| valepoking.com/f06e1f9f?dev=r&key=4d0afc2425eea6b0cd5a468c9f8a69ed&kvby=82&kw=[%22lazyasses%22,%22-%22,%22thefantazy%22,%22com%22]&psid=CF-3289_new_0&refer=https://thefantazy.com/search/lazyasses?asgtbndr=1&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=1&v=24.2.2196 |  192.243.59.20 | | 1.6 kB |
URL valepoking.com/f06e1f9f?dev=r&key=4d0afc2425eea6b0cd5a468c9f8a69ed&kvby=82&kw=[%22lazyasses%22,%22-%22,%22thefantazy%22,%22com%22]&psid=CF-3289_new_0&refer=https://thefantazy.com/search/lazyasses?asgtbndr=1&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=1&v=24.2.2196 IP192.243.59.20:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (740) Hash069e433677ad2eea97e0aa193ae54f3b 4b7bba63abf54c94b6bc3875fa03527c9357ee3d 731104e2ff99303e44db41ffaa2388447b5ec1848f11e0f482341c27260457f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /f06e1f9f?dev=r&key=4d0afc2425eea6b0cd5a468c9f8a69ed&kvby=82&kw=[%22lazyasses%22,%22-%22,%22thefantazy%22,%22com%22]&psid=CF-3289_new_0&refer=https://thefantazy.com/search/lazyasses?asgtbndr=1&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=1&v=24.2.2196 HTTP/1.1
Host: valepoking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 16 Mar 2024 12:57:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=15692641; expires=Sun, 17 Mar 2024 12:57:35 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.HCONVciFiIGqW9wNOIWQ-mJwI0Y6aC5EGZtvSEmqfT4; expires=Sat, 16 Mar 2024 12:58:35 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e1e27c8da2a80cd2f248972ac7d1cfb0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| valepoking.com/api/users?token=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&uuid=&pii=&in=false | 172.240.108.68 | 302 Found | 0 B |
URL User Request GET HTTP/1.1valepoking.com/api/users?token=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&uuid=&pii=&in=false IP172.240.108.68:443
CertificateIssuerLet's Encrypt Subjectvalepoking.com Fingerprint1A:71:63:60:DA:2F:E9:1B:51:5B:F2:91:13:5A:77:47:AE:DC:8B:2C ValidityTue, 12 Mar 2024 17:39:01 GMT - Mon, 10 Jun 2024 17:39:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=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&uuid=&pii=&in=false HTTP/1.1
Host: valepoking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://valepoking.com/api/users?token=L2YwNmUxZjlmP2tleT05Y2E2MDFhOWY0N2M3MzVkZjc2ZDVjYTQ2ZmEyNmE2NiZzdWJtZXRyaWM9MTU2OTI2NDE%3D
Cookie: u_pl=15692641; ain=eyJhbGciOiJIUzI1NiJ9.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.HCONVciFiIGqW9wNOIWQ-mJwI0Y6aC5EGZtvSEmqfT4; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Sat, 16 Mar 2024 12:57:36 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=368a06cbb0a580fc874eb368f81c5317&COST_CPA=0.200000&PLACEMENT_ID=15692641&BANNER_ID=2834787&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=97791&ZONE_ID=1317858&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult
Set-Cookie: iprc31f9d682bd42b764ecb398235764b348=5082975; expires=Sun, 17 Mar 2024 12:57:36 GMT
pdhtkv=true; expires=Sun, 17 Mar 2024 12:57:36 GMT
uncs=1; expires=Sun, 17 Mar 2024 12:57:36 GMT
pdhtkv28=true; expires=Sun, 17 Mar 2024 12:57:36 GMT
uncs28=1; expires=Sun, 17 Mar 2024 12:57:36 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 754935aaa951eb3b417277ceac21fba6
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=368a06cbb0a580fc874eb368f81c5317&COST_CPA=0.200000&PLACEMENT_ID=15692641&BANNER_ID=2834787&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=97791&ZONE_ID=1317858&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult |  78.46.92.254 | 302 Found | 0 B |
URL User Request GET HTTP/1.1gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=368a06cbb0a580fc874eb368f81c5317&COST_CPA=0.200000&PLACEMENT_ID=15692641&BANNER_ID=2834787&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=97791&ZONE_ID=1317858&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectgl0a7loeki02do.com FingerprintC1:F3:C7:35:64:E3:41:7F:25:74:FE:4F:BE:FB:FB:DC:51:D4:7C:2A ValidityTue, 30 Jan 2024 18:44:34 GMT - Mon, 29 Apr 2024 18:44:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=368a06cbb0a580fc874eb368f81c5317&COST_CPA=0.200000&PLACEMENT_ID=15692641&BANNER_ID=2834787&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=97791&ZONE_ID=1317858&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult HTTP/1.1
Host: gl0a7loeki02do.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://valepoking.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Sat, 16 Mar 2024 12:57:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=gha2c8oj8n; expires=Sun, 17-Mar-2024 12:57:36 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007; expires=Sun, 17-Mar-2024 12:57:36 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007
Strict-Transport-Security: max-age=31536000
|
|
| 3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 | 78.46.92.254 | 200 OK | 1.4 kB |
URL User Request GET HTTP/1.13tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash99748512cd7437ea3ac5c68451496923 63b5febdbd82c8117f74da8b254aecbda0b0b302 d0a17fd2701bb4c0baa8a37c32bbf9623e724b7892b3e0cf85711af30149d861
GET /1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://valepoking.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 16 Mar 2024 12:57:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| unpkg.com/axios/dist/axios.min.js |  104.16.125.175 | 302 Found | 524 B |
URL GET HTTP/2unpkg.com/axios/dist/axios.min.js IP104.16.125.175:443
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashbcb32b14eafdc1923821dcd3baf028cd 308be1d19056f31cdabdea2b810c52b99a591a91 a954263b1f4e610b1833ee6dff94ea06b789e02527981889c4d31dc6db75294f
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 16 Mar 2024 12:57:37 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.8/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HS3NCY2PHGPY8ASF44T7GWBH-arn
cf-cache-status: HIT
age: 24
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8654e8f81e73b51d-OSL
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-547JG5H | 142.250.74.168 | 200 OK | 48 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-547JG5H IP142.250.74.168:443
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint54:26:59:9C:A1:60:FD:C0:F5:F5:D5:8A:5C:D1:32:92:E7:8D:CE:7C ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeJavaScript source, ASCII text, with very long lines (2073) Hashdf678ed67e864747fea3da880f293b74 aa697c48d1ddc0155e00b570823ab4cccb418926 abebda61787fcb48e5f5fa16fd4ff7106e92e87a6f95429b55d31952dbd655ff
GET /gtm.js?id=GTM-547JG5H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 16 Mar 2024 12:57:37 GMT
expires: Sat, 16 Mar 2024 12:57:37 GMT
cache-control: private, max-age=900
last-modified: Sat, 16 Mar 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48096
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js | 142.250.74.132 | 200 OK | 62 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js IP142.250.74.132:443
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint8E:AB:CA:05:82:01:0A:64:AD:90:F4:20:F3:F0:DD:E7:06:7B:BD:E3 ValidityMon, 19 Feb 2024 08:19:14 GMT - Mon, 13 May 2024 08:19:13 GMT
Hashef730b6ffb3e1ee9340026463c72904d 3b8b969e51f78e14240688f9ffc954d93417fee2 585b2857b13c3488199c23f15196f75652755c327e566c44d55e15183904e265
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 16 Mar 2024 12:57:37 GMT
date: Sat, 16 Mar 2024 12:57:37 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 3tght76h.com/favicon.png | 78.46.92.254 | 404 Not Found | 114 B |
IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashac5ea41aae137cead073d37a7bb732bc 85bde4b57e1f38bd7ff0e6cf4b6ac5f626a5fbae fcdc802dabd14bed15efb9235ee0decac4adb6908dca03eeba74e2bf8f4eb5a7
GET /favicon.png HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.22.0
Date: Sat, 16 Mar 2024 12:57:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203450 bytes) Hash5a8547555d71e5846135a48dcc7ec3dc bdf99d0037d631ca1d24efa343781f55a11afb05 7a01932abc324cbdf143534bd8dc0e665e045a2ae8a0d234d24f2d3ad9ebc619
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://3tght76h.com
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:21 GMT
expires: Fri, 14 Mar 2025 14:09:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 168496
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeASCII text, with very long lines (56398), with no line terminators Hasheb4bc511f79f7a1573b45f5775b3a99b d910fb51ad7316aa54f055079374574698e74b35 7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:36:59 GMT
expires: Fri, 14 Mar 2025 14:36:59 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/css
vary: Accept-Encoding
age: 166838
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203450 bytes) Hash5a8547555d71e5846135a48dcc7ec3dc bdf99d0037d631ca1d24efa343781f55a11afb05 7a01932abc324cbdf143534bd8dc0e665e045a2ae8a0d234d24f2d3ad9ebc619
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:21 GMT
expires: Fri, 14 Mar 2025 14:09:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 168496
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw | 142.250.74.132 | 200 OK | 204 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203562 bytes) Hash2ad577163b94bfcbaa0d5a3b8c72b046 ccf404e4fc9f80ff7fca7edd6616876bf2906357 4fbf5e8d6ad5b98ee3cbbbd4c47816c18dfc81f81481d78dc9628d5b01907cfc
GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 16 Mar 2024 12:57:38 GMT
date: Sat, 16 Mar 2024 12:57:38 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:04 GMT
expires: Fri, 14 Mar 2025 14:09:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 168514
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:26:39 GMT
expires: Thu, 21 Mar 2024 14:26:39 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 167459
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/uRR1sRPRLtZfwf5bdrgjW5kKsmrbC4ge_Gpx92wGck4.js | 142.250.74.132 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/js/bg/uRR1sRPRLtZfwf5bdrgjW5kKsmrbC4ge_Gpx92wGck4.js IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeJavaScript source, ASCII text, with very long lines (17254) Hash3e102f319d92446be910c865dc419874 9e54bef0a09477c651f5c861b9220a2764b78c58 b91475b113d12ed65fc1fe5b76b8235b990ab26adb0b881efc6a71f76c06724e
GET /js/bg/uRR1sRPRLtZfwf5bdrgjW5kKsmrbC4ge_Gpx92wGck4.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7354
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:34:05 GMT
expires: Fri, 14 Mar 2025 14:34:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Mar 2024 15:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 167013
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeASCII text, with very long lines (56398), with no line terminators Hasheb4bc511f79f7a1573b45f5775b3a99b d910fb51ad7316aa54f055079374574698e74b35 7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:36:59 GMT
expires: Fri, 14 Mar 2025 14:36:59 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/css
vary: Accept-Encoding
age: 166839
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (569) Size204 kB (203450 bytes) Hash5a8547555d71e5846135a48dcc7ec3dc bdf99d0037d631ca1d24efa343781f55a11afb05 7a01932abc324cbdf143534bd8dc0e665e045a2ae8a0d234d24f2d3ad9ebc619
GET /recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Mar 2024 14:09:21 GMT
expires: Fri, 14 Mar 2025 14:09:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:02:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 168497
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unpkg.com/axios@1.6.8/dist/axios.min.js | 104.16.125.175 | 200 OK | 42 kB |
URL GET HTTP/2unpkg.com/axios@1.6.8/dist/axios.min.js IP104.16.125.175:443
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (41442) Hash3b5b3d36fde8ffe8ed76b1efbfc65410 d63107d0912fdb387530d5ce2d512c928d73d122 29d600462a30694efd15b9848b4ca42d178cd067009275c35a30580121114304
GET /axios@1.6.8/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3tght76h.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Mar 2024 12:57:37 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"a209-1jEH0JEv2zh1MNXOLVEsko1z0SI"
via: 1.1 fly.io
fly-request-id: 01HS1FGRYZKY14C0JK748EAY1W-arn
cf-cache-status: HIT
age: 73299
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8654e8f83e98b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui | 142.250.74.132 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui IP142.250.74.132:443
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeHTML document, ASCII text, with very long lines (7668), with no line terminators Hash32d45a7943aa406aee2da4e5e8052abf b38daf050bcb31909e7f20717ee7249aa735a1c5 4e8d48657563dff68b733139f368bfea2733b8bd51f40a545c7c073d55bb0297
GET /recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 16 Mar 2024 12:57:38 GMT
content-security-policy: script-src 'nonce-k3ftevx-k273eGMHchtE0A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 3tght76h.com/1/bg.png | 78.46.92.254 | 200 OK | 61 kB |
IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typePNG image data, 400 x 299, 8-bit grayscale, non-interlaced Hashd7096ad35844972e015e865729d13235 42c79d98b50275dcc447bd61d845ee2ed52ae45e 8bccdb408e67a3b44e0f5d417486c8d251f2e4acbae8542465aad3c7052341dd
GET /1/bg.png HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 16 Mar 2024 12:57:37 GMT
Content-Type: image/png
Content-Length: 61362
Last-Modified: Wed, 15 Nov 2023 13:23:49 GMT
Connection: keep-alive
ETag: "6554c665-efb2"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 | 142.250.74.132 | 200 OK | 47 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 IP142.250.74.132:443
Requested byhttps://3tght76h.com/1/?lpkey=171b1066594741b156&uclick=gha2c8oj8n&uclickhash=gha2c8oj8n-gha2c8oj8n-17dz-166o-ir8n-bza7-oc1n-972007 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeHTML document, ASCII text, with very long lines (38294) Hashaec3f5f3c1d03484b8b529adf2590bda a945e905ab4c065e13b9fd50e424fa0b4c588faa 6297ce64b9d2dc606bd17a50b805cb3f423f86b155097362cde1487b2a713196
GET /recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=ec766zgts3n0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 16 Mar 2024 12:57:37 GMT
content-security-policy: script-src 'nonce-YyrcKjh_KcG7nUQA41w7sA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|