&recv=55&lost=0&retrans=0&sent_bytes=174783&recv_bytes=2916&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=1794&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7- | 216.58.207.228 | 200 OK | 102 B |
URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7- IP 216.58.207.228:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
File typeASCII text, with no line terminators Hash1f01af3b844df0c0c064dd24acb447d5 93aabd7e2186cdd997b79cd04bad2773de7d4235 2a17444ac5e573828c100120643c9eb6a1a17910049467daa79ba39719594edb
GET /recaptcha/api2/webworker.js?hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7- HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Mon, 10 Mar 2025 05:05:03 GMT
date: Mon, 10 Mar 2025 05:05:03 GMT
cache-control: private, max-age=300
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 142.250.74.163 | 200 OK | 7.7 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP 142.250.74.163:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Mar 2025 20:39:21 GMT
expires: Sat, 07 Mar 2026 20:39:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:54:05 GMT
content-type: font/woff2
age: 203139
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/index-dd92db6d.js | 104.26.14.76 | 200 OK | 6.4 kB |
URL GET datanodes.to/theme_2023/dist/assets/index-dd92db6d.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (6800), with no line terminators Hashb6c2b858946a0197c1f2e7a5e18c2378 92094e2c5eac137efeb75d1f1e979587d89a7f84 cfe2a5d81530356e55e4f034baec1ccaa1ce862e0e8268e4c9c78ae2bd7beda9
GET /theme_2023/dist/assets/index-dd92db6d.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-18f9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9FRZxJ8seV%2BJiinfYJFT8Fwfc1Qmido29GGQdF7%2FUyNsXB8Ekh7v8wU8qWqcxwfNrRScLAxV%2FvF4TBjPPoYeYUZn69MoqJmuECrZQpHJTChhrWhpSKMDChpNcsKx7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04649ac300b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58961&min_rtt=57223&rtt_var=1826&sent=212&recv=55&lost=0&retrans=0&sent_bytes=204288&recv_bytes=2916&delivery_rate=1333979&cwnd=256&unsent_bytes=31&cid=5ff31a8cafa0eb82&ts=1797&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.16.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP 104.21.16.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:02 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 150
last-modified: Mon, 10 Mar 2025 05:02:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uFFQVMUr8scQybQRI288u4Zy5FfvQfYWJdda4lx69%2B0grXCvANHhltGqoqmh%2Fk9THYjCgoA8cFrgClTfa4MJr0j3GSuklpN4WLmUKyX07bsF5hWXfmgwpiFuLn60OYFN0dzSn2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04656ed4e56c5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=58977&min_rtt=56305&rtt_var=23023&sent=62&recv=10&lost=0&retrans=0&sent_bytes=67585&recv_bytes=1396&delivery_rate=66494&cwnd=252&unsent_bytes=17235&cid=f085538d9f422315&ts=126&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASSHykpKAk_0MIXervMr3VzbfTQkctOpcnx44HYgB0bodKPKjz3jAgC-Dc0ApACzP7ZcZeLG6foF&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S154312122%3A1741583103139968&ddm=1 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASSHykpKAk_0MIXervMr3VzbfTQkctOpcnx44HYgB0bodKPKjz3jAgC-Dc0ApACzP7ZcZeLG6foF&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S154312122%3A1741583103139968&ddm=1 IP 64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:AE:C0:D6:4D:D9:36:6A:9E:55:63:03:A2:D1:49:77:18:BD:75:08 ValidityWed, 26 Feb 2025 15:34:53 GMT - Wed, 21 May 2025 15:34:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASSHykpKAk_0MIXervMr3VzbfTQkctOpcnx44HYgB0bodKPKjz3jAgC-Dc0ApACzP7ZcZeLG6foF&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S154312122%3A1741583103139968&ddm=1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 10 Mar 2025 05:05:03 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-MCNbYLIwfV5tzyWb6kI8ww' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.JkwoUECwqWs.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/styles__ltr.css | 216.58.211.3 | 200 OK | 79 kB |
URL GET www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/styles__ltr.css IP 216.58.211.3:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash7752b3cf328fd16c188f7d072dcecd53 42fa93b2ecf55e8fab3aa9b753518373dd00a9e7 ecca1dc726f50200230c28d5ab42e622a203e5ed457a8ecf63c1f1d2fdc34c6b
GET /recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42059
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Mar 2025 15:00:44 GMT
expires: Sat, 07 Mar 2026 15:00:44 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 28 Feb 2025 21:01:45 GMT
content-type: text/css
vary: Accept-Encoding
age: 223458
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP 142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Mar 2025 10:30:29 GMT
expires: Fri, 06 Mar 2026 10:30:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 326074
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js | 104.26.14.76 | 200 OK | 3.5 kB |
URL GET datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (3595), with no line terminators Hash3ea1e1c98c032731766e57e74e10d366 f9075bbaa2aba6c29bc24fcb8181fb7d6d777784 5b85003f57bd4e3cde19be8f32f1513b3b982bd20e5f20bf7a024789b2be31ca
GET /theme_2023/dist/assets/open-closed-f13f7375.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-d9f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6878
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rsgN0ugJ23dQ%2FZzj5Zp4DAD2xzYd5pmXFxXce7gNykJ7H8a0fe%2BEiIK0UjAZnGuHRxd%2FyMjdmO%2B1Zb%2F08w6v6KZHbKcSvWYv%2FwdCf6w3mXqU0gy22Vf4aRDPV7mW%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e0464c6d300b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=59616&min_rtt=57223&rtt_var=938&sent=249&recv=70&lost=0&retrans=0&sent_bytes=231888&recv_bytes=3538&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=2233&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=1399521619.1741583101>m=45je5362v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&z=1545611677 | 142.250.74.131 | 200 OK | 42 B |
URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=1399521619.1741583101>m=45je5362v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&z=1545611677 IP 142.250.74.131:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.no Fingerprint26:B7:26:CB:C6:A9:06:E9:C0:85:18:1A:20:54:87:E3:8B:35:EC:7C ValidityWed, 26 Feb 2025 15:35:45 GMT - Wed, 21 May 2025 15:35:44 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=1399521619.1741583101>m=45je5362v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&z=1545611677 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 10 Mar 2025 05:05:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| thewsere.top/pntne | 212.117.186.84 | 200 OK | 2 B |
IP 212.117.186.84:443
Requested byhttps://datanodes.to/download CertificateIssuerZeroSSL Subjectthewsere.top FingerprintA1:42:97:C7:40:92:BD:E3:E2:BE:0D:2F:6B:B4:DA:43:D6:D1:73:49 ValidityWed, 05 Mar 2025 00:00:00 GMT - Tue, 03 Jun 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /pntne HTTP/1.1
Host: thewsere.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Type: application/json
Content-Length: 83
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Mar 2025 05:05:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://datanodes.to
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 11-Mar-2025 05:05:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyEEKwjAQRuGZoQSKQvmxB%2BgJtEEQXdelJAtP0NYihZKUJCre3rj4Fu8RkdRbyLyi0u1lr0%2BZPmca%2FIQYCxkdlPHh03%2FBAdIeIcFhY%2BPim86%2FXMp%2FRPFv8IzSDj42ZkoJ4iLKrh%2BW6XC938CrIkjyiiHxURP4rXY%2F6E0cMQ%3D%3D; expires=Tue, 11-Mar-2025 05:05:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| datanodes.to/theme_2023/dist/assets/app-36afb1c9.css | 104.26.14.76 | 200 OK | 53 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-36afb1c9.css IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2023/dist/assets/app-36afb1c9.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:04:59 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-cf77"
cache-control: max-age=14400
cf-cache-status: HIT
age: 568
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BMCMRuGwsVzQS8MaGGMiNJ7wh%2FEAX1do1692u1m0ECH8V0gtvQTRmzdKAOFmdBIbmOD7UaG2ZxMf4IbQw2hdwn4DQvoMO1KEKpJRwac2bbzV%2By6vYQVk9P5V%2BK3TWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e046439a700b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58193&min_rtt=57766&rtt_var=1131&sent=57&recv=23&lost=0&retrans=0&sent_bytes=39303&recv_bytes=1909&delivery_rate=511480&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=823&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js | 216.58.211.3 | 200 OK | 559 kB |
URL GET www.gstatic.com/recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js IP 216.58.211.3:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
Size559 kB (558808 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/EGO3I7Q26cZ-jBw3BEtzIx7-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221042
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Mar 2025 23:09:27 GMT
expires: Sat, 07 Mar 2026 23:09:27 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 28 Feb 2025 21:01:45 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 194134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 216.58.207.228 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP 216.58.207.228:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1810
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
date: Mon, 10 Mar 2025 05:05:05 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap | 142.250.74.74 | 200 OK | 5.9 kB |
URL GET fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap IP 142.250.74.74:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintF1:11:17:AF:9C:89:34:EE:D5:CB:84:40:84:EA:01:19:A9:F6:ED:C2 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeASCII text, with very long lines (6040), with no line terminators Hash92ce94ca50fec890cfe6d268de5f1144 0e3e7d60e754ad04897b3a77587cbd6743dd0c55 441f7117ae375b9c180bc1e49590c0fc489ebfa13b21c3a1c8e8c77862c9b42b
GET /css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 10 Mar 2025 05:04:59 GMT
date: Mon, 10 Mar 2025 05:04:59 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 15 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP 142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Mar 2025 10:07:38 GMT
expires: Fri, 06 Mar 2026 10:07:38 GMT
cache-control: public, max-age=31536000
age: 327445
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.163 | 200 OK | 7.9 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 IP 142.250.74.163:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Mar 2025 10:14:35 GMT
expires: Fri, 06 Mar 2026 10:14:35 GMT
cache-control: public, max-age=31536000
age: 327025
last-modified: Wed, 04 Dec 2024 06:53:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5362v9175474265za200&_p=1741583099993&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&cid=1399521619.1741583101&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1741583100&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Fly%20Knight%20SteamGG%20zip&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2559 | 216.239.32.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5362v9175474265za200&_p=1741583099993&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&cid=1399521619.1741583101&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1741583100&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Fly%20Knight%20SteamGG%20zip&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2559 IP 216.239.32.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintAE:1B:D4:56:41:F7:15:A7:24:B8:F3:55:83:91:17:2C:97:12:67:6E ValidityWed, 26 Feb 2025 15:32:54 GMT - Wed, 21 May 2025 15:32:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5362v9175474265za200&_p=1741583099993&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102825837&cid=1399521619.1741583101&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1741583100&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Fly%20Knight%20SteamGG%20zip&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2559 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://datanodes.to
date: Mon, 10 Mar 2025 05:05:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:136:0
report-to: {"group":"ascnsrsggc:136:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.16.1 | 200 OK | 26 B |
IP 104.21.16.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeASCII text, with no line terminators Hashf28f27466ba2e81af39b138cda1e2f93 8c3d49a029d5b39c90125518a335d37398531f87 c174a1f06ef86bf3edd757f6c9dffbb065a5c57dd307390f0ba239fb2b483ff9
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:02 GMT
content-type: text/plain
set-cookie: csu=414657870028585@1@1741583102; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sr4c4pV2KS2aIORHE3ZOo4h1N%2F%2FT0H0TOF8Qc%2Fx0LOagyHkMjb%2B2WSUaBRunbVC1LmF4bmvUATgjD3a9%2BvRyTvJCFpbYdofVNjVnZWNyl1megAoT6cBt9yjYFI9adPSkLInvM9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e04656cd3b56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=58489&min_rtt=56305&rtt_var=496&sent=182&recv=35&lost=0&retrans=0&sent_bytes=211231&recv_bytes=1427&delivery_rate=951884&cwnd=253&unsent_bytes=0&cid=f085538d9f422315&ts=229&x=0"
X-Firefox-Spdy: h2
|
|
| ndroundhertouc.com/TzdEQ2ZgCCcwWxtgdXAyInl8G1YJARIbUy5lKnIwK3FxBwAjbmI3DysKdXJTdwFxdEA/XiB+V2lEMCISOkR5ckAmWSIsW2lBeXJIfANqcFBhA2I2W34RMDMHKAp1ZRY7Qyh+V3gDdXZefAZ0cVZ9Ag | 104.21.37.4 | 204 No Content | 0 B |
URL GET ndroundhertouc.com/TzdEQ2ZgCCcwWxtgdXAyInl8G1YJARIbUy5lKnIwK3FxBwAjbmI3DysKdXJTdwFxdEA/XiB+V2lEMCISOkR5ckAmWSIsW2lBeXJIfANqcFBhA2I2W34RMDMHKAp1ZRY7Qyh+V3gDdXZefAZ0cVZ9Ag IP 104.21.37.4:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectndroundhertouc.com Fingerprint35:A3:A0:26:FB:38:45:B7:F7:07:33:D0:16:C5:CA:7C:BC:16:20:B1 ValidityMon, 17 Feb 2025 14:44:20 GMT - Sun, 18 May 2025 15:41:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TzdEQ2ZgCCcwWxtgdXAyInl8G1YJARIbUy5lKnIwK3FxBwAjbmI3DysKdXJTdwFxdEA/XiB+V2lEMCISOkR5ckAmWSIsW2lBeXJIfANqcFBhA2I2W34RMDMHKAp1ZRY7Qyh+V3gDdXZefAZ0cVZ9Ag HTTP/1.1
Host: ndroundhertouc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 10 Mar 2025 05:05:02 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fp7QqOMaDCZ1KZk1i4Eok%2BF8Dwpj4FigHBgmbvHQmgvALrcEUxyUTyhqgMjvXbSuxWdAMFGPpdgAHfeUsnMw%2BKpdeOY5ILshrF42%2FBwZ%2BfvYzTr4SSeXAd4scRfFs7l6lcasrZs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e046553e460b41-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=62709&min_rtt=56910&rtt_var=23423&sent=9&recv=10&lost=0&retrans=0&sent_bytes=3877&recv_bytes=1522&delivery_rate=63400&cwnd=242&unsent_bytes=0&cid=f568f8bf08a3f817&ts=214&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP 64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:AE:C0:D6:4D:D9:36:6A:9E:55:63:03:A2:D1:49:77:18:BD:75:08 ValidityWed, 26 Feb 2025 15:34:53 GMT - Wed, 21 May 2025 15:34:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:HnqjGfyVOjtNs8g1q28TH7my7TRF9A:2717LzhBFH64xKB8; Expires=Wed, 10-Mar-2027 05:05:02 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 10 Mar 2025 05:05:02 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASSHykodNcQBlfSuX7Fo9BrzRSicGW8hO1ydo0mt_L36ArJCH9in8GjMGGcCnZawa3rPHCHrV3X7fg
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-LN9x1F905VgeMHHu3d9oNg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 216.58.207.228 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP 216.58.207.228:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1810
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
date: Mon, 10 Mar 2025 05:05:05 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/app-80bcdb82.js | 104.26.14.76 | 200 OK | 183 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-80bcdb82.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (32531) Size183 kB (183021 bytes) Hash68168e1fcc3f0b89637287285c331e9b 2252e15424087258ef80a353512b685215e68335 df548d433ea12395b99a860e96667848bea70b8eeae6348959d3a1cee6fa57c4
GET /theme_2023/dist/assets/app-80bcdb82.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:04:59 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-2caed"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFqMdiyrFMnE3doNtvGugdBbuXNu%2BQUAvngs85l8lHfz5uH99vrPkZfScg6DlJzxL5Z413D8r8l2DOTSMMWz4Riv7uyt9%2FpaPBRZ2%2FjuNI9kAkvs0B1dBa55CcLa6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e046439a760b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58193&min_rtt=57766&rtt_var=1131&sent=114&recv=23&lost=0&retrans=0&sent_bytes=100328&recv_bytes=1909&delivery_rate=511480&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=832&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css | 104.26.14.76 | 200 OK | 372 B |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (373), with no line terminators Hash9fa892c8b5cb88d2cb9977b8ab1503e2 56541ba3e043b3a46ad525b4185c436017c8f45a 0b25778dbe5067fa8cdb0569dcb6938bc39856e430289cba0f3098364b33fc3e
GET /theme_2023/dist/assets/Tooltip-4872b02d.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-174"
cache-control: max-age=14400
cf-cache-status: HIT
age: 195
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XAkAkeCgzvbHuXO8hoBDehuTeqFXhat2Te1ap7mr%2BQ%2BNL5C3ZYXvN4opf7NPVjSFllt9YaJQ533EwpzfBAXhFzULbvcZ%2F8IXIaZfYhY4j58UWfC77n4gBxkN5sGCPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e046487bc50b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=57918&min_rtt=57223&rtt_var=100&sent=175&recv=47&lost=0&retrans=0&sent_bytes=172346&recv_bytes=2176&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=1608&x=0"
X-Firefox-Spdy: h2
|
|
| thewsere.top/pntne | 212.117.186.84 | 200 OK | 2 B |
IP 212.117.186.84:443
Requested byhttps://datanodes.to/download CertificateIssuerZeroSSL Subjectthewsere.top FingerprintA1:42:97:C7:40:92:BD:E3:E2:BE:0D:2F:6B:B4:DA:43:D6:D1:73:49 ValidityWed, 05 Mar 2025 00:00:00 GMT - Tue, 03 Jun 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /pntne HTTP/1.1
Host: thewsere.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Type: application/json
Content-Length: 76
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Mar 2025 05:05:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://datanodes.to
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 11-Mar-2025 05:05:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyEEKwjAQRuGZoQSKQvmxB%2BgJtEEQXdelJAtP0NYihZKUJCre3rj4Fu8RkdRbyLyi0u1lr0%2BZPmca%2FIQYCxkdlPHh03%2FBAdIeIcFhY%2BPim86%2FXMp%2FRPFv8IzSDj42ZkoJ4iLKrh%2BW6XC938CrIkjyiiHxURP4rXY%2F6E0cMQ%3D%3D; expires=Tue, 11-Mar-2025 05:05:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| thewsere.top/pntne | 212.117.186.84 | 200 OK | 0 B |
IP 212.117.186.84:443
Requested byhttps://datanodes.to/download CertificateIssuerZeroSSL Subjectthewsere.top FingerprintA1:42:97:C7:40:92:BD:E3:E2:BE:0D:2F:6B:B4:DA:43:D6:D1:73:49 ValidityWed, 05 Mar 2025 00:00:00 GMT - Tue, 03 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
OPTIONS /pntne HTTP/1.1
Host: thewsere.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Mar 2025 05:05:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://datanodes.to
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASSHykp7qkfleLsOUPeaIJJ1yr79JwmX18DJXpRBoIyImRCDujn1EgrvS018O044NBQ75Ucl6EPi9w | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASSHykp7qkfleLsOUPeaIJJ1yr79JwmX18DJXpRBoIyImRCDujn1EgrvS018O044NBQ75Ucl6EPi9w IP 64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:AE:C0:D6:4D:D9:36:6A:9E:55:63:03:A2:D1:49:77:18:BD:75:08 ValidityWed, 26 Feb 2025 15:34:53 GMT - Wed, 21 May 2025 15:34:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASSHykp7qkfleLsOUPeaIJJ1yr79JwmX18DJXpRBoIyImRCDujn1EgrvS018O044NBQ75Ucl6EPi9w HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:Spks9VZ1xj1952lpNl5peMqSpc5J-Q:vjJaSzwNwALupbvz;Path=/;Expires=Wed, 10-Mar-2027 05:05:03 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 10 Mar 2025 05:05:03 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASSHykqMp81BFN6TJ2i8bjqa06RjrUuYKcT9viZ7DlJJ2aY_p9MX13DycPmLakeEUa4yzIBbRPgh&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1427463316%3A1741583103141744&ddm=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-JMK7psczeHHjBBPepPuJsQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 422
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 216.58.207.228 | 200 OK | 39 kB |
URL POST www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP 216.58.207.228:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
File typeASCII text, with very long lines (38734) Hash6fc7cbf6c6da267c71f0b90db2aaffeb 22d3d608489f3228e5f9970bafe44a4fecfbe992 7f55200ee26eb63d67c49d325e8f6b83c77a72822ce3c27bb692c7f1e126728f
POST /recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 12855
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=EGO3I7Q26cZ-jBw3BEtzIx7-&size=invisible&cb=p56tuw4ci1ss
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-content-type-options: nosniff
cross-origin-resource-policy: same-site
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
date: Mon, 10 Mar 2025 05:05:05 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: _GRECAPTCHA=09AP_l5mNrcxmsDToafbv7nUk-0cHRPAjfL_-G_TgMUutD8zZHwszSgVwT5ag3w7YJADZC4eKTAfqrV7KfsL_e92Y; Expires=Sat, 06-Sep-2025 05:05:05 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 10 Mar 2025 05:05:05 GMT
cache-control: private
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 216.58.207.228 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP 216.58.207.228:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1810
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
date: Mon, 10 Mar 2025 05:05:05 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 216.58.207.228 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP 216.58.207.228:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1810
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Mon, 10 Mar 2025 05:05:05 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| scarcerpokomoo.com/1clkn/31269 | 23.109.170.202 | 200 OK | 27 kB |
URL GET scarcerpokomoo.com/1clkn/31269 IP 23.109.170.202:443
Requested byhttps://datanodes.to/download CertificateIssuerLet's Encrypt Subjectscarcerpokomoo.com FingerprintF4:48:08:E7:F1:2E:D8:13:D9:09:23:3A:5E:9D:B7:B6:9E:2F:3A:A1 ValidityWed, 29 Jan 2025 22:58:28 GMT - Tue, 29 Apr 2025 22:58:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /1clkn/31269 HTTP/1.1
Host: scarcerpokomoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Mar 2025 05:04:59 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 11-Mar-2025 05:04:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyEEKwjAQRuGZoQSKQvmxB%2BgJtEEQXdelJAtP0NYihZKUJCre3rj4Fu8RkdRbyLyi0u1lr0%2BZPmca%2FIQYCxkdlPHh03%2FBAdIeIcFhY%2BPim86%2FXMp%2FRPFv8IzSDj42ZkoJ4iLKrh%2BW6XC938CrIkjyiiHxURP4rXY%2F6E0cMQ%3D%3D; expires=Tue, 11-Mar-2025 05:04:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 216.58.207.228 | 200 OK | 945 B |
URL GET www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP 216.58.207.228:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
File typeJavaScript source, ASCII text, with very long lines (945), with no line terminators Hash1dd066e9a7ccb6db441ec82c0c5d3e10 f7958568ff0842c4389408793fd95f5a9a45212d 3fc1f2e9f31149563f133340b85476ab6cf8ca0fbc93b711c7dee64084eeed29
GET /recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Mon, 10 Mar 2025 05:04:59 GMT
date: Mon, 10 Mar 2025 05:04:59 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ndroundhertouc.com/cVVqNjheaglFBShmCQVrND0LZHkjbAxwajQUBE4dQxc/XQw3NiJBHgU8DgsJQGBSAAxCcxpfXExkTEVMECEfRQVAcwNYXh5oTEAFQHtZAhZCY0QCHgRoWxBMATQNCwlXJR5CVExkXQIJRG1ZBwhAbFMG | 104.21.37.4 | 204 No Content | 0 B |
URL GET ndroundhertouc.com/cVVqNjheaglFBShmCQVrND0LZHkjbAxwajQUBE4dQxc/XQw3NiJBHgU8DgsJQGBSAAxCcxpfXExkTEVMECEfRQVAcwNYXh5oTEAFQHtZAhZCY0QCHgRoWxBMATQNCwlXJR5CVExkXQIJRG1ZBwhAbFMG IP 104.21.37.4:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectndroundhertouc.com Fingerprint35:A3:A0:26:FB:38:45:B7:F7:07:33:D0:16:C5:CA:7C:BC:16:20:B1 ValidityMon, 17 Feb 2025 14:44:20 GMT - Sun, 18 May 2025 15:41:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cVVqNjheaglFBShmCQVrND0LZHkjbAxwajQUBE4dQxc/XQw3NiJBHgU8DgsJQGBSAAxCcxpfXExkTEVMECEfRQVAcwNYXh5oTEAFQHtZAhZCY0QCHgRoWxBMATQNCwlXJR5CVExkXQIJRG1ZBwhAbFMG HTTP/1.1
Host: ndroundhertouc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 10 Mar 2025 05:05:02 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fgl12b%2FFL4pNr5mAOGSw4zs4owUYiKF1C2DEbOMEnOb0uF%2BJrSiUUM61yxnAdzQT4%2B5%2BfxuVXi5xzghSODeV7haGLH9%2FS6mzN59ua4nEMOuh6jjWR7zC7kz%2BX6rWozM%2FnYfODTE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e046551e3a0b41-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=62709&min_rtt=56910&rtt_var=23423&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3295&recv_bytes=1522&delivery_rate=63400&cwnd=242&unsent_bytes=0&cid=f568f8bf08a3f817&ts=199&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.16.1 | 200 OK | 26 B |
IP 104.21.16.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeASCII text, with no line terminators Hash71cfc5c4a918dd6e2c190e92965fa1da 93c91cfdf9a677c6f1612fc3165feb8cc5358cee ca8bf740093e44cd376a17fa385f326551e5e4b452f7a690c245038d3f924845
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:02 GMT
content-type: text/plain
set-cookie: csu=595082009463224@1@1741583102; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IH0pyxtRSfi7Z4HD1a22IwLrfeMLv3jEGfsNYPAEpRM0oHXnEhZwBuqXV1m4aJRuChEfuYjKX7sy1wqRJ5%2BOdL8GrOoX%2FKuZlTiu9jukCtqzAuowUC5CIWFAQXy3metoQyiEprU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e04656ed5356c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=58489&min_rtt=56305&rtt_var=496&sent=184&recv=35&lost=0&retrans=0&sent_bytes=211828&recv_bytes=1427&delivery_rate=951884&cwnd=253&unsent_bytes=0&cid=f085538d9f422315&ts=244&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js | 104.26.14.76 | 200 OK | 91 B |
URL GET datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with no line terminators Hash45eeffa41efe748ab4232b212a4829ef 5acfb0bd66dde75e532234d76f92a904e512d5f0 f9283800c2d9ca1dc2d4db040a4e53927149d0caedc21857059dd1628d5417b7
GET /theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:00 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-5b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2BoBTBA0MoWhWjQypapS2i%2BZaP7MalcWorEfZv65lnJx%2FVg6Qtx9PUaCSNINzSqofgFf0539XFKJAib2D8djiWCi4goi1g%2F49qOajx6NsL09vg8Ij263AdApxrrgGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e04649bc310b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=58961&min_rtt=57223&rtt_var=1826&sent=217&recv=55&lost=0&retrans=0&sent_bytes=207133&recv_bytes=2916&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=1803&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/favicon.ico | 104.26.14.76 | 200 OK | 2.5 kB |
IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashc813091dc9f029ba08588f60cc450755 d2b2f0efc676eff758c4194d80ff2e9ee973f556 682e513cfa795efc1e53c502e9a8aa3d91db160b7fd15f94de2a4156a6961474
GET /favicon.ico HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D; _ga_7DP7NV2LKF=GS1.1.1741583100.1.0.1741583101.59.0.0; _ga=GA1.1.1399521619.1741583101
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:01 GMT
content-type: image/x-icon
last-modified: Thu, 01 Sep 2022 19:47:58 GMT
etag: W/"63110c6e-99d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 570
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EyAWvSnKbOt6wQfV4LsJ199grqDJLe5xobhCPQly1HyjzMrJwTa3rGsKLf97M%2Bqg4CJOE80BtddAjoipJ33YXebKUcJjCJwZAe08GcQMEQNA0dNsImlWL84VEHolHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e0464fbe240b69-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=64732&min_rtt=57223&rtt_var=11135&sent=253&recv=80&lost=0&retrans=0&sent_bytes=234232&recv_bytes=3695&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=2768&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/h/g/jsd/r/0.6605380753116261:1741579715:B-bsWyhbsRSMAhPDsfuigwveG0ipsWQ_GmRrfXzkbVs/91e0464039890b69 | 104.26.14.76 | 200 OK | 0 B |
URL POST datanodes.to/cdn-cgi/challenge-platform/h/g/jsd/r/0.6605380753116261:1741579715:B-bsWyhbsRSMAhPDsfuigwveG0ipsWQ_GmRrfXzkbVs/91e0464039890b69 IP 104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.6605380753116261:1741579715:B-bsWyhbsRSMAhPDsfuigwveG0ipsWQ_GmRrfXzkbVs/91e0464039890b69 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12066
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=frtuoi8swmp1; file_name=FlyKnight-SteamGG.NET.zip; lang=english; affiliate=ziJUYhewCocJ2fSUcUnMp2%2B4jUFFLaybL41FEuD%2FFAaFFVjbMcDSc1%2FGiav3ptwmLv%2BjGjjl878F8McLYaZ%2Fb2P0qyopj8SzFy0%3D; _ga_7DP7NV2LKF=GS1.1.1741583100.1.0.1741583101.59.0.0; _ga=GA1.1.1399521619.1741583101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 05:05:01 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=datanodes.to; HttpOnly; Secure; SameSite=None
cf_clearance=1y.oQZ0wJzXvB2Qbpe4B3EglwvB.DYWNQgYDBjqRbZM-1741583101-1.2.1.1-LQRgUExYWTH7cXGEwLUJJPLiQ9ivC5OiN5Pbi77oq5sUUSyXKoVpf0yLF94TZmV0lI7l_aCnUeeSt5FCo0G.RSPhH1Op1bYP3DGIwqwIN3eTdUuYZZjij4MnGTH91mFxepNxYCtg5UVLHL6qgrTj3dKZUNG2CE1VRgkDmFYeLm3fv1hDqHMhEPe94LX7h8LK0cvMX_vde5pSmUBZYyHkQSB4ZoT951yngTIPfGEroPzM0SIA_fJ91wCFYlxAO1SEb12BwjLjX_DpJfTQPNf88j7GZzkALv987Y6uBzFPDDIb4O_YK09GrRiQJvVh4pzwxIWFcZ1KMNEKyZgsOsJy.T6bgusNcGah.ul6OJ6GV_Q8DMHJ_X4pOtqH1qfEmLhI3JJ6kV0AFIUFgtwo9OZN_ws3y5u4sLyC7Nc69x3fdBk; Path=/; Expires=Tue, 10-Mar-26 05:05:01 GMT; Domain=datanodes.to; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PemnY5jHNXhNab2PiRFRzuiKq2W8g2Qbr7C5UK%2FI0%2FK%2FvDDZ6U4W4Ve8f8YEHPiBxlSFDAvTm7A3bsF%2BNOhyTtGl%2FGCRBasgW67MTGKTz13EmUN0ZkolwnDT0UtL%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e046506e560b69-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=62016&min_rtt=57223&rtt_var=7071&sent=264&recv=95&lost=0&retrans=0&sent_bytes=237294&recv_bytes=16055&delivery_rate=1333979&cwnd=256&unsent_bytes=0&cid=5ff31a8cafa0eb82&ts=2929&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP 64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:AE:C0:D6:4D:D9:36:6A:9E:55:63:03:A2:D1:49:77:18:BD:75:08 ValidityWed, 26 Feb 2025 15:34:53 GMT - Wed, 21 May 2025 15:34:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:a2aEiq5S-NWEh9Ibg0aUdJjqActlYQ:XlnaEnSKOUQz_e0w; Expires=Wed, 10-Mar-2027 05:05:02 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 10 Mar 2025 05:05:02 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASSHykp7qkfleLsOUPeaIJJ1yr79JwmX18DJXpRBoIyImRCDujn1EgrvS018O044NBQ75Ucl6EPi9w
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-Adw4v0Do6lXkZVSTivlVhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|