| tmpfiles.org/dl/16452552/xclient.exe | 104.21.21.16 | 301 Moved Permanently | 169 B |
URL User Request GET HTTP/3tmpfiles.org/dl/16452552/xclient.exe IP 104.21.21.16:443
CertificateIssuerGoogle Trust Services Subjecttmpfiles.org FingerprintC3:C0:22:D4:E0:78:BD:43:26:97:A4:E1:BB:91:1F:B9:33:F0:3E:A6 ValidityThu, 21 Nov 2024 05:28:14 GMT - Wed, 19 Feb 2025 05:28:13 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash84855c13836b389d5ec7cfd4c9266173 1cf3056ff23c4176fd7ca9816a000ed461d6d323 502083c916ae481cdd413b8d93315300653df5fb3dcc5770c01991de19977eae
GET /dl/16452552/xclient.exe HTTP/1.1
Host: tmpfiles.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InlwZnBGRlJGdUR0eithSFNoM1NTV2c9PSIsInZhbHVlIjoiZXhUNWhrRWxmdG5ZMTNtOWlvNFNPNjVjb2JPQkF0bUdyTXRsM284MEtTUTBVZlkxM0Y5VTE1Vlh6cGxwanBjTFVLczVOSzliV0IwRkJuRHJuWFZORWhVdHhldFBrZVp4NW40bUJrRXVjaHRkNjRzQVBFbEsvd2NOUURhaE45d1UiLCJtYWMiOiI1YWI5MDhmMmJlYTJkMDM2NWY0YjU0YmE4YWY3OTc3YjY4NjEyZDI1YmM2OTY5MDEyZjM3NDg1NzY2MjIxZGY0In0%3D; tmpfiles_session=eyJpdiI6IkNvZzQvVHlrQzREa0I0bSsybXNzQ3c9PSIsInZhbHVlIjoiVTlkclZYd080RDlVK2RrS2drK0pBK08yTTBJWjBvN09qVEVjWEt1dCtzallsMzBYbVFDczY3MGpLY2prc2Q0ZUNxajYySzR2UmFXR2JkNzVvUS84R0Z4MWd5OVhQM0doWENEZUlEL0R4NzlCcG5hZFR0Q3RVZHVtQ0FhbnlmTEUiLCJtYWMiOiJjNTgzNDQ0MmY2YTJjMmMwOGUzODk3NmU1ZGVhMGRkNWI5ZmM4ZGRhNTdhNjM4YjcyYWRlNmNhMjg2YTEzOWI4In0%3D
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 28 Nov 2024 06:52:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://tmpfiles.org/dl/16452552/xclient.exe
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uNGsVb8uQGXUExKlP9mdWxfUdmUjyziuc8MCnQmLl0OxvvPZJapcqrSJZzT9U%2BdQys8LL5R4Ioi12GqAGd0UF5nNnbPCMc4EJiEi8Y3S8Brendm5iD7j8PXh4vivvTU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8e986f8d2da11c02-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=16462&min_rtt=16462&rtt_var=8231&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=1108&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| tmpfiles.org/favicon.ico | 104.21.21.16 | 200 OK | 797 B |
IP 104.21.21.16:443
Requested byhttps://tmpfiles.org/dl/16452552/xclient.exe CertificateIssuerGoogle Trust Services Subjecttmpfiles.org FingerprintC3:C0:22:D4:E0:78:BD:43:26:97:A4:E1:BB:91:1F:B9:33:F0:3E:A6 ValidityThu, 21 Nov 2024 05:28:14 GMT - Wed, 19 Feb 2025 05:28:13 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash641276e2d4d0995c8262223f1fdda3d2 4f3f8f324f842e21d6921fffef2be2370cba9c49 5c039a5032f66daf0ad7ccaf04589686dfcc0b580113c1c6a9cff06ed4ce676d
GET /favicon.ico HTTP/1.1
Host: tmpfiles.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tmpfiles.org/dl/16452552/xclient.exe
Cookie: XSRF-TOKEN=eyJpdiI6IjFXNjNTTVJ6SE4wQ0VHQmpaVlR1L0E9PSIsInZhbHVlIjoid0JxL1FRcjJKOEV1RkVGbUpkWk44UTM4MGdRQWhIanZ3TVM5NnRqaE5XZHVEVmRjN2xxMzFGZ2VDVG5MMjFJcDl4Yk5ERkhhL1JQZ1FnWUJaY0RnOTNmdlhMQlUySE11S2hJM1g0VEFObHBwbWlGaGhsaEwwM0FKSk5GLzJmRTUiLCJtYWMiOiIxMmQwODVkMzJiMzhjZDZlMzVlNGRlODA5YTI4ZWI4ZDYwNTA0NTlmYTM3NjIzNThmNWYyZTYzNTY5ZTY5MWNlIn0%3D; tmpfiles_session=eyJpdiI6InV6S0o0RzNmeGRJaEtHYkhnVm1XYWc9PSIsInZhbHVlIjoiSUt3K2QzV0d2MDU2dk51cFFzNlFWZFVqU3ZpRVB3dVVLaWtPVFByckpzRkVpYmNLMmZ4N3I0cm5GSmtrdERrblVPOGdDTFZCWlQwV1hFV2ZxOTE0aWlsQUhOcDNTQkpxU0I5N3FmR1VHMzlaVHNvcHdOVDQvMmh5UGRGUHdJZG0iLCJtYWMiOiI1YzA4M2NjODA1N2M2NGIzNmI2ZmNmZmIxNDY2OTIyMzkyOTgxMmUwM2QxYTI2ZWQwMDAxZWJiNDhlYWI0ZDc0In0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Nov 2024 06:52:32 GMT
content-type: image/x-icon
last-modified: Fri, 10 Feb 2017 21:01:32 GMT
etag: W/"589e2a2c-47e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w32QqH1NUBzM8k28b6cQ4QkEzGDF5GDrZvcd2YAQklDtH2LTadaqMXihAMsFTpHhlemww3HW5bPucrCq1yjq1W0m%2FuS2AcLZgZse1bfQjfKzWuIJchA44ihjhwKSIgo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8e986f8efe4d56a3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18537&min_rtt=17376&rtt_var=5799&sent=17&recv=8&lost=0&retrans=0&sent_bytes=7619&recv_bytes=2595&delivery_rate=13440&cwnd=12000&unsent_bytes=0&cid=ccb6c5eb418d8b3d&ts=543&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tmpfiles.org/dl/16452552/xclient.exe | 104.21.21.16 | 404 Not Found | 19 kB |
URL User Request GET HTTP/3tmpfiles.org/dl/16452552/xclient.exe IP 104.21.21.16:443
CertificateIssuerGoogle Trust Services Subjecttmpfiles.org FingerprintC3:C0:22:D4:E0:78:BD:43:26:97:A4:E1:BB:91:1F:B9:33:F0:3E:A6 ValidityThu, 21 Nov 2024 05:28:14 GMT - Wed, 19 Feb 2025 05:28:13 GMT
File typeHTML document, ASCII text, with very long lines (5395) Hash307dca9c775906b8de45869cabe98fcd 2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1 8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
GET /dl/16452552/xclient.exe HTTP/1.1
Host: tmpfiles.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 28 Nov 2024 06:52:31 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: BYPASS
set-cookie: XSRF-TOKEN=eyJpdiI6InlwZnBGRlJGdUR0eithSFNoM1NTV2c9PSIsInZhbHVlIjoiZXhUNWhrRWxmdG5ZMTNtOWlvNFNPNjVjb2JPQkF0bUdyTXRsM284MEtTUTBVZlkxM0Y5VTE1Vlh6cGxwanBjTFVLczVOSzliV0IwRkJuRHJuWFZORWhVdHhldFBrZVp4NW40bUJrRXVjaHRkNjRzQVBFbEsvd2NOUURhaE45d1UiLCJtYWMiOiI1YWI5MDhmMmJlYTJkMDM2NWY0YjU0YmE4YWY3OTc3YjY4NjEyZDI1YmM2OTY5MDEyZjM3NDg1NzY2MjIxZGY0In0%3D; expires=Thu, 28-Nov-2024 08:52:31 GMT; Max-Age=7200; path=/; samesite=lax
tmpfiles_session=eyJpdiI6IkNvZzQvVHlrQzREa0I0bSsybXNzQ3c9PSIsInZhbHVlIjoiVTlkclZYd080RDlVK2RrS2drK0pBK08yTTBJWjBvN09qVEVjWEt1dCtzallsMzBYbVFDczY3MGpLY2prc2Q0ZUNxajYySzR2UmFXR2JkNzVvUS84R0Z4MWd5OVhQM0doWENEZUlEL0R4NzlCcG5hZFR0Q3RVZHVtQ0FhbnlmTEUiLCJtYWMiOiJjNTgzNDQ0MmY2YTJjMmMwOGUzODk3NmU1ZGVhMGRkNWI5ZmM4ZGRhNTdhNjM4YjcyYWRlNmNhMjg2YTEzOWI4In0%3D; expires=Thu, 28-Nov-2024 08:52:31 GMT; Max-Age=7200; path=/; httponly; samesite=lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x7eQdxjML7l75mdM2Ty8hGndPN%2FwEYX47RySZNqCx%2BjV8IzFfarv69xtPsQen8O%2BUKjSxZL8o9QCBkULr%2FpDFomKs0l7RX1qWdigv1trpDGJfgSeCXhD77qZD%2Fg5Rqc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8e986f8b6ad4b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=16551&min_rtt=16514&rtt_var=2671&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3274&recv_bytes=1257&delivery_rate=261828&cwnd=253&unsent_bytes=0&cid=5f3bb62419e219da&ts=104&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Nunito&display=swap | 142.250.74.106 | 200 OK | 1.9 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Nunito&display=swap IP 142.250.74.106:443
Requested byhttps://tmpfiles.org/dl/16452552/xclient.exe CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintE8:18:86:79:89:2E:F0:7C:66:1F:C3:43:81:D2:6D:9E:0C:9C:AB:05 ValidityMon, 21 Oct 2024 08:38:00 GMT - Mon, 13 Jan 2025 08:37:59 GMT
File typeASCII text, with very long lines (1952), with no line terminators Hashca1644988b095b091f9dc1ee4f34470e 11ebb33605c0047412ae637f7cc92b2b4b67dfaf e561f94bb2ab2d518f524d6e318861855d5ab2072ff954f4a1940ac73d0ea81c
GET /css2?family=Nunito&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tmpfiles.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 28 Nov 2024 06:52:32 GMT
date: Thu, 28 Nov 2024 06:52:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2 | 142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2 IP 142.250.74.67:443
Requested byhttps://tmpfiles.org/dl/16452552/xclient.exe CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint2A:56:7F:C1:73:8D:7A:48:D9:E7:52:83:15:27:9D:C3:C9:23:71:52 ValidityMon, 21 Oct 2024 08:37:59 GMT - Mon, 13 Jan 2025 08:37:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16292, version 1.0 Hashce485a2bdee361bb271bd6d3ce1ee5cd 4f9a446275d160cccd6666addee65f849c9c5a50 923963e0a56b84c4438f2359121e855e147a01a78a2591c471179cfc9bf0e784
GET /s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tmpfiles.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Nov 2024 19:09:24 GMT
expires: Sat, 22 Nov 2025 19:09:24 GMT
cache-control: public, max-age=31536000
age: 474188
last-modified: Thu, 14 Sep 2023 00:41:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|