| google.co.za/amp/s/athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t |  142.250.74.67 | 301 Moved Permanently | 278 B |
URL User Request GET HTTP/2google.co.za/amp/s/athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t IP142.250.74.67:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.co.za FingerprintCB:3E:49:3D:CB:FA:19:A8:FA:FE:3B:8C:55:02:1C:08:3B:D8:87:30 ValidityMon, 19 Feb 2024 08:21:12 GMT - Mon, 13 May 2024 08:21:11 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hashb6291237b95eb07b292c3cc0c779e317 75be5f204d5371861c548ff1886323a2e8577ff5 5cb769fea4108bc44ccad0ee3806dd439504df60d94b7e2f795d7f21948e2e62
GET /amp/s/athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t HTTP/1.1
Host: google.co.za
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://www.google.co.za/amp/s/athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-IUrIYKM1-2SEQmgMR-sPXg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
date: Fri, 15 Mar 2024 09:31:54 GMT
expires: Sun, 14 Apr 2024 09:31:54 GMT
cache-control: public, max-age=2592000
server: gws
content-length: 278
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.co.za/amp/s/athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t | 142.250.74.99 | 302 Found | 255 B |
URL User Request GET HTTP/2www.google.co.za/amp/s/athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t IP142.250.74.99:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.co.za FingerprintCB:3E:49:3D:CB:FA:19:A8:FA:FE:3B:8C:55:02:1C:08:3B:D8:87:30 ValidityMon, 19 Feb 2024 08:21:12 GMT - Mon, 13 May 2024 08:21:11 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hashffa7c8a3b84d2e276948cd6103ba56ef 3b23185cb382bdb1822863eb4891b765bf8098fb c32701ec9131a2de639d1a5d6bc1a632e9c1d59f9e37a470bfd9358ea26e053f
GET /amp/s/athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t HTTP/1.1
Host: www.google.co.za
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-n1JMbA3AEWa_JaArktJ9Eg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 15 Mar 2024 09:31:54 GMT
server: gws
content-length: 255
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: __Secure-ENID=18.SE=UY13MSKtf2mjMWR5fgyB5VbdUTUVQY8Dwg8vz9dVUNh65NEgU1LsnTnwXL9BHN-dlXnJGnOGFoIUCVX-8JmEcc10V8ibGCFocEJPk_O6KvAGr3BMa2tIQXnTCq4S4MIQvvIQ1xYLpjNIs9jdhd_Q1DlPOI23z4l0iG0rCliDDoSbzF4; expires=Tue, 15-Apr-2025 01:50:12 GMT; path=/; domain=.google.co.za; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t |  81.0.218.211 | 200 OK | 1.1 kB |
URL User Request GET HTTP/2athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t IP81.0.218.211:443
CertificateIssuerLet's Encrypt Subject*.athadnw.com Fingerprint38:D2:28:C9:2E:E4:CC:99:B3:60:A5:55:81:7E:EC:AF:4E:8F:48:C6 ValidityTue, 27 Feb 2024 21:43:49 GMT - Mon, 27 May 2024 21:43:48 GMT
File typeHTML document, ASCII text, with very long lines (833) Hash766d4f6e0ed48ddf4011cc28d90754c5 3f5484dc683daa6a0d15588643c904a67bd35c79 8d5a04a23abf79358676911d402ed9044eabb4c9285c38f03cd9de9aaddaee75
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t HTTP/1.1
Host: athadnw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: PHPSESSID=217c6343a530f59f722fbb97f159f4d4; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 1147
content-encoding: br
vary: Accept-Encoding
date: Fri, 15 Mar 2024 09:31:54 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| www.rubinoviaggi.it/read1.js |  178.63.61.164 | 200 OK | 94 B |
URL GET HTTP/1.1www.rubinoviaggi.it/read1.js IP178.63.61.164:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerLet's Encrypt Subjectrubinoviaggi.it FingerprintE3:BD:AF:07:97:DD:4E:95:78:7D:ED:46:BD:05:BC:57:5E:37:73:B0 ValidityThu, 08 Feb 2024 02:22:17 GMT - Wed, 08 May 2024 02:22:16 GMT
Hash01d6e93979c4e1d2d3c98bffcef5cdf2 c7fcdfc83fb8df334df779062a9420075c02a564 e871d831ce9f0b019c14db784ca403ace4e96dbe9303b7e2ecfa6fcd20aeb102
GET /read1.js HTTP/1.1
Host: www.rubinoviaggi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://athadnw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 15 Mar 2024 09:31:54 GMT
Server: Apache/2.4.29
Last-Modified: Tue, 08 Jun 2021 01:53:14 GMT
ETag: "4e-5c4376bc6f680-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 94
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.google.com/favicon.ico | 142.250.74.164 | | 1.5 kB |
URL GET www.google.com/favicon.ico IP142.250.74.164:0
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeMS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hashf3418a443e7d841097c714d69ec4bcb8 49263695f6b0cdd72f45cf1b775e660fdc36c606 6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
GET /favicon.ico HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://athadnw.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1494
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Mar 2024 00:09:42 GMT
expires: Sat, 23 Mar 2024 00:09:42 GMT
cache-control: public, max-age=691200
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
content-type: image/x-icon
vary: Accept-Encoding
age: 33732
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203450 bytes) Hash5a8547555d71e5846135a48dcc7ec3dc bdf99d0037d631ca1d24efa343781f55a11afb05 7a01932abc324cbdf143534bd8dc0e665e045a2ae8a0d234d24f2d3ad9ebc619
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://athadnw.com
DNT: 1
Connection: keep-alive
Referer: https://athadnw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:21 GMT
expires: Fri, 14 Mar 2025 14:09:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 69753
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp | 142.250.74.164 | 200 OK | 54 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp IP142.250.74.164:443
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeHTML document, ASCII text, with very long lines (38822) Hash95ccb59e146d1e910c17f74db0f40f2d 24a600fe349dcbf3de82a4f01a633ec130ede58a 0743e10658be46f729420767a1a088b23ac0d4cc72a68becb4c3b8364846a81d
GET /recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://athadnw.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 15 Mar 2024 09:31:55 GMT
content-security-policy: script-src 'nonce-NWsbSfpMlEVxf6Xww0y0kA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203450 bytes) Hash5a8547555d71e5846135a48dcc7ec3dc bdf99d0037d631ca1d24efa343781f55a11afb05 7a01932abc324cbdf143534bd8dc0e665e045a2ae8a0d234d24f2d3ad9ebc619
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:21 GMT
expires: Fri, 14 Mar 2025 14:09:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 69754
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:04 GMT
expires: Fri, 14 Mar 2025 14:09:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 69771
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203450 bytes) Hash5a8547555d71e5846135a48dcc7ec3dc bdf99d0037d631ca1d24efa343781f55a11afb05 7a01932abc324cbdf143534bd8dc0e665e045a2ae8a0d234d24f2d3ad9ebc619
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:21 GMT
expires: Fri, 14 Mar 2025 14:09:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 69754
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:26:39 GMT
expires: Thu, 21 Mar 2024 14:26:39 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 68716
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/v77SiQbcxtK1O5ek11TdloiB5zZ00UAxE3PsP-319e4.js | 142.250.74.164 | 200 OK | 7.3 kB |
URL GET HTTP/3www.google.com/js/bg/v77SiQbcxtK1O5ek11TdloiB5zZ00UAxE3PsP-319e4.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeJavaScript source, ASCII text, with very long lines (17280) Hashb1446b9fffe2c4cb28bba7ae4c10b361 687a693116cc2884d3f23a01dbfdf64fa82225a6 bfbed28906dcc6d2b53b97a4d754dd968881e73674d140311373ec3fedf5f5ee
GET /js/bg/v77SiQbcxtK1O5ek11TdloiB5zZ00UAxE3PsP-319e4.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7341
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:08:38 GMT
expires: Fri, 14 Mar 2025 14:08:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Mar 2024 15:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 69797
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeASCII text, with very long lines (56398), with no line terminators Hasheb4bc511f79f7a1573b45f5775b3a99b d910fb51ad7316aa54f055079374574698e74b35 7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:36:59 GMT
expires: Fri, 14 Mar 2025 14:36:59 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/css
vary: Accept-Encoding
age: 68096
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203450 bytes) Hash5a8547555d71e5846135a48dcc7ec3dc bdf99d0037d631ca1d24efa343781f55a11afb05 7a01932abc324cbdf143534bd8dc0e665e045a2ae8a0d234d24f2d3ad9ebc619
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:21 GMT
expires: Fri, 14 Mar 2025 14:09:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 69754
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX IP142.250.74.164:443
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeHTML document, ASCII text, with very long lines (7668), with no line terminators Hashe88ca29ecf26c81e3d24f00bb1505460 269ba5236bd25a64736b3444c583f18d00d4362c 3957caad6b881d6cbec6b55c55ba9e6813513e734f7cd3e63445946be09d55ac
GET /recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://athadnw.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 15 Mar 2024 09:31:55 GMT
content-security-policy: script-src 'nonce-lyQ_NMWK3uVO0s2d8jNg9Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api.js | 142.250.74.164 | 200 OK | 850 B |
URL GET HTTP/2www.google.com/recaptcha/api.js IP142.250.74.164:443
Requested byhttps://athadnw.com/FUxNT/sHiTY2FyZXBsYW5uaW5nQGNhcmUuY29t CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint8E:AB:CA:05:82:01:0A:64:AD:90:F4:20:F3:F0:DD:E7:06:7B:BD:E3 ValidityMon, 19 Feb 2024 08:19:14 GMT - Mon, 13 May 2024 08:19:13 GMT
File typeJavaScript source, ASCII text, with very long lines (850), with no line terminators Hash8cedb573dddf05d2f9cec38a0e268c33 c749bea9aa521f3bc1910552a6229bb4e717ebca 37ca9816aa916b457dbcc35f7cee5f94a34aa92a431807cd1ed8838be4cdee0a
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://athadnw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 15 Mar 2024 09:31:54 GMT
date: Fri, 15 Mar 2024 09:31:54 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw | 142.250.74.164 | 200 OK | 102 B |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeASCII text, with no line terminators Hashe43ed69c73d3d702c3e4533a337d5a1a 88baa0d1308fb899f418628f69394b9583be9b34 54d175fbb376b467b47a444346899169d7f8fff30cc0dd3895c98cb647329afd
GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdRFJgpAAAAALFD8rRlzgXy5DI2Kmd74Dt-L6nX&co=aHR0cHM6Ly9hdGhhZG53LmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=d6uwdzu8k8fp
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 15 Mar 2024 09:31:55 GMT
date: Fri, 15 Mar 2024 09:31:55 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|