| r10.o.lencr.org/ |  23.33.119.65 | | 504 B |
IP23.33.119.65:0 ASN#20940 Akamai International B.V.
Hashaadf4023fd478bb51576a5f2358b225e a9d7b5d1e6a9d4f3fd800815a784607563dae142 cc1e53796ec8c93a6a4cf66399a32249a405bd6ec1bd7399d5926c11657868a9
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CC1E53796EC8C93A6A4CF66399A32249A405BD6EC1BD7399D5926C11657868A9"
Last-Modified: Sat, 03 Aug 2024 18:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7123
Expires: Sun, 04 Aug 2024 14:46:53 GMT
Date: Sun, 04 Aug 2024 12:48:10 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.65 | | 504 B |
IP23.33.119.65:0 ASN#20940 Akamai International B.V.
Hashfbcbba6bdbe62bf043a449052e96c537 78ba577fb46d8f5471d6b956b571a64840d68762 af55de43044220deca1e257adc161f81a25c20dd9e7208ee4efec19b1a194f2a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "AF55DE43044220DECA1E257ADC161F81A25C20DD9E7208EE4EFEC19B1A194F2A"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15963
Expires: Sun, 04 Aug 2024 17:14:13 GMT
Date: Sun, 04 Aug 2024 12:48:10 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.65 | | 504 B |
IP23.33.119.65:0 ASN#20940 Akamai International B.V.
Hash8bd7201be8d12c4b511d2c5643b45dbc f2ecb2ebafbf4f8d92f92007753001befcedc634 25cb2e6ad29d4503f32121fbe37e2b0f4ce64a7f6cb57233ebf16df5d6b78d53
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "25CB2E6AD29D4503F32121FBE37E2B0F4CE64A7F6CB57233EBF16DF5D6B78D53"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8301
Expires: Sun, 04 Aug 2024 15:06:31 GMT
Date: Sun, 04 Aug 2024 12:48:10 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.65 | | 504 B |
IP23.33.119.65:0 ASN#20940 Akamai International B.V.
Hash4aab8b9db0f379b02d66f4ce6df210bf 0ed3615dac0685fd4523238922cd048516d3b433 a6819092c4abb65d46bea25a3ea4f57dea4a46b2173eb92aa3f6a50f2f6aa840
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A6819092C4ABB65D46BEA25A3EA4F57DEA4A46B2173EB92AA3F6A50F2F6AA840"
Last-Modified: Sat, 03 Aug 2024 18:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4866
Expires: Sun, 04 Aug 2024 14:09:16 GMT
Date: Sun, 04 Aug 2024 12:48:10 GMT
Connection: keep-alive
|
|
| ar.y2mate.is/assets/css/bootstrap.min.css |  104.21.4.123 | 200 OK | 20 kB |
URL GET HTTP/3ar.y2mate.is/assets/css/bootstrap.min.css IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typeASCII text, with very long lines (65371) Hashb478084c6491ef2f49c6bf4d59713507 501433bb8869dd463401864422c0c43ef746581e dec93bf830240440385864fc8b8990b1da03c4414d56a26f69a81f05f108e3aa
GET /assets/css/bootstrap.min.css HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/v78/
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: text/css
content-length: 19711
last-modified: Mon, 06 May 2024 14:44:58 GMT
etag: "1d957-617ca1d058e80-gzip"
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HXTjpHgcEFnQwOV7vB%2B%2FQ9sdvpb5AVriPnRwreOx4N4hHGtdggOowpU%2FmOxh0p9TfWxrSmpC8Mo28gZ%2Bn1TaIN1jpAsD1igltruADakfKekwxtpjDPop53GAj8gAtvU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8adea907afb0b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.4.123 | 200 OK | 16 kB |
URL User Request GET HTTP/2IP104.21.4.123:443
CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (514) Hashb98c05f12b3d1671a5a3f387a896e90e fc716db40a05789b79d24de4fbe67fbd097f705f 9020e4976cb58322e34da296ffdde8cf68a28d3a01b822edbb00eb8c3b4d42d3
GET /v78/ HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; expires=Sun, 04 Aug 2024 14:48:11 GMT; Max-Age=7200; path=/; samesite=lax
y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D; expires=Sun, 04 Aug 2024 14:48:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YPxZ3tDvHS2SLTkMOh0WLOdh56eNcElztThbDkbOPdgeDL3fnsqM7bmPvNwycLgoJ4mlksfqcO5lWQ171GPIhSS6EK6NRi9GoBbRUhnEcAf1ODp2Hxoxt%2BTM9ybWfuw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8adea904fd59569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash81a79c4b857dbae03350ec16019194a2 a8ec0d561c980e63a14eae3a37d55810cf5cb28d a1a5e840420d4fe1c5c697d6d66e051889f881eb9b2cc381d7e37ee3ff329248
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Aug 2024 12:48:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash80d5507dca466cc93248ccd61a3a114b 9f913ebd9a0f00d39b1a36c42b8262a623c4c3e7 1fbc70a41dbb1235f189d1f5a804bf8a5e8216f4b9c40c637c9d6db8edec2462
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Aug 2024 12:48:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js | 142.250.74.42 | 200 OK | 31 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP142.250.74.42:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Aug 2024 02:58:04 GMT
expires: Sun, 03 Aug 2025 02:58:04 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 121807
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.33.119.10 | | 504 B |
IP23.33.119.10:0 ASN#20940 Akamai International B.V.
Hash1c3949e7ab444043a774def8044ead37 8fcd77c154508f539b28f11183adcdf8f1f066a6 fae89fe535825b98b7b876e39bcbdb0b66e93a79da9b0c99183191cfa37542a9
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FAE89FE535825B98B7B876E39BCBDB0B66E93A79DA9B0C99183191CFA37542A9"
Last-Modified: Sat, 03 Aug 2024 19:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9861
Expires: Sun, 04 Aug 2024 15:32:32 GMT
Date: Sun, 04 Aug 2024 12:48:11 GMT
Connection: keep-alive
|
|
| www.googletagmanager.com/gtag/js?id=G-MRLTGEXL5X | 142.250.74.72 | 200 OK | 104 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-MRLTGEXL5X IP142.250.74.72:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37 ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size104 kB (103806 bytes) Hash4b7f7c2bc1db10440ab23c9bafa2c39b c15712b0d9e9af242086c3bd80d906190e0cf68b 5836cd73a54cba662f0fe37fe3006d8defe14c72bb4f6398a816635d938d301c
GET /gtag/js?id=G-MRLTGEXL5X HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Aug 2024 12:48:11 GMT
expires: Sun, 04 Aug 2024 12:48:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103806
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ac.paidlemirkily.com/r9miMPjINiIgYNOYi/eGGrJ |  23.109.170.60 | 200 OK | 20 B |
URL GET HTTP/1.1ac.paidlemirkily.com/r9miMPjINiIgYNOYi/eGGrJ IP23.109.170.60:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerLet's Encrypt Subjectac.paidlemirkily.com FingerprintCE:6B:F5:04:60:2F:98:5A:7A:49:7D:C8:7B:44:19:50:FE:36:FC:73 ValidityFri, 28 Jun 2024 07:14:33 GMT - Thu, 26 Sep 2024 07:14:32 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /r9miMPjINiIgYNOYi/eGGrJ HTTP/1.1
Host: ac.paidlemirkily.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Aug 2024 12:48:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://ar.y2mate.is
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Mon, 05-Aug-2024 12:48:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Mon, 05-Aug-2024 12:48:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash80d5507dca466cc93248ccd61a3a114b 9f913ebd9a0f00d39b1a36c42b8262a623c4c3e7 1fbc70a41dbb1235f189d1f5a804bf8a5e8216f4b9c40c637c9d6db8edec2462
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Aug 2024 12:48:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash81a79c4b857dbae03350ec16019194a2 a8ec0d561c980e63a14eae3a37d55810cf5cb28d a1a5e840420d4fe1c5c697d6d66e051889f881eb9b2cc381d7e37ee3ff329248
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Aug 2024 12:48:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ar.y2mate.is/assets/images/searchicon.png | 104.21.4.123 | 200 OK | 860 B |
URL GET HTTP/3ar.y2mate.is/assets/images/searchicon.png IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typePNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced Hashbe93f525885d6b578a4267a64599bff8 be243180910e3bb5fa094c36f80556bc2be146c5 b1a6b5d559825167b7a072b20e754c9ec432096a498545a7c2d9744aa093d08b
GET /assets/images/searchicon.png HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/assets/css/style.css
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: image/png
content-length: 860
last-modified: Mon, 06 May 2024 14:44:56 GMT
etag: "35c-617ca1ce70a00"
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n4zL6vMJW7ZSjcUBsCeQt3rI08ha9u7k1xXcAnlfL%2FDRz%2FxrUtHNFOt2rKfLADoa%2FAdwN5B%2Bw1upmTNGSuUoSrasqUEn6zAoLgJdDE3LLmopX5di9VdkNsnVww0Osps%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8adea90969eeb4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ar.y2mate.is/assets/icons/apple-touch-icon.png | 104.21.4.123 | 200 OK | 1.1 kB |
URL GET HTTP/3ar.y2mate.is/assets/icons/apple-touch-icon.png IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typePNG image data, 76 x 76, 8-bit colormap, non-interlaced Hash50f9ab72e54e40606338efd3652ab878 e585d9dfdb311064b1ad7c1c560f980f3815f5a2 52646b723389dc692c8d22799f6c69a9fbd96ce2cae550a55e7b9e843d95067d
GET /assets/icons/apple-touch-icon.png HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/v78/
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: image/png
content-length: 1088
last-modified: Mon, 06 May 2024 14:44:56 GMT
etag: "440-617ca1ce70a00"
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S0TD7%2Fs%2FEfDaAGa7CHV9HGqnsSkLkcT6i9Vsqh7CZQKmnTTa6n99f2fAWrvRcuhdQ1NYvpkHok8xdgk7uYx6UkoM4a9R7FlhB6pG2THUA5jW%2Bea8ChxlSpkm21EFNJc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8adea90a0ab2b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ar.y2mate.is/assets/fonts/glyphicons-halflings-regular.woff2 | 104.21.4.123 | 200 OK | 19 kB |
URL GET HTTP/3ar.y2mate.is/assets/fonts/glyphicons-halflings-regular.woff2 IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18028, version 1.589 Hash2008cff58b4ea28d0d1e6ce662c1df35 6879f66da004d931c6e43251503201f92c003adc 3c85b43a4926e50c09771284a7e0164ca42d482097881f88e70afa291789be86
GET /assets/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/assets/css/bootstrap.min.css
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: font/woff2
last-modified: Mon, 06 May 2024 14:44:54 GMT
etag: W/"466c-617ca1cc88580-gzip"
vary: Accept-Encoding
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BNu7%2B5fP%2Bkl4FVlilDddAkVDq18pWkPPf6eBAJSul%2FwMBamm1MsYGBLWGO8HpPUR3UkewPyAitkKv5qnjz0DfUibF8tKDwghsxPfiPzyc5n%2BML%2FrKls77XeDwMgog0k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8adea90979f7b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 13 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com FingerprintBE:14:2A:D4:32:CD:FF:FE:ED:79:48:4F:5C:7B:C4:52:09:C8:58:96 ValidityTue, 23 Jul 2024 01:50:30 GMT - Mon, 21 Oct 2024 01:50:29 GMT
File typegzip compressed data, from Unix Hash0a5526e6d47b1f5c5ed65464c9a52fbc 2785242502f82ae130f38c9f50f8474e2750bb3c 487083d858980fd713610558ea421b86eddecfb63c607b662b88bba29c1287ca
GET /bootstrap/3.4.1/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"2f34b630ffe30ba2ff2b91e3f3c322a1"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 08/07/2023 07:43:09
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 4ee37cfb4e854232a98222bcb496cfa9
cdn-cache: HIT
cf-cache-status: HIT
age: 2606075
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8adea907de3db4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.33.119.10 | | 504 B |
IP23.33.119.10:0 ASN#20940 Akamai International B.V.
Hash78be19d93b8add0d8f3c63b67e490038 2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6 b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8540
Expires: Sun, 04 Aug 2024 15:10:32 GMT
Date: Sun, 04 Aug 2024 12:48:12 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.10 | | 504 B |
IP23.33.119.10:0 ASN#20940 Akamai International B.V.
Hash78be19d93b8add0d8f3c63b67e490038 2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6 b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8540
Expires: Sun, 04 Aug 2024 15:10:32 GMT
Date: Sun, 04 Aug 2024 12:48:12 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.10 | | 504 B |
IP23.33.119.10:0 ASN#20940 Akamai International B.V.
Hash78be19d93b8add0d8f3c63b67e490038 2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6 b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8540
Expires: Sun, 04 Aug 2024 15:10:32 GMT
Date: Sun, 04 Aug 2024 12:48:12 GMT
Connection: keep-alive
|
|
| ar.y2mate.is/assets/css/style.css | 104.21.4.123 | 200 OK | 12 kB |
URL GET HTTP/3ar.y2mate.is/assets/css/style.css IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typeASCII text, with very long lines (13185), with no line terminators Hashf64ec99b5b8ebe82e39b546e8e8d4eaf 2e624c9f28403ebbad8c82e3a2f186dfc37379fa 7b888b454623a1cddf620babc9b03750ae1849cd3c7a7f9725a04cab583b1a04
GET /assets/css/style.css HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/v78/
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=20048
etag: W/"4e50-61ac59f6f1280-gzip"
last-modified: Thu, 13 Jun 2024 13:39:06 GMT
vary: Accept-Encoding
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NsTFU%2FyEgBYLcuDph1bUYpNa8FVTvKq4gy9SIukK%2FtQhA9RgClK%2ByMszLzRZhiIVmPlofQty36AztO1q5z3WpeoAw7NoZxd1%2FYb3a%2Bte54fsoAETGIj5VZhfnwZ%2BwQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8adea907afb4b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ar.y2mate.is/assets/images/loading2.gif | 104.21.4.123 | 200 OK | 12 kB |
URL GET HTTP/3ar.y2mate.is/assets/images/loading2.gif IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typeGIF image data, version 89a, 160 x 24 Hash046677ff48107680705f654c9250c567 c0cbc0b2c8b84014dcfea943e4582c7bd9e79710 4bf7f8d97e7584aeb2932c7313bb7e6266651a22cad37fe16f4239ed7ea1784c
GET /assets/images/loading2.gif HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/v78/
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: image/gif
content-length: 11689
last-modified: Mon, 06 May 2024 14:44:56 GMT
etag: "2da9-617ca1ce70a00"
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2BxBVwvHfsItd5XDZLu70DrM3pKIwIdRFqt9frnN1gTNvDm7tNKOkNNJ%2FEbD3v7IlHGpTl2GH3DwKa7OXsjJOmfxtgj%2Bpct%2FYW2zjTsrxZuvNPLmI2IMUYql5CRDgLA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8adea907afb7b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ar.y2mate.is/assets/icons/favicon-16x16.png | 104.21.4.123 | 200 OK | 599 B |
URL GET HTTP/3ar.y2mate.is/assets/icons/favicon-16x16.png IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash81fa700793ce89899bd2ed1c6d3839a5 374544f5ba2c90fa4a4cfa6dbfffc33fd3d949fa 5b363b420edc0722c2633c72334382d62e0749479760d67a5db8a7143d78a06c
GET /assets/icons/favicon-16x16.png HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/v78/
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: image/png
content-length: 599
last-modified: Mon, 06 May 2024 14:44:56 GMT
etag: "257-617ca1ce70a00"
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uxu5bkTIAIGmMxbcnnL22Osgif11n0VaclmPkf1kuueZ%2F0M6snHZOh2dlu1s8jLODDii198QMH1yrdIzwXjNGC1UPoxnW2lSYaT%2Bt14ke8t%2Bb5HeuxIRuBjdKSnVW1s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8adea90a0ab9b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ar.y2mate.is/assets/js/main.js?v14.4 | 104.21.4.123 | 200 OK | 9.0 kB |
URL GET HTTP/3ar.y2mate.is/assets/js/main.js?v14.4 IP104.21.4.123:443
Requested byhttps://ar.y2mate.is/v78/ CertificateIssuerGoogle Trust Services Subjecty2mate.is FingerprintE7:8D:5E:D5:BE:CA:44:FA:36:B4:89:27:51:ED:DD:AF:E2:42:DF:05 ValidityWed, 03 Jul 2024 03:17:55 GMT - Tue, 01 Oct 2024 03:17:54 GMT
File typeJavaScript source, ASCII text, with very long lines (9324), with no line terminators Hashe6fa17de77831a3179529f4d5e879a93 aa4f4a4cfcba1d0b83a2eef8c2d086a7b0d04350 6ceec6af0943e971afb402df1e192535f3b168b295794d274992f0cef4c9f40f
GET /assets/js/main.js?v14.4 HTTP/1.1
Host: ar.y2mate.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar.y2mate.is/v78/
Cookie: XSRF-TOKEN=eyJpdiI6InlkekR2TXBXYXNjWXliSHMyNnlYbUE9PSIsInZhbHVlIjoiMGpteDhpKzh5a2tXRm0vaDYyeGpCZzJKVm9iaXZ0ZVgzNEowL1Y3VTVyK3BhdTBsSzJha2Q4enl2NWJUcFJvMUlhYUVNYnRxQ3prajBsbmZRdG53WnpLdWkrUVFBSWZ0dXRvaUhSb1lBb0Nvdy83V1N5bVRnSlhTUGlna1UvUjciLCJtYWMiOiIxNGFhM2JkNmE1ZGRjMDI3OTlkM2ZmYTVmOGNkNWRkZTFiNzFmYTkwZjYyODQ3ZDMwYmQxYjA0OTZmM2MwODhlIiwidGFnIjoiIn0%3D; y2mate_session=eyJpdiI6IkFiV2tEaU9SOXQyeWRkbzU2bmE5Qnc9PSIsInZhbHVlIjoicERhdTYyamJXQVB1YVJpL0JpOHoyZUxkQVF6d3oxZzdFM2k5SC80V1ZNWENVSXg1eHgzQjUzeWJqUFZ3WnJkS2hueGhuOVBqdlN5OG1wV05tOXhZZ1kyR1BhdmVsZ2FpbDBYTVloWjIvemltUmxpWEhYUEFPMm5kRnMxZnhTQnUiLCJtYWMiOiI0ZjU1MzFjYzYzYWU3ZjBhYWQ2N2Y1YjI5NjNiZjM5ZTljZGNkNjczZmIyZjY3MzkzMmJmNWIxMmRlYWYxNzE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Aug 2024 12:48:11 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=18271
etag: W/"475f-61e24556b1140-gzip"
last-modified: Fri, 26 Jul 2024 10:54:21 GMT
vary: Accept-Encoding
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3qn%2FtDHZLv7MHhwmQEKi31mCFT%2BGtM%2B%2B9zO1EAQlDMfBAIKa%2BDZ1TVjpb3IgBClFdwd6Ye%2BythqEoKimcx6cL%2FyQRFAiPCziP95h20NQj9VV2Gp3%2BDV1iB8nTC7GTT8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8adea907bfc9b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0