| datanodes.to/z151cpywfffy/Sifu.Update.v1.27-TENOKE.rar |  104.26.15.76 | 302 Found | 82 kB |
URL User Request GET datanodes.to/z151cpywfffy/Sifu.Update.v1.27-TENOKE.rar IP104.26.15.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /z151cpywfffy/Sifu.Update.v1.27-TENOKE.rar HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 27 Mar 2025 13:48:45 GMT
location: https://datanodes.to/download
cf-cache-status: BYPASS
set-cookie: file_code=z151cpywfffy; domain=.datanodes.to; path=/; expires=Thu, 27-Mar-2025 14:48:45 GMT
lang=english; domain=.datanodes.to; path=/
file_name=Sifu.Update.v1.27-TENOKE.rar; domain=.datanodes.to; path=/; expires=Thu, 27-Mar-2025 14:48:45 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vMN8ri3%2BTqfod9LHXeh5%2BBYi7UJTSeaDkaY6uUdXTF5gEpIwVTbuBgY2H1TxRPrPWUSLDaXZ8Ihk3VxCFv%2FdOF7QjCAsUXaGG0noYSMRMIsk5%2FmvBtShuAx6aJQ95g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58dd3e8eb51e-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6725&min_rtt=777&rtt_var=11864&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3275&recv_bytes=1278&delivery_rate=3967123&cwnd=254&unsent_bytes=0&cid=9919df86e27e053f&ts=158&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap |  142.250.74.10 | 200 OK | 5.9 kB |
URL GET fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap IP142.250.74.10:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File typeASCII text, with very long lines (6040), with no line terminators Hash92ce94ca50fec890cfe6d268de5f1144 0e3e7d60e754ad04897b3a77587cbd6743dd0c55 441f7117ae375b9c180bc1e49590c0fc489ebfa13b21c3a1c8e8c77862c9b42b
GET /css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 27 Mar 2025 13:48:45 GMT
date: Thu, 27 Mar 2025 13:48:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.100 | 200 OK | 945 B |
URL GET www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.100:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint2F:CC:05:C5:14:C4:CD:A4:26:05:31:F9:67:40:7C:D3:39:74:34:0C ValidityMon, 10 Mar 2025 08:37:46 GMT - Mon, 02 Jun 2025 08:37:45 GMT
File typeJavaScript source, ASCII text, with very long lines (945), with no line terminators Hash2941d851e0aec360d3d393395728f819 a9173a610d70a8ba367e8f77b0f29a7ebc10d830 4cdedaef19e0400d07480123b40aac52824302874f56d5b5a8b3e96f859dc5b2
GET /recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 27 Mar 2025 13:48:45 GMT
date: Thu, 27 Mar 2025 13:48:45 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/WGZnSUw5BAQkczlbBW85KgpabH4eQ1UPKGoDFn00bBNVOH8+EQRnLzQJEi0qKgkJPWI2AxNsfh4LMCQgMjwwcXkaAVcNGRtSJgt9MAMGeHULMyE5OQweKhEPMh4yCzsJBCg+LxUnNiY8Ch4EAh8MJwYNDSsAPT4NEC0NPg0QHxAtBCBSAQ8nFQQuCH09MDIifhsnVwoZNhEqDR0CNQZ5dBsnNngiADMyGAg1BSINDmAhKS4ZGzcheS8AI1YfHzUOPRo0ESEpCHwVIw8xaWogMHgBFCFUcC4NVzUvKB4KIB8laUNVDxtpKzQLJgoAMXkOOyEiMR4ONAM6FA1LPR4AAF8FHDQ7PAF4IzEwITE5ClcpBB81Dj0LDRkrKhgWHzAeJSMPMC0fFGoSPRwnGgIGLnQTIBAmdBoOEwgUCh4+HAoeJAYidA8xIX1qMhUIJzxlDwMGHwIQKDE8HBAS | 0.0.0.0 | | 0 B |
URL GET undefined/WGZnSUw5BAQkczlbBW85KgpabH4eQ1UPKGoDFn00bBNVOH8+EQRnLzQJEi0qKgkJPWI2AxNsfh4LMCQgMjwwcXkaAVcNGRtSJgt9MAMGeHULMyE5OQweKhEPMh4yCzsJBCg+LxUnNiY8Ch4EAh8MJwYNDSsAPT4NEC0NPg0QHxAtBCBSAQ8nFQQuCH09MDIifhsnVwoZNhEqDR0CNQZ5dBsnNngiADMyGAg1BSINDmAhKS4ZGzcheS8AI1YfHzUOPRo0ESEpCHwVIw8xaWogMHgBFCFUcC4NVzUvKB4KIB8laUNVDxtpKzQLJgoAMXkOOyEiMR4ONAM6FA1LPR4AAF8FHDQ7PAF4IzEwITE5ClcpBB81Dj0LDRkrKhgWHzAeJSMPMC0fFGoSPRwnGgIGLnQTIBAmdBoOEwgUCh4+HAoeJAYidA8xIX1qMhUIJzxlDwMGHwIQKDE8HBAS IP0.0.0.0:0
Requested byhttps://datanodes.to/download
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /WGZnSUw5BAQkczlbBW85KgpabH4eQ1UPKGoDFn00bBNVOH8+EQRnLzQJEi0qKgkJPWI2AxNsfh4LMCQgMjwwcXkaAVcNGRtSJgt9MAMGeHULMyE5OQweKhEPMh4yCzsJBCg+LxUnNiY8Ch4EAh8MJwYNDSsAPT4NEC0NPg0QHxAtBCBSAQ8nFQQuCH09MDIifhsnVwoZNhEqDR0CNQZ5dBsnNngiADMyGAg1BSINDmAhKS4ZGzcheS8AI1YfHzUOPRo0ESEpCHwVIw8xaWogMHgBFCFUcC4NVzUvKB4KIB8laUNVDxtpKzQLJgoAMXkOOyEiMR4ONAM6FA1LPR4AAF8FHDQ7PAF4IzEwITE5ClcpBB81Dj0LDRkrKhgWHzAeJSMPMC0fFGoSPRwnGgIGLnQTIBAmdBoOEwgUCh4+HAoeJAYidA8xIX1qMhUIJzxlDwMGHwIQKDE8HBAS HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP142.250.147.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint5C:69:AA:FF:3B:8D:17:7C:81:50:5D:11:18:53:F1:66:2E:C7:F9:D0 ValidityMon, 10 Mar 2025 08:37:48 GMT - Mon, 02 Jun 2025 08:37:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:S9qr9eFgeys6231EaEzwPboszuPTdw:VbNCiED7oBjjgAaG; Expires=Sat, 27-Mar-2027 13:48:47 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 27 Mar 2025 13:48:47 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvjmwOBLlXiqfyImLoJkiKg2kXj01be5Kqgd4g0AiHwY_hPJA4ScmUlhrXRvwT0eah2houxpA
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-uvV2J6A711kcCo0oL5hKYQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVt2GYT8WCJsEGyt17a43OBl8bskFlKfXwFvaqI3llj1PXH5bDsGtBrWwHJGL0f_kDF_bGMljQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1577362983%3A1743083327839881 | 142.250.147.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVt2GYT8WCJsEGyt17a43OBl8bskFlKfXwFvaqI3llj1PXH5bDsGtBrWwHJGL0f_kDF_bGMljQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1577362983%3A1743083327839881 IP142.250.147.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVt2GYT8WCJsEGyt17a43OBl8bskFlKfXwFvaqI3llj1PXH5bDsGtBrWwHJGL0f_kDF_bGMljQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1577362983%3A1743083327839881 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 27 Mar 2025 13:48:47 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-BYh9ZdtIjjkCo0QRAF4yEw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.i1iWz6PIRZY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvjmwOBLlXiqfyImLoJkiKg2kXj01be5Kqgd4g0AiHwY_hPJA4ScmUlhrXRvwT0eah2houxpA | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvjmwOBLlXiqfyImLoJkiKg2kXj01be5Kqgd4g0AiHwY_hPJA4ScmUlhrXRvwT0eah2houxpA IP142.250.147.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint5C:69:AA:FF:3B:8D:17:7C:81:50:5D:11:18:53:F1:66:2E:C7:F9:D0 ValidityMon, 10 Mar 2025 08:37:48 GMT - Mon, 02 Jun 2025 08:37:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvjmwOBLlXiqfyImLoJkiKg2kXj01be5Kqgd4g0AiHwY_hPJA4ScmUlhrXRvwT0eah2houxpA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:jqv10uIs9baQz_crRWXudvVuM_Uq2Q:M37Jgv2aK0_kO9zm;Path=/;Expires=Sat, 27-Mar-2027 13:48:47 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 27 Mar 2025 13:48:47 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVv7ABuaEeGURa77N02lqtBsmIdOnFQNCZ0J9t4kK7_RgOq9v-fezf2lqaPxM-tWhmiLlY-K0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S840671454%3A1743083327805721
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-ZiHFvCjy0YlWE_BjAPeCng' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 418
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 142.250.178.99 | 200 OK | 7.7 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP142.250.178.99:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 18:00:00 GMT
expires: Fri, 20 Mar 2026 18:00:00 GMT
cache-control: public, max-age=31536000
age: 589726
last-modified: Wed, 04 Dec 2024 06:54:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js | 104.26.15.76 | 200 OK | 79 kB |
URL GET datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2023/dist/assets/FileActions-fa6032ae.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-13480"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xM4Qwqf8Iah%2FlXieoajOsSvjeGc%2BdOKCXGxynhIfnBa7mDz0sIFt5KlJeeU%2FzMrdWHTZfaZzOK%2FqfKFya6lAXXnLy%2FSkalFtR4LyYJ29ymufJWt%2Fh6Mzw3Fx%2FoX%2B9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e4ecd1b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=7977&min_rtt=455&rtt_var=13029&sent=171&recv=82&lost=0&retrans=0&sent_bytes=183715&recv_bytes=3164&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1381&x=0"
X-Firefox-Spdy: h2
|
|
| ummertisaridiculou.com/MmhkeW8dVwcKUlYGMgE8Az4lKzp4XAYsJXM7PDcDYD02PglfJUINBlZVVUhZA11RTUlCAQBEXgpOFw0ORh0XRF4UAQofAA9OEkReHFhKS0EHThFEXhQcFBgID1lCCRtGBFlIWAZbVEFcAVpSQVgE | 188.114.96.1 | 204 No Content | 0 B |
URL GET ummertisaridiculou.com/MmhkeW8dVwcKUlYGMgE8Az4lKzp4XAYsJXM7PDcDYD02PglfJUINBlZVVUhZA11RTUlCAQBEXgpOFw0ORh0XRF4UAQofAA9OEkReHFhKS0EHThFEXhQcFBgID1lCCRtGBFlIWAZbVEFcAVpSQVgE IP188.114.96.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectummertisaridiculou.com Fingerprint82:E3:6F:44:9C:6F:5A:4B:02:19:B0:49:44:AA:31:84:A5:33:98:BF ValidityMon, 17 Feb 2025 14:45:45 GMT - Sun, 18 May 2025 15:43:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MmhkeW8dVwcKUlYGMgE8Az4lKzp4XAYsJXM7PDcDYD02PglfJUINBlZVVUhZA11RTUlCAQBEXgpOFw0ORh0XRF4UAQofAA9OEkReHFhKS0EHThFEXhQcFBgID1lCCRtGBFlIWAZbVEFcAVpSQVgE HTTP/1.1
Host: ummertisaridiculou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 27 Mar 2025 13:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EBtlm1tShZDDDBr59wFa03magCo427o%2BfMnJ0%2FZmgN2Vkt%2Ba4Hpg2ab3TerHtUGQJHplniT6mgIBRLGIhRY2W4k17UX9d4wKbYAU0SIaBDUwysyrRohiV3SPEI%2FX9tXMWQKZCCtx%2BtC7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926f58eab8dbb4ed-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1278&min_rtt=529&rtt_var=1037&sent=9&recv=12&lost=0&retrans=0&sent_bytes=3304&recv_bytes=1719&delivery_rate=7688495&cwnd=252&unsent_bytes=0&cid=7b196d23d680639e&ts=163&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.48.1 | 200 OK | 26 B |
IP104.21.48.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeASCII text, with no line terminators Hashb6b572e940360a2eb5444aaf8b66131b e980f342adc74608efcf73d29df0e08a698593d5 3d420ad36e636f9a48bac17c6fc3f9fa1567ddfd1daf7ad04931cdaea4b079f1
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:47 GMT
content-type: text/plain
set-cookie: csu=815483905537651@1@1743083327; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=caEzb94DDDNzMOtFng3iC%2F%2BC5XLdvIg9W47BfhE84LjLHLO9bhGUCYQaypiZuAkknQ12soi78eg0jk3YofzOyNnaSt0VN8s%2BYepG0ywrF0iUKNwLj%2B22k7gbSe9bVUN1aNeiOsQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926f58ed0eed56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=780&min_rtt=439&rtt_var=69&sent=160&recv=58&lost=0&retrans=1&sent_bytes=211748&recv_bytes=1296&delivery_rate=40351554&cwnd=184&unsent_bytes=0&cid=c2126ee2526138a9&ts=183&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVvC_1FZJsbFuoEywvfc7cp7MXRyNq7MQxtGr8FB8S6Q_iuiNbC2NNfDAoomlIOv1qEh-FHpkw | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVvC_1FZJsbFuoEywvfc7cp7MXRyNq7MQxtGr8FB8S6Q_iuiNbC2NNfDAoomlIOv1qEh-FHpkw IP142.250.147.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint5C:69:AA:FF:3B:8D:17:7C:81:50:5D:11:18:53:F1:66:2E:C7:F9:D0 ValidityMon, 10 Mar 2025 08:37:48 GMT - Mon, 02 Jun 2025 08:37:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVvC_1FZJsbFuoEywvfc7cp7MXRyNq7MQxtGr8FB8S6Q_iuiNbC2NNfDAoomlIOv1qEh-FHpkw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:pe4EhRpFfWj3hZ23fmq_RI6VNCYPSg:IlR-PA1MzwMQztQ7;Path=/;Expires=Sat, 27-Mar-2027 13:48:47 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 27 Mar 2025 13:48:47 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVt2GYT8WCJsEGyt17a43OBl8bskFlKfXwFvaqI3llj1PXH5bDsGtBrWwHJGL0f_kDF_bGMljQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1577362983%3A1743083327839881
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-yEMbTmJQgMC0S9dAB7xXkA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 415
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/app-36afb1c9.css | 104.26.15.76 | 200 OK | 53 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-36afb1c9.css IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2023/dist/assets/app-36afb1c9.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:45 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-cf77"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JjqY3rDTap1pPn4izXz72uykEFt7AwQNwfkaeFshwiWmEiBlOlN4t%2BsemWaqJ0f54eU36eZ2aDqsjcWIAcYBjqykchKgFi9pllD%2Fk4DO%2Ft2sGYr7yPt04KhYdgqvFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e0dda6b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2118&min_rtt=577&rtt_var=2793&sent=44&recv=27&lost=0&retrans=0&sent_bytes=39299&recv_bytes=2030&delivery_rate=12083449&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=626&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 142.250.178.99 | 200 OK | 8.0 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP142.250.178.99:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 17:59:24 GMT
expires: Fri, 20 Mar 2026 17:59:24 GMT
cache-control: public, max-age=31536000
age: 589762
last-modified: Wed, 04 Dec 2024 06:53:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.26.15.76 | 302 Found | 8.5 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 27 Mar 2025 13:48:46 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MpI9XHkmbn3bda8hCrEC%2BCO05XMDGM%2BOK5VWowF7OM3PolYicNSUgKz%2Ble0j%2BrglgliQYM8%2FGmureokAnMPLIibQDuzG8MVWXJ4GEruKrAs7O%2BcdQ3RbLquuP3vhDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e4cca5b51e-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=3304&min_rtt=532&rtt_var=5098&sent=154&recv=72&lost=0&retrans=0&sent_bytes=174267&recv_bytes=2924&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1251&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Util-ba300788.js | 104.26.15.76 | 200 OK | 2.9 kB |
URL GET datanodes.to/theme_2023/dist/assets/Util-ba300788.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2940), with no line terminators Hash6c48312b1653befcf2adee03a49501ef 82c3a6bcfce4b219d5d37fbf9f2dcd5c508bcf48 114a397e85d5141cb6dad08c073e11e25fbdee2891681e3238f76977ada40124
GET /theme_2023/dist/assets/Util-ba300788.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5; _ga_7DP7NV2LKF=GS1.1.1743083326.1.0.1743083326.60.0.0; _ga=GA1.1.1645152362.1743083326; cf_clearance=3jtgbIKJKMio7.ChxjkDr3jNEMZp_fa3FoJRrozyuHw-1743083326-1.2.1.1-sEaOWdalD4Ms.K_dF_GuF4Nce2SRD1ZDj4jDEjgC4Wp8JMTmLEsNbBso7ur8w.jM2.XDCEzvFYbX79B4dF55dq3_UqKtED3n053bzH42LNZ9uD6ws2kfv6Eb8JPzsxI.flhCilrCCb9imrj2keTpc6uOzh3osNY_J3pVYZyAfrNGb3aVSJybA4ecqloiYwvQNAzYAK4EvcGr2Cctfid_T8cWFtT6ObZWIxu2TOORQRgE_FBZ8kopu.T6dBquG.J8xxhFv.2zyNTMexXrQu7GtZsxZ6LC.7.LjaSvbwC3M0sU46CL8YWft14aj32oGVIq3pVkjKHACA_E.1Gpfqh7OWYU5ccvCOE3C_C.uZrVERk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-b29"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dBLwS78UldtevU%2Br%2BGKxq45A0MzVxUIEaaODFtZfwZejsGOksF8Ubd4G%2BPoZ1tRdohLnTiIj2nYMp%2B1bW8%2BoSoTVy%2BuM4EAg21jdbD9P4Trz915Icc8paejlb60%2FFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e8dc11b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1103&min_rtt=447&rtt_var=941&sent=225&recv=146&lost=0&retrans=0&sent_bytes=236470&recv_bytes=16539&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=2005&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js | 142.250.74.99 | 200 OK | 561 kB |
URL GET www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size561 kB (560963 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 220514
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 07:57:25 GMT
expires: Fri, 27 Mar 2026 07:57:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 17 Mar 2025 04:01:22 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21082
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.100 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.100:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
date: Thu, 27 Mar 2025 13:48:49 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/app-80bcdb82.js | 104.26.15.76 | 200 OK | 183 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-80bcdb82.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (32531) Size183 kB (183021 bytes) Hash68168e1fcc3f0b89637287285c331e9b 2252e15424087258ef80a353512b685215e68335 df548d433ea12395b99a860e96667848bea70b8eeae6348959d3a1cee6fa57c4
GET /theme_2023/dist/assets/app-80bcdb82.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:45 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-2caed"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IfRktjfbKpqAiaiZjOQyvAs4XmvKgRy40nKhJXRoTo7%2FHVgz%2BueaCr527jEI2pabQLgrpA9%2BPSNx3TiK5ay7TnZad8c%2B02GzQKWllfKINgsz3DYQtMt2aHT4WdM%2FhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e0edbdb51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2354&min_rtt=532&rtt_var=3018&sent=92&recv=32&lost=0&retrans=0&sent_bytes=100345&recv_bytes=2030&delivery_rate=16510832&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=734&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js | 104.26.15.76 | 200 OK | 91 B |
URL GET datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with no line terminators Hash45eeffa41efe748ab4232b212a4829ef 5acfb0bd66dde75e532234d76f92a904e512d5f0 f9283800c2d9ca1dc2d4db040a4e53927149d0caedc21857059dd1628d5417b7
GET /theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-5b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUpsfKzOY6N7VmMbNVYFylMBUOOBsjx4nHH6Plc%2F%2BOZ0dzzIwHLibDro%2B0Fg1LYzuHQYu8d3dJsvI1oqEK5LEU811ZpIeFWzMpeO9SZrH3twqCspr9w2iSnWT5fwQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e4dcc0b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2717&min_rtt=532&rtt_var=3871&sent=158&recv=75&lost=0&retrans=0&sent_bytes=175727&recv_bytes=3037&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1262&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez | 142.250.178.100 | 200 OK | 73 kB |
URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez IP142.250.178.100:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeHTML document, ASCII text, with very long lines (56624) Hash282dd9f7ffede1a1f651c78c6d7067b1 1c9706c8e77a158413e86077ac0e1ae38a4b0eff 0016db0f8c76729bddc7d7a79319b427c0c6818461d5c854932d8ac9aed38937
GET /recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 27 Mar 2025 13:48:46 GMT
content-security-policy: script-src 'nonce-1Yh9cjKnZqkp7XdAn4dcrw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/styles__ltr.css | 142.250.74.99 | 200 OK | 79 kB |
URL GET www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash018091787dddee5a6875f94365cf788f 6067d5b8ab62b31fcaf4889de51c1d66e84c4ae7 ad13459d8bc3401ceb6e2ac3062fc1c48ea7ed6058e63f4e643f1a83b9d4c3cb
GET /recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 06:44:58 GMT
expires: Fri, 27 Mar 2026 06:44:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 17 Mar 2025 04:01:22 GMT
content-type: text/css
vary: Accept-Encoding
age: 25429
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| scarcerpokomoo.com/1clkn/31269 |  23.109.170.113 | 200 OK | 6 B |
URL GET scarcerpokomoo.com/1clkn/31269 IP23.109.170.113:443
Requested byhttps://datanodes.to/download CertificateIssuerLet's Encrypt Subjectscarcerpokomoo.com FingerprintF4:48:08:E7:F1:2E:D8:13:D9:09:23:3A:5E:9D:B7:B6:9E:2F:3A:A1 ValidityWed, 29 Jan 2025 22:58:28 GMT - Tue, 29 Apr 2025 22:58:27 GMT
File typeASCII text, with no line terminators Hash9082dc37e5e8046929da411544ad071a 41e0e3963ed94e59e8a2f115994c382712411537 b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1clkn/31269 HTTP/1.1
Host: scarcerpokomoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 27 Mar 2025 13:48:45 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Fri, 28-Mar-2025 13:48:45 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Fri, 28-Mar-2025 13:48:45 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| datanodes.to/images/logo.png?v=1 | 104.26.15.76 | 200 OK | 15 kB |
URL GET datanodes.to/images/logo.png?v=1 IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typePNG image data, 364 x 230, 8-bit/color RGBA, non-interlaced Hashc9338a5cbd74ee24aee2175a5ac9cfac eb519e37c50d2dd8908d80a2dd203879f2a430c9 e73da34c3963cd34608bc4016fd1060cf58de21ef14321a153ec45bc004ff56e
GET /images/logo.png?v=1 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:45 GMT
content-type: image/png
content-length: 15350
last-modified: Tue, 16 Jan 2024 14:16:42 GMT
etag: "65a68fca-3bf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gp7vBcOiQ%2FYZkx%2FFWQ2JEB6p4bgAwIo1s6%2BHrCACCF6ddtKP2wYv%2F8cwxTrcOK%2BDc%2FZdYFyUgiKVBF2vGQM4pbwFDQhZC12uyB6Ns%2BANRmMg9LO6Xz9aHrnGQx5ffQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e0dda7b51e-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1656&min_rtt=565&rtt_var=1883&sent=80&recv=30&lost=0&retrans=0&sent_bytes=84362&recv_bytes=2030&delivery_rate=16510832&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=635&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js | 104.26.15.76 | 200 OK | 17 kB |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (16550) Hashe9abb5c958cc124ca4108f522fececdb cb0430b6ad9229cf2179a201e15360e496f24491 8125fdfeff86def1e8543526af797cbb7eb4bd87a161da3f18968b3fd8a83e53
GET /theme_2023/dist/assets/Tooltip-298cb247.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5; _ga_7DP7NV2LKF=GS1.1.1743083326.1.0.1743083326.60.0.0; _ga=GA1.1.1645152362.1743083326; cf_clearance=3jtgbIKJKMio7.ChxjkDr3jNEMZp_fa3FoJRrozyuHw-1743083326-1.2.1.1-sEaOWdalD4Ms.K_dF_GuF4Nce2SRD1ZDj4jDEjgC4Wp8JMTmLEsNbBso7ur8w.jM2.XDCEzvFYbX79B4dF55dq3_UqKtED3n053bzH42LNZ9uD6ws2kfv6Eb8JPzsxI.flhCilrCCb9imrj2keTpc6uOzh3osNY_J3pVYZyAfrNGb3aVSJybA4ecqloiYwvQNAzYAK4EvcGr2Cctfid_T8cWFtT6ObZWIxu2TOORQRgE_FBZ8kopu.T6dBquG.J8xxhFv.2zyNTMexXrQu7GtZsxZ6LC.7.LjaSvbwC3M0sU46CL8YWft14aj32oGVIq3pVkjKHACA_E.1Gpfqh7OWYU5ccvCOE3C_C.uZrVERk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-40a7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=60%2FB8Ct7zydDAOmVDMstDRO5ajgbwvklbrqzLYflqFIj8Tr83JI9yeSrfVea0T6Jb7Ef1aije83iG4dBe1zqc8dR0CqQGMbluKAg5gomw5oiRH2jd1b7OO4rIu6oNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e8dc21b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=6550&min_rtt=455&rtt_var=11625&sent=205&recv=126&lost=0&retrans=0&sent_bytes=216350&recv_bytes=16539&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1908&x=0"
X-Firefox-Spdy: h2
|
|
| ummertisaridiculou.com/RmFpYXZpXgoSSwgkXBEUdwIoBBo+AwsGNH80PxUaBykZBC4rWU8VHyJcWFBDfldcVlA2CA1cR2ASHQACMxJUUFAvDw8OS2AXVFBYdVVHUkBoVU8US3dHHREXIVxYRwYyFQVcR3FVWlFOdVJbV05/Uw | 188.114.96.1 | 204 No Content | 0 B |
URL GET ummertisaridiculou.com/RmFpYXZpXgoSSwgkXBEUdwIoBBo+AwsGNH80PxUaBykZBC4rWU8VHyJcWFBDfldcVlA2CA1cR2ASHQACMxJUUFAvDw8OS2AXVFBYdVVHUkBoVU8US3dHHREXIVxYRwYyFQVcR3FVWlFOdVJbV05/Uw IP188.114.96.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectummertisaridiculou.com Fingerprint82:E3:6F:44:9C:6F:5A:4B:02:19:B0:49:44:AA:31:84:A5:33:98:BF ValidityMon, 17 Feb 2025 14:45:45 GMT - Sun, 18 May 2025 15:43:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /RmFpYXZpXgoSSwgkXBEUdwIoBBo+AwsGNH80PxUaBykZBC4rWU8VHyJcWFBDfldcVlA2CA1cR2ASHQACMxJUUFAvDw8OS2AXVFBYdVVHUkBoVU8US3dHHREXIVxYRwYyFQVcR3FVWlFOdVJbV05/Uw HTTP/1.1
Host: ummertisaridiculou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 27 Mar 2025 13:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B5KTcRlhHTLHKDVHcsV9h7JOjvK3vzg1Vm5iqiQ78Kn4aIR94aVbKBJl8cXSaSFcNNyE7uFEH1k%2BsZQ1B3n9tfyKnR%2FTUSlv82fAEQlsSQRMY7BVnlH2N%2F3dHF9VMPFA1J9dKbLVhQZ7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926f58ead926b4ed-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2873&min_rtt=529&rtt_var=3966&sent=11&recv=13&lost=0&retrans=0&sent_bytes=4314&recv_bytes=1719&delivery_rate=7688495&cwnd=254&unsent_bytes=0&cid=7b196d23d680639e&ts=183&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css | 104.26.15.76 | 200 OK | 372 B |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (373), with no line terminators Hash9fa892c8b5cb88d2cb9977b8ab1503e2 56541ba3e043b3a46ad525b4185c436017c8f45a 0b25778dbe5067fa8cdb0569dcb6938bc39856e430289cba0f3098364b33fc3e
GET /theme_2023/dist/assets/Tooltip-4872b02d.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-174"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nw5Lxv0UVCW%2B9ldVSlO38oTMgPeFR%2FICuV5OThQR0ZjAhsG1kYrQ7E5VlDoiRcY30BD0ncoJU0mHZpPwPJcsNsnKjBOi97%2BZCzNefy6fvCJp7jT0dVDkfxyfJZyGRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e41b52b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=6523&min_rtt=532&rtt_var=10919&sent=146&recv=61&lost=0&retrans=0&sent_bytes=172371&recv_bytes=2297&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1147&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js | 104.26.15.76 | 200 OK | 28 kB |
URL GET datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (27942) Hash6b949827cd27578f8d96e716764745fd fc5d054a81cc11c95726bf55f11fc0c96ae0f58b 579bb21ed189cf13357365e55a2dc69ca1e3866ce7566362e163cfe86b3f3aee
GET /theme_2023/dist/assets/transition-a1567fd4.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5; _ga_7DP7NV2LKF=GS1.1.1743083326.1.0.1743083326.60.0.0; _ga=GA1.1.1645152362.1743083326; cf_clearance=3jtgbIKJKMio7.ChxjkDr3jNEMZp_fa3FoJRrozyuHw-1743083326-1.2.1.1-sEaOWdalD4Ms.K_dF_GuF4Nce2SRD1ZDj4jDEjgC4Wp8JMTmLEsNbBso7ur8w.jM2.XDCEzvFYbX79B4dF55dq3_UqKtED3n053bzH42LNZ9uD6ws2kfv6Eb8JPzsxI.flhCilrCCb9imrj2keTpc6uOzh3osNY_J3pVYZyAfrNGb3aVSJybA4ecqloiYwvQNAzYAK4EvcGr2Cctfid_T8cWFtT6ObZWIxu2TOORQRgE_FBZ8kopu.T6dBquG.J8xxhFv.2zyNTMexXrQu7GtZsxZ6LC.7.LjaSvbwC3M0sU46CL8YWft14aj32oGVIq3pVkjKHACA_E.1Gpfqh7OWYU5ccvCOE3C_C.uZrVERk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-6d27"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mWirr4NFPt6LIRWji1DR3qFNy0y2l%2Fqp4A3EPG56ZfeqbC%2F06ttRu6K5fiU2%2F2tQNCo3m0pd6f8yWgIsTyJWgusAjxBsjiBzpqpCRfuZoULdH1A%2FSRbk14s63%2FsXrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e8dc28b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2908&min_rtt=455&rtt_var=4654&sent=212&recv=133&lost=0&retrans=0&sent_bytes=223826&recv_bytes=16539&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1917&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js | 104.26.15.76 | 200 OK | 1.1 kB |
URL GET datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (1175), with no line terminators Hash5552241fb700f202104206d16e48bd20 6fce7454b07364109a522cced0d401f6845ee41e 6a127e427de7fba1468b29e95cf86145a218594ca2625e1171dc98b97dff2cc4
GET /theme_2023/dist/assets/VirusScan-e53a5e80.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-460"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53ZiOwvYwEnZXxXNzUZS8i7x82PEFlTdydOuyta3%2Farn8fQyX8lis9pJSHUfw20oO1VvhHBWufjyMcVdNL%2FdeC7iHRtzLdw7dUjYZmIWt1mVx8Q4%2BzlORG%2FwOy13pg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e42b7bb51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4598&min_rtt=532&rtt_var=7482&sent=149&recv=64&lost=0&retrans=0&sent_bytes=173103&recv_bytes=2297&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1157&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.178.99 | 200 OK | 7.9 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.178.99:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 18:15:57 GMT
expires: Fri, 20 Mar 2026 18:15:57 GMT
cache-control: public, max-age=31536000
age: 588769
last-modified: Wed, 04 Dec 2024 06:53:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| holikedtocometot.com/M2xpT0tSDgoidFJRC2k+QQBUanl1SVsJLwEJGHszBxlbPnhVGwphKF8DHCstQQMHO2VdCR1qeXVYPhoNazshJH1/BgJqeXE+AH8kfl4/Bip7Ph8tIAIdMzYoQiQtdnN+FgIBBHBUXR8JRB0LNgYANBMCMnwoMAURchtMfQ10Gx53CGdcUBwKWxYwNiBBJDs7M38tJHYtdAhMfQl1OA45BnQ6Dx8IC1wzGiMWXi8GD35aOwh6XSUQKBx+Ah5qeXU8OAJ7egYOeA5JLREsGAM1Mww8ByUBDnp/ODN2GEtVWSocWw8IfA0WXi8DM3JfIxssRS8HNzFpFjABLXsiBy4eX18KF2Z5HiZ8M0k2EHcafV8NJS1mAwsVDGUDKBhyAg8EPHxVJCchAFRVUSwjaRw6InpFNloJKFJfLDgbYQMQAyV5HTl9P0s2BCcBUiQvIi1mGBkFMQcdIQtzRiBafgd7XyskKXUIGRUyeQA6Dm1ZHwYhOw4hAQw+ViQDKnpiXl0+GXc2 | 3.164.240.46 | 200 OK | 3.1 kB |
URL GET holikedtocometot.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 IP3.164.240.46:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjectholikedtocometot.com Fingerprint1F:A1:AF:80:8F:F4:ED:DB:42:BF:AD:E6:69:61:5C:B2:F8:18:5C:5C ValiditySun, 09 Mar 2025 00:00:00 GMT - Tue, 07 Apr 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3103), with no line terminators Hash548d32b6b74d8080c5d4ea62e772c142 1592716302ef21c25e41f817e31c326a47da0939 eac95461e5a9213b8822fbf954e28c17e8e1beb596f0c16349475cb26c441d7c
GET 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 HTTP/1.1
Host: holikedtocometot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1223
date: Thu, 27 Mar 2025 13:48:47 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=/YfKh6b+OWOspZQFBfP3ujUHITHS8dLhmW40ld386lywziz6nOgHmNkFf/la7khZHfcigq+r4bPDu0U5H8f+toboHJ91Cb8u9JLSXeN51WPhMY2LC8+TKuIBBxhY; Expires=Thu, 03 Apr 2025 13:48:47 GMT; Path=/
AWSALBCORS=/YfKh6b+OWOspZQFBfP3ujUHITHS8dLhmW40ld386lywziz6nOgHmNkFf/la7khZHfcigq+r4bPDu0U5H8f+toboHJ91Cb8u9JLSXeN51WPhMY2LC8+TKuIBBxhY; Expires=Thu, 03 Apr 2025 13:48:47 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a015763506a36624e56a8a469e3484c4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: UbjEN2pNhdKIJAMcPqTr-1_BSFKQJh0cEkShd_6hLjUeWf1VZtTAVA==
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.100 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.100:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
date: Thu, 27 Mar 2025 13:48:49 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF | 142.250.74.136 | 200 OK | 372 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF IP142.250.74.136:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size372 kB (372415 bytes) Hashe8cc6be907f050520850c79ec10f7b77 d4e5680893d1c8313b7eb625463315d31e157fb2 9fe27453f435f518a280aa0a9551cb1192c502fcef7f9b918dab87d8bb5456cd
GET /gtag/js?id=G-7DP7NV2LKF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 27 Mar 2025 13:48:45 GMT
expires: Thu, 27 Mar 2025 13:48:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 124474
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/src/assets/images/virus-scan.png | 104.26.15.76 | 200 OK | 34 kB |
URL GET datanodes.to/theme_2023/src/assets/images/virus-scan.png IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashed8693e5b49bbfec66898fd26b979317 0fe86ee5614e13c3c93672a4d57ef69555f3e701 5b6ef28011995150a50e6e59ca8728a5f0f92c7dfe27f08433e398a7fc177a9d
GET /theme_2023/src/assets/images/virus-scan.png HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:45 GMT
content-type: image/png
content-length: 33827
last-modified: Wed, 31 Jan 2024 09:41:40 GMT
etag: "65ba15d4-8423"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y3naHGFhlxs2cuacsmoSaM9n%2FmdgzegoB00zhg0yzTjaqpRYnjs9ldkbXkkV4j6FJFAgrj5f470xo2fjU4xA6J1hoPq3ONbcDW0%2F%2F%2BPYgOKELnME3Q8gN1Qb1VBgAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e0edb8b51e-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1804&min_rtt=577&rtt_var=2114&sent=54&recv=29&lost=0&retrans=0&sent_bytes=49783&recv_bytes=2030&delivery_rate=16510832&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=631&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/index-dd92db6d.js | 104.26.15.76 | 200 OK | 6.4 kB |
URL GET datanodes.to/theme_2023/dist/assets/index-dd92db6d.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (6800), with no line terminators Hashb6c2b858946a0197c1f2e7a5e18c2378 92094e2c5eac137efeb75d1f1e979587d89a7f84 cfe2a5d81530356e55e4f034baec1ccaa1ce862e0e8268e4c9c78ae2bd7beda9
GET /theme_2023/dist/assets/index-dd92db6d.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-18f9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hWsQxY1IVp9xaq%2F92zuJHheC%2BHIBjPu3465kD7Ty8L2HWr4v2U3n8CdolQ7pOXOK6ABmJxXMBiLARYCo5kvjrOt%2F38sVT1JG7yTbI%2Fs2qFuyLZ6D1anEGoyMHzDmLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e4dcb8b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2717&min_rtt=532&rtt_var=3871&sent=160&recv=75&lost=0&retrans=0&sent_bytes=176404&recv_bytes=3037&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1263&x=0"
X-Firefox-Spdy: h2
|
|
| holikedtocometot.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 | 3.164.240.46 | 200 OK | 3.1 kB |
URL GET holikedtocometot.com/RG15c0clDxoeeCVQG1UyNgFEVnUCSEs1I3YICEc/cBhLAnQiGhpdJCgCDBchNgIXB2kqCA1WdQJcHCUjACBJBCYLLkglJDNdXEEFDhpMShQDJ04xHygiGicJBiYrSjYOXDBHAAAGCiU+LyYcJyMnDBE+LAgrSUsVACQuFgYFFDcyDggmOzYeBgodAgMXXRc3KTwLNgoNICZJIT8OAUkFFQM3FSYuIw8YHSQSIjgYcw8sTRgPB10MJgQJDCkgNwAMHgR1IgFNGQY+WQ8rPnUOIyISAzQSHz4nPDcYAy5ZDSU+CSIzNB4GCzsQLR4KP0sUAwkNMnUoJj8kah0vHzJzYV87PxYSWSE0FgYrF0YNCF4sOyYRAi8pIAJVOgoBKSw4Qg4eJRoXIQIvABAWCR8xNxYrNT4fCwE1PDchEQEXECAKVCE0ET47KiYLCQQvEAkCFRUxFg5ISzUTHAEDNRMoKCMUYS4eFh03eQgsOAsPDjhLIywiPEc IP3.164.240.46:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjectholikedtocometot.com Fingerprint1F:A1:AF:80:8F:F4:ED:DB:42:BF:AD:E6:69:61:5C:B2:F8:18:5C:5C ValiditySun, 09 Mar 2025 00:00:00 GMT - Tue, 07 Apr 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3096), with no line terminators Hashbcb1a0969755aa7aef1b66a6163e3348 0b48fcf49f280c80cfde0f743400f1fced20b969 29950bf9e170c7bfcd3600cb37dcf094b88221426f3b89c480170c18fe5e5141
GET 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 HTTP/1.1
Host: holikedtocometot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1217
date: Thu, 27 Mar 2025 13:48:47 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=d3ZV/fPtxtuk53N3jmmiMC2EV4vaKEaTtsyHvNE1pqghbk9dzkki6m0EEihjnR8tGNqMgNmXa8EaLJLKvaGfj4hiEU7fxFQcd0NRNr371unT3hhasxGT/3U/Pxi/; Expires=Thu, 03 Apr 2025 13:48:47 GMT; Path=/
AWSALBCORS=d3ZV/fPtxtuk53N3jmmiMC2EV4vaKEaTtsyHvNE1pqghbk9dzkki6m0EEihjnR8tGNqMgNmXa8EaLJLKvaGfj4hiEU7fxFQcd0NRNr371unT3hhasxGT/3U/Pxi/; Expires=Thu, 03 Apr 2025 13:48:47 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a015763506a36624e56a8a469e3484c4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: oS8TE4M9QRa45PZQVLe7QeqUGWPkXjEWxZE64fOCg566y1A__JgFvg==
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.99 | 200 OK | 2.2 kB |
URL GET www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 09:12:16 GMT
expires: Thu, 03 Apr 2025 09:12:16 GMT
cache-control: public, max-age=604800
age: 16591
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 | 54.230.245.128 | 200 OK | 385 kB |
URL GET d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 IP54.230.245.128:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
Size385 kB (385058 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?uxqed=1158643 HTTP/1.1
Host: d2eq4x4u2q3fwc.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 127374
date: Thu, 27 Mar 2025 13:48:46 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vl-yGEzFntscaQHR-u4nAAhl9yKIsOyQUgap4d47-BjO43-ZwIwS4Q==
X-Firefox-Spdy: h2
|
|
| ummertisaridiculou.com/YnRqdDZNSwkHCwYzUzx4D0UkLFhaNzwhcAAQOy5QMyJTDXQ0QEwAXwZJW0UDWkJeRxASHQ5JB0QHHhVCFwdXRRALGgwbC0QCV0UYUUBERwBMQEwBC1NSHgRXBUlbUkYWAAZJB1VAWUQOUUdYQg5XQA | 188.114.96.1 | 204 No Content | 0 B |
URL GET ummertisaridiculou.com/YnRqdDZNSwkHCwYzUzx4D0UkLFhaNzwhcAAQOy5QMyJTDXQ0QEwAXwZJW0UDWkJeRxASHQ5JB0QHHhVCFwdXRRALGgwbC0QCV0UYUUBERwBMQEwBC1NSHgRXBUlbUkYWAAZJB1VAWUQOUUdYQg5XQA IP188.114.96.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectummertisaridiculou.com Fingerprint82:E3:6F:44:9C:6F:5A:4B:02:19:B0:49:44:AA:31:84:A5:33:98:BF ValidityMon, 17 Feb 2025 14:45:45 GMT - Sun, 18 May 2025 15:43:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /YnRqdDZNSwkHCwYzUzx4D0UkLFhaNzwhcAAQOy5QMyJTDXQ0QEwAXwZJW0UDWkJeRxASHQ5JB0QHHhVCFwdXRRALGgwbC0QCV0UYUUBERwBMQEwBC1NSHgRXBUlbUkYWAAZJB1VAWUQOUUdYQg5XQA HTTP/1.1
Host: ummertisaridiculou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 27 Mar 2025 13:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fd9KrHuyDM7oQMlyaHZ%2FmYfIK%2BhIQpP45OIZVdj0xBHeBCBcDfrl74lZhrragGm%2FwrbyQ00TOp7eKDydvSDvMWdE7rqCOyGMB8uSuGmvBfRXEMa%2FFDv%2Fy6YzO3SH3lN%2FmgZavBWixFiC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926f58eab8cdb4ed-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1278&min_rtt=529&rtt_var=1037&sent=10&recv=12&lost=0&retrans=0&sent_bytes=3883&recv_bytes=1719&delivery_rate=7688495&cwnd=252&unsent_bytes=0&cid=7b196d23d680639e&ts=176&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.178.99 | 200 OK | 15 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.178.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Mar 2025 12:58:05 GMT
expires: Tue, 24 Mar 2026 12:58:05 GMT
cache-control: public, max-age=31536000
age: 262242
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.100 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.100:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Thu, 27 Mar 2025 13:48:49 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je53p4v9175474265za200&_p=1743083325824&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&cid=1645152362.1743083326&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1743083326&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Sifu%20Update%20TENOKE%20rar&en=scroll&epn.percent_scrolled=90&tfd=6760 | 216.239.34.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je53p4v9175474265za200&_p=1743083325824&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&cid=1645152362.1743083326&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1743083326&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Sifu%20Update%20TENOKE%20rar&en=scroll&epn.percent_scrolled=90&tfd=6760 IP216.239.34.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je53p4v9175474265za200&_p=1743083325824&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&cid=1645152362.1743083326&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1743083326&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Sifu%20Update%20TENOKE%20rar&en=scroll&epn.percent_scrolled=90&tfd=6760 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 204 No Content
access-control-allow-origin: https://datanodes.to
date: Thu, 27 Mar 2025 13:48:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:137:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:137:0
report-to: {"group":"ascnsrsggc:137:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:137:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVv7ABuaEeGURa77N02lqtBsmIdOnFQNCZ0J9t4kK7_RgOq9v-fezf2lqaPxM-tWhmiLlY-K0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S840671454%3A1743083327805721 | 142.250.147.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVv7ABuaEeGURa77N02lqtBsmIdOnFQNCZ0J9t4kK7_RgOq9v-fezf2lqaPxM-tWhmiLlY-K0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S840671454%3A1743083327805721 IP142.250.147.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVv7ABuaEeGURa77N02lqtBsmIdOnFQNCZ0J9t4kK7_RgOq9v-fezf2lqaPxM-tWhmiLlY-K0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S840671454%3A1743083327805721 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 27 Mar 2025 13:48:47 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-X_z-munHe2_HGYQhaCDbhQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.i1iWz6PIRZY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| | 104.26.15.76 | 200 OK | 82 kB |
IP104.26.15.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /download HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:45 GMT
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
set-cookie: affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5; domain=.datanodes.to; path=/; expires=Thu, 10-Apr-2025 13:48:45 GMT
expires: Wed, 26 Mar 2025 13:48:45 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQ%2BWR1e7oLE8DI7oHyHrUNmwCrTJvFX8MtWtrcRqggF40JKUXL1Dg1q9BX8tREVWrykNBot0VI4euS%2BIIzkUPVPdYsT59W42Hf8evHlOnX0Os1cmkZs8paYZYsGnuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926f58de1853b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5304&min_rtt=648&rtt_var=9135&sent=11&recv=14&lost=0&retrans=0&sent_bytes=4074&recv_bytes=1412&delivery_rate=3967123&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=318&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/h/b/jsd/r/0.6560680314234999:1743082037:BL43VKk7BRXipXYm-d0Hehto0P-9_RnnjYC1O88ecLA/926f58de1853b51e | 104.26.15.76 | 200 OK | 0 B |
URL POST datanodes.to/cdn-cgi/challenge-platform/h/b/jsd/r/0.6560680314234999:1743082037:BL43VKk7BRXipXYm-d0Hehto0P-9_RnnjYC1O88ecLA/926f58de1853b51e IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.6560680314234999:1743082037:BL43VKk7BRXipXYm-d0Hehto0P-9_RnnjYC1O88ecLA/926f58de1853b51e HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12064
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5; _ga_7DP7NV2LKF=GS1.1.1743083326.1.0.1743083326.60.0.0; _ga=GA1.1.1645152362.1743083326
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=datanodes.to; HttpOnly; Secure; SameSite=None
cf_clearance=3jtgbIKJKMio7.ChxjkDr3jNEMZp_fa3FoJRrozyuHw-1743083326-1.2.1.1-sEaOWdalD4Ms.K_dF_GuF4Nce2SRD1ZDj4jDEjgC4Wp8JMTmLEsNbBso7ur8w.jM2.XDCEzvFYbX79B4dF55dq3_UqKtED3n053bzH42LNZ9uD6ws2kfv6Eb8JPzsxI.flhCilrCCb9imrj2keTpc6uOzh3osNY_J3pVYZyAfrNGb3aVSJybA4ecqloiYwvQNAzYAK4EvcGr2Cctfid_T8cWFtT6ObZWIxu2TOORQRgE_FBZ8kopu.T6dBquG.J8xxhFv.2zyNTMexXrQu7GtZsxZ6LC.7.LjaSvbwC3M0sU46CL8YWft14aj32oGVIq3pVkjKHACA_E.1Gpfqh7OWYU5ccvCOE3C_C.uZrVERk; Path=/; Expires=Fri, 27-Mar-26 13:48:46 GMT; Domain=datanodes.to; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hYw0MI8m0EB5Pjoa6howp9oVfe7Lu6Z%2F%2BtM3%2FpOFN18dlIgJ446KG%2BAz0QzWM2jJwAPd08eWBMtR%2F9JtVF1bIREI6NJxefb%2FP9UdULLb5o%2BjJ9aXDZQWf9nftGUWSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926f58e70883b51e-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=926&min_rtt=455&rtt_var=503&sent=202&recv=121&lost=0&retrans=0&sent_bytes=215360&recv_bytes=15680&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1618&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? | 104.26.15.76 | 200 OK | 8.5 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (8490), with no line terminators Hashd102ed554077da708215384c080aae56 8db6cb268bf89a8d4da47d52bccce5410b7a2bec 96f74ac88ebbbc411d12cf2d87eee4e8b824ba8369e192faa87b74845730a784
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AxkInosSH%2BLI%2FwU%2FlTjoLf1T3%2B9AjAE7CKMvHZP%2FmX71D%2Fe0Tl3oIC%2BMtWI14qjDxXmCgLs5oVI3wBSEV1ZgtmvWDwCeyNuRNdPtgxGMRsY3EJfACd5i1XqAbf1ZUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e50d10b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=3373&min_rtt=455&rtt_var=4547&sent=166&recv=79&lost=0&retrans=0&sent_bytes=179220&recv_bytes=3164&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1291&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js | 142.250.74.99 | 200 OK | 561 kB |
URL GET www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size561 kB (560963 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 220514
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 07:57:25 GMT
expires: Fri, 27 Mar 2026 07:57:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 17 Mar 2025 04:01:22 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21081
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je53p4v9175474265za200&_p=1743083325824&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&cid=1645152362.1743083326&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1743083326&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Sifu%20Update%20TENOKE%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1414 | 216.239.34.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je53p4v9175474265za200&_p=1743083325824&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&cid=1645152362.1743083326&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1743083326&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Sifu%20Update%20TENOKE%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1414 IP216.239.34.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je53p4v9175474265za200&_p=1743083325824&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&cid=1645152362.1743083326&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1743083326&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Sifu%20Update%20TENOKE%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1414 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://datanodes.to
date: Thu, 27 Mar 2025 13:48:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:137:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:137:0
report-to: {"group":"ascnsrsggc:137:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:137:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI | 142.250.178.100 | 200 OK | 102 B |
URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI IP142.250.178.100:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeASCII text, with no line terminators Hash338d2b4b23bc8440059813e17edb4708 30edf24dfe0a845a566e1221d6770c6f8e4e04be 9be5fcdaabc32295abaa67c5565b9cab7bd8dcce77e59d84bdf8818683ba998e
GET /recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Thu, 27 Mar 2025 13:48:47 GMT
date: Thu, 27 Mar 2025 13:48:47 GMT
cache-control: private, max-age=300
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js | 142.250.74.99 | 200 OK | 561 kB |
URL GET www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size561 kB (560963 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 220514
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 07:57:25 GMT
expires: Fri, 27 Mar 2026 07:57:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 17 Mar 2025 04:01:22 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21082
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.100 | 200 OK | 38 kB |
URL POST www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.100:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeASCII text, with very long lines (38477) Hash8ff4c38576f615d3c33a9f5431a85d59 436a09e9f213884d2890df7fe17145c8ac73cb80 79dfc7e2d719bd1232741786affc4dd39c334df4868530b6c1d6dc6fb18e4fdd
POST /recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 12655
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-content-type-options: nosniff
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: same-site
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
date: Thu, 27 Mar 2025 13:48:49 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: _GRECAPTCHA=09ALcxeyoyIeN1zQaQyu3czH-UTg8M4kmJBNuYOnaScbB2Czt8zpemng7KUjdtdCWFkU3Uq_rnnKTC-E3n6hxIMW0; Expires=Tue, 23-Sep-2025 13:48:49 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 27 Mar 2025 13:48:49 GMT
cache-control: private
|
|
| fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 142.250.178.99 | 200 OK | 7.8 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP142.250.178.99:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 18:16:26 GMT
expires: Fri, 20 Mar 2026 18:16:26 GMT
cache-control: public, max-age=31536000
age: 588740
last-modified: Wed, 04 Dec 2024 06:53:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/favicon.ico | 104.26.15.76 | 200 OK | 2.5 kB |
IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashc813091dc9f029ba08588f60cc450755 d2b2f0efc676eff758c4194d80ff2e9ee973f556 682e513cfa795efc1e53c502e9a8aa3d91db160b7fd15f94de2a4156a6961474
GET /favicon.ico HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5; _ga_7DP7NV2LKF=GS1.1.1743083326.1.0.1743083326.60.0.0; _ga=GA1.1.1645152362.1743083326
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: image/x-icon
last-modified: Thu, 01 Sep 2022 19:47:58 GMT
etag: W/"63110c6e-99d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bg3x6obUykoqlLviC%2FsJC1aw1Vgwyw1a5wSvyqaHucBAnFff%2FNprf2syhKYWRiluEtec82o%2Biav%2BuRJM7zWmm%2BG9rG3kRcXO68nVMYR7zlSlBTuEhl4QlLRbmS4P4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e5fe96b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1273&min_rtt=455&rtt_var=504&sent=194&recv=106&lost=0&retrans=0&sent_bytes=212245&recv_bytes=3322&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1443&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.48.1 | 200 OK | 27 B |
IP104.21.48.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeASCII text, with no line terminators Hashd16bc43b63b936a3bcd4b3b1ceeeb388 15eed6fee0626f5ded80691ddfbd7dcf4fc20da6 c551be6adc5930903ff7f7da946a74061997e5e98bc43679ead9ddbb2058c857
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:47 GMT
content-type: text/plain
set-cookie: csu=1457868904748778@1@1743083327; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TLZOecqQz%2Fthg1coTFTJ%2FMXA4S0ZCbLghCPP7F2gw%2BUOPdBVFCQwXpyF0y9X1XjKn58XCWqF6DtZKDVS6QytBwqmnc3T3sibYL%2Fu9knQdrWyyfKk3RudlFN4nR41x%2BSc8X3HPNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926f58ed2f0456ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=883&min_rtt=439&rtt_var=332&sent=162&recv=60&lost=0&retrans=1&sent_bytes=212342&recv_bytes=1296&delivery_rate=40351554&cwnd=186&unsent_bytes=0&cid=c2126ee2526138a9&ts=198&x=0"
X-Firefox-Spdy: h2
|
|
| ummertisaridiculou.com/WGduU293WA0gUhcxBiUNDiovMjk8PQ8kFys/OGIHHCAGMjc1JkgnBjxaX2JaYFFaYEkoDgpuXn4UGjIbLRRTYF9oVkg6AT4IU2NfaFZIJVJpSV1nQWtRQGdJLVpfdRsoBgluXn4XGicDZVZZZ1xoX11gXWBXWWA | 188.114.96.1 | 204 No Content | 0 B |
URL POST ummertisaridiculou.com/WGduU293WA0gUhcxBiUNDiovMjk8PQ8kFys/OGIHHCAGMjc1JkgnBjxaX2JaYFFaYEkoDgpuXn4UGjIbLRRTYF9oVkg6AT4IU2NfaFZIJVJpSV1nQWtRQGdJLVpfdRsoBgluXn4XGicDZVZZZ1xoX11gXWBXWWA IP188.114.96.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectummertisaridiculou.com Fingerprint82:E3:6F:44:9C:6F:5A:4B:02:19:B0:49:44:AA:31:84:A5:33:98:BF ValidityMon, 17 Feb 2025 14:45:45 GMT - Sun, 18 May 2025 15:43:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /WGduU293WA0gUhcxBiUNDiovMjk8PQ8kFys/OGIHHCAGMjc1JkgnBjxaX2JaYFFaYEkoDgpuXn4UGjIbLRRTYF9oVkg6AT4IU2NfaFZIJVJpSV1nQWtRQGdJLVpfdRsoBgluXn4XGicDZVZZZ1xoX11gXWBXWWA HTTP/1.1
Host: ummertisaridiculou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Thu, 27 Mar 2025 13:48:48 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 926f58f0afdbfea7-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.100 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.100:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1580
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez
Cookie: _GRECAPTCHA=09ALcxeyoyIeN1zQaQyu3czH-UTg8M4kmJBNuYOnaScbB2Czt8zpemng7KUjdtdCWFkU3Uq_rnnKTC-E3n6hxIMW0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
date: Thu, 27 Mar 2025 13:48:49 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js | 104.26.15.76 | 200 OK | 667 B |
URL GET datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeASCII text, with very long lines (714), with no line terminators Hashb90614bc98aeca91e691d23e37c171b4 a39e57e9fea9962559b1103391f11a32ee4c2a86 d2cfe4f893fa1316bbef6ff68a069038eae5dd0cffcd5f337f01d647d5db1fcc
GET /theme_2023/dist/assets/LoadingIcon-59fcef50.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-29b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YHdzMdSMKNb2St83Q2Z7Nbkqi6hCUT1BycKR6s7L4sVzLOXZvz1Z6BGfCaGC641Zfb5v6CQ5OLYJrKMC92GQpi9tgX145WMt6adsXvWbom3zBmgthQAdTeLtmzeeoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e4ccacb51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2964&min_rtt=532&rtt_var=4504&sent=155&recv=74&lost=0&retrans=0&sent_bytes=174801&recv_bytes=3037&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1258&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js | 104.26.15.76 | 200 OK | 3.5 kB |
URL GET datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (3595), with no line terminators Hash3ea1e1c98c032731766e57e74e10d366 f9075bbaa2aba6c29bc24fcb8181fb7d6d777784 5b85003f57bd4e3cde19be8f32f1513b3b982bd20e5f20bf7a024789b2be31ca
GET /theme_2023/dist/assets/open-closed-f13f7375.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5; _ga_7DP7NV2LKF=GS1.1.1743083326.1.0.1743083326.60.0.0; _ga=GA1.1.1645152362.1743083326; cf_clearance=3jtgbIKJKMio7.ChxjkDr3jNEMZp_fa3FoJRrozyuHw-1743083326-1.2.1.1-sEaOWdalD4Ms.K_dF_GuF4Nce2SRD1ZDj4jDEjgC4Wp8JMTmLEsNbBso7ur8w.jM2.XDCEzvFYbX79B4dF55dq3_UqKtED3n053bzH42LNZ9uD6ws2kfv6Eb8JPzsxI.flhCilrCCb9imrj2keTpc6uOzh3osNY_J3pVYZyAfrNGb3aVSJybA4ecqloiYwvQNAzYAK4EvcGr2Cctfid_T8cWFtT6ObZWIxu2TOORQRgE_FBZ8kopu.T6dBquG.J8xxhFv.2zyNTMexXrQu7GtZsxZ6LC.7.LjaSvbwC3M0sU46CL8YWft14aj32oGVIq3pVkjKHACA_E.1Gpfqh7OWYU5ccvCOE3C_C.uZrVERk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-d9f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJ6ynGA%2F6KwHysfjSE6oO1iTLVm7MjofM6clEPrwaxXYnEC46Frx6OcR4QbA%2FegitOWC3IysFWHp4RHngUx2U7OpeW2Ggt3fe9HasaS2m4zhV587PH2Jz00cHWYzIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e8dc2fb51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1537&min_rtt=455&rtt_var=1201&sent=221&recv=142&lost=0&retrans=0&sent_bytes=234184&recv_bytes=16539&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1919&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP142.250.147.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint5C:69:AA:FF:3B:8D:17:7C:81:50:5D:11:18:53:F1:66:2E:C7:F9:D0 ValidityMon, 10 Mar 2025 08:37:48 GMT - Mon, 02 Jun 2025 08:37:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:jNCDErWnwKad87U2Q9MaldZq-pzXkg:s-xuNd6iA0tnn6iC; Expires=Sat, 27-Mar-2027 13:48:47 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 27 Mar 2025 13:48:47 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVvC_1FZJsbFuoEywvfc7cp7MXRyNq7MQxtGr8FB8S6Q_iuiNbC2NNfDAoomlIOv1qEh-FHpkw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-Nb7IxhtmY2VdojCK5ExoUg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.48.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP104.21.48.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:47 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
last-modified: Thu, 27 Mar 2025 12:56:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WZJDdy85NSJZpZ5SCUuEY0xYjURjseDyF9vQ9tBLivh8u%2FF83dqqjqgWVJHc1DMfeCoCsG%2FfousyGOhx9b9YBsQLwI1Pw9EtWK3J3MbPj1ZNyZG2wRhW34q6WrxFmawU9xQCW6A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58ed3f1b56ab-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=662&min_rtt=439&rtt_var=132&sent=85&recv=29&lost=0&retrans=0&sent_bytes=107663&recv_bytes=1296&delivery_rate=37918166&cwnd=254&unsent_bytes=0&cid=c2126ee2526138a9&ts=101&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.100 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.100:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
date: Thu, 27 Mar 2025 13:48:49 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js | 104.26.15.76 | 200 OK | 571 B |
URL GET datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to FingerprintD9:3F:9B:36:AD:60:B2:6A:04:7D:E2:B7:FD:25:79:C2:CC:03:AE:81 ValidityMon, 10 Feb 2025 03:57:57 GMT - Sun, 11 May 2025 04:57:50 GMT
File typeJavaScript source, ASCII text, with very long lines (578), with no line terminators Hash4269ae966a9de40dcc8745dc7a28e6ed e57e819dec3c4b86c663859673b3f1ed06ac0a80 da99d56059482651e6ec90085973116ebe749cb150a06381d2d968e0349912fe
GET /theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=z151cpywfffy; lang=english; file_name=Sifu.Update.v1.27-TENOKE.rar; affiliate=W4LMASOVzeUJ2fSUcUnMpzhkZdKWBgLradQyjzovQu4mJBtMt5t%2BYRiM1xAf%2FnVbUr9oRJC5DXJ0bfozlfj3D2UgJjZGH8P5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:46 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-23b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IHovcefEOINZsJ04IYmnCW1UTUEgLMnjx9rDdsU%2FuLJep%2Fsx%2BQeXUSn4yEj4rV7OXuJqBSobxSxBaeGCIyjRHsVLVELifJlR36Rix8cy2W6tv6lr2gfMOG%2BPDvGXgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58e4dcc3b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=3713&min_rtt=455&rtt_var=5154&sent=163&recv=78&lost=0&retrans=0&sent_bytes=178353&recv_bytes=3164&delivery_rate=87228915&cwnd=256&unsent_bytes=0&cid=9919df86e27e053f&ts=1279&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=1645152362.1743083326>m=45je53p4v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&z=820912446 | 142.250.74.131 | 200 OK | 42 B |
URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=1645152362.1743083326>m=45je53p4v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&z=820912446 IP142.250.74.131:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.no FingerprintF2:05:97:F0:57:2B:A2:B3:28:EF:72:32:F4:69:9F:14:E9:B2:3B:16 ValidityMon, 10 Mar 2025 08:38:47 GMT - Mon, 02 Jun 2025 08:38:46 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=1645152362.1743083326>m=45je53p4v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&tag_exp=102482433~102509683~102788824~102803279~102813109~102887799~102926062&z=820912446 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 27 Mar 2025 13:48:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 | 54.230.245.128 | 200 OK | 385 kB |
URL GET d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 IP54.230.245.128:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
Size385 kB (385058 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?uxqed=1158643 HTTP/1.1
Host: d2eq4x4u2q3fwc.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 127370
date: Thu, 27 Mar 2025 13:48:46 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://datanodes.to
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L4W4tcH5g9dUmlG-2MrbAWzsgCmM8wtMcgIZxY0V5vaZqH8zLCCfdA==
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.48.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP104.21.48.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 13:48:47 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 3133
last-modified: Thu, 27 Mar 2025 12:56:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKLgSDVd9HJgwWqZsnTk6sAeyOLc6B5gSP7t1X%2FaeMqze3nljZ8AG8L3Ns1v8%2B%2BATMhFCrOYiqFrYeeTfyWSknugnO%2BpfTMV9qJcK3xlf8fSCfqhL52IEcYkHstzQAO9frVNEvQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926f58ed2f0756ab-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=716&min_rtt=439&rtt_var=575&sent=8&recv=14&lost=0&retrans=0&sent_bytes=3219&recv_bytes=1296&delivery_rate=8451361&cwnd=254&unsent_bytes=0&cid=c2126ee2526138a9&ts=94&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.178.99 | 200 OK | 16 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.178.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=9m65wv2o0qez CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 17:58:55 GMT
expires: Fri, 20 Mar 2026 17:58:55 GMT
cache-control: public, max-age=31536000
age: 589792
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
0.0.0.0