GET zone-telechargement-albums.com/v1/header_3.png
200 OK 106 kB URL GET HTTP/3 zone-telechargement-albums.com/v1/header_3.png
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type PNG image data, 599 x 241, 8-bit/color RGBA, non-interlaced
Size 106 kB (106112 bytes)
Hash 2861e58441b2be9d8c1bbb387140ab49
4827f1b9ad9174e4fa585f870c9ee6dec313da8e
888adbe92f2f4e4635e9f1d6fae303d270bea1482d1484d8d014bda91deae07e
GET /v1/header_3.png HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: image/png
content-length: 106112
last-modified: Mon, 29 Apr 2024 07:34:29 GMT
etag: "662f4d85-19e80"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 1078425
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZr5GnX3%2F9r2a56%2FBlcK%2B3qIkcvJ43N3hnY5XmRPqYejgfcWA3n6OFOCazlpV8iBPJxkzetYfnBIy4n1mL8FCxOqzuYXtPZRBCvifey83itrOjsZkJETJkMaa%2FwbcNQW0LK3e3SZSrCou7wApefSLzo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf506ee6656c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9066&min_rtt=3718&rtt_var=5214&sent=14&recv=11&lost=0&retrans=0&sent_bytes=4241&recv_bytes=2544&delivery_rate=159735&cwnd=12000&unsent_bytes=0&cid=5577ecb90159d4a8&ts=303&x=1", cfExtPri, cfHdrFlush;dur=0
GET zone-telechargement-albums.com/v1/images/avatars/avatar_10.gif
200 OK 22 kB URL GET HTTP/3 zone-telechargement-albums.com/v1/images/avatars/avatar_10.gif
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type GIF image data, version 89a, 204 x 201
Hash 723d63ddad4f77bb57b670c5313ab4bf
06f74a4103b9c611a5884412ad3b2f39777291c4
1426a4233957e65cd7ba87b3895ba36762427392cdfdf13acfacef56e69b2ac5
GET /v1/images/avatars/avatar_10.gif HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: image/gif
content-length: 22174
last-modified: Mon, 29 Apr 2024 07:34:31 GMT
etag: "662f4d87-569e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 216048
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z5QxQ1ERbjUoR5MAA8vQ7m0ChVaKTwy%2BculIpYJ8GyHRfTx3YNaF7hZbv10qM1u8R5vgCErOIi37rA3iSmlH5%2B%2BMrsEBod1fV0SvJ9FCipfe9BjwhTFcMPWNxYI7WimS2ga%2BREYjEuvaQIzDNnu3a8I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf506fe7f56c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6871&min_rtt=1420&rtt_var=5645&sent=107&recv=15&lost=0&retrans=0&sent_bytes=113807&recv_bytes=3003&delivery_rate=13281950&cwnd=96000&unsent_bytes=0&cid=5577ecb90159d4a8&ts=314&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
200 OK 19 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint64:3F:50:40:E0:BD:89:CB:A9:C8:BE:E5:74:F6:9E:D6:2E:1A:32:02
ValidityTue, 26 Nov 2024 07:25:18 GMT - Mon, 24 Feb 2025 07:25:17 GMT
File type ASCII text, with very long lines (52276)
Hash ded1c367363e8b20bdc6a19b8350a737
8c06d82739d14b094ff6d9036021a252bd1d985d
1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf
GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zone-telechargement-albums.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: text/css; charset=utf-8
content-length: 18752
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6421d693-4940"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1573483
expires: Tue, 02 Dec 2025 10:16:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpv8s78KL9jjg4%2B5x7TugmRZKFusBv3C6nYNewI7Er37VfMxMkMMPOLCdUGbiyBsp8u6p6eIoKvqzf4YzY3UzNK%2F7oqdlapgYQ2nIvUGfSPzP%2FcxggloMCr54hT55u7wqGrsh7nw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8f0cf5071deb569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET is1-ssl.mzstatic.com/image/thumb/Music211/v4/26/78/81/26788143-5e5f-0813-2480-ecf4280ef221/24UM1IM07082.rgb.jpg/600x600bb.jpg
200 OK 100 kB URL GET HTTP/2 is1-ssl.mzstatic.com/image/thumb/Music211/v4/26/78/81/26788143-5e5f-0813-2480-ecf4280ef221/24UM1IM07082.rgb.jpg/600x600bb.jpg
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerApple Inc.
Subjectitunes.apple.com
Fingerprint19:9A:87:C1:E9:FD:1F:B8:B4:0E:5C:BA:F0:25:F7:C2:05:E3:91:86
ValidityTue, 03 Dec 2024 19:25:58 GMT - Wed, 02 Apr 2025 18:31:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x600, components 3
Size 100 kB (100139 bytes)
Hash b0b9dd9d9651ef9cd7cada3cf4844213
613f7afc7494b1f2d2ba762679f1f33f47adcf05
575f333deda03ab5e1cbc2d0a29f42783eb9bebce974ff2b5aaeb82d2562cc2c
GET /image/thumb/Music211/v4/26/78/81/26788143-5e5f-0813-2480-ecf4280ef221/24UM1IM07082.rgb.jpg/600x600bb.jpg HTTP/1.1
Host: is1-ssl.mzstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: daiquiri/5
content-type: image/jpeg
content-length: 100139
x-apple-jingle-correlation-key: VFHVOYFNCIMA6WBA2JMNIMWFV4
x-apple-request-uuid: a94f5760-ad12-180f-5820-d258d432c5af
b3: a94f5760ad12180f5820d258d432c5af-46d274c3e1e3f319
x-b3-spanid: 46d274c3e1e3f319
x-b3-parentspanid: 36f7c488a94ada34
apple-seq: 0.0
apple-tk: false
apple-originating-system: UnknownOriginatingSystem
last-modified: Fri, 18 Oct 2024 00:58:29 GMT
etag: "MSwxLjg2LjAsVmVyc2lvbiAxMy41LjIgKEJ1aWxkIDIyRzkxKSwxNzI5MjEzMTA5NjQ0LDI0TDIwLGRjODViOGZkLG5vRWZmZWN0"
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Type,ETag,Cache-Control,Expires,Last-Modified
timing-allow-origin: *
x-b3-traceid: 35602b0f48157a60
strict-transport-security: max-age=31536000; includeSubDomains
x-daiquiri-instance: daiquiri:13624001:mr85p00it-hyhk04174601:7987:24RELEASE221:daiquiri-amp-processing-shared-int-001-mr, daiquiri:11338001:mr47p00it-qujn04120302:7987:24RELEASE221:daiquiri-amp-all-l7shared-int-001-mr
cdnuuid: 4ba6a7f8-777d-40e0-b7f2-4332e5016a1d-4273177600
cache-control: no-transform, max-age=10905344
date: Thu, 12 Dec 2024 10:16:07 GMT
x-cache: TCP_HIT from a95-101-11-174.deploy.akamaitechnologies.com (AkamaiGHost/11.7.2.1-35a4fcef889a1f053c9fa641f2ccd99a) (-)
X-Firefox-Spdy: h2
GET zone-telechargement-albums.com/v1/images/avatars/avatar_18.gif
200 OK 24 kB URL GET HTTP/3 zone-telechargement-albums.com/v1/images/avatars/avatar_18.gif
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type GIF image data, version 89a, 198 x 217
Hash fdb39cfe89d2f848650c0171a032801d
afc8a31af0719fdbfc34a0e8480397f5d295a738
2b414207ecbfbf7d5c0d88b8a520dcd8bb8bbc5db15a0ca4bf82f61608736ce7
GET /v1/images/avatars/avatar_18.gif HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: image/gif
content-length: 23730
last-modified: Mon, 29 Apr 2024 07:34:34 GMT
etag: "662f4d8a-5cb2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WMgmswVjd%2BEnTEu0x2E0P7TUATscRE2NxN1Gsw7iAkMaHSZkIdkysngE2phJC%2FSIEmVqV6xfPSgEEk7jgWlpFbH56inz1tJWJnWxl7pc8uDleLSN80LpG7UzKtbE4xCyxob0EupfRnTRjagXsZ%2Fp%2FFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf506fe7c56c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6050&min_rtt=1420&rtt_var=4590&sent=127&recv=17&lost=0&retrans=0&sent_bytes=137265&recv_bytes=3095&delivery_rate=8409908&cwnd=96000&unsent_bytes=0&cid=5577ecb90159d4a8&ts=483&x=1", cfExtPri, cfHdrFlush;dur=0
GET zone-telechargement-albums.com/v1/images/avatars/avatar_15.gif
200 OK 22 kB URL GET HTTP/3 zone-telechargement-albums.com/v1/images/avatars/avatar_15.gif
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type GIF image data, version 89a, 204 x 196
Hash af77daeb7c2858f4305644f5a01b0fca
433e2afce02d999556efecc756cf5c5321b82fae
170d91b103ef6c033bdcd876eaee53690c1fd28f61138b05533fbd40e3d217bf
GET /v1/images/avatars/avatar_15.gif HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: image/gif
content-length: 22174
last-modified: Mon, 29 Apr 2024 07:34:33 GMT
etag: "662f4d89-569e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bUiuQfqKd8xI1aD94mwwRE%2FUVJ15l7JmbHIj4Bt960kEbFjiQx3gJE3z6MyoVPs09fpJJpIP0o%2B8aXo4jbMZuPKHid2GW4syrGUALyFA2A7nco70QA9lq%2BmejGJ4oqNVT3dDk94qWtOEL5wq%2BeGOJCE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf506fe8256c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6050&min_rtt=1420&rtt_var=4590&sent=148&recv=17&lost=0&retrans=0&sent_bytes=162301&recv_bytes=3095&delivery_rate=8409908&cwnd=96000&unsent_bytes=0&cid=5577ecb90159d4a8&ts=488&x=1", cfExtPri, cfHdrFlush;dur=0
GET zone-telechargement-albums.com/v1/images/avatars/avatar_25.gif
200 OK 21 kB URL GET HTTP/3 zone-telechargement-albums.com/v1/images/avatars/avatar_25.gif
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type GIF image data, version 89a, 204 x 196
Hash 4e09d073d11883a131b15b81e30285f6
4715a40ccd9d57d2ce8fa167002d8909599f3128
0a38437e9d6b508bac38adae48e2007cf596a2a7bb8fe4c5b28b7624399d0ba7
GET /v1/images/avatars/avatar_25.gif HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: image/gif
content-length: 20614
last-modified: Mon, 29 Apr 2024 07:34:36 GMT
etag: "662f4d8c-5086"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vnoCTH1maqcJ398NYZZPyqgYzUQxLrYarWDHCOzVSzJ%2Fy2z62v3jEW7tM%2B8CVleZ1jbCYNV16obMDiNjhoqhLBa1%2BTNH57VW65mJ40%2BMfgfpUj0VHyGKRFh7LVYbJmmT8hF4Rz4Dgx98HecnnEzbqNk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf506fe7856c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6560&min_rtt=1420&rtt_var=5511&sent=168&recv=19&lost=0&retrans=0&sent_bytes=185751&recv_bytes=3187&delivery_rate=2797129&cwnd=96000&unsent_bytes=0&cid=5577ecb90159d4a8&ts=515&x=1", cfExtPri, cfHdrFlush;dur=0
GET zone-telechargement-albums.com/v1/images/avatars/avatar_17.gif
200 OK 32 kB URL GET HTTP/3 zone-telechargement-albums.com/v1/images/avatars/avatar_17.gif
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type GIF image data, version 89a, 204 x 217
Hash 95c0e042d5747f2e4132d4d60528ad23
866db82245d0f6f6bce2147ee7aae2da6c329d56
bf159918c68cd44f5ef178be59dfcd191e23217044308c5f1d76db9d3ef8702a
GET /v1/images/avatars/avatar_17.gif HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: image/gif
content-length: 32041
last-modified: Mon, 29 Apr 2024 07:34:33 GMT
etag: "662f4d89-7d29"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gJ9plVxiGBgiK3H1ttxsxD0simG2yPURoH0gC0RqI9kNRzkeUu1U%2FB3PKsSbyhK87nHDcNa6%2FQpN7p9BjfDqm5kl%2B1VS%2FFt0v3m2MxXJqP7t5xVRzOJp4HbzKoxxjLjp7j%2FPHgBk5GDY7iJA5hMais0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf506fe7e56c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6560&min_rtt=1420&rtt_var=5511&sent=187&recv=19&lost=0&retrans=0&sent_bytes=207614&recv_bytes=3187&delivery_rate=2797129&cwnd=96000&unsent_bytes=0&cid=5577ecb90159d4a8&ts=517&x=1", cfExtPri, cfHdrFlush;dur=0
GET code.jquery.com/jquery-3.6.4.min.js
200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.4.min.js
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 641dd14370106e992d352166f5a07e99
eda46747c71d38a880bee44f9a439c3858bb8f99
a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af
GET /jquery-3.6.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zone-telechargement-albums.com
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15ec3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Dec 2024 10:16:07 GMT
age: 1446864
x-served-by: cache-lga21953-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 104614, 51989
x-timer: S1733998568.835870,VS0,VE0
vary: Accept-Encoding
content-length: 31011
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/fastbootstrap@2.2.0/dist/css/fastbootstrap.min.css
200 OK 55 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/fastbootstrap@2.2.0/dist/css/fastbootstrap.min.css
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 87c242d5b51a5e87d5627370dfa51ea5
1325e6d2e7333145783bcff807782290817dd742
57a96ef8e75834a4ca4ec54506e42cc889438915a23a6b42f1543c2f3766da2e
GET /npm/fastbootstrap@2.2.0/dist/css/fastbootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 12 Dec 2024 10:16:09 GMT
content-type: text/css; charset=utf-8
content-length: 54717
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.2.0
x-jsd-version-type: version
etag: W/"60d66-EyXm0uczMUV4O8/4B3gikIF910I"
content-encoding: br
x-served-by: cache-fra-eddf8230130-FRA, cache-lga21949-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4231248
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SxxPLXhmd5U1hjbDo1nq50kO45aVFWxyzCG6FESo6DzK1uH3Q4CS1yxjIDc7ECyJ7B3r8SySvAsg%2FIp2dXvDDIZE%2F%2B07WnZqfpytH47YoSdVaMR4BxO4e%2FhtGug3%2BFqO%2B8Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f0cf5138fd95694-OSL
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css
200 OK 13 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (65354)
Hash 5605c44f8b24ea5de37a959955b71eb6
043a332e4f555cc0bfd35e451be955b4b93966a0
f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62
GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 12 Dec 2024 10:16:09 GMT
content-type: text/css; charset=utf-8
content-length: 13300
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.11.3
x-jsd-version-type: version
etag: W/"14f73-BDozLk9VXMC/015FG+lVtLk5ZqA"
content-encoding: br
x-served-by: cache-fra-eddf8230079-FRA, cache-lga21989-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1395950
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3GjBIkMjNbd%2FVd3H8cktG6m2ZnU7BIvYhTvHgA4WWp5WA5wid5vUTkPPnOilhAWl%2Bzjraesse9X4Z5Fo5wCFhmi%2FQup%2BBeUIFCpJmHr0AENSWCkD5TE3CNUmOPpHg7pzcG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f0cf513bffe5694-OSL
X-Firefox-Spdy: h2
GET cdn.areyourealhuman.com/img/offer/53308
200 OK 4.1 kB URL GET HTTP/2 cdn.areyourealhuman.com/img/offer/53308
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectcdn.appinstallcheck.com
FingerprintE0:E7:19:A0:E3:AD:6A:1A:3F:99:B2:B5:37:AF:B3:08:AE:E0:96:6C
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 100x100, components 3
Hash 8b489aa7be515f664aa049bc85b42d3a
a922a01bcffaccf598dc763389567b01f3b320db
4dcfd89a7c356a5350244026ce91928ca6061e021b8088c1412fc16d70f26c38
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/offer/53308 HTTP/1.1
Host: cdn.areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4088
last-modified: Mon, 23 Sep 2024 12:40:38 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 11 Dec 2024 20:49:04 GMT
etag: "8b489aa7be515f664aa049bc85b42d3a"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l8VheYenvYP9emT8mF9r463K_UFi-rF8j2AqioZY7ovCYJ5CQX_zvQ==
age: 48425
X-Firefox-Spdy: h2
GET decodemaster.info/qr_code.php?url=https://zone-telechargement-albums.com/v2/password.php?id=1773473685
200 OK 3.7 kB URL GET HTTP/2 decodemaster.info/qr_code.php?url=https://zone-telechargement-albums.com/v2/password.php?id=1773473685
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectdecodemaster.info
Fingerprint30:C5:A0:30:0A:77:D0:E2:84:E5:66:B2:D0:0F:16:76:30:55:93:A1
ValidityWed, 30 Oct 2024 22:39:33 GMT - Tue, 28 Jan 2025 22:39:32 GMT
File type PNG image data, 123 x 123, 1-bit colormap, non-interlaced
Hash 83b4db48426614356f6a13109be8b65c
4a1c9e0fe3be85e4fc729098a814040d5a56dbe8
5f58c479db5d4fe5dcf9e2558c5f79bc5e2f21ebb1bd76f42255681a0045618d
GET /qr_code.php?url=https://zone-telechargement-albums.com/v2/password.php?id=1773473685 HTTP/1.1
Host: decodemaster.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: image/png
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a08XHu451bgL6jOwRSjGsxYKMOMFuMeXQYzqSBc%2FJWYC%2BFK0EUWSiO7vw52qRcGyXsw2jGSiaNIrfHsV%2BG0VHwSM3GgmQye4ihTZbRUuY2wizjhEpmdrzTTzyVERWR20sji1tg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f0cf507ad7f0b41-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=557&min_rtt=473&rtt_var=124&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3292&recv_bytes=1269&delivery_rate=6512743&cwnd=249&unsent_bytes=0&cid=724f9d10a92ecea1&ts=183&x=0"
X-Firefox-Spdy: h2
GET cdn.areyourealhuman.com/img/offer/57982
200 OK 1.6 kB URL GET HTTP/2 cdn.areyourealhuman.com/img/offer/57982
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectcdn.appinstallcheck.com
FingerprintE0:E7:19:A0:E3:AD:6A:1A:3F:99:B2:B5:37:AF:B3:08:AE:E0:96:6C
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 64x66, components 3
Hash b59700f1b9180c6c446bbd931cba7b04
90f949a13875fd66c5f1b40720a7b710509a4aa7
534b04d2fce0f1f0dd493582df3d5ff40295ea78dd98e61fa61d50b62a35e6c2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/offer/57982 HTTP/1.1
Host: cdn.areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1574
last-modified: Mon, 23 Sep 2024 12:39:40 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 11 Dec 2024 20:49:04 GMT
etag: "b59700f1b9180c6c446bbd931cba7b04"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CtsyeKkZuN3khL9tNvXsRWCfZ4Nnl-JRH3l5K7zfcKu92g04XxJE9A==
age: 48426
X-Firefox-Spdy: h2
GET cdn.areyourealhuman.com/img/offer/50497
200 OK 11 kB URL GET HTTP/2 cdn.areyourealhuman.com/img/offer/50497
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectcdn.appinstallcheck.com
FingerprintE0:E7:19:A0:E3:AD:6A:1A:3F:99:B2:B5:37:AF:B3:08:AE:E0:96:6C
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Hash 4c59ea2ce40a5094d00b76cd4cae3d9a
f8fd0d7cf6c54ee1f200ef1648360918508c863a
f619d27dda8c7ad395ddc94eb2a4af901f70d5fa5dfe31ffcf07786ac35c84f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/offer/50497 HTTP/1.1
Host: cdn.areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10963
last-modified: Mon, 23 Sep 2024 12:41:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 11 Dec 2024 20:49:04 GMT
etag: "4c59ea2ce40a5094d00b76cd4cae3d9a"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DeU8ZoI0opod53FH1RlUnqX91VQjLRtYIxVRxQTaQF_3C2lgl9ljEg==
age: 48426
X-Firefox-Spdy: h2
GET cdn.areyourealhuman.com/img/offer/41442
200 OK 7.4 kB URL GET HTTP/2 cdn.areyourealhuman.com/img/offer/41442
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectcdn.appinstallcheck.com
FingerprintE0:E7:19:A0:E3:AD:6A:1A:3F:99:B2:B5:37:AF:B3:08:AE:E0:96:6C
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced
Hash 6ba548e6554b230240a097cac955febe
827f03069d1850eddc3363110245f28280194572
8bdddcc7281c79bf850da7705fb2fa15b26772e86b129b7f1c8d157d27cf8afc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/offer/41442 HTTP/1.1
Host: cdn.areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7384
last-modified: Mon, 23 Sep 2024 12:43:10 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 12 Dec 2024 10:16:10 GMT
etag: "6ba548e6554b230240a097cac955febe"
vary: accept-encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FOVNQsSj8hbgCd_cXX5e4oX3eGViKaqaP_UVuM2Nuh1_djD71aZJ9w==
X-Firefox-Spdy: h2
101 Switching Protocols 0 B URL ws-mt1.pusher.com/app/2a1ddc1f29b22896b26c?protocol=7&client=js&version=4.4.0&flash=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/2a1ddc1f29b22896b26c?protocol=7&client=js&version=4.4.0&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://areyourealhuman.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: B/XubVlhYst3l7E4jbYofA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 12 Dec 2024 10:16:10 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Rqa4aRt60qYh6BIbeQj+G0/oGi8=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover
GET fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint5E:64:A9:4C:59:5A:8F:EC:57:D9:7F:C4:7E:70:AC:88:F2:67:F1:79
ValidityMon, 04 Nov 2024 08:38:50 GMT - Mon, 27 Jan 2025 08:38:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://areyourealhuman.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 16:43:41 GMT
expires: Sun, 07 Dec 2025 16:43:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:53:08 GMT
content-type: font/woff2
age: 408749
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 18 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint5E:64:A9:4C:59:5A:8F:EC:57:D9:7F:C4:7E:70:AC:88:F2:67:F1:79
ValidityMon, 04 Nov 2024 08:38:50 GMT - Mon, 27 Jan 2025 08:38:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Hash 8eff0b8045fd1959e117f85654ae7770
227fee13ceb7c410b5c0bb8000258b6643cb6255
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://areyourealhuman.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 19:08:18 GMT
expires: Sat, 06 Dec 2025 19:08:18 GMT
cache-control: public, max-age=31536000
age: 486472
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint5E:64:A9:4C:59:5A:8F:EC:57:D9:7F:C4:7E:70:AC:88:F2:67:F1:79
ValidityMon, 04 Nov 2024 08:38:50 GMT - Mon, 27 Jan 2025 08:38:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://areyourealhuman.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 16:35:41 GMT
expires: Sun, 07 Dec 2025 16:35:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:53:31 GMT
content-type: font/woff2
age: 409230
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint5E:64:A9:4C:59:5A:8F:EC:57:D9:7F:C4:7E:70:AC:88:F2:67:F1:79
ValidityMon, 04 Nov 2024 08:38:50 GMT - Mon, 27 Jan 2025 08:38:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Hash 115c2d84727b41da5e9b4394887a8c40
44f495a7f32620e51acca2e78f7e0615cb305781
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6
GET /s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://areyourealhuman.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 19:36:55 GMT
expires: Sat, 06 Dec 2025 19:36:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
age: 484756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v22/pxiGyp8kv8JHgFVrJJLucHtA.woff2
200 OK 8.7 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v22/pxiGyp8kv8JHgFVrJJLucHtA.woff2
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint5E:64:A9:4C:59:5A:8F:EC:57:D9:7F:C4:7E:70:AC:88:F2:67:F1:79
ValidityMon, 04 Nov 2024 08:38:50 GMT - Mon, 27 Jan 2025 08:38:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 8668, version 1.0
Hash a242ba0df3a128a2cab929a8c45d5056
d70e2c70b21cbb66cd883ae56e2dedacefd81c7c
50d0c1742d80ac71f4cde20e8c04d41a24806af342831f479938b527fbff0972
GET /s/poppins/v22/pxiGyp8kv8JHgFVrJJLucHtA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://areyourealhuman.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 18:00:02 GMT
expires: Sun, 07 Dec 2025 18:00:02 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:54:04 GMT
content-type: font/woff2
age: 404169
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET stats.pusher.com/timeline/v2/jsonp/1?session=MTg5NDAxNDY5&bundle=MQ%3D%3D&key=MmExZGRjMWYyOWIyMjg5NmIyNmM%3D&lib=anM%3D&version=NC40LjA%3D&cluster=bXQx&features=WyJ3cyJd&timeline=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%3D%3D
200 OK 0 B URL GET HTTP/2 stats.pusher.com/timeline/v2/jsonp/1?session=MTg5NDAxNDY5&bundle=MQ%3D%3D&key=MmExZGRjMWYyOWIyMjg5NmIyNmM%3D&lib=anM%3D&version=NC40LjA%3D&cluster=bXQx&features=WyJ3cyJd&timeline=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%3D%3D
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectpusher.com
FingerprintE2:4C:85:69:26:6C:7F:64:0D:28:79:BD:CC:9A:DE:3B:D2:6B:EE:60
ValiditySun, 26 May 2024 00:00:00 GMT - Tue, 24 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /timeline/v2/jsonp/1?session=MTg5NDAxNDY5&bundle=MQ%3D%3D&key=MmExZGRjMWYyOWIyMjg5NmIyNmM%3D&lib=anM%3D&version=NC40LjA%3D&cluster=bXQx&features=WyJ3cyJd&timeline=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%3D%3D HTTP/1.1
Host: stats.pusher.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: awselb/2.0
date: Thu, 12 Dec 2024 10:16:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
GET cdn.synthient.com/synthient.wasm
200 OK 59 kB URL GET HTTP/3 cdn.synthient.com/synthient.wasm
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subjectsynthient.com
FingerprintAA:FA:AE:9B:94:71:BF:4E:7F:3A:44:B9:6D:09:16:B9:D8:25:43:25
ValidityWed, 06 Nov 2024 03:10:24 GMT - Tue, 04 Feb 2025 03:10:23 GMT
File type WebAssembly (wasm) binary module version 0x1 (MVP)
Hash 59e8f3136e3eeb81355d810cf8269644
ac8484964ec7438f9de29437c9af59acc2de8aeb
287c813523f3dbacc909ccb760a8762c298227a60601052f44a9e5ec552608ec
GET /synthient.wasm HTTP/1.1
Host: cdn.synthient.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://areyourealhuman.com/
Origin: https://areyourealhuman.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:11 GMT
content-type: application/wasm
content-md5: WejzE24+64E1XYEM+CaWRA==
last-modified: Mon, 15 Jul 2024 06:30:23 GMT
x-ms-request-id: 6162e86a-001e-002b-057e-4c4853000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BCmgJNrKSd8uJuT%2Fwpx1zdhAVygsG%2FSSG09Loo0DJqhyOYIdc937YoiyC4Y%2Bb4Z%2FuJAH3oa5CVPdl%2FMivjYUDz%2F2Egx6e6%2BfrCdNfVc23qvN60wX4%2B4C9e%2BusPFcWbNy504q5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f0cf51b0eddb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3087&min_rtt=2091&rtt_var=1495&sent=11&recv=8&lost=0&retrans=0&sent_bytes=4124&recv_bytes=1198&delivery_rate=306884&cwnd=12000&unsent_bytes=0&cid=3266463af56ee9d9&ts=574&x=1", cfExtPri, cfHdrFlush;dur=0
GET areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
200 OK 3.2 kB URL GET HTTP/2 areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerLet's Encrypt
Subjectareyourealhuman.com
Fingerprint80:B4:0B:62:3B:2E:65:56:3D:1B:6C:83:7E:0A:4E:C6:69:9A:98:23
ValiditySat, 30 Nov 2024 00:29:17 GMT - Fri, 28 Feb 2025 00:29:16 GMT
File type HTML document, ASCII text, with very long lines (3303), with no line terminators
Hash d0a0625b460d15976cef7cd899b79759
7638cb645368d1253175d01fffbdb5847629951d
a932f0b20f7da11bdee09b9316a2030c11e9d2531ebefcc8f67aeab2dfaf429b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cl/i/r7r3ll?aff_sub5=v2_password HTTP/1.1
Host: areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 12 Dec 2024 10:16:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: none
set-cookie: XSRF-TOKEN=eyJpdiI6Ik0xSndERndhVjZUSWZlQzR0TlBCeXc9PSIsInZhbHVlIjoieTUycWwxVDErdHpmRGJGcWhIc2NHV2NiSmNWL2xsQ0NkR2lFd1R3bkdGTlNKMG01Wmo5cnpqa3A5Q1BzRkhBeFVLa2lYUnFLK2tUZEFyZllPQ0hGRk1pRWgxNTFWdEptQlR4eEpIUmFZN1RBcm9waUdadGlza0VzbGwxTW1WRmQiLCJtYWMiOiI4ODkwZGIxZDhjMDRkODZjMDFkNGUwY2IzZTI5YTkxNmU3NDU4M2E0MWE4NmVlNjU1MTkzZmNjZDgxNjcwNzQ3IiwidGFnIjoiIn0%3D; expires=Fri, 13 Dec 2024 06:16:08 GMT; Max-Age=72000; path=/; secure; samesite=none
ogads_session=eyJpdiI6Ii80SlB1MUVQaVlJd1J6cTZkbzZjRnc9PSIsInZhbHVlIjoiMkRqd0JxakVXTnEyUS90N2RUUXFITEN4emVHaEwzTkltT2FKek0zVnRnTGV2ZEV5VXNJZWEvN0Y2cVZLUFQ4Vk5vSnArVitjU2RiVW9teVBRMmRLWkJBNE1NdzVKaEJSYmJQRkRQUmRXOURRSDhtNWk2OG13enZDblppcUhCUXUiLCJtYWMiOiI3NDU0ZGZlOGI5N2IwMWVkYzMyMzE5YzI2ZGRjYTMxODM3NTI0YTFmM2FjODY4YjMxZjdjNGNjY2I0ZTdmNTBiIiwidGFnIjoiIn0%3D; expires=Fri, 13 Dec 2024 06:16:08 GMT; Max-Age=72000; path=/; secure; httponly; samesite=none
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: DENY, nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdn.areyourealhuman.com/img/offer/55808
200 OK 3.3 kB URL GET HTTP/2 cdn.areyourealhuman.com/img/offer/55808
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectcdn.appinstallcheck.com
FingerprintE0:E7:19:A0:E3:AD:6A:1A:3F:99:B2:B5:37:AF:B3:08:AE:E0:96:6C
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 100x100, components 3
Hash ff50e1186b5accbac7bc797405d45bc1
24c9d78cfdcffe945cf735ada0c406300ff31528
a6a29867a2cb8381bfaa8af2204c4aba6e77a08b9778cacc66907f98ec343dbd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/offer/55808 HTTP/1.1
Host: cdn.areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3271
last-modified: Mon, 23 Sep 2024 12:40:10 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 11 Dec 2024 20:49:04 GMT
etag: "ff50e1186b5accbac7bc797405d45bc1"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OyprpfCC_xYAn96iozaDZNsSxdyo2bcfKsN2k54CyVwENBCKqZuLlg==
age: 48426
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap
200 OK 9.6 kB URL GET HTTP/3 fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintD4:A3:E0:67:E1:FB:D8:0C:7B:58:AE:DA:81:4F:CA:47:9A:07:6E:5B
ValidityMon, 04 Nov 2024 08:38:51 GMT - Mon, 27 Jan 2025 08:38:50 GMT
File type ASCII text, with very long lines (9828), with no line terminators
Hash 2868680b0ad7c149310bfb73fe8bae8e
444e92e0f1d6545f19f64066af94d6937949906a
604a43d34d4cb1dee0fde051fb3b16e30bc283e66ed7f9f6540ebe07ad2405c9
GET /css2?family=Roboto:wght@300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 12 Dec 2024 10:16:10 GMT
date: Thu, 12 Dec 2024 10:16:10 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET zone-telechargement-albums.com/favicon.ico
200 OK 15 kB URL GET HTTP/3 zone-telechargement-albums.com/favicon.ico
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 26cb1797dec92e0fd7ff9d0a4b23b2a9
61cb497f3ef866af82db8bb78c45821d46956c12
1b720d786c20a6a036dcecf0865da82af042330d97a5f03240f8c0f88847d3ea
GET /favicon.ico HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:08 GMT
content-type: image/x-icon
last-modified: Mon, 29 Apr 2024 20:27:21 GMT
vary: Accept-Encoding
etag: W/"663002a9-3c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
cf-cache-status: HIT
age: 848655
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FebHIxpES%2Bdco6Rqgh5rVneKz4tIkYecvJ%2FfA5tJE32qdmFDSHEX3P%2BmKOoXJ2nRpJt94fmRv9HdLU97GHbEdyvoIjN3uGh0vayrSwQ2X8b%2FR%2Blu%2B%2BZF4FLlwfuGK1y8nvYKlGrm6cFi6aPsanhrwQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f0cf50cbdb356c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5437&min_rtt=1420&rtt_var=5034&sent=216&recv=22&lost=0&retrans=0&sent_bytes=241194&recv_bytes=3592&delivery_rate=21166446&cwnd=96000&unsent_bytes=0&cid=5577ecb90159d4a8&ts=1232&x=1", cfExtPri, cfHdrFlush;dur=0
GET fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,300,200
200 OK 9.7 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,300,200
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintD4:A3:E0:67:E1:FB:D8:0C:7B:58:AE:DA:81:4F:CA:47:9A:07:6E:5B
ValidityMon, 04 Nov 2024 08:38:51 GMT - Mon, 27 Jan 2025 08:38:50 GMT
File type ASCII text, with very long lines (9968), with no line terminators
Hash 6bb1937562a58debb30a37fcc1a3ab4e
d9d984cbb84c68fefc3a42e84042f7ab63454865
90b756acfdce55cbe5ada710c7b5cc69bff2e1f34a02c8eb1f1960dfdef2fe93
GET /css?family=Source+Sans+Pro:400,700,300,200 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 12 Dec 2024 10:16:09 GMT
date: Thu, 12 Dec 2024 10:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.tailwindcss.com/3.4.16
200 OK 407 kB URL GET HTTP/2 cdn.tailwindcss.com/3.4.16
IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjecttailwindcss.com
Fingerprint26:11:6A:E2:4D:77:ED:0F:2E:DC:58:A5:79:39:84:D7:E6:ED:EC:E3
ValidityWed, 04 Dec 2024 00:31:10 GMT - Tue, 04 Mar 2025 00:31:09 GMT
File type JavaScript source, ASCII text, with very long lines (52853)
Size 407 kB (407279 bytes)
Hash 2697bf25afb0982dfa17c73536f934c1
7d7db122d0639cd1f1a53eb6018d6d713d312679
fb798bb21731986940cf3a9950fbca386e03633e9a45497701e71f9b87d132ea
GET /3.4.16 HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zone-telechargement-albums.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: text/javascript
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: cle1::iad1::rv4dn-1733520637303-9c55b126e284
last-modified: Fri, 06 Dec 2024 21:30:37 GMT
cf-cache-status: HIT
age: 477338
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf5081aeb56c7-OSL
X-Firefox-Spdy: h2
GET areyourealhuman.com/cl/v/r7r3ll?aff_sub5=v2_password
200 OK 27 kB URL GET HTTP/2 areyourealhuman.com/cl/v/r7r3ll?aff_sub5=v2_password
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerLet's Encrypt
Subjectareyourealhuman.com
Fingerprint80:B4:0B:62:3B:2E:65:56:3D:1B:6C:83:7E:0A:4E:C6:69:9A:98:23
ValiditySat, 30 Nov 2024 00:29:17 GMT - Fri, 28 Feb 2025 00:29:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cl/v/r7r3ll?aff_sub5=v2_password HTTP/1.1
Host: areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Cookie: XSRF-TOKEN=eyJpdiI6Ik0xSndERndhVjZUSWZlQzR0TlBCeXc9PSIsInZhbHVlIjoieTUycWwxVDErdHpmRGJGcWhIc2NHV2NiSmNWL2xsQ0NkR2lFd1R3bkdGTlNKMG01Wmo5cnpqa3A5Q1BzRkhBeFVLa2lYUnFLK2tUZEFyZllPQ0hGRk1pRWgxNTFWdEptQlR4eEpIUmFZN1RBcm9waUdadGlza0VzbGwxTW1WRmQiLCJtYWMiOiI4ODkwZGIxZDhjMDRkODZjMDFkNGUwY2IzZTI5YTkxNmU3NDU4M2E0MWE4NmVlNjU1MTkzZmNjZDgxNjcwNzQ3IiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Ii80SlB1MUVQaVlJd1J6cTZkbzZjRnc9PSIsInZhbHVlIjoiMkRqd0JxakVXTnEyUS90N2RUUXFITEN4emVHaEwzTkltT2FKek0zVnRnTGV2ZEV5VXNJZWEvN0Y2cVZLUFQ4Vk5vSnArVitjU2RiVW9teVBRMmRLWkJBNE1NdzVKaEJSYmJQRkRQUmRXOURRSDhtNWk2OG13enZDblppcUhCUXUiLCJtYWMiOiI3NDU0ZGZlOGI5N2IwMWVkYzMyMzE5YzI2ZGRjYTMxODM3NTI0YTFmM2FjODY4YjMxZjdjNGNjY2I0ZTdmNTBiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 12 Dec 2024 10:16:09 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: none
set-cookie: XSRF-TOKEN=eyJpdiI6ImljUnBWenpSS1pWdzN1cllNMy9oUmc9PSIsInZhbHVlIjoiWVRhdHFCbTZuU1FTb0tpbTczbmIvZk9tOUxDb3lLL2pNVHpJUjZkNmRuQ1pKSEp6Y0ZJdG4wNTI2MVlQTFZ4TnBtQzFCUGJqRHVSZGllQzE1RFErUkZtcTg4d2hCRExnR1VVVFArSXRac0dMaGVrSkR0ODRGcTdBbmF4NjdsTHciLCJtYWMiOiIyODJkYWQ1MTI5MmRmNjZjNWI1ZTcwZjBhNDMyM2JjNmNhZDBlOTQ0OWU3YmYwYWE4MThiYzU2ZGExZGNmNTVkIiwidGFnIjoiIn0%3D; expires=Fri, 13 Dec 2024 06:16:09 GMT; Max-Age=72000; path=/; secure; samesite=none
ogads_session=eyJpdiI6Ijc4aGZvYlBjaWw3Ykp4TXlVMEtyU0E9PSIsInZhbHVlIjoiL1YzY0RwM1R6VGJ3MUNaT2FEMnkyMzhVM1NtNkM4Tnh3NEhpSmZ2L3B3Y3M5YWFkcHpDczNMS2tyTGF1djRoY0xxY0orQndHMzVtTDhTbXdMQ3Z6elRkOXFtQ3NwSjAxNVY4VmE1SjllTXdOZW9WK25uQldsRzlxK3IxRE5jU1YiLCJtYWMiOiI3NjU4OTQxZDg3YjVjODhkODc2YjNkN2RjNGY3MGFkYzg4Yzk3Zjg4M2NkMzcwYTAyZTY0NGVhNmI3YmM5ZWJhIiwidGFnIjoiIn0%3D; expires=Fri, 13 Dec 2024 06:16:09 GMT; Max-Age=72000; path=/; secure; httponly; samesite=none
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: DENY, nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
200 OK 15 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintD4:A3:E0:67:E1:FB:D8:0C:7B:58:AE:DA:81:4F:CA:47:9A:07:6E:5B
ValidityMon, 04 Nov 2024 08:38:51 GMT - Mon, 27 Jan 2025 08:38:50 GMT
Hash 861a8bad9f67530f5d8ccd2b67f5a8a1
ea7db9fa47648a74f99ecd8528c51a05e32f5eb4
22c3e32be01d8accada02d536093064df81aa7f0a922dde057e3e5fb8ea240ff
GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 12 Dec 2024 10:16:09 GMT
date: Thu, 12 Dec 2024 10:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.areyourealhuman.com/js/cl/desktop.js?id=e6DFYk
200 OK 229 kB URL GET HTTP/2 cdn.areyourealhuman.com/js/cl/desktop.js?id=e6DFYk
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectcdn.appinstallcheck.com
FingerprintE0:E7:19:A0:E3:AD:6A:1A:3F:99:B2:B5:37:AF:B3:08:AE:E0:96:6C
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT
Size 229 kB (228721 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/cl/desktop.js?id=e6DFYk HTTP/1.1
Host: cdn.areyourealhuman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 12 Dec 2024 10:16:10 GMT
last-modified: Tue, 01 Oct 2024 14:16:44 GMT
content-encoding: br
x-amz-server-side-encryption: AES256
cache-control: max-age=2628000
expires: Mon, 01 Oct 2029 14:16:43 GMT
server: AmazonS3
etag: W/"ef1a5ca817f062263fd747a3f7c48a7e"
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vf4lv8j6yWdLlgD8-oupxhIYGMeAywrGEKtqrMmhUph5y0AbHwzE0g==
X-Firefox-Spdy: h2
GET sdk.lockertools.ai/chat.js
200 OK 21 kB URL GET HTTP/2 sdk.lockertools.ai/chat.js
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectsdk.lockertools.ai
Fingerprint6C:9C:DC:89:BC:49:69:76:BF:1E:D3:FB:BA:02:07:F7:16:79:74:84
ValidityThu, 04 Apr 2024 00:00:00 GMT - Sat, 03 May 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /chat.js HTTP/1.1
Host: sdk.lockertools.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 11 Sep 2024 10:44:31 GMT
content-encoding: br
x-amz-server-side-encryption: AES256
server: AmazonS3
date: Thu, 12 Dec 2024 01:35:52 GMT
etag: W/"56d5a1d9c7adf544a14cee78d65c4862"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3O5dq4YaN36SAdFVwLIAERtaWCDdXJpUC65YYFi5aKAff0s4XD58RA==
age: 31894
X-Firefox-Spdy: h2
POST api.synthient.com/guard/validate
200 OK 80 B URL POST HTTP/3 api.synthient.com/guard/validate
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subjectsynthient.com
FingerprintAA:FA:AE:9B:94:71:BF:4E:7F:3A:44:B9:6D:09:16:B9:D8:25:43:25
ValidityWed, 06 Nov 2024 03:10:24 GMT - Tue, 04 Feb 2025 03:10:23 GMT
Hash 9854232f8887f78675cc9f944616e9db
e2d3a6b2af06ae678c760fa58c12da116b5a0fef
d2996cf3d7d00f9a7ee2000d33a17e820e52730dfc7a4ca9a4467ee243e1f387
POST /guard/validate HTTP/1.1
Host: api.synthient.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://areyourealhuman.com/
Content-Length: 2736
Origin: https://areyourealhuman.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 12 Dec 2024 10:16:12 GMT
content-type: binary/octet-stream
content-length: 80
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Authorization, X-Integrity
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bA%2FrCDfKsG4fN1p8v7HA8SRTGxmLe6ziGDTFufZAA2M2Q1MIEoxDVv38Mcdtu2XGd7vrv3hbv44zgyH49pywJYHoVRK%2FmpZzmDo6QPHo4rQjWoUEPilpgPOMxByQDaxRcwR9zg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f0cf5228fe0b518-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1646&min_rtt=811&rtt_var=951&sent=69&recv=22&lost=0&retrans=0&sent_bytes=65747&recv_bytes=4776&delivery_rate=10795175&cwnd=16800&unsent_bytes=0&cid=3266463af56ee9d9&ts=1560&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdn.synthient.com/client.js?v=2
200 OK 49 kB URL GET HTTP/2 cdn.synthient.com/client.js?v=2
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerGoogle Trust Services
Subjectsynthient.com
FingerprintAA:FA:AE:9B:94:71:BF:4E:7F:3A:44:B9:6D:09:16:B9:D8:25:43:25
ValidityWed, 06 Nov 2024 03:10:24 GMT - Tue, 04 Feb 2025 03:10:23 GMT
File type JavaScript source, ASCII text, with very long lines (49236), with no line terminators
Hash ffc032058fc0b551b63a4eb6f2d4b783
80b1fae9e907c4350fb0ac1695e782db48037bc9
ddd6b25af53e338e4ce1782579e20b5fa0c55e18f0ec301947f1278c90bbf9af
GET /client.js?v=2 HTTP/1.1
Host: cdn.synthient.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://areyourealhuman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 12 Dec 2024 10:16:09 GMT
content-type: text/javascript
content-md5: /8AyBY/AtVG2Ok628tS3gw==
last-modified: Mon, 15 Jul 2024 06:30:23 GMT
x-ms-request-id: bb7a440e-601e-0012-737e-f4b34f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=28800
cf-cache-status: HIT
age: 2743
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZeSyDIvLeip4FWyVDsxYsJF%2Bt6md5LmqyzoC6RsH5Q8bXRE%2B37ZgehDMWKKwdeMsO0hVU9z8uIJGyBVX%2FHchNdV2x%2BzZr4E9t%2Fi8w5sd1u47AnxJUkIfWzOOrJRXDVKENqW49w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf5145c23b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=506&min_rtt=480&rtt_var=121&sent=6&recv=11&lost=0&retrans=0&sent_bytes=3282&recv_bytes=1194&delivery_rate=8227272&cwnd=253&unsent_bytes=0&cid=6819fa4322376066&ts=125&x=0"
X-Firefox-Spdy: h2
GET cdn.tailwindcss.com/
302 Found 407 kB IP
Requested by https://zone-telechargement-albums.com/v2/password.php?id=1773473685
Certificate IssuerGoogle Trust Services
Subjecttailwindcss.com
Fingerprint26:11:6A:E2:4D:77:ED:0F:2E:DC:58:A5:79:39:84:D7:E6:ED:EC:E3
ValidityWed, 04 Dec 2024 00:31:10 GMT - Tue, 04 Mar 2025 00:31:09 GMT
Size 407 kB (407279 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 12 Dec 2024 10:16:07 GMT
cache-control: max-age=14400
location: /3.4.16
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: cle1::iad1::6blvg-1733998290075-2f01bb4e2371
cf-cache-status: HIT
age: 29
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f0cf50719fe56c7-OSL
X-Firefox-Spdy: h2
GET ws-mt1.pusher.com/app/2a1ddc1f29b22896b26c?protocol=7&client=js&version=4.4.0&flash=false
101 Switching Protocols 0 B URL GET HTTP/1.1 ws-mt1.pusher.com/app/2a1ddc1f29b22896b26c?protocol=7&client=js&version=4.4.0&flash=false
IP
Requested by https://areyourealhuman.com/cl/i/r7r3ll?aff_sub5=v2_password
Certificate IssuerAmazon
Subjectpusher.com
FingerprintE2:4C:85:69:26:6C:7F:64:0D:28:79:BD:CC:9A:DE:3B:D2:6B:EE:60
ValiditySun, 26 May 2024 00:00:00 GMT - Tue, 24 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/2a1ddc1f29b22896b26c?protocol=7&client=js&version=4.4.0&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://areyourealhuman.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: B/XubVlhYst3l7E4jbYofA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 12 Dec 2024 10:16:10 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Rqa4aRt60qYh6BIbeQj+G0/oGi8=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover
GET zone-telechargement-albums.com/v2/password.php?id=1773473685
200 OK 16 kB URL User Request GET HTTP/2 zone-telechargement-albums.com/v2/password.php?id=1773473685
IP
Certificate IssuerGoogle Trust Services
Subjectzone-telechargement-albums.com
Fingerprint29:3D:72:62:7C:32:0E:46:A1:F7:5D:FC:A7:F7:2D:1A:F1:CA:BC:53
ValidityMon, 02 Dec 2024 01:41:21 GMT - Sun, 02 Mar 2025 01:41:20 GMT
File type HTML document, ASCII text, with very long lines (561), with CRLF line terminators
Hash a72bb5c16a8227a7284a1cc078192fe7
e5d8f4f36450dda8d08c0b44f0e5e9779628866d
16c526faa2f491d82d5b0ee9c1b23cdfc88cd288daa45e66e924b68ffbae5320
GET /v2/password.php?id=1773473685 HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 12 Dec 2024 10:16:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uw3OxWreJEHNrdjroyNZtVV3vXeH11UtjmVRBODfRbXiiMlt%2FUOI%2F5ynvLglDKeh3mMY89Yulat8EHkvM7%2BIikRUQ4kgkP1%2FzO42vJ9qEiVaP4jpnQIPENEGpFxnCqgS3RzuG%2FcjcUXMQvaPFPPOlR0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f0cf50348f57131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5640&min_rtt=458&rtt_var=10372&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3256&recv_bytes=1149&delivery_rate=6662576&cwnd=254&unsent_bytes=0&cid=17500800b42ae200&ts=270&x=0"
X-Firefox-Spdy: h2
188.114.96.1
23.22.126.183
184.24.44.26