| GET treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net |  151.101.130.59 | 200 OK | 12 kB |
URL User Request GET treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net IP151.101.130.59:443
CertificateIssuerCertainly Subject*.glitch.me FingerprintEB:B1:24:2D:5E:08:98:DD:28:92:BE:BE:B2:6C:3D:F5:5F:AE:4B:2A ValidityTue, 10 Jun 2025 17:41:56 GMT - Thu, 10 Jul 2025 17:41:55 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1880) Hash65d32aaaf8bda06ebda4b7715770c6ad 39128d1ed00bd6a37facee2616dbb69fb6e393b2 82bbbd433a2dd4fa6820f2ae0017df580f178354673311007eae01735fc83dfc
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Suspicious Javascript code | | YARAhub by abuse.ch | malware | Detects file containing Telegram Bot API |
GET /index.html?eta=ficlit.dipartimento@slurpmail.net HTTP/1.1
Host: treasure-snow-plane.glitch.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
etag: "65d32aaaf8bda06ebda4b7715770c6ad"
x-amz-id-2: 66AkdIOrXSA6sqSqPQEy7wOVFnoo7cmI0xwH4FiwYSOgzONKnIZZv/w7g4iDUa9a4s5urDDGsuc=
x-amz-server-side-encryption: AES256
accept-ranges: bytes
x-amz-request-id: NTA17AXKZQHH2TPY
server: AmazonS3
last-modified: Sun, 15 Jun 2025 13:48:25 GMT
content-type: text/html; charset=utf-8
x-amz-version-id: q_Tgmp4GVHUjcUgkHgOqquds3.HCzXC5
date: Thu, 26 Jun 2025 14:50:43 GMT
via: 1.1 varnish
x-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1750949444.744292,VS0,VE167
content-length: 11657
X-Firefox-Spdy: h2
|
|
| GET fonts.googleapis.com/css2?family=Poppins:wght@400;500;600&display=swap | 142.250.74.10 | 200 OK | 3.6 kB |
URL GET fonts.googleapis.com/css2?family=Poppins:wght@400;500;600&display=swap IP142.250.74.10:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
Hash34c199fb3268dec07c4cfb3040f0a556 e42075064fc4a215c0db459785b65e34e156e46d d0da949ee9d49486b3ebd67e875d3440f882210c222c08738447d6c7d85110d5
GET /css2?family=Poppins:wght@400;500;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 26 Jun 2025 14:50:44 GMT
date: Thu, 26 Jun 2025 14:50:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js |  104.16.175.226 | 200 OK | 80 kB |
URL GET cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js IP104.16.175.226:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerSectigo Limited Subject*.jsdelivr.net FingerprintA6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F ValidityFri, 25 Apr 2025 00:00:00 GMT - Mon, 04 May 2026 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hash849e6db145f2905ce210f628bddd9de5 d722fa9982da8aa48df88251bb1897f13c1db3b9 aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04
GET /npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Jun 2025 14:50:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 23984
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.3.0
x-jsd-version-type: version
etag: W/"13a25-1yL6mYLaiqSN+IJRuxiX8Twds7k"
content-encoding: br
x-served-by: cache-fra-etou8220038-FRA, cache-lga21974-LGA
x-cache: HIT, MISS
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1855460
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YzhqLVLkxINzqdQjjNMrT4wQSeIalYfeVA59Q81LvG2zu5sW6MUwUUiL4zg2F2YVLVkN0KcQWtoVQ972Qep41bWUyelaWIFrMbVP%2F670Td9b5sJVcnFkt4xqhcWVJvzttwk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 955d84ccbb7656a8-OSL
server-timing: cfExtPri
|
|
| GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.178.99 | 200 OK | 7.9 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.178.99:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://treasure-snow-plane.glitch.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jun 2025 21:38:29 GMT
expires: Thu, 25 Jun 2026 21:38:29 GMT
cache-control: public, max-age=31536000
age: 61935
last-modified: Wed, 23 Apr 2025 16:05:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET slurpmail.net/ | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: slurpmail.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16 | 142.250.178.100 | 200 OK | 734 B |
URL GET t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16 IP142.250.178.100:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hashb864010428c077910c5ca240cf245bb6 f9715aa21b66802df7df8d5cb7d567b90542c042 dd7125f39db361fa801a74d09c1f48800926bfdbd241c67152cfcfa04402d665
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://treasure-snow-plane.glitch.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-location: http://slurpmail.net/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 734
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Jun 2025 13:57:12 GMT
expires: Sat, 28 Jun 2025 13:57:12 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2017 12:34:19 GMT
content-type: image/png
age: 435213
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET api.ipify.org/?format=json | 104.26.13.205 | 200 OK | 21 B |
URL GET api.ipify.org/?format=json IP104.26.13.205:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerGoogle Trust Services Subjectipify.org FingerprintB6:43:2D:30:3C:0D:E5:13:B7:32:8A:28:4E:69:95:BC:C6:20:DD:F9 ValidityFri, 09 May 2025 18:38:00 GMT - Thu, 07 Aug 2025 19:37:58 GMT
Hash7d69c71af0f191e9a72db6153f8018d1 f67c5f2887bc05654b47f76e9621e53a4091aed1 5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65
GET /?format=json HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://treasure-snow-plane.glitch.me/
Origin: https://treasure-snow-plane.glitch.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Jun 2025 14:50:44 GMT
content-type: application/json
content-length: 21
cf-ray: 955d84ce5b3bb518-OSL
access-control-allow-origin: *
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=6981&min_rtt=976&rtt_var=11831&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3192&recv_bytes=1108&delivery_rate=2744156&cwnd=254&unsent_bytes=0&cid=d7c6f7f03d776a91&ts=150&x=0"
X-Firefox-Spdy: h2
|
|
| GET cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js | 104.16.175.226 | 200 OK | 80 kB |
URL GET cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js IP104.16.175.226:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerSectigo Limited Subject*.jsdelivr.net FingerprintA6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F ValidityFri, 25 Apr 2025 00:00:00 GMT - Mon, 04 May 2026 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hash849e6db145f2905ce210f628bddd9de5 d722fa9982da8aa48df88251bb1897f13c1db3b9 aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04
GET /npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Jun 2025 14:50:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 23984
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.3.0
x-jsd-version-type: version
etag: W/"13a25-1yL6mYLaiqSN+IJRuxiX8Twds7k"
content-encoding: br
x-served-by: cache-fra-etou8220038-FRA, cache-lga21974-LGA
x-cache: HIT, MISS
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1855460
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQ4MTpY8g%2B41KbKFJQBa3D0VuTAgQyNbUzQh6STpWwqTiZwOeygRktTcvLcK3rLZsM%2Fzd15hdtb23TW1lNELQrnMUIqUUcQ6HUVBpFPKfhulaHWTwCZYAVx70Du2FEcakHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 955d84ca29cbb503-OSL
X-Firefox-Spdy: h2
|
|
| GET cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css | 104.16.175.226 | 200 OK | 233 kB |
URL GET cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css IP104.16.175.226:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerSectigo Limited Subject*.jsdelivr.net FingerprintA6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F ValidityFri, 25 Apr 2025 00:00:00 GMT - Mon, 04 May 2026 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (65342) Size233 kB (232914 bytes) Hashfe7fdfec700d100dc745dc64d3600cb2 b231651e0fd68bbd8758189fbd3642c462d34fa6 7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a
GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Jun 2025 14:50:44 GMT
content-type: text/css; charset=utf-8
content-length: 27424
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.3.0
x-jsd-version-type: version
etag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y"
content-encoding: br
x-served-by: cache-fra-eddf8230088-FRA, cache-lga21958-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1931494
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Mjj0YHe7BApFnYsZt2xIpc5mGomeMwVjGMH9n78Xe4XK64DJTgHpV2N20T23v1d%2Fqt0ix422WwmIYBUUcCEJp01wWNlJQq7ZEIsv6SMpD95ZaujxU7VgKfWCvXcMKtf4sU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 955d84ca29c5b503-OSL
X-Firefox-Spdy: h2
|
|
| GET cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css | 104.16.175.226 | 200 OK | 94 kB |
URL GET cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css IP104.16.175.226:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerSectigo Limited Subject*.jsdelivr.net FingerprintA6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F ValidityFri, 25 Apr 2025 00:00:00 GMT - Mon, 04 May 2026 23:59:59 GMT
Hash8f4b242830ec54686815617e7b5a5b1b a7838d8a20dbda0ee9e4c1cb7f1f832ce9af1c11 d8824f7067cdfea38afec7e9ffaf072125266824206d69ef1f112d72153a505e
GET /npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Jun 2025 14:50:44 GMT
content-type: text/css; charset=utf-8
content-length: 12016
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.10.5
x-jsd-version-type: version
etag: W/"16e26-p4ONiiDb2g7p5MHLfx+DLOmvHBE"
content-encoding: br
x-served-by: cache-fra-etou8220110-FRA, cache-lga21955-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1600460
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BpWBNzt9tGubmYlaC3zoQeMS1PM8%2Fp%2BTmQ8185phU%2FdzJP79pZaFM4AfJuwkPskjs2eHS1sLcM0HptJ7tftBJi3Z%2FdPoe1tqT%2FO18tbYr04OCGa9%2FevT4hjJYjhn8Tlt0B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 955d84ca39d9b503-OSL
X-Firefox-Spdy: h2
|
|
| GET treasure-snow-plane.glitch.me/favicon.ico | 151.101.130.59 | 404 Not Found | 3.7 kB |
URL GET treasure-snow-plane.glitch.me/favicon.ico IP151.101.130.59:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerCertainly Subject*.glitch.me FingerprintEB:B1:24:2D:5E:08:98:DD:28:92:BE:BE:B2:6C:3D:F5:5F:AE:4B:2A ValidityTue, 10 Jun 2025 17:41:56 GMT - Thu, 10 Jul 2025 17:41:55 GMT
File typeHTML document, ASCII text Hashce0366d3c0ef2d5187efc621c5e7fb00 83f60d035e88968d24178360639a8ad6cc08dc26 2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c
GET /favicon.ico HTTP/1.1
Host: treasure-snow-plane.glitch.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: max-age=0
accept-ranges: bytes
date: Thu, 26 Jun 2025 14:50:45 GMT
via: 1.1 varnish
x-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1750949445.041157,VS0,VE144
content-length: 3674
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 142.250.178.99 | 200 OK | 7.7 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP142.250.178.99:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://treasure-snow-plane.glitch.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jun 2025 21:38:56 GMT
expires: Thu, 25 Jun 2026 21:38:56 GMT
cache-control: public, max-age=31536000
age: 61908
last-modified: Wed, 23 Apr 2025 16:07:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.google.com/s2/favicons?domain=slurpmail.net | 142.250.178.36 | 301 Moved Permanently | 734 B |
URL GET www.google.com/s2/favicons?domain=slurpmail.net IP142.250.178.36:443
Requested byhttps://treasure-snow-plane.glitch.me/index.html?eta=ficlit.dipartimento@slurpmail.net CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint4F:74:10:0A:01:21:55:4F:03:B9:F9:8B:6A:DE:A2:47:7C:44:89:73 ValidityMon, 02 Jun 2025 08:37:21 GMT - Mon, 25 Aug 2025 08:37:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s2/favicons?domain=slurpmail.net HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://treasure-snow-plane.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 26 Jun 2025 14:50:45 GMT
expires: Thu, 26 Jun 2025 15:20:45 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|