datanodes.to/hoi9egq18sfw/Rugby-22.rar
31.43.191.18200 OK 73 kB URL User Request GET HTTP/1.1 datanodes.to/hoi9egq18sfw/Rugby-22.rar
IP 31.43.191.18:443
ASN #210848 Telkom Internet LTD
Certificate IssuerLet's Encrypt
Subjectdatanodes.to
Fingerprint8B:19:7E:2F:34:E2:1E:F1:29:FA:AC:B5:46:1D:D5:50:78:C5:31:5F
ValidityTue, 07 Nov 2023 22:07:45 GMT - Mon, 05 Feb 2024 22:07:44 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (64017)
Hash 139d1d491adcb348315fb9b83a155e7f
81e7c865dec72a7974c789d71468c310da9eda25
56cc7b82f07f228f54f9900bd88c70f4cc563a72becd33eddefd10830c2e6ff0
GET /hoi9egq18sfw/Rugby-22.rar HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 17 Nov 2023 20:49:11 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_perl/2.0.11 Perl/v5.16.3
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Thu, 16 Nov 2023 20:49:11 GMT
Set-Cookie: lang=english; domain=.datanodes.to; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
datanodes.to/theme_2023/dist/assets/app-8e8ccbbc.css
31.43.191.18200 OK 52 kB URL GET HTTP/1.1 datanodes.to/theme_2023/dist/assets/app-8e8ccbbc.css
IP 31.43.191.18:443
ASN #210848 Telkom Internet LTD
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerLet's Encrypt
Subjectdatanodes.to
Fingerprint8B:19:7E:2F:34:E2:1E:F1:29:FA:AC:B5:46:1D:D5:50:78:C5:31:5F
ValidityTue, 07 Nov 2023 22:07:45 GMT - Mon, 05 Feb 2024 22:07:44 GMT
File type Unicode text, UTF-8 text, with very long lines (51957)
Hash 9486115982b5c92d8fbd53d436d5e58d
6512d4c4ecbdbacb057df7720ac7c9f32de50adc
8e8ccbbc5b562e0ae1fdb595bf9f2e8b4eddadfc2e91472da3979228b509da11
GET /theme_2023/dist/assets/app-8e8ccbbc.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Cookie: lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 17 Nov 2023 20:49:12 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_perl/2.0.11 Perl/v5.16.3
Last-Modified: Sun, 11 Jun 2023 09:19:46 GMT
ETag: "cafe-5fdd71a625080"
Accept-Ranges: bytes
Content-Length: 51966
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
d2udkjdo48yngu.cloudfront.net/?jkdud=966945
143.204.42.111200 OK 55 kB URL GET HTTP/2 d2udkjdo48yngu.cloudfront.net/?jkdud=966945
IP 143.204.42.111:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash d8e0f85f69b86ae2b42148b499edcb1d
1762240ece605f9727cce532b94de5d9020a930a
a6f0b47e3936f3378de7995bf71b96ece3de0d9a2efa1723c614c47207419a38
GET /?jkdud=966945 HTTP/1.1
Host: d2udkjdo48yngu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 54761
date: Thu, 16 Nov 2023 20:52:00 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AyIZjRrxZzKiptOQNUeGbh260R_07Mo5n8RPDbP5fai90hQSvfCX-Q==
age: 86232
X-Firefox-Spdy: h2
nb.freezyproto.com/1clkn/31269
23.109.150.138200 OK 26 B URL GET HTTP/1.1 nb.freezyproto.com/1clkn/31269
IP 23.109.150.138:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerLet's Encrypt
Subjectnb.freezyproto.com
Fingerprint31:87:1F:6D:D9:C3:3B:98:75:8D:9C:09:CE:EB:F5:0E:A6:EC:F3:6D
ValiditySat, 28 Oct 2023 23:15:01 GMT - Fri, 26 Jan 2024 23:15:00 GMT
File type ASCII text, with no line terminators
Hash 9082dc37e5e8046929da411544ad071a
41e0e3963ed94e59e8a2f115994c382712411537
b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
GET /1clkn/31269 HTTP/1.1
Host: nb.freezyproto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Nov 2023 20:49:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Set-Cookie: GL_UI4=eJw9jUFugzAURCFgSNpA%2ByUO0CNgUhqy7Car3gHZ%2BEPcgB19HJLevm6ldjdv9DQTBMGqeIJwSRhEV1HDy2utqqaXZaN2FZZNz%2FdvZS0576rdXorDATZ6bp2QI7oY1vMkyLVuiWE7oEHSXdtZhRk8e%2BuvORt7MzEwScKoDNjkjTGDVJK9zUhFBLERE0J61IS9vXtDfFqCiHPuszY%2BhyWs7FxE%2BQOwD22u93ybBHmeBPB4GYXrLU2tVh7ZQEIhhO%2Bw7oTDwdIXpArns7MXADuq9t%2F%2FPWXjzxokChfdebTuhPQNo%2FNOdg%3D%3D; expires=Sat, 18-Nov-2023 20:49:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sat, 18-Nov-2023 20:49:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
datanodes.to/theme_2023/dist/assets/app-599b20c0.js
31.43.191.18200 OK 175 kB URL GET HTTP/1.1 datanodes.to/theme_2023/dist/assets/app-599b20c0.js
IP 31.43.191.18:443
ASN #210848 Telkom Internet LTD
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerLet's Encrypt
Subjectdatanodes.to
Fingerprint8B:19:7E:2F:34:E2:1E:F1:29:FA:AC:B5:46:1D:D5:50:78:C5:31:5F
ValidityTue, 07 Nov 2023 22:07:45 GMT - Mon, 05 Feb 2024 22:07:44 GMT
File type ASCII text, with very long lines (47312)
Size 175 kB (175246 bytes)
Hash 2805e3f7b8e7fbd69bcc908c50b06a23
8f3a999da139b913d81b5c1c8462f7c1f1f04374
d6faff64e12fafa6ea374ec1b9efda5cc5d664e19f07d184aa345d26e7b3d7b1
GET /theme_2023/dist/assets/app-599b20c0.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 17 Nov 2023 20:49:12 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_perl/2.0.11 Perl/v5.16.3
Last-Modified: Mon, 12 Jun 2023 12:53:43 GMT
ETag: "2ac8e-5fdee355ec3c0"
Accept-Ranges: bytes
Content-Length: 175246
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
caltertangintin.com/Y2txUEtMVBIjdjkjKGAGNSkiARoqLigWeiYvMAIhNltJGAkOPlckIgdWSGZ9Wl9EdjsKD0xhbRAfECQ+EFZAdiINDR5tbRVWQH54V0VCZGVTTQRtekUfATEsXlpXID8XB0xhfFNbQ2V/Ul5CY3hX
104.21.79.80204 No Content 0 B URL GET HTTP/2 caltertangintin.com/Y2txUEtMVBIjdjkjKGAGNSkiARoqLigWeiYvMAIhNltJGAkOPlckIgdWSGZ9Wl9EdjsKD0xhbRAfECQ+EFZAdiINDR5tbRVWQH54V0VCZGVTTQRtekUfATEsXlpXID8XB0xhfFNbQ2V/Ul5CY3hX
IP 104.21.79.80:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subjectcaltertangintin.com
FingerprintEF:BB:92:0E:C9:32:E4:52:77:9D:83:65:EB:D3:5B:14:5C:9A:47:5B
ValiditySat, 11 Nov 2023 16:10:10 GMT - Fri, 09 Feb 2024 16:10:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Y2txUEtMVBIjdjkjKGAGNSkiARoqLigWeiYvMAIhNltJGAkOPlckIgdWSGZ9Wl9EdjsKD0xhbRAfECQ+EFZAdiINDR5tbRVWQH54V0VCZGVTTQRtekUfATEsXlpXID8XB0xhfFNbQ2V/Ul5CY3hX HTTP/1.1
Host: caltertangintin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 17 Nov 2023 20:49:12 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xZTMEHcIP6q8UZojRIF%2BpggyOrJLNNgkYmSPflLh%2FamOoTVE03lZn9%2BUciq%2FiNTSrbxqz2T2BBQyUqLhIynVFBPNn173lzOQ6BoOyc1aERPKHxA9L6m8I0j%2F585IGkd1IdOfih%2B6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827ad6c4cd360b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
caltertangintin.com/popunder.gif
104.21.79.80200 OK 7.9 kB URL GET HTTP/2 caltertangintin.com/popunder.gif
IP 104.21.79.80:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subjectcaltertangintin.com
FingerprintEF:BB:92:0E:C9:32:E4:52:77:9D:83:65:EB:D3:5B:14:5C:9A:47:5B
ValiditySat, 11 Nov 2023 16:10:10 GMT - Fri, 09 Feb 2024 16:10:09 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 72f9847dc117a80fb3254cb3fc4e8b79
8e11f9651ea461644e1ffcec81eba75049e8e462
13b99661be972b9e75c1f9e5e30d1734d7fdbc089cf92861e9d9a7b15b934f71
GET /popunder.gif HTTP/1.1
Host: caltertangintin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 17 Nov 2023 20:49:12 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 101001
last-modified: Thu, 16 Nov 2023 16:45:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w78bNBizB6%2F9ycAWg0EntcuJqVBuZAatJQ0YIsC7v7kpqCgcKzQrjQITMDJMAwws%2ByFca%2F4SrK7MprxV9fB5d1K8laduJKHwRYelUvdgHjtaIFHXCxcturIZgEF%2FYWx4qT3QoGhK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827ad6c4dd410b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
216.58.207.227200 OK 7.7 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP 216.58.207.227:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:35:52 GMT
expires: Thu, 14 Nov 2024 21:35:52 GMT
cache-control: public, max-age=31536000
age: 170000
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
216.58.207.227200 OK 7.8 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
IP 216.58.207.227:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7824, version 1.0\012- data
Hash af4d371a10271dafeb343f1eace762bc
6d11d743bc3cfb169d70bc86450f18351dc1a905
60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:53:33 GMT
expires: Fri, 15 Nov 2024 04:53:33 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:52:02 GMT
content-type: font/woff2
age: 143739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
216.58.207.227200 OK 8.0 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP 216.58.207.227:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:53:49 GMT
expires: Fri, 15 Nov 2024 04:53:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
age: 143723
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
216.58.207.227200 OK 7.9 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 216.58.207.227:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 23:21:58 GMT
expires: Fri, 15 Nov 2024 23:21:58 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
age: 77234
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
onameketathar.com/YjNsZ2EDUQ8KXgMODkEUEF9RQlMkFl4hBVBGCAwLBlxYXxgMVBlJAg5cGQMHEFwCE08MVhhCUyRAOwwJVFYAJlQoSz0EAxsHBC8KBkMOL1QmZwExWStUBzExC0NdLCIJXTUfFgh1CyIHJmILIy8lVCAoNxVYJSQZKmACPlMpYT0DAzpEGCEjDkcNVVUAewYtDwR1GygoJmYGNRkjQjwzIAd1OAwVL3EYBCs2R10hGTdCIR4wNXRfMQ4mWFUyOCoKWjQNK1wNVA0EYD4tRFB1CQwONXw4NlgjX1UOAAhxLzMgW0AKIVgodgJeVzFUCwoHUUBbNFMgWTYMTBJnCDAJVns+XxsvYAgBMiBpAwIkFng1IBVWYF1eCANaWDMiJmZULRYoVTUPGVdgXBNEUHENClUyYV4iRwhAAwkRX2E/EFg2agA2JCdBFQNTIXA
54.230.111.85200 OK 1.2 kB URL GET HTTP/2 onameketathar.com/YjNsZ2EDUQ8KXgMODkEUEF9RQlMkFl4hBVBGCAwLBlxYXxgMVBlJAg5cGQMHEFwCE08MVhhCUyRAOwwJVFYAJlQoSz0EAxsHBC8KBkMOL1QmZwExWStUBzExC0NdLCIJXTUfFgh1CyIHJmILIy8lVCAoNxVYJSQZKmACPlMpYT0DAzpEGCEjDkcNVVUAewYtDwR1GygoJmYGNRkjQjwzIAd1OAwVL3EYBCs2R10hGTdCIR4wNXRfMQ4mWFUyOCoKWjQNK1wNVA0EYD4tRFB1CQwONXw4NlgjX1UOAAhxLzMgW0AKIVgodgJeVzFUCwoHUUBbNFMgWTYMTBJnCDAJVns+XxsvYAgBMiBpAwIkFng1IBVWYF1eCANaWDMiJmZULRYoVTUPGVdgXBNEUHENClUyYV4iRwhAAwkRX2E/EFg2agA2JCdBFQNTIXA
IP 54.230.111.85:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerAmazon
Subjectonameketathar.com
Fingerprint5C:4E:D0:8F:F0:0E:8D:01:3E:7F:F2:1C:3F:78:5B:A6:B5:AB:66:40
ValiditySat, 11 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3030), with no line terminators
Hash b5bc5bb562a3bb4fbbab57397e1f2be0
a1d50a813f65c660be874dbf502d68cf58cac763
bd8809442a3db77a524cb3d624be109166f21a9f6da5551f1e4ff66ae2f983f3
GET /YjNsZ2EDUQ8KXgMODkEUEF9RQlMkFl4hBVBGCAwLBlxYXxgMVBlJAg5cGQMHEFwCE08MVhhCUyRAOwwJVFYAJlQoSz0EAxsHBC8KBkMOL1QmZwExWStUBzExC0NdLCIJXTUfFgh1CyIHJmILIy8lVCAoNxVYJSQZKmACPlMpYT0DAzpEGCEjDkcNVVUAewYtDwR1GygoJmYGNRkjQjwzIAd1OAwVL3EYBCs2R10hGTdCIR4wNXRfMQ4mWFUyOCoKWjQNK1wNVA0EYD4tRFB1CQwONXw4NlgjX1UOAAhxLzMgW0AKIVgodgJeVzFUCwoHUUBbNFMgWTYMTBJnCDAJVns+XxsvYAgBMiBpAwIkFng1IBVWYF1eCANaWDMiJmZULRYoVTUPGVdgXBNEUHENClUyYV4iRwhAAwkRX2E/EFg2agA2JCdBFQNTIXA HTTP/1.1
Host: onameketathar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1183
date: Fri, 17 Nov 2023 20:49:12 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sWKxh4Esn1gp4IiWiHM5zFCcb1MG6IzzkwzdyqlqnXM1qQJXPDSPug==
X-Firefox-Spdy: h2
d2udkjdo48yngu.cloudfront.net/?jkdud=966945
143.204.42.111200 OK 55 kB URL GET HTTP/2 d2udkjdo48yngu.cloudfront.net/?jkdud=966945
IP 143.204.42.111:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash 23e0d5e829d4ac3a274b9b6f1490786b
6646d4a9ed5443fa1d4e2e2bb5e521d989eb84d8
8b2d3272e4b295fab29af40c209c456f2270b85f19b9177dfa9ee5c4b0496f53
GET /?jkdud=966945 HTTP/1.1
Host: d2udkjdo48yngu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 54763
date: Thu, 16 Nov 2023 20:52:01 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://datanodes.to
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: T-eTqHDic3chvBRfPf3cKzXkDYkArLuHi5oxkEAQWaNze_BWJ4HFHQ==
age: 86231
X-Firefox-Spdy: h2
onameketathar.com/utx?cb=nuJRQ32mUCho&top=datanodes.to&tid=966945
54.230.111.85204 No Content 0 B URL GET HTTP/2 onameketathar.com/utx?cb=nuJRQ32mUCho&top=datanodes.to&tid=966945
IP 54.230.111.85:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerAmazon
Subjectonameketathar.com
Fingerprint5C:4E:D0:8F:F0:0E:8D:01:3E:7F:F2:1C:3F:78:5B:A6:B5:AB:66:40
ValiditySat, 11 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=nuJRQ32mUCho&top=datanodes.to&tid=966945 HTTP/1.1
Host: onameketathar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 17 Nov 2023 20:49:12 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://datanodes.to
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 17 Nov 2023 20:50:12 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TOUNQS0SF2c1VRvlzTAlF4dt6sDCY0VevJ5_E58DHNFJVAeHcjCbFA==
X-Firefox-Spdy: h2
datanodes.to/hoi9egq18sfw/favicon.ico
31.43.191.18302 Moved 0 B URL GET HTTP/1.1 datanodes.to/hoi9egq18sfw/favicon.ico
IP 31.43.191.18:443
ASN #210848 Telkom Internet LTD
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerLet's Encrypt
Subjectdatanodes.to
Fingerprint8B:19:7E:2F:34:E2:1E:F1:29:FA:AC:B5:46:1D:D5:50:78:C5:31:5F
ValidityTue, 07 Nov 2023 22:07:45 GMT - Mon, 05 Feb 2024 22:07:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hoi9egq18sfw/favicon.ico HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved
Date: Fri, 17 Nov 2023 20:49:12 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_perl/2.0.11 Perl/v5.16.3
Set-Cookie: file_code=hoi9egq18sfw; domain=.datanodes.to; path=/; expires=Fri, 17-Nov-2023 21:49:12 GMT
Location: https://datanodes.to/download
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.45302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 142.250.74.45:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:_oe2AruI81rSPACw5zuNmDgonA9XBA:IU9trCF9pKLoI9tk; Expires=Sun, 16-Nov-2025 20:49:12 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 17 Nov 2023 20:49:12 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AVQVeyyU-_2NuHdF9gP9HyBT84GzLMjG49KRb5lsBsS-e2DpJHDpDX4HdxTzqS04fO7uQdyXCihyyA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-JqlRfYdpC3-OMgTEEZ-ZFQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.45302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 142.250.74.45:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:UyG9EnXQ2dwuwXmqKBtD6N9HuR8GFw:fDqJVx-43fAUkwrD; Expires=Sun, 16-Nov-2025 20:49:12 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 17 Nov 2023 20:49:12 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AVQVeyzrnvKnq4R9tdA-Q1Xffni-dUgT1UoTWoryCcVIVfm9rJQfwBUsnSXXyfJ7IWvNghXl3ZWgRQ
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-QDMUiDHBaLwSQiaDOFnoBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
datanodes.to/download
31.43.191.18200 OK 86 kB IP 31.43.191.18:443
ASN #210848 Telkom Internet LTD
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerLet's Encrypt
Subjectdatanodes.to
Fingerprint8B:19:7E:2F:34:E2:1E:F1:29:FA:AC:B5:46:1D:D5:50:78:C5:31:5F
ValidityTue, 07 Nov 2023 22:07:45 GMT - Mon, 05 Feb 2024 22:07:44 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (64077)
Hash 2331aade965b62aa311fd88a563810bd
480553d15bce4695e706e959f68fd8afbe52ab18
8c9a5ee4304387cf31400141a66d6638a671b010828c6670b6419318c8e0221b
GET /download HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
DNT: 1
Connection: keep-alive
Cookie: lang=english; file_code=hoi9egq18sfw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 17 Nov 2023 20:49:12 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_perl/2.0.11 Perl/v5.16.3
Strict-Transport-Security: max-age=0;includeSubDomains;
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Thu, 16 Nov 2023 20:49:13 GMT
Set-Cookie: affiliate=LGjEcaDq%2BK8J2fSUcUnMp39cPbx4hoPKwxJ%2B95oeaO%2BQHW8c3%2F8mlaLrlQDb5USbvxlBvhT224QENuheOefutMkxXmKiK2DKmFi5C0h%2Frl%2FmATM3VUBonZBgFBi4kRpe80NTVY%2Bhn5Cm3A%2BcR5VRSTjBeb4%3D; domain=.datanodes.to; path=/; expires=Fri, 01-Dec-2023 20:49:13 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AVQVeyyU-_2NuHdF9gP9HyBT84GzLMjG49KRb5lsBsS-e2DpJHDpDX4HdxTzqS04fO7uQdyXCihyyA
142.250.74.45302 Found 403 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AVQVeyyU-_2NuHdF9gP9HyBT84GzLMjG49KRb5lsBsS-e2DpJHDpDX4HdxTzqS04fO7uQdyXCihyyA
IP 142.250.74.45:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (398)
Hash c673a958aec24e4fd112aea7c8c86c4d
b7f7de66de6d5627a90dff7395b0ddfbe339276d
947c80daee61181dd35c46e3b37449def8604deb8a3de289224d55122000c084
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AVQVeyyU-_2NuHdF9gP9HyBT84GzLMjG49KRb5lsBsS-e2DpJHDpDX4HdxTzqS04fO7uQdyXCihyyA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:5w0sPrCzMniebikh4GYZ69CrrqDO4w:WVmV_hOc3c18RRS2;Path=/;Expires=Sun, 16-Nov-2025 20:49:13 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 17 Nov 2023 20:49:13 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AVQVeywKlLmQBJFFMcUhgFlOVoT7q4e8m8Z1ILnSWolEvfLz9HCAO2ikRLVe0lFdY1gtUE9uJLHy&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1357986740%3A1700254153062304&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-wQwYGHVvhhNcrj3hnaR_wA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 403
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AVQVeyzrnvKnq4R9tdA-Q1Xffni-dUgT1UoTWoryCcVIVfm9rJQfwBUsnSXXyfJ7IWvNghXl3ZWgRQ
142.250.74.45302 Found 404 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AVQVeyzrnvKnq4R9tdA-Q1Xffni-dUgT1UoTWoryCcVIVfm9rJQfwBUsnSXXyfJ7IWvNghXl3ZWgRQ
IP 142.250.74.45:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (394)
Hash 5a2da7554089c4d125d427e98111fa41
ca228295d322f68512b0566a6b17834083296937
b91709058e4de58aeb20865215290ae3c25afcaff787b97a39f7c29cc3438a09
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AVQVeyzrnvKnq4R9tdA-Q1Xffni-dUgT1UoTWoryCcVIVfm9rJQfwBUsnSXXyfJ7IWvNghXl3ZWgRQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:OciAdltOtK8cdxOvBN2uNBU5I-FySw:pjqpWSQVqrq5ZRy6;Path=/;Expires=Sun, 16-Nov-2025 20:49:13 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 17 Nov 2023 20:49:13 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AVQVeyzJnm3M0WZMfvtvtmU1OoPXOYRuUbw3HWvx0KTrDVy9dPVS-8b--KHpcCv7jnqD4fVkST5F&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1929061410%3A1700254153103712&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-6k5sxMzmWBQyIS5lSCns1w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 404
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pogothere.xyz/asd100.bin
172.64.200.15200 OK 103 kB IP 172.64.200.15:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 103 kB (102982 bytes)
Hash eb92eaec2aba98405a5e819b79285139
210083c8bd6beacc1e1cc74f2f9842df055cb59e
61f151fc95990069eb7b8d5feb79433576ca2dd025efaacc16cff17e4d20c888
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 20:49:12 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 5637
last-modified: Fri, 17 Nov 2023 19:15:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kiEms39gn9QCqyiqGV2%2B9opA7U%2Fmd7T91Oby1WqKFp8c5i8pDjzs0sVJUqbzwqSrRZd7b5GzpLdeNP4I1tbIRDfrdqBIbQg%2FELPGaBpc6WOLj%2Fqwazf5B%2FH1YBFt2Ijs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 827ad6c749e24195-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
caltertangintin.com/SWxoZzdmUwsUChNdIR9UHzo6PWYtKTIxAi4vPTVaHCsbJGUkLU4TXi1RUVEBcFhdQUcgCFVWEToYCRNCOlFbVwd4SgEJUSZRWFcHeEoeWgZnX1xJBH1CWEFCdF1RVg99XlBeAnFaUFEOcFVOE0coC1VWETkYHAsKeFtYVwV8WFlSA3xcUQ
104.21.79.80204 No Content 0 B URL POST HTTP/3 caltertangintin.com/SWxoZzdmUwsUChNdIR9UHzo6PWYtKTIxAi4vPTVaHCsbJGUkLU4TXi1RUVEBcFhdQUcgCFVWEToYCRNCOlFbVwd4SgEJUSZRWFcHeEoeWgZnX1xJBH1CWEFCdF1RVg99XlBeAnFaUFEOcFVOE0coC1VWETkYHAsKeFtYVwV8WFlSA3xcUQ
IP 104.21.79.80:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subjectcaltertangintin.com
FingerprintEF:BB:92:0E:C9:32:E4:52:77:9D:83:65:EB:D3:5B:14:5C:9A:47:5B
ValiditySat, 11 Nov 2023 16:10:10 GMT - Fri, 09 Feb 2024 16:10:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /SWxoZzdmUwsUChNdIR9UHzo6PWYtKTIxAi4vPTVaHCsbJGUkLU4TXi1RUVEBcFhdQUcgCFVWEToYCRNCOlFbVwd4SgEJUSZRWFcHeEoeWgZnX1xJBH1CWEFCdF1RVg99XlBeAnFaUFEOcFVOE0coC1VWETkYHAsKeFtYVwV8WFlSA3xcUQ HTTP/1.1
Host: caltertangintin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Fri, 17 Nov 2023 20:49:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UkD4pHpkKwrob1OkCIYHL9CU53ouArbX4CDsXZBTEhdqMucuSqi62fwKL5QTcaP2sDG3obPyQWa9ecV19D4NzrJQd5CZ8ZGhI1hfyLq9IyGIBcojaP7sSWKqVzUtcmgxYtOGrF0B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827ad6cbfbbd0b02-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
142.250.74.42200 OK 7.8 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
IP 142.250.74.42:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (8024), with no line terminators
Hash 5aa9510f13352da2580468c036052a9b
620bfb8807661760a66a48dc4a90c9ef607c4e78
4df09b921ebb3845d701a6adac724ad9feb0c3e3d1fe30d52795d56175e2f7c3
GET /css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 17 Nov 2023 20:49:12 GMT
date: Fri, 17 Nov 2023 20:49:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.200.15200 OK 27 B IP 172.64.200.15:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash cb920c4821c379c3ae3de5ee83148b37
f524546ec0ac16852f402c8340902e062d815cbd
afb1cb93b98dbfff78ade44eb847e85032004895f7179a25aeeb89d2d2ac3b05
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 20:49:12 GMT
content-type: text/plain
set-cookie: csu=1918428958686999@1@1700254152; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XwLOPjDrG4plTYo4q2AUPLyAQNQ6jLkVHs6A%2B2WEH%2BHGWbfMKfSBNSthUq0ynC9P7EGTEF9e6XGzbM8GdrsB3AII3JSmHTdHqYGi1DhGK12mIfMBYvVcZZQh%2FQmSmRl8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 827ad6c749d94195-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AVQVeywKlLmQBJFFMcUhgFlOVoT7q4e8m8Z1ILnSWolEvfLz9HCAO2ikRLVe0lFdY1gtUE9uJLHy&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1357986740%3A1700254153062304&theme=glif
142.250.74.45403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AVQVeywKlLmQBJFFMcUhgFlOVoT7q4e8m8Z1ILnSWolEvfLz9HCAO2ikRLVe0lFdY1gtUE9uJLHy&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1357986740%3A1700254153062304&theme=glif
IP 142.250.74.45:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AVQVeywKlLmQBJFFMcUhgFlOVoT7q4e8m8Z1ILnSWolEvfLz9HCAO2ikRLVe0lFdY1gtUE9uJLHy&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1357986740%3A1700254153062304&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 17 Nov 2023 20:49:13 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: script-src 'nonce-GAk-Jls_c299qlAADfRVBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
216.58.207.227200 OK 7.8 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 216.58.207.227:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:48:22 GMT
expires: Fri, 15 Nov 2024 04:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
age: 144050
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AVQVeyzJnm3M0WZMfvtvtmU1OoPXOYRuUbw3HWvx0KTrDVy9dPVS-8b--KHpcCv7jnqD4fVkST5F&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1929061410%3A1700254153103712&theme=glif
142.250.74.45403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AVQVeyzJnm3M0WZMfvtvtmU1OoPXOYRuUbw3HWvx0KTrDVy9dPVS-8b--KHpcCv7jnqD4fVkST5F&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1929061410%3A1700254153103712&theme=glif
IP 142.250.74.45:443
Requested by https://datanodes.to/hoi9egq18sfw/Rugby-22.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AVQVeyzJnm3M0WZMfvtvtmU1OoPXOYRuUbw3HWvx0KTrDVy9dPVS-8b--KHpcCv7jnqD4fVkST5F&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1929061410%3A1700254153103712&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 17 Nov 2023 20:49:13 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-zokelVWP4c4xS4jqn_RC6g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000