Report - le-forgeron-debutant.fr/4833686.html

Report Overview

Submitted URL
le-forgeron-debutant.fr/4833686.html
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 19:39:31
Access
public
Website Title
Final URL
rqqlj.check-tl-ver-94-2.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=1b9e5pmqna9fy15fd5&sub_id=17136824&nrid=b9dd703e5d7e4e228a931b19824d0ccb&hash=S581X0aa7Biqem39vZlYxg&exp=1714160668
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rqqlj.check-tl-ver-154-1.com	unknown	unknown	No data	No data	5.7 kB	81 kB	188.114.96.1
fa.check-tl-ver-54-3.com	unknown	unknown	No data	No data	2.0 kB	34 kB	188.114.96.1
eb.check-tl-ver-94-1.com	unknown	unknown	No data	No data	1.4 kB	7.6 kB	188.114.97.1
nb.check-tl-ver-94-1.com	unknown	unknown	No data	No data	1.4 kB	52 kB	188.114.97.1
appealtime.com	unknown	2024-04-09	2024-04-09	2024-04-23	2.4 kB	4.2 kB	172.240.127.234
www.gstatic.com	unknown	2008-02-11	2016-07-26	2024-04-26	16 kB	381 kB	142.250.74.35
rqqlj.check-tl-ver-54-3.com	unknown	unknown	No data	No data	5.2 kB	99 kB	188.114.96.1
na.check-tl-ver-94-1.com	unknown	2024-04-09	2024-04-18	2024-04-18	2.0 kB	66 kB	188.114.97.1
mb.check-tl-ver-94-1.com	unknown	unknown	No data	No data	3.3 kB	64 kB	188.114.97.1
rqqlj.canopusacrux.com	unknown	unknown	No data	No data	6.8 kB	11 kB	188.114.97.1
rqqlj.check-tl-ver-94-2.com	unknown	unknown	No data	No data	3.3 kB	29 kB	172.67.189.129
cdnstatic.check-tl-ver-154-1.com	unknown	2024-04-15	2024-04-17	2024-04-17	3.6 kB	73 kB	188.114.96.1
ma.check-tl-ver-154-1.com	unknown	unknown	No data	No data	1.3 kB	17 kB	188.114.96.1
fb.check-tl-ver-54-3.com	unknown	unknown	No data	No data	2.0 kB	49 kB	188.114.96.1
cdnstatic.check-tl-ver-94-1.com	unknown	unknown	No data	No data	8.2 kB	185 kB	188.114.97.1
le-forgeron-debutant.fr	unknown	unknown	No data	No data	490 B	10 kB	188.114.97.1
nylonnickel.xyz	unknown	2024-01-02	2024-01-02	2024-04-09	9.6 kB	6.0 kB	192.64.81.118
qa.check-tl-ver-94-2.com	unknown	unknown	No data	No data	3.9 kB	55 kB	172.67.189.129
ob.check-tl-ver-94-1.com	unknown	unknown	No data	No data	1.9 kB	86 kB	188.114.97.1
cdnstatic.check-tl-ver-54-3.com	unknown	2024-04-06	2024-04-11	2024-04-24	1.3 kB	3.2 kB	188.114.96.1
rqqlj.check-tl-ver-94-1.com	unknown	unknown	No data	No data	9.9 kB	194 kB	188.114.97.1
ma.check-tl-ver-94-1.com	unknown	unknown	No data	No data	2.6 kB	50 kB	188.114.97.1
www.profitablegatecpm.com	unknown	2024-02-05	2024-02-06	2024-04-25	16 kB	24 kB	172.240.127.234
lb.check-tl-ver-154-1.com	unknown	unknown	No data	No data	1.3 kB	3.9 kB	188.114.96.1
qb.check-tl-ver-94-2.com	unknown	unknown	No data	No data	3.9 kB	61 kB	172.67.189.129
mb.check-tl-ver-154-1.com	unknown	unknown	No data	No data	2.0 kB	40 kB	188.114.96.1
ta.check-tl-ver-54-3.com	unknown	unknown	No data	No data	1.3 kB	7.4 kB	188.114.96.1
oa.check-tl-ver-94-1.com	unknown	unknown	No data	No data	2.6 kB	45 kB	188.114.97.1
la.check-tl-ver-154-1.com	unknown	unknown	No data	No data	2.0 kB	33 kB	188.114.96.1
cdnstatic.check-tl-ver-94-2.com	unknown	2024-04-09	2024-04-16	2024-04-18	2.7 kB	76 kB	172.67.189.129
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	4.9 kB	147 kB	216.58.207.227
ea.check-tl-ver-94-1.com	unknown	unknown	No data	No data	1.4 kB	39 kB	188.114.97.1
tb.check-tl-ver-54-3.com	unknown	unknown	No data	No data	2.0 kB	64 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	appealtime.com	Sinkholed
2024-04-26	medium	appealtime.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ	0 B	2023-03-07	2024-05-07
Pretty URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ IP 172.240.127.234 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 11:52:39 Times Seen37400818 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (199)

URL IP Response Size

appealtime.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06

172.240.127.234

1.3 kB

URL
appealtime.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (410)
Size
1.3 kB (1347 bytes)
Hash
f368c940da051897d2cc86974f46be7b
83dd651bb9c9c07846ca4ce2cbaab243cba88a21
592dc995abd53810c29896f85a2976afbc9e0a496f2b2e1b0852625a80548eca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06 HTTP/1.1
Host: appealtime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:39:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17683209; expires=Sat, 27 Apr 2024 19:39:05 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.Yil6QiL8Av6mOO6wCFn5FyXY_bsdktj3c8rRw8VR2Y8; expires=Fri, 26 Apr 2024 19:40:05 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 358530fda842f158c6202919b7b56b5f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

appealtime.com/api/users?token=L2U1MXhtZmI5P2tleT02Y2YwYmY1Mzc3NGU1MmVjOWUzY2E5NDgwM2Y0OGIwNiZwc3Q9MTcxNDE2MDQwNSZybXRjPXQmc2h1PTcyMmIwMDEyYzU4MDQ4YjcyZGE1MmU5ZGNlZjU3NTI0N2I3YTg5NmUwZjBjNDk4NjZjYzVhZDMyZWFiMTM0YzMwZWU0YTZmYjM3MTM3ZjhiM2VmMjViNTNlMGU0MTU2NzlkYjExMTdhMWU0NTY3MWY2OWQwNWM0NDZlOTNmM2VkMDdiNDI3ZWRjYjI0NWRhNjY2NjhmYmNkNDY0ZWI5NzE0MzNjYjczNzMyYTllNWU5M2E4YzgwNzAyM2Q3YjdjOA&uuid=&pii=&in=false

192.243.61.225

0 B

URL
appealtime.com/api/users?token=L2U1MXhtZmI5P2tleT02Y2YwYmY1Mzc3NGU1MmVjOWUzY2E5NDgwM2Y0OGIwNiZwc3Q9MTcxNDE2MDQwNSZybXRjPXQmc2h1PTcyMmIwMDEyYzU4MDQ4YjcyZGE1MmU5ZGNlZjU3NTI0N2I3YTg5NmUwZjBjNDk4NjZjYzVhZDMyZWFiMTM0YzMwZWU0YTZmYjM3MTM3ZjhiM2VmMjViNTNlMGU0MTU2NzlkYjExMTdhMWU0NTY3MWY2OWQwNWM0NDZlOTNmM2VkMDdiNDI3ZWRjYjI0NWRhNjY2NjhmYmNkNDY0ZWI5NzE0MzNjYjczNzMyYTllNWU5M2E4YzgwNzAyM2Q3YjdjOA&uuid=&pii=&in=false
IP
192.243.61.225:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=L2U1MXhtZmI5P2tleT02Y2YwYmY1Mzc3NGU1MmVjOWUzY2E5NDgwM2Y0OGIwNiZwc3Q9MTcxNDE2MDQwNSZybXRjPXQmc2h1PTcyMmIwMDEyYzU4MDQ4YjcyZGE1MmU5ZGNlZjU3NTI0N2I3YTg5NmUwZjBjNDk4NjZjYzVhZDMyZWFiMTM0YzMwZWU0YTZmYjM3MTM3ZjhiM2VmMjViNTNlMGU0MTU2NzlkYjExMTdhMWU0NTY3MWY2OWQwNWM0NDZlOTNmM2VkMDdiNDI3ZWRjYjI0NWRhNjY2NjhmYmNkNDY0ZWI5NzE0MzNjYjczNzMyYTllNWU5M2E4YzgwNzAyM2Q3YjdjOA&uuid=&pii=&in=false HTTP/1.1
Host: appealtime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appealtime.com/api/users?token=L2U1MXhtZmI5P2tleT0wZjIyYzFmZDYwOWYxM2NiNzk0N2M4Y2FiZmUxYTkwZCZzdWJtZXRyaWM9MTc2ODMyMDk
Cookie: u_pl=17683209; ain=eyJhbGciOiJIUzI1NiJ9.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.Yil6QiL8Av6mOO6wCFn5FyXY_bsdktj3c8rRw8VR2Y8; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:39:06 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391b6cf7b77350c2066a8f5841d15265&COST_CPC=&PLACEMENT_ID=17683209&CAMPAIGN_ID=1026545&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2895359
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:39:06 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:39:06 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:39:06 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:39:06 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e315facb8d1debbc25998269df21c90e
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391b6cf7b77350c2066a8f5841d15265&COST_CPC=&PLACEMENT_ID=17683209&CAMPAIGN_ID=1026545&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2895359

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391b6cf7b77350c2066a8f5841d15265&COST_CPC=&PLACEMENT_ID=17683209&CAMPAIGN_ID=1026545&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2895359
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391b6cf7b77350c2066a8f5841d15265&COST_CPC=&PLACEMENT_ID=17683209&CAMPAIGN_ID=1026545&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2895359 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appealtime.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:06 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9fv52-xr46-0-usgm6o-9rib8n-9ribwj-35d13b; expires=Sat, 27-Apr-2024 19:39:06 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5c0c7pmqna9fv528e1&sub_id=17683209
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5c0c7pmqna9fv528e1&sub_id=17683209

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5c0c7pmqna9fv528e1&sub_id=17683209
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5c0c7pmqna9fv528e1&sub_id=17683209 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appealtime.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 Apr 2024 19:39:06 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:06 GMT; path=/; samesite=lax
__cap=1; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qLHTB624LD2MuueBAyJuqjXoeFSZ%2FSu4sW%2FGiKPfDN5OGpyvF9Mc7BlB8n1m476DvEYlJMtBxxn75Xh%2FTF7cgJRBjUSXaKuZRi9AGa6SYM3EQ1YJdFkhMNp7bQd%2Fm99s%2FTGHEy5fxMy3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909775cac5696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/1.png

172.67.189.129

11 kB

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/1.png
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6820
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IxGXTwrxKqIMfTjl35VSqu7FoBNYOEaRlYkWKEpfnaCVkrfuiEXd1Y8A81vB%2F2xNEYVE%2FKdCeXfne%2FMlprqou24kBl9TsrYDbXxNSmVDxieAxrXUAlpDjEgeLAXLWRsYYO5p9kMty0jWXds8Zm0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909795a2a568a-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/2.png

172.67.189.129

1.1 kB

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/2.png
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6820
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AvKwvry6BL2xkZJT8r56%2FrhsPBTCgsqIH9hoVi4NGE15xM0oKhVvzt8B2awZDGGlkvfCUBnRAxlc0Gjo9p0yk9nHkGgWC%2FsOfAYWvPm4OhbdTWQdkiTfGwwhcg%2BLRlxBTCZ%2FTLLeaY1f2it0It8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909795a2c568a-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646

172.67.189.129

12 kB

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
12 kB (11487 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appealtime.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:39:06 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q5%2FKP13i1VnyaN%2F9%2FkIGkBjrJo9S7BLAlGhSGuenwxv0GcouqMSd7wk4sFhMZKt2LrREaZqZRL66ot85pSpkrv7UrHULXkp4BkH4zWZl8MTRkJht%2B55BZMil0nIaARZXOhJUTIScFLb%2Bvw72eJM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909781d0db4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/trls.js

172.67.189.129

1.7 kB

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/trls.js
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
1.7 kB (1733 bytes)
Hash
0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b

HTTP Headers

GET /eyes-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6820
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ei3CcjJQI6v%2FupdBV3z7Tzvqu1u4AJt%2FH1I3uECcI5Z9r03Sum03IBgsEeVQKFiS7irjVztACTTorfdrFz%2FOftLQbn67t9TN3MxbBGhUVA23VGNDNDK7Gp0tS8al41H%2BIBiD5WfMEH5ck8%2FPk2E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909795a1b568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48356
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

172.67.189.129

10 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
10 kB (10162 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Cookie: __psu=dab7887a-d4c7-47cb-83d8-fb862cec4163
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5rUgWa8nijXO%2F7np3T9GChaPC0sKhaywjBwiExEKSDUiow79CdEy%2BOhQN%2FzsCHrydt1wrcBNbO4Qt3TTXZscynFpC2UsM1SDDdJaKSasgklzXE150knpitBycQnAl9yXDCF7n6OETkwQtAI45SMzbCyo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097a6b8d568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-2.com/eyes-robot/assets/2.png

172.67.189.129

1.1 kB

URL
qa.check-tl-ver-94-2.com/eyes-robot/assets/2.png
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: qa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Qz%2FFHhLlBy6JNF%2B2sY29Fz74AD4%2Fbq%2B1B3DzhoXTmOmPv8SZ3KHproeDTxfkphyFCWPg2qGAj5b42UqrodFcCs6aDMOjlpS1XIbJ5yw%2F4FicchsKnaGbrvWi9J%2FN2HMcSHWDZIOxq7TdsY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097c7ee8568a-OSL
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-2.com/eyes-robot/assets/1.png

172.67.189.129

11 kB

URL
qa.check-tl-ver-94-2.com/eyes-robot/assets/1.png
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: qa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GBTvIW08jelDhg2RJxAnDk1Wv5FOcTNus9nTeWDUqET7M4euAOsWTkK9e5Z5K6Fbsg40qdBcRld6WXam2ZxB0XNE4sfMIblCwrHEJ6yXtktotLrTfhancTwLlTcgUCIbS5Zlf6oBwHWQr%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097c7ee3568a-OSL
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-2.com/eyes-robot/assets/trls.js

172.67.189.129

13 kB

URL
qa.check-tl-ver-94-2.com/eyes-robot/assets/trls.js
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
13 kB (12776 bytes)
Hash
0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b

HTTP Headers

GET /eyes-robot/assets/trls.js HTTP/1.1
Host: qa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dpr323VPkwPghqdYEh64G1mhysGTtir4J7mWhKhKhKBOU7srqsaSht1W48TAd0NKK0CPN7bf3chnK9s9%2FKboxHwjq5hCweylOqh%2FoW3%2BDErDHZnb6%2FJ8ExrlXuCSU%2BwUahceKV27wsUApFA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097c7eda568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-2.com/eyes-robot/assets/style.css

172.67.189.129

15 kB

URL
qa.check-tl-ver-94-2.com/eyes-robot/assets/style.css
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
15 kB (14616 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: qa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mjctCS0e9YXPAKsmj7yXLEdDlcV%2BjVaY56iL8uOw3uuPGeuYkwbG8DrKA08TNNnIS%2FUoullrdPlXCjIZjtHs9QnmpramUJgpNdZ38zuRpc0zw8ajukC4wI%2FiipCyjo1lgKkcx59MPPH56gU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097c7ee0568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646

172.67.189.129

10 kB

URL
qa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
10 kB (9980 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646 HTTP/1.1
Host: qa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tK5CdP%2FEHj6ian%2FSfAZpeYGe2T4eMihh1WXdh%2FPKgC4Le5ldYtAB5GHSfUYirTNxUkH0GsMaELfeFxbR5MCEJKsR21hUyFSM6mMJtRSn7FSkXfwL%2B1hkdFVOnoJZT%2FUJwgqWfUysnA9mtsM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9097bee17568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147105
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

qb.check-tl-ver-94-2.com/eyes-robot/assets/2.png

172.67.189.129

1.1 kB

URL
qb.check-tl-ver-94-2.com/eyes-robot/assets/2.png
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: qb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:08 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SdJLJfsmVsrdJI1zP8JCPyFmKhBPofWC5S1ccgjYdWXXdpwCyUhqJyBCMHruvbTBOXhzAWRwrTZozOrL10EqPlzeOtOHCL840DnRMRCuP3mPNtuQDTa1IcdTWG6Bd7k2X8C7PjSZ56gBBAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097f3b28568a-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-2.com/eyes-robot/assets/1.png

172.67.189.129

11 kB

URL
qb.check-tl-ver-94-2.com/eyes-robot/assets/1.png
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: qb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:08 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CUHMj9X%2F7De0eOgO%2FYcbNFIqW1qb7I5bJ8Tru9yuxARxjhmbi5JAhBrzC9JMmreaP4gbnXW1cgaduQxNqkXmmD%2Fj%2FqPHZ9HzaY5e34NrHQWdjY61YqKOmf%2Fzm24Nli62h2%2BaBlbaOG6Xin8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097f3b22568a-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-2.com/eyes-robot/assets/trls.js

172.67.189.129

13 kB

URL
qb.check-tl-ver-94-2.com/eyes-robot/assets/trls.js
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
13 kB (12776 bytes)
Hash
0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b

HTTP Headers

GET /eyes-robot/assets/trls.js HTTP/1.1
Host: qb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:08 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KNU0sNz1JYL08vET560Yisomy2XLjdoXshmMdDYor4M4k7SoQMh3VOYHOw%2FDuW2aV6yTOqcJgFJof%2BR0QZ4bF0HjKxq2au0nAVyjjyQs7bxFeQbEsiksg3h1PMTqAteOEWMJLbmpPoHaT84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097f3b11568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646

172.67.189.129

444 B

URL
qb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
444 B (444 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646 HTTP/1.1
Host: qb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f9hnxjGX7T%2B9WiqPiCSx%2BPCTkXnynWJqivChBwNw7%2FkjnoSyJD0HXPnV%2BjVYeA9nOwct8iMWjZR%2Fj8ONnyYMm1nN8ykC%2BEl2BEe05VwxR2zoHItaGF123Udh%2F3aiY6evtQvcBZznj9Rj9Qk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9097e9a30568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=46694e3cdfd04ce7a08c1de08de54dbb

172.67.189.129

23 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=46694e3cdfd04ce7a08c1de08de54dbb
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators
Size
23 kB (23219 bytes)
Hash
ebccb5a42a9ad89c8abddc66520e2ae9
51a903e8bcd82c31cca0904dad6136bcd49db3b3
37c1694309892fd6f2cf96a5eeb587341c1ea5648597376701a1b809b497e855

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=46694e3cdfd04ce7a08c1de08de54dbb HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/
Cookie: __psu=dab7887a-d4c7-47cb-83d8-fb862cec4163
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:08 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AUANYqjIWPlWuzDvMAbx1z7n8%2BLqGauMQVXOVV1dJ3ptTVCaTUx7yb2Ko8fxpdf56h%2FVUq7ZA%2F5HZERfU4%2FQOTX076zXsCZeTXL8Hugj26mcR1Wv7LV5SLr%2B%2FV9quVhoofgU0jHnicW%2FuW9bWOHWG8LC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097fdc5d568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147106
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

172.240.127.234

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (404)
Size
1.3 kB (1340 bytes)
Hash
4d01ae988613abe1a87829e8daf5d0e3
682cd9316a730996fb60358f3d025ccbb19a7b11
c14b6c3832b88c0152b125e6f01d298e883c7f525a30eebe87dcebf73c1e1dd5

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:39:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17136824; expires=Sat, 27 Apr 2024 19:39:08 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; expires=Fri, 26 Apr 2024 19:40:08 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7b2e8da5cf730bad3ed89d59672659a0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQwOCZybXRjPXQmc2h1PTdmYzU2MzVhODhhNjY1NGFhMDUxMzBmNzM1MWVlMmJjMTM1Y2Y3YWIwZWE5ZDU4NzRlMmI5ZjViYTBjNmU5ODNkNGJhZmMwMTkzOTU1MjhiYzg1NWQyOGE1YzgwYTM3NmIwYTIxNWEzNGJlN2EyMjQ5NThlMzRlMTM2Mzk2MTk2MDQ1OWRkMjQ2MDk4NjgxMThkNWM2NWEwZGRiYjRlNTgxZDFhODk2NTc0YmY5M2JhMmU3YmNlMGVkZjE0&uuid=&pii=&in=false

192.243.59.12

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQwOCZybXRjPXQmc2h1PTdmYzU2MzVhODhhNjY1NGFhMDUxMzBmNzM1MWVlMmJjMTM1Y2Y3YWIwZWE5ZDU4NzRlMmI5ZjViYTBjNmU5ODNkNGJhZmMwMTkzOTU1MjhiYzg1NWQyOGE1YzgwYTM3NmIwYTIxNWEzNGJlN2EyMjQ5NThlMzRlMTM2Mzk2MTk2MDQ1OWRkMjQ2MDk4NjgxMThkNWM2NWEwZGRiYjRlNTgxZDFhODk2NTc0YmY5M2JhMmU3YmNlMGVkZjE0&uuid=&pii=&in=false
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQwOCZybXRjPXQmc2h1PTdmYzU2MzVhODhhNjY1NGFhMDUxMzBmNzM1MWVlMmJjMTM1Y2Y3YWIwZWE5ZDU4NzRlMmI5ZjViYTBjNmU5ODNkNGJhZmMwMTkzOTU1MjhiYzg1NWQyOGE1YzgwYTM3NmIwYTIxNWEzNGJlN2EyMjQ5NThlMzRlMTM2Mzk2MTk2MDQ1OWRkMjQ2MDk4NjgxMThkNWM2NWEwZGRiYjRlNTgxZDFhODk2NTc0YmY5M2JhMmU3YmNlMGVkZjE0&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391fc3ed600e99f6f81669e206e76802&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:39:09 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:39:09 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:39:09 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:39:09 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 75ebcab0268244740a3b382b3fd98730
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391fc3ed600e99f6f81669e206e76802&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391fc3ed600e99f6f81669e206e76802&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391fc3ed600e99f6f81669e206e76802&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9fv52-xr46-0-usgm6o-9rib8n-9ribwj-35d13b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:09 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9uoa3-xr46-0-usgm6o-9rib8n-9ribwj-d1645b; expires=Sat, 27-Apr-2024 19:39:09 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c7bapmqna9uoa3f59&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c7bapmqna9uoa3f59&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c7bapmqna9uoa3f59&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c7bapmqna9uoa3f59&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:09 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:09 GMT; path=/; samesite=lax
__cap=2; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fDQ6ftRu9sG4hZ7KnQKJd5BzSaDJuEgfgssNS3z2M6Ht3EQCLAFGm0BJxyY60HhHqRHHPK0yeXfTbl%2Fgza2MhMoleYI%2B7mJ5BMQ6%2Bba57ui9HJ4CrUT5k25S3jepJSlijtRaA7uQrrb0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909897ee956c4-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/1.png

188.114.96.1

11 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/1.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:09 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4522
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y2ansVmI4zWo2xm9gINp3JBHLAgcCSw1fYTYDqRb9bHRlXJeVN6gGqSP83Cjtrr9d4Z0rryquXrZmcWjwovpNuwY%2FcEHAbNR9hxgdR20uTJ%2BhmRz4du%2B8tO30JHnOPe1BVhg%2B2gojFfmqU%2FO6XJP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098afbd656c6-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png

188.114.96.1

1.1 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:09 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4522
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ddKKArEpv2pvffjVdmj4T%2F1IPytbUlmRY2UAi63ygkxEVWWDFP7AuqqoXIXX%2BtjQRP5Ct2Pa8QCjPj47q17pPyi14Sxz0%2FzxhF3Wj8%2F%2F5fllA7lJnJF1cUb6t2TQ9fAsxLvaEVufdVhKyKepi2Mq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098afbdb56c6-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png

188.114.96.1

11 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 260, 8-bit colormap, non-interlaced
Size
11 kB (11043 bytes)
Hash
ca1f4de0ad1d4fad72d299a6411e6959
c9f6d409f09264a34ee8bac4265233c56c280d1a
f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f

HTTP Headers

GET /eyes-robot/assets/image.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:09 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3962
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qKmlPJH%2BsH5cUcFyQCssK3GODHWiNModgK9Ny4TpvfZvcPsqvlxBgHIAh38AXT8J6fNlQqe5mX7o6tGVdMpWYtf8t0S8E0rsYBc9fj6xf9gWt8x1T7EtzGfE%2FH5jPJhr3UObnkhpMjoUJf5FOi3Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098b2c3356c6-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/favicon.ico

188.114.96.1

0 B

URL
rqqlj.check-tl-ver-154-1.com/favicon.ico
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:39:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 516
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VNJR%2BFmCpl%2FrbLI17gjGRvm9VQZVX5H%2BPg6COKRg6Qy5eSWUOaA5X1aZi49v3B2gqItEbrC9cS6EQrig3ywFQL0zd2OuQyFkwgYLIfUVOnUuZfnO67ejuBbH9C4QhK31k0GOcueYfB%2BPKcjChxMG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098bdd4d56c6-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.96.1

9.5 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Cookie: __psu=6d7993d5-c180-4fda-b93d-8214ec5c0a56
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WKk0QTwHp6vArk2zv1HuD1UYDeePUO5XPH5fj%2Bx0sQAOVRFGagkYy2wOKA7AJEpc0r8uCLCttfWdU65Ddx%2BdXstqDtV5nP9VfJ9wPyVWXtj1UUYkl5L8oMrXy45Q7iJanoGiyfTqCG4V%2FzPazvrNanBE5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098c0d9456c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147108
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted

ma.check-tl-ver-154-1.com/eyes-robot/assets/2.png

188.114.96.1

1.1 kB

URL
ma.check-tl-ver-154-1.com/eyes-robot/assets/2.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: ma.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 339
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dK6KYCTNrCISvkUjIBE0Y3xfBBh0ti8gcnR%2BuzNVsHsS3oZlhuASoCRC3QS%2BwnmXxzsBh9W%2BU3wObIG%2BPjCZb0%2BklFq%2BdAO%2FF2W3KbhSnGC66oQtjCZF%2FhIqsinzTkcB4IhvXY8BoZvZpJs2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098da80556c6-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-2.com/eyes-robot/assets/style.css

172.67.189.129

12 kB

URL
qb.check-tl-ver-94-2.com/eyes-robot/assets/style.css
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
12 kB (11968 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: qb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:08 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PCvV%2BoKp7COT4klcmRyb64geD7l7hCBhuONT61BvwvUPS2Qar9Uyhnmp%2Fj%2FAtjNsQYY1qRx0ZQaJ6jFd0fulMtkDtJfeuebACfNm3uLpSGJgsX0x8QaNvKPcyNNsYcIxfpH%2Bjv7BLo11X8c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097f3b1a568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2

188.114.96.1

14 kB

URL
rqqlj.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
14 kB (13989 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:09 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6bSeWu5tR8VQD3RSqUuvEjfHxlTn%2B0J3v4TNbaKBPkJLsK3ZvYHzbXSgogjU63HxWRhb103m7VkDzmBjmCcy9H%2FLL63myph6bqtqSwyt7s7DSssoO%2F6r2gA16Fvhh6oerI3bNoyFQ5dxxplyGJqa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098afbde56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ma.check-tl-ver-154-1.com/eyes-robot/assets/style.css

188.114.96.1

15 kB

URL
ma.check-tl-ver-154-1.com/eyes-robot/assets/style.css
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
15 kB (14636 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: ma.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JyWeAJvne6ZbkP2Xp1j5ji5XsO6CJtcwqwFS8rfxjO1HNofJEDyfSrQXPkqpdWKF8%2F4K6yomJ68Sv4X%2Fx3dIo0FD7XwvIUixAx%2FjE0u7kz5VOTv%2FGtjgViq8KQPW6WzSRIlaJTc3fdePN8lf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098d980356c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147108
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

qa.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2

172.67.189.129

2.3 kB

URL
qa.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
2.3 kB (2274 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: qa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 289
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C6X2rLjYG9Rg8ypO%2FCq1HPtrgPblo%2FjWuaKoT1U3pP6sKkC8bYg6CRddQTAaa4x8l2QKCY033BRl4kPo0Ss8q02XNgXUHkYAF3Kt5tNsx35%2Fg0tpHIq7CquYqdkc6Pt2yo8Yah5jlCdPUVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097c8eee568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

mb.check-tl-ver-154-1.com/eyes-robot/assets/1.png

188.114.96.1

11 kB

URL
mb.check-tl-ver-154-1.com/eyes-robot/assets/1.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: mb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 339
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xFcAhaOyqBcvA0vMv42fvIxQL7XtX2BZiohmWxUhpFOkzkVvVkbhmffKGHw81OHUonuF8rnUkcpH94v%2Bh4Ud6eCkbARatMJVS8qDYGfYdWNNYtgVPMhADpvd6eYr%2BHSRUbR%2BqviCNO66x5Wb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098f9bbf56c6-OSL
alt-svc: h3=":443"; ma=86400

mb.check-tl-ver-154-1.com/eyes-robot/assets/trls.js

188.114.96.1

13 kB

URL
mb.check-tl-ver-154-1.com/eyes-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
13 kB (12776 bytes)
Hash
0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b

HTTP Headers

GET /eyes-robot/assets/trls.js HTTP/1.1
Host: mb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yb4n51HxEKd0RWtFdgXajGuyMyLcPeSrjMfjEx26zP6yn%2FrskUAGbgcbil%2FtzRAqDCpA%2FArA1Ab%2FhX2e1kiOvGFYzNbO5yecbGXw%2BMqs1Hm%2BlMR6TPt48OEETGoNXRPgPb%2Bxp%2BSaPSALBa55"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098f9ba856c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

mb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649

188.114.96.1

15 kB

URL
mb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
15 kB (15080 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649 HTTP/1.1
Host: mb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bCBolUW5iVXOe3mXAjwCmaMXaSPys4gBhQK2Iz3nGIVOS3UAY6uGBxkbP2D4rWoECMT6%2BqDJBndai%2By6htcpzqHdhXIalfvebPOw4HpTPAKWfeVrmyQDs9pjgRy1eYkTXbOFVCg4qESb7scb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9098f1aea56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147108
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

192.243.59.12

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (404)
Size
1.3 kB (1326 bytes)
Hash
bac6dbe0a6e17486d2022f61e51b8fb9
de31f2d4b895307223d9ce08ee8095bd22f6b295
061e4628ccaa03f11ee16baafc161dc0e7b0e5182cc7dfb7b55f34c606779814

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 19:40:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 39a3a0164b9cbda6db25c7842d60d89f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQxMSZybXRjPXQmc2h1PWM5ODYxMDNhMTg3NDE1MmNmYjk2YWM3NmJiNDJiN2ZjMzY1ZTBkNmYzNWViMmJhNzM5N2JmMTBiNzZjMjRjMTgzZTcwYWZiMDE4ZmNmZGJhMzZjMmZmN2I3OTJhNWIwYWIxNjljY2ZmYjE1MmZjMTM5MTlhOTQyODQ1MDQ1ODY5NTQ5YTI4NmZkNDgxMTEyNDk4ODNhNjM4MGIwZWE1ZTdhZjc2ZTFmZjhiMDgzNTlhNWU1ZjBkM2E3NDRm&uuid=&pii=&in=false

192.243.59.12

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQxMSZybXRjPXQmc2h1PWM5ODYxMDNhMTg3NDE1MmNmYjk2YWM3NmJiNDJiN2ZjMzY1ZTBkNmYzNWViMmJhNzM5N2JmMTBiNzZjMjRjMTgzZTcwYWZiMDE4ZmNmZGJhMzZjMmZmN2I3OTJhNWIwYWIxNjljY2ZmYjE1MmZjMTM5MTlhOTQyODQ1MDQ1ODY5NTQ5YTI4NmZkNDgxMTEyNDk4ODNhNjM4MGIwZWE1ZTdhZjc2ZTFmZjhiMDgzNTlhNWU1ZjBkM2E3NDRm&uuid=&pii=&in=false
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQxMSZybXRjPXQmc2h1PWM5ODYxMDNhMTg3NDE1MmNmYjk2YWM3NmJiNDJiN2ZjMzY1ZTBkNmYzNWViMmJhNzM5N2JmMTBiNzZjMjRjMTgzZTcwYWZiMDE4ZmNmZGJhMzZjMmZmN2I3OTJhNWIwYWIxNjljY2ZmYjE1MmZjMTM5MTlhOTQyODQ1MDQ1ODY5NTQ5YTI4NmZkNDgxMTEyNDk4ODNhNjM4MGIwZWE1ZTdhZjc2ZTFmZjhiMDgzNTlhNWU1ZjBkM2E3NDRm&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:11 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39137acdfff7157435250d4089fc7f16&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:39:11 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:39:11 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:39:11 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:39:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 284fd673775ffa0deef537cb275f74d1
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39137acdfff7157435250d4089fc7f16&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39137acdfff7157435250d4089fc7f16&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39137acdfff7157435250d4089fc7f16&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9uoa3-xr46-0-usgm6o-9rib8n-9ribwj-d1645b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:11 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9uo46-xr46-0-usgm6o-9rib8n-9ribwj-3e85fc; expires=Sat, 27-Apr-2024 19:39:11 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=8e371pmqna9uo46fa1&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=8e371pmqna9uo46fa1&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=8e371pmqna9uo46fa1&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=8e371pmqna9uo46fa1&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:11 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C3; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:11 GMT; path=/; samesite=lax
__cap=3; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oRMhlvmOWkGZNyAQjv8nMmUYN5VASJ47pHAnRwQpDfm51Th0nw6YP9PvBsKCOJewDePmQ9Ucoihu70K3Fwx6jRRy9kPR%2BS%2Bfe5KLpm%2B%2F3%2F4N2M2bLRfJZSnArdhZkQkY%2B%2BDcxIkbJv5n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909978ca456c4-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-54-3.com/blue-robot/assets/trls.js

188.114.96.1

17 kB

URL
rqqlj.check-tl-ver-54-3.com/blue-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
17 kB (17033 bytes)
Hash
a1172576cb7f22b41247c5571d2f6d9e
8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c
2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3162
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DJ4tfKyN28LPMIcv9c8ITcqhJEyvGSy4vc0ojjdrOhQ4dgMPGItktT7%2FwnUePZ7CFdi%2Bz2bV8LIUTKYhquetWNSh7ErEmnxPxdpTd0jIdFFAEQOHULB0yReP0nebMPtkh%2FhZTiel5SMJfIKmnRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099928b056be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-54-3.com/blue-robot/assets/style.css

188.114.96.1

16 kB

URL
rqqlj.check-tl-ver-54-3.com/blue-robot/assets/style.css
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
16 kB (16337 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3162
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sh%2B2W%2Bv0Jxz0MGhwH65zIt2nxucLhF%2FnW8I25EkUHmpEHCFfYZQgA0%2BETQXcKy6USEmW83QhjXMU46adTKuFtFptX4l96ESscHd6%2BCHytiGJ5bm5eSL3OhFgb02011tOeaN325CFTjKYvkFYc0A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099928b356be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-54-3.com/favicon.ico

188.114.96.1

0 B

URL
rqqlj.check-tl-ver-54-3.com/favicon.ico
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:39:12 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3946
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oMA4kAmmI9FZbf2PUxOdxb30LjACxjfmfD6BKn0rGHlHpKw2Pl0H%2FbeiOEji%2FrzoKbA301Nk76mgieJ00wylkKJ0ML%2FqROpp3tU1ehMf5B7Kd48mXquYm7r1XVb7bY2HRUErc9sSg0qrtwROmP0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099a09e256be-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48361
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147110
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted

fa.check-tl-ver-54-3.com/shared-js/assets/static-pl.js?v=2

188.114.96.1

17 kB

URL
fa.check-tl-ver-54-3.com/shared-js/assets/static-pl.js?v=2
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
17 kB (16653 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: fa.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5142
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l4txq3wNYoYt0P5puAqAXal2OUiTmYPBzyzFsXmjxv%2Fiev31LlEHOpotziFcFtnNk9XQMotwgU%2FotsteL3N89mcW2JkIn8AkQbNw0NfEKac1nbPl6lxFWM2wg7y2Ip0Se%2BDsa8%2BkYKi5qMY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099bcc9a56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fa.check-tl-ver-54-3.com
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-54-3.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94445
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fa.check-tl-ver-54-3.com/favicon.ico

188.114.96.1

0 B

URL
fa.check-tl-ver-54-3.com/favicon.ico
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fa.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:39:12 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5141
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qmAOvTSPz0ShCK%2BR2z%2FQbEqbleNbBy3cqqi853JRV6o2kbAryKyEhCLq0KgJd%2FQci8AChFBFp58SgGG9RyLgIqj6j8u5Rwpxr1UlMBdrj%2FgDpQitUejZPYE%2FQdku%2F8bp3%2F4aq1Vtuf75UhY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099c5d7356be-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48361
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147110
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fb.check-tl-ver-54-3.com/blue-robot/assets/style.css

188.114.96.1

16 kB

URL
fb.check-tl-ver-54-3.com/blue-robot/assets/style.css
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
16 kB (16225 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: fb.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8bapXMSVGjKvXFQEtsrCrgwKBMR%2F4q%2F%2B5AJpyarmZCc6L5bFbanJ6e1lkNExKga99q5RsLbJvEtA9CoUa64CNMkefqUlQIXXkp7tJHvh0KWXnGfujL0pkmANjCTV4UatIBY3A7s8ohMqFyQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099e086a56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fb.check-tl-ver-54-3.com
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-54-3.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94446
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fb.check-tl-ver-54-3.com/blue-robot/assets/trls.js

188.114.96.1

15 kB

URL
fb.check-tl-ver-54-3.com/blue-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
15 kB (15276 bytes)
Hash
a1172576cb7f22b41247c5571d2f6d9e
8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c
2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: fb.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2FR62bldqu0GfJLJkG2IdVdIBbJjG7HkgvMF5rRLVfLZP%2BtTRFnkODtUY2lH0Wwfm%2BTUd%2Bp0kbMQmA%2FtKrRTBr7HgShGR6YU2AYCXSxyM0F8CXBri4LhJZ3YCONxyR3yD2Re0hw25nbq%2Bg8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099e086556be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fb.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651

188.114.96.1

15 kB

URL
fb.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
15 kB (15158 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651 HTTP/1.1
Host: fb.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-54-3.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eMY720ITeu5hsfyXCGR6q4OTY%2Bfld31xp0HglcqZJD1E2rxrUXHDO4K1VaM9iLRDZQ13%2FUUXaLrw9AytzCPJg13Xn%2FTKoMYu6deBsym%2BUvSMh8ShP%2B%2F8eOU0KmIvUHzWgOhvuDP3fK8dPaE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9099d5ed956be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147111
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

192.243.59.12

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (407)
Size
1.3 kB (1342 bytes)
Hash
3c40e7ef4932fbd280582ab9aa78c2f0
78474efbed6afcd6b668b139dc6babfbd18fc23a
b74e7b653bfa4720b09e303d60c2a5bc6a30af0d0398d3f1ceb4b102dc1c57b9

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 19:40:13 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 31d69b17d7429db2edb7e3d5d6d847e7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

cdnstatic.check-tl-ver-54-3.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.96.1

228 B

URL
cdnstatic.check-tl-ver-54-3.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
228 B (228 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-54-3.com/
Cookie: __psu=9b45c90e-9263-415e-bf1c-d4a7368ca4e5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7S9H%2B3OIZ0oPOs1nZsfUl67Hj8gDlYCFWYkoxkWE3FqLXqeHE%2Fc7w1XPdEAxvxnKd17Kf3WIozH8q5AVIzLrJQpETDzSgFAmA3n2MVpJn4gksYKOLyZ2z0bMrVpNYypUdoUQmrADMxEJXPH21Cxs3FE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9099c6d8756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915aefc09233afdd98cd9ed56a26d25&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915aefc09233afdd98cd9ed56a26d25&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915aefc09233afdd98cd9ed56a26d25&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9uo46-xr46-0-usgm6o-9rib8n-9ribwj-3e85fc
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:14 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna93v9r-xr46-0-usgm6o-9rib8n-9ribwj-f7e6d0; expires=Sat, 27-Apr-2024 19:39:14 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=4acb3pmqna93v9rcfa&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=4acb3pmqna93v9rcfa&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=4acb3pmqna93v9rcfa&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=4acb3pmqna93v9rcfa&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C3; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:14 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=3; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:14 GMT; path=/; samesite=lax
__cap=4; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mcZbsg22wZ7RTGq%2FD8NyKUyo9JZOgRyWG4XObqxgKk%2FZLi%2BG%2Fg8wPY7CAhbmb0svd3ERw9dg1HZyIIld2v1HaVFOL8gg0fUMi03spukNQ83Hf0zYjqNoV04C551LedKdIadB4tOUswRs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909a6bafa56c4-OSL
alt-svc: h3=":443"; ma=86400

172.67.189.129

30 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=46694e3cdfd04ce7a08c1de08de54dbb
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators
Size
30 kB (30336 bytes)
Hash
3b79276552e19be7f5c3c81a20cacda3
a7e656ce74beeb4bae13a0b899bf72ad7e17ba7b
8cf6aa054cec1c2f3bb2bf858f139160163d8f2bbe13525f187d629910ff412d

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=46694e3cdfd04ce7a08c1de08de54dbb HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
set-cookie: __psu=dab7887a-d4c7-47cb-83d8-fb862cec4163; expires=Sun, 26 Apr 2026 19:39:07 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hNwSeJ9%2B1MB3IC2s1O1HC9NJnaDUT0kb7x9iVKcUDRrkhJztcsdJP7SevKOqxgjdiXg01WOdYIWXvqtBSuOz6PbCBBUCVObJqUSvd%2BF85%2B2zgnY2nzbdGFqzigPhLF8zKRINa4qrek8pnAarN2H7QwSd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a90979eb07568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/blue-robot/assets/trls.js

188.114.97.1

17 kB

URL
rqqlj.check-tl-ver-94-1.com/blue-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
17 kB (17145 bytes)
Hash
a1172576cb7f22b41247c5571d2f6d9e
8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c
2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1

HTTP Headers

GET /blue-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:14 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2Btf74LnuCE4ClYxO%2BGwvpW0u3gsULKGo%2F7VBaWSd8dx0svGNz3InNyBnvr7dAZeWLLLC0beBx5wQhL9xWF83Rj5wiv56TxQERuCM5hy2ICVYIwzivtGpBDz6We1WXTEPpmGk5VeiotO%2BL3e7e0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909a899ab0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

228 B

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
228 B (228 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:14 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0DUK4PoA795tvhkOqR%2F5G3e12lxgR%2BpFBOENL8v0vMXDFjsDokwwuJEKsGtpZ2jbvEUlZrFSqp%2BhAMWNa4Ftz6jXr3BXa336JgV%2F3erA9iOQNA8EfRFRWRdD%2Bfhjs0o4v1qTTEf9%2BS75YlnmouX1RTh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909a98ab60b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-2.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17683209&click_id=5c0c7pmqna9fv528e1&nrid=f47cc5c9b54ed08d15b9182d9bc2e079&reason=tb_exit&attempt=3

172.67.189.129

9.5 kB

URL
cdnstatic.check-tl-ver-94-2.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17683209&click_id=5c0c7pmqna9fv528e1&nrid=f47cc5c9b54ed08d15b9182d9bc2e079&reason=tb_exit&attempt=3
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
9.5 kB (9478 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17683209&click_id=5c0c7pmqna9fv528e1&nrid=f47cc5c9b54ed08d15b9182d9bc2e079&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/
Cookie: __psu=dab7887a-d4c7-47cb-83d8-fb862cec4163
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:08 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8EqernVI7gpRRh5qxFrMH3zd9RKIRWfyZgxoJUcKzeyQGYig5Ve4zNmlMQji04ghyFquaqTgR9d57rQIxSLoP1nee0qxvFaMCaxx3mQZrCw8zNYDUdsFjFbp88Rcx8VnlYWFm4yFlroTE6f2inPsP3Zh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a90980edee568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147112
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted

cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=d5799c1e742149c49abd4ec19790439d

188.114.97.1

31 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=d5799c1e742149c49abd4ec19790439d
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators
Size
31 kB (30717 bytes)
Hash
01fad01fb0bf89f28cda54ffe11afeac
a16860b38712dd0ed1c25e3dfd3d444d3a425c48
5aafb6d5825cbf7e162be03e03ac3e74d53f921d00abf07c2acd71dfe6284d8a

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=d5799c1e742149c49abd4ec19790439d HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:14 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
set-cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d; expires=Sun, 26 Apr 2026 19:39:14 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hAd%2FPhr1WxWDZUEIj8HsVC2ZODepA5xza7eUuwxD0fsZRNOfQJTqcF%2Bvk2rasOn56YxatZeuF7wfqe%2Bbs7aVk1dCQQHRVonSAfQsUSMRsP2tUUG9pZ4zzbKOREIkCNb1GicZ5k7XWM87L4Djt5z1E2ws"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909a91a440b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ea.check-tl-ver-94-1.com/blue-robot/assets/style.css

188.114.97.1

16 kB

URL
ea.check-tl-ver-94-1.com/blue-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
16 kB (16337 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: ea.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ea.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:15 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z49eTvfBtu7lwzUuygfVRrHCnlS49nVJSElYwL2neVjKWOUESOISX5gpYxvQyqyhac4bFzb%2BJBMTxmEZ%2B%2BC1NCfqW%2BepbTN4Q3N1aZeRkHXYDqAheXYJRy3LMoYSGoZhi9G0Ba2dpyCDT8Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ab5c570b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

188.114.97.1

20 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=d5799c1e742149c49abd4ec19790439d
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators
Size
20 kB (20009 bytes)
Hash
8d2dcd3da8e53a1eef5b8b5bc37411ba
6ff6f499e22754da37c17215c6f6ed7d7772156c
f69a84ba9ba79fea9a4bf98ff5cf45f3ad6a3945267d599c982135c6b476aa90

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=d5799c1e742149c49abd4ec19790439d HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ea.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:15 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SUcoH%2F1e4%2Bwr2SIRHspZ7KJetQYpqjPFriJ9oZjyRPh%2FcuoWvIGdNJlmwDMlZe3I1IE04aIyKpwxkGlgELZ1KbVPWvhLGqm4bu3fag2PYwojf3dBY5xHAC0yP%2FvuFsJQJ1KznR%2FgxlnIY%2FyCa7%2BaLStk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909abeccf0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/style.css

172.67.189.129

933 B

URL
rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/style.css
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
933 B (933 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:07 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6820
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F1vmReRdVZoilRldOQ%2B%2FeTS%2B8XpywQcqF9s9f7pHaF65JcH8xGT4bxVEqR%2F4u72rGA8jJPHVk9m0RQer7a28LEMzaGovScxpeWQT3VvM5aaRhOXWG4bqupX1AzZZ90SEALpShYHZirSkv4iNm14%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909795a25568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

le-forgeron-debutant.fr/4833686.html

188.114.97.1

9.3 kB

URL
le-forgeron-debutant.fr/4833686.html
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
gzip compressed data, max compression
Size
9.3 kB (9308 bytes)
Hash
ced3daee0bcb3cf4da7a00750095a3af
17f640bb8757f7a11103b3208a9c8af7184725ec
4da83ea2348f65234f31bda4bb4048e263b3058b7a761cc2b376d7d7f91b1e9f

HTTP Headers

GET /4833686.html HTTP/1.1
Host: le-forgeron-debutant.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 Apr 2024 19:39:04 GMT
content-type: text/html; charset=UTF-8
location: https://appealtime.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zhw%2BSHTMq8y9YhJceb6ZIU63%2BY2rfzS3BfT03e7M43gh4mYJhaylBKTmJNMBusuXGoD%2Fkmb%2BeqnzuYRSg4%2BFTWWj2dO5fmTPOAHMazYDEW490NQWfA9g9ZYrY9TsOFgiNaH%2Fk8MUlwCeuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9096adaeeb4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ea.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147113
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ea.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654

188.114.97.1

21 kB

URL
ea.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
21 kB (21062 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654 HTTP/1.1
Host: ea.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:15 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2NbJvD2GXm9d2A5GBMnBiyiNIfNCa%2BDMJjmzn%2B4LsZ3RIfsa0WY0%2BgX7LYHZWixsYA0tuPBRtp9qA2vwJ7t4fza7fbz7jwia0rNqIW9FKYU3Gn7pgrQgzKYfLOBUK5r7r97p7TZDItDpQfk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909aacbce0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://eb.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://eb.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94448
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

eb.check-tl-ver-94-1.com/blue-robot/assets/style.css

188.114.97.1

785 B

URL
eb.check-tl-ver-94-1.com/blue-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
785 B (785 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: eb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:15 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Jt1miQz20KYv8QARdjrQ71Ql3Y%2FGLzD2Lhh5E2%2BbDnZqVyGdXX%2B%2BG0A3Z%2BMgE9bJkwWjG8CfJpn9vjjzvtRjKiy8GtzF%2F9VONkZmTttWakk1bd%2By%2BhDi2h5%2FEtwYqB1LCXKruDzTpov3UA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909addea10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48364
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147113
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649

188.114.96.1

9.0 kB

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
9.0 kB (9009 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649 HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:39:09 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CQRxP6%2FUw5FKhwJ9Q3TBmHTudaatbiCQVE3EX9Yty8fgWWBpCvMF7J51pXCC74t%2BNv58sotWe%2BxC6yJjuwvMMbP4k0cvdM0J032WE42zoC3RaxdW8E7xDssPZPgnoM%2F9JyoNR0LOIBk1Sumo%2BSmq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9098a189256c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

eb.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654

188.114.97.1

5.5 kB

URL
eb.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
5.5 kB (5527 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654 HTTP/1.1
Host: eb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ea.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:15 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EpkVQDjL5wIByywAzmYAL2Mv9dU0weoN4aVPHNwItJa2f3R8qmLQNjmO7c6SfAGfB44yC6%2FihVAEU7%2FFG6apzZ2L7EE%2FM7HYHf2XFpnUcv2PILfKEV6PTkki5ezs%2BFOVxC%2Fw9kZF%2BpGxW6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909ad4e000b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39196baddc891908b4451093bc9517db&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39196baddc891908b4451093bc9517db&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39196baddc891908b4451093bc9517db&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna93v9r-xr46-0-usgm6o-9rib8n-9ribwj-f7e6d0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:16 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9m7tw-xr46-0-usgm6o-9rib8n-9ribwj-9b2609; expires=Sat, 27-Apr-2024 19:39:16 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=21bc6pmqna9m7twe19&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=21bc6pmqna9m7twe19&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=21bc6pmqna9m7twe19&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=21bc6pmqna9m7twe19&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=3; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:16 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=3%2C5; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:16 GMT; path=/; samesite=lax
__cap=5; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bN25TWiPxbLLGwn3JKyqCbGqR4QAfIS7mQvxZZd31f58%2Fde8QFdfPTdXwzEQvkg4E0JeZKUb1dEDtpUN9aJ9EJRcz04392cLmkPwqPNBhwuDyLV9lY0IHZ%2Fqtbqw4nusgkCTUIK8sD6D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909b6a9ee56c4-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/2.png

188.114.97.1

1.1 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/2.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3529
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5npeQQMYOvqOvRvtK5tUQLYGUiPBmms901VEDRJDbhcQu3R4LY6ONxli8vg9WHWlNT0FbMnRpm2kwGVcoNgiuue8h7dk77teCjckTr7C5i6%2Bt%2Fu5r17r3uyTHcyDxx1jdm03GDq8MZymKAD48ZY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909b808ce0b65-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/1.png

188.114.97.1

11 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/1.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3529
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VujSZEW%2B7HjbbM%2F3IATLZxnGKOz0%2BeGyg%2B1%2BHP8TQZOQ7qUiFMYqQknrdNS2E5StNm7nEldunwCMSWLK1Fl89misfHP%2BOagBy6mUrlHStiJbzzg689k5hlrSx7jiX00E1Xfu0rvvsBxUaNqWDVk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909b808c90b65-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/trls.js

188.114.97.1

13 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
13 kB (12776 bytes)
Hash
0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b

HTTP Headers

GET /eyes-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3529
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NImlXcoUhUceR6jz1Znbk4klfwwYcQhE1AMcOAAoeHbRNi11Lp3x5FQfp6w1xtur24DUMHeg8rU5QkxVmd8CTQPyp66rAQEMfS%2BwMg9170XBvioTs8ckzWLRYvG2S20D6Wk%2BYTfm%2FZWNtu81nAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909b7f8c10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css

188.114.96.1

933 B

URL
rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
933 B (933 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=3c7bapmqna9uoa3f59&sub_id=17136824&nrid=17c31ee39bab4323a85ba7f7055987f3&hash=HDV4qUz5pejfkgiqFiVxgQ&exp=1714160649
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:09 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4522
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aUgrjZJalW2%2F%2F5UI1rMdFgjWaz3TTE8J6iCbY0WkWorqDkh%2FjrLtqYC2AivU3k%2FWnL6HyRiRGUVgfA755J8v7WlNLRAaJ5Ds6UnD%2BkAAJynF%2BdTEujImSm4A5G6Qsm1MZOeTGdnhA8J5vRL7iGG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098afbd556c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=f6d241c4def0453993b20a88e8b0a1ba

188.114.97.1

23 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=f6d241c4def0453993b20a88e8b0a1ba
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators
Size
23 kB (22991 bytes)
Hash
a38bae92b120cf244cd586407a22e4f4
28d870ed444d0e7ab61f31221f10657d5428b2c2
b142a0ad8e71a1d45fb744bb84a1146b0534864efd17c6988f686baad1ff6556

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=f6d241c4def0453993b20a88e8b0a1ba HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IQeYYlJ%2FerLkBbtn15zR%2BAXpbdeamtpwaruzT6U5C4wLw3tLl1%2B879T%2FJAPKIKji63dmLKHUCvl9WOZ09GL6%2FaDM9VQK0WDaN6qobyXuCYVh3D35UdTYDYvKIK5Cunrfs6LfGfvHlvAhhU4%2B9xz2k1eI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909b839080b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147115
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ma.check-tl-ver-94-1.com/eyes-robot/assets/1.png

188.114.97.1

11 kB

URL
ma.check-tl-ver-94-1.com/eyes-robot/assets/1.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: ma.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 41
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4XApIPDyVkbQmLO%2FpD2PRx%2Fm9AF9vnnnuIDCRmCjT1K2w0kTTBnqP2Kaa%2FkqPeo9VVa3f935FL7UmQiBjMyN6FKDc1k1UWy5pujBqzai%2Bq3kdaP6F3dbdTMIxuH5YHthsXDxjfLMwNlhB6A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ba8b420b65-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/style.css

188.114.97.1

2.0 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
2.0 kB (1994 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3529
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fuwv1qUSM8xg%2Burcf3NIig3adMF5msv9nicfQImBPy3wF5hQdZEk8TiurtQwSlP9m%2BC5aQ9Cyvq2gdJtx3oAzu48%2FqG9T01j8iNp8I%2FCSU2f51a0OtaSEEpbrMS37NViDtOcEQk0lQyfv2QC%2BhE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909b7f8c30b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ma.check-tl-ver-94-1.com/eyes-robot/assets/trls.js

188.114.97.1

13 kB

URL
ma.check-tl-ver-94-1.com/eyes-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Size
13 kB (12776 bytes)
Hash
0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b

HTTP Headers

GET /eyes-robot/assets/trls.js HTTP/1.1
Host: ma.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 41
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hrFdVsBSKd1kaOy%2F%2B2u1R6BBib46xD7MHFRz%2Ba7U32uf2qivTBGckasO%2FtMX%2BMdh1caBz5d49WJqXTxF0aVIQ6PVLZQtjRo%2FsSm%2FeXePM33SVxS2oPs9v1Dcmmk69MfW9DCtQkcI5ahtass%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ba7b3d0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ma.check-tl-ver-94-1.com/eyes-robot/assets/style.css

188.114.97.1

15 kB

URL
ma.check-tl-ver-94-1.com/eyes-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
15 kB (14616 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: ma.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 41
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WiD%2F%2B60zRbiiODlGdzdc4ZM%2FfyhhZL61a5wqXWn2SFa51%2FoKBAEeKb5u47hyYULKla%2FuvFOWgsungJ55GCfcoyfd0p9au4z8%2Bk33hE%2BokJ3fhI5uUJnCCG4NbkawvkvjxVG2aArr8R0FSyw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ba8b3f0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48366
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147115
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

mb.check-tl-ver-94-1.com/eyes-robot/assets/1.png

188.114.97.1

11 kB

URL
mb.check-tl-ver-94-1.com/eyes-robot/assets/1.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 179 x 278, 8-bit colormap, non-interlaced
Size
11 kB (10591 bytes)
Hash
a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837

HTTP Headers

GET /eyes-robot/assets/1.png HTTP/1.1
Host: mb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5415
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f3icbVZ5EAWXsfceMuUiL0adPM63OLOdUha3Wqb%2FcPD6kSgXXPB6Wyesk%2FUG3Go%2FQgDA4U85O38iXSXl7aRie8Shv1vsnWKDr54Dt2%2B2ItaN7ogkoj2kGgUGNGCd8eaciV9zIzrCKjqUedQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909bc9d5e0b65-OSL
alt-svc: h3=":443"; ma=86400

mb.check-tl-ver-94-1.com/eyes-robot/assets/2.png

188.114.97.1

1.1 kB

URL
mb.check-tl-ver-94-1.com/eyes-robot/assets/2.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 94 x 19, 8-bit colormap, non-interlaced
Size
1.1 kB (1061 bytes)
Hash
d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5

HTTP Headers

GET /eyes-robot/assets/2.png HTTP/1.1
Host: mb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5415
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ctiXt2yE1S00MV3THJJyB1gNH63gM18Mfnz58%2F6UalZEcUVbmKvgxofUS9qYpFxQCwY5VfEyiYpdhqg5aaaPOkraCVzn0Niymv13ZfWfQOz%2FvhPFmIN4dk4XaFbnKttYFLYQ5zKwT7wEsaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909bcad610b65-OSL
alt-svc: h3=":443"; ma=86400

mb.check-tl-ver-94-1.com/eyes-robot/assets/style.css

188.114.97.1

12 kB

URL
mb.check-tl-ver-94-1.com/eyes-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
12 kB (11976 bytes)
Hash
a18afa3eac509b6062c9362a725ac421
5e06e9b3af42189e9456a7ea3bda665e10c86405
29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896

HTTP Headers

GET /eyes-robot/assets/style.css HTTP/1.1
Host: mb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5415
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WAfz7LoQu8E8u1bKgWiY8432QJ9yueFzlCQuS3HcZZ5u9zMQnmtUn18NiwCXXMtfQTWeDIzbbZfrHS4xarXN6pmnuNhzhAy69r0DYiR0aKw3eG7JpBriXDcpTqIHrfDr%2B9RiDrT0DpsqIgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909bc9d5c0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

mb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656

188.114.97.1

16 kB

URL
mb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
16 kB (15860 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656 HTTP/1.1
Host: mb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HeS3SwF7Lcxv26i%2F4b%2Bp%2Fd38gYXNUErUoQ65qA%2BbaOSlvY5o1xqtibCeUtfxjv5lwVgRLPVjyKw2Bw33B5GbrPiMYl6XOHYBBfkRQHScI3KwMCUD%2FP3Z1xzRk6yO6YmzaS4MJHdlUERFSyU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909bc1ce50b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ma.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656

188.114.97.1

9.8 kB

URL
ma.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
9.8 kB (9752 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656 HTTP/1.1
Host: ma.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mUAJOIX503%2FanWXI3qLfqvaTbgCLDK4l0SXSLisfcd0QNI5NPPQus9K7xLjj4kepmzVHiBexIKBIz4NfbqWoz5tITy3cu24a2Fe0qaQrjBSjtxOfBWLuVn6p%2F60WWzkHwT37Wjadg8YMOFE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909b9fac10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147116
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-54-3.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&sub_id=17136824&click_id=8e371pmqna9uo46fa1&nrid=5e5e10b0b7506d0f6d449d3b12821bb2&reason=tb_exit&attempt=3

188.114.96.1

1.5 kB

URL
cdnstatic.check-tl-ver-54-3.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&sub_id=17136824&click_id=8e371pmqna9uo46fa1&nrid=5e5e10b0b7506d0f6d449d3b12821bb2&reason=tb_exit&attempt=3
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
1.5 kB (1507 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&sub_id=17136824&click_id=8e371pmqna9uo46fa1&nrid=5e5e10b0b7506d0f6d449d3b12821bb2&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-54-3.com/
Cookie: __psu=9b45c90e-9263-415e-bf1c-d4a7368ca4e5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:13 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YlE%2Bc0gySJFicJ3JmpyIseN3G1uSglX1yQcmnyPfcEjUbAs8GZk8retyi4komlXAZl4I4TqG4dB6AN9jcC0RaWzrc6tUPdz24G9s8MudCFmy6rQvLTe56fiE9%2BP4AHxtc2MNnyYnKGhPyb5R4Fp%2FBftP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9099f6a9756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654

188.114.97.1

5.6 kB

URL
rqqlj.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
5.6 kB (5622 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:39:14 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=08fza0m9WYi8k61kUFgMqCa5Fiw8WqPlqMdscvuORq8KTnkv4JpJYs3wevopaSq5pEkeCbgyoDVMH0u4hTCr9wE80%2FhALfwCorriGwPN5MIJBKvxOzGTHQhJHroHBl2mnQNYyzn0%2FOy8qjOQd00%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909a74ab356b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3919b445e2b1193eb7e8d774f19ecdf5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3919b445e2b1193eb7e8d774f19ecdf5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3919b445e2b1193eb7e8d774f19ecdf5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9m7tw-xr46-0-usgm6o-9rib8n-9ribwj-9b2609
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:19 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9iba1-xr46-0-usgm6o-9rib8n-9ribwj-a024b9; expires=Sat, 27-Apr-2024 19:39:19 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a0730pmqna9iba11c5&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a0730pmqna9iba11c5&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a0730pmqna9iba11c5&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a0730pmqna9iba11c5&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=3%2C5; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:19 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=3%2C5%2C1; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:19 GMT; path=/; samesite=lax
__cap=6; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EUUOEJo5RcGylNfpY1OFrwBxHeCFDZtV%2BF5Nfc4YuAf6PoIe%2BjTjTH5z7d7yu7Kd3csZXAMYfD3LHdpNdZeFdTti6Z4ciHdXKKs64QqPSERYbdTwohnbHR16Q6JGKVdVb7CU6uIePWCa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909c4fce256c4-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.96.1

528 B

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
528 B (528 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-154-1.com/
Cookie: __psu=6d7993d5-c180-4fda-b93d-8214ec5c0a56
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVNGa3TOsXHpRBm0AdDENhRYoSzDSg86bvYTPmUlJkcj8dRzTPnoeFnxioTQOY%2B21FGbGRipuLM9dNew9AX4t42qR8GPUz7NyUwkOK8hMtDfSdNQ1EPUZlHjhQj%2BiYm35lbGviQr30Wx0qA4GRjPamCMtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9098e390f56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-54-3.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94452
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-54-3.com/space-robot/assets/apple-touch-icon.png

188.114.96.1

23 kB

URL
rqqlj.check-tl-ver-54-3.com/space-robot/assets/apple-touch-icon.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:19 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: HIT
age: 379
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9StNc9Mg35Y7JE52BImLsoI%2FuJFCnPce8lvUPTq8%2BgYQWfiZQ1OQPDfy9JwM9aKiIhWypb3f1Ex%2B40ZIMlIf5JH%2FgCqb11zMxTghalKMHUdvzSNwRHnVyNQNcLAAoK916LjAwcKUi21kcqX1%2F8U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909c6bf5f56be-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-54-3.com/space-robot/assets/trls.js

188.114.96.1

6.1 kB

URL
rqqlj.check-tl-ver-54-3.com/space-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
6.1 kB (6128 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:19 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1i7m8M3rzhCk2SJCaIb%2B9lVmtSzSTAGIoKyleSyukUvqDQMnV1kgoJB9X5qFGsi8PEvK4punZoVOQzLrNe8lcvqMZIth54Q4Nzo1KZhn%2BjkPxPRO9rMqWiPZJEILyEIgVMsv9nb98lnr%2FYSMJY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909c60e5a56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48368
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147117
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-54-3.com/space-robot/assets/main.js?v=3

188.114.96.1

1.3 kB

URL
rqqlj.check-tl-ver-54-3.com/space-robot/assets/main.js?v=3
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
1.3 kB (1326 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:19 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Weice2jLAt7fYXFSjXz%2F62FVD6%2FzkcKjYuum0MWmsXPwyYcOXoJf8cZ4s5pMkKSQMLWWKqiDeiw%2BH%2FU3YdXrQwzxznrtUK6KANzF6gfoAe97WI%2BgDfJXdOgh4oRlWQUGpmOSxAER6Nq214s1s0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909c61e7156be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

188.114.97.1

29 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=d5799c1e742149c49abd4ec19790439d
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators
Size
29 kB (29235 bytes)
Hash
fd605799851963515def30c7abf65e4a
55c3e0fefd7ebb833f7116319e648d5e3c8e2ed4
94257ee232df0aea998f81eb9091215b1c40c5b5cee7c8f08d1cfbb9b1c640bc

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=d5799c1e742149c49abd4ec19790439d HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:15 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1iupCcGSZ0mRhECEbXJdzFjoyJZFvRmZlKkptFFpcHyfQ3PfpHkxlaD0zKL9chNG4W1DHRdQVVPUU0raylF4JP7gKbJn8aezcA5Kj3sdeDFdAu0jb2B27KTNBAzYRf%2F3f7GkNBANYfKLNRb7a3wN3KGA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ae5f4d0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ta.check-tl-ver-54-3.com/space-robot/assets/favicon-16x16.png

188.114.96.1

1.2 kB

URL
ta.check-tl-ver-54-3.com/space-robot/assets/favicon-16x16.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: ta.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:19 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2Fr8SeBAaCEBpXGZ6ExHMCk9jxazFJ%2FDp8AuhsF%2B2%2F7g%2BehINeBWMIbgaiU6TfN%2ByZpOX0YsM%2BJosAH0%2BbSLmVehRxK5ggO07uJUOT6JywyP27TOrZXhyy9yV75P3u7%2FwLC4Y%2Fw3WZ6QUk8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909c90b3e56be-OSL
alt-svc: h3=":443"; ma=86400

qb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2

172.67.189.129

20 kB

URL
qb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2
IP
172.67.189.129:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
20 kB (20225 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: qb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=5c0c7pmqna9fv528e1&sub_id=17683209&nrid=46694e3cdfd04ce7a08c1de08de54dbb&hash=n5rV6yxBI5PhLUi9HXA8NA&exp=1714160646
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:08 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 729
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fWXD4g9k0OOXkGu1dDrRk%2FROn8tGZXSy0PkTF0XBHLZ%2FJLtTqBJo3hPoCmNHCgAs8INKKE11%2B8QVw1PHOJlRYGCNnP3QaUjS0HrfM280fhAI9GOwnGSFVCGLwCCXExfyOylNkSn0Yq0l5Yo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9097f4b30568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659

188.114.96.1

27 kB

URL
rqqlj.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
27 kB (27153 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659 HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:19 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VSEjU%2BnC2ygQj6ujKyX4uggPin%2BvMd9LDaYf%2FZcsOORFu2PirJmIsKDX4FA2sHa9j0OcM7jZKQ6T2UmxQJQ8YQPOb5fSkpcvXkV4DuYIVQNrDVlSYZHrgoE6YWlMLKT0AOjBWmxxOF4fKb%2FR6No%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909c54d2456be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

1.6 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
1.6 kB (1554 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ma.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jrpLgtLA7XejfeBHW0FLnqGhdOytTHDifBrWidG4marX8zBp%2B%2B3D%2BvcVri7GH1XBA6byvnH8XL5X%2F2hksrbZdeNVJGRmN2xP9hyBbvyUB4n7tCugk%2F4HAG12EBSYAk65vwyxyEjCotJq0x6zYoB9llzF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909bb1bf00b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-54-3.com/space-robot/assets/trls.js

188.114.96.1

20 kB

URL
tb.check-tl-ver-54-3.com/space-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
20 kB (20517 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: tb.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:20 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oJBe6qv8aACa9zG%2BVSG4nL%2BWQHpJDzv7lO6iZAK%2F6RmbVsppUCYm%2FxOEzRiAZargAVv6vgPerAAOBEjS%2BPJ1d7LFaLomuYpWXTFhFTjpcwDggdXXKiC8JrRyvMVnEyU17puuqJP0PBgRQOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ca8d8e56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tb.check-tl-ver-54-3.com/space-robot/assets/apple-touch-icon.png

188.114.96.1

23 kB

URL
tb.check-tl-ver-54-3.com/space-robot/assets/apple-touch-icon.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: tb.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:20 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rJYYAmaQqkvL3WA97HVGfjDtQqqJrW%2FLFYwcsFTfrhKgIzWXkRNQffEuPF0uCcH3xDacTauz5eXHcbZjbE0kTDM5oH2ymccYOlCZt9y3uzovQxrMlP5edY994QkH80yxKdNeoFYaiLc60XE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909cb7f0656be-OSL
alt-svc: h3=":443"; ma=86400

ta.check-tl-ver-54-3.com/space-robot/assets/style.css?v=4

188.114.96.1

4.9 kB

URL
ta.check-tl-ver-54-3.com/space-robot/assets/style.css?v=4
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6532), with CRLF line terminators
Size
4.9 kB (4877 bytes)
Hash
8335155a7c4004d8296b7727a24273c4
387b7723ba35057b631809e1437c64cdd89f13bb
0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e

HTTP Headers

GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: ta.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:19 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNyESNEtZPkI5%2FpZm%2FpA%2FhTZh6pTjv4%2Fj55PVYuBG%2BvWlnuhjGDUq7W5oI9z5wU5OfVZ18y0n%2FDKl4UqWoGzDFLv4n1ZEjNZjWBPGipugF8LHU3g88%2BpZBOMo5ef6iZLPeIR3q1dTsedLMA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909c8299356be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

9.5 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JrR2z28mH0wW%2BllP4w%2BanoEPqwDoe0fc6kGoSgg6xHMJA9PtPF22wLrKInCQt%2B4e4aO7SulUNdkBeW3hKqkYMYsSzoG5R8ghrxzIqJ3JyqAR2oz7rvK5HmU3cnmbXqJk%2BCw%2BBejiQXWLSbpzhR3lbTd0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909bd2def0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-54-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147118
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

tb.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659

188.114.96.1

19 kB

URL
tb.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
19 kB (18731 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659 HTTP/1.1
Host: tb.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-54-3.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:20 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E4RUL4tge1thyAU6wegWxQ84lN4scvBgq71hgkVuT7akWaUIgdH5jX0anTKS%2FcROyO1jSPTioT%2B1H8QRpd%2BBSZTuo04WksAS3Sr5TaN4zglUwVoEnWabpFr%2F2VMcoVD%2BIYHTWtLdyCpLltc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909c9fcca56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyMCZybXRjPXQmc2h1PTYwYjJmODRmOGM3NDQ1NjA2ZjViMjUwNzgyODRlMGI4MDY2ZjFmZDIzYjdkZjJmMjVjMGU2MzViZDE4ZWMxOGJiNWE1NDA2ZmE4NzBiMmM0YzE2NTQ0NmM4YjgzMzRhYzcwYjdjZDg1ZTIxYWY5YTk5ZTg1MjYwNWFkYmU0MTAzNTYzN2U5YmY0Y2QxOTZiNzI0N2I2NThlMzIwMmVmY2NhNzYxODAxNmJmYWFlMDU5MGQ2NmMzNzY1MzJkYTk&uuid=&pii=&in=false

192.243.59.12

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyMCZybXRjPXQmc2h1PTYwYjJmODRmOGM3NDQ1NjA2ZjViMjUwNzgyODRlMGI4MDY2ZjFmZDIzYjdkZjJmMjVjMGU2MzViZDE4ZWMxOGJiNWE1NDA2ZmE4NzBiMmM0YzE2NTQ0NmM4YjgzMzRhYzcwYjdjZDg1ZTIxYWY5YTk5ZTg1MjYwNWFkYmU0MTAzNTYzN2U5YmY0Y2QxOTZiNzI0N2I2NThlMzIwMmVmY2NhNzYxODAxNmJmYWFlMDU5MGQ2NmMzNzY1MzJkYTk&uuid=&pii=&in=false
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyMCZybXRjPXQmc2h1PTYwYjJmODRmOGM3NDQ1NjA2ZjViMjUwNzgyODRlMGI4MDY2ZjFmZDIzYjdkZjJmMjVjMGU2MzViZDE4ZWMxOGJiNWE1NDA2ZmE4NzBiMmM0YzE2NTQ0NmM4YjgzMzRhYzcwYjdjZDg1ZTIxYWY5YTk5ZTg1MjYwNWFkYmU0MTAzNTYzN2U5YmY0Y2QxOTZiNzI0N2I2NThlMzIwMmVmY2NhNzYxODAxNmJmYWFlMDU5MGQ2NmMzNzY1MzJkYTk&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:21 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915b4ab826f755a6ebe81b03a71317a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:39:21 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:39:21 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:39:21 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:39:21 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 33add2ebc6c09ec7e87712bd947b7581
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915b4ab826f755a6ebe81b03a71317a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915b4ab826f755a6ebe81b03a71317a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915b4ab826f755a6ebe81b03a71317a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9iba1-xr46-0-usgm6o-9rib8n-9ribwj-a024b9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:21 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9ibfv-xr46-0-usgm6o-9rib8n-9ribwj-c68c5e; expires=Sat, 27-Apr-2024 19:39:21 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=cca7fpmqna9ibfv90c&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=cca7fpmqna9ibfv90c&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=cca7fpmqna9ibfv90c&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=cca7fpmqna9ibfv90c&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=3%2C5%2C1; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:21 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:21 GMT; path=/; samesite=lax
__cap=7; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r1kgHeh%2BEPaanGwcqKTlWs6B0zkm7j2z9p4PCdzE1L%2FgGfQ9fkxKEzor6kcsL4O%2BGMJqxxVYija%2BjYwNhECe8c6rGA1otjxbz7PT9d3plXHzwdxqmU%2FL7dIFCJneM03reoRRbWEzCvL1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909d35bff56c4-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png

188.114.97.1

300 B

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:21 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NaIHk%2FyDPzeSqC90R09y%2BP2Pu%2FFMjpLF%2FX8laxOXZ4mzE7Zme1r%2Ff5VYg9o8v2JxqqWh1AvBnvEoOgEtN22I25x%2B78hu8rSbmmW6kiE2mSi5aovL%2Bqwi3bTj2M2v7%2Fc1IajtkbkFFBogAYPl7YA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909d498190b65-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94454
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2

188.114.97.1

38 kB

URL
rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
38 kB (38084 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:21 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i6vC3AMk%2BoQ3rhZnAjUWLx1cGp2dxBmrZTwn735gl5gqDR0%2BUYs4Wbhz%2BLHayQOviYZZv9rF0iJEZd0OBTdl3v4fMfb2SkgXmDlPTYC1mBXaOTK4xL%2FFaZ1IAGn2aT3jEv6Rgtowkk824EumnHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909d4a8250b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png

188.114.97.1

1.2 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:21 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3200
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iyDTWOeaNcEgpn5%2FmQm9sOPmX72auvauzqpPFP%2Ft5iN8bi3ZYpFp3yUh0JlAxEsOLSG8vZW6fuSeXlbrRxPvuSLowD4VdcR3cYvQZxCvgCJLvrBSxXK1BdcD%2FEevc5ShLPwNMQU1CL0YP7asf7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909d589300b65-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48370
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147119
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

oa.check-tl-ver-94-1.com/space-robot/assets/corner.png

188.114.97.1

300 B

URL
oa.check-tl-ver-94-1.com/space-robot/assets/corner.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: oa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QBhNDVwfiSg5P2fYDFTgw6Oc%2BqFZa%2Fk9CZ%2FxW%2FQI7aCL4uRmgy29TZtKo4B%2BzGFw7dcATdKbCVlZm9JQYjnjx7QhuPnTTo41GuqstemxP73hkT3vNyFsttptCOmAbgy0lBsN6ab1JzVCI3o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909d7cb670b65-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oa.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94455
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

oa.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png

188.114.97.1

23 kB

URL
oa.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: oa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QRBiyaGQDIRrApphdfrAMEk0Lu%2B%2BlWBs5M2xu%2Bro22wS0tW3VAJ4eWmQI%2BJLyKDgaUxY6Qr8c7P5zcjILI26JGmMvTStvKOaM7MhCg4E4kYHZCZbkdWN%2F4mD92I7y80WLqGvmFMcPfMVuxI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909d8dc880b65-OSL
alt-svc: h3=":443"; ma=86400

oa.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png

188.114.97.1

1.2 kB

URL
oa.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: oa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LBadfTxrCH5Kru9lzUffzj48mdaXNRpVfej5NH1od2HwkGB67oikbFlG0hdEWFzu8FC0yv25r0eQ9E7G%2BgcJacAnz2i6NSjxRtxrUVCXJm05Jn7zlvNlh3ESgoweNKz39wsBLSaiFqbMcOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909d8dc8b0b65-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48371
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656

188.114.97.1

24 kB

URL
rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
24 kB (24070 bytes)
Hash
666203c2cfc7ee8aafbd1cbf9ec04c69
7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a
57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b

HTTP Headers

GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ewVKTRaMkPYuv4gi5sI0fJbf5OGCu3nAWce%2BnHkI7OorkRNuHASU2CGRl7U4aVr3XLhGJa60dVIJtyXAJPTRBDTrX2vG%2BOePLovJri6H8YT5irJ1im%2F4Ie2uuoOk%2BDawGw5sOp79%2F7zBBtjNn8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909b6ffc10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=21bc6pmqna9m7twe19&nrid=65302e8b381523cac835bbbb4e70540c&reason=tb_exit&attempt=3

188.114.97.1

470 B

URL
cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=21bc6pmqna9m7twe19&nrid=65302e8b381523cac835bbbb4e70540c&reason=tb_exit&attempt=3
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
470 B (470 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=21bc6pmqna9m7twe19&nrid=65302e8b381523cac835bbbb4e70540c&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:18 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cC4JbDr5wL55rmeVnsilZ%2Fa6KGbZujEnl9kaCU%2FZm5fyGwtdebYUi9bbSa7nYgwp1RiMNkEaqY%2BiwVJ6CXflFK%2FT7ZWLlrYJDo5LHzng9tdcJonoFsihSWqmuBQY6oAAmqROfgkWlzVvQM62NXr7kaTq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909bdee9d0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ob.check-tl-ver-94-1.com/space-robot/assets/style.css?v=4

188.114.97.1

17 kB

URL
ob.check-tl-ver-94-1.com/space-robot/assets/style.css?v=4
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6532), with CRLF line terminators
Size
17 kB (17409 bytes)
Hash
8335155a7c4004d8296b7727a24273c4
387b7723ba35057b631809e1437c64cdd89f13bb
0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e

HTTP Headers

GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: ob.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ob.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w5CJAyiyxHhaNcxnPmNlm6sbU%2FqY98iaVBUz6qByFUYqr4l5cvu0vFv5f9eVFACMGTSeYUclAnYaEMrl4C4pvx9yyHBTAxDLTDjhap8laXZgMyCkiCFQgl4CxjQsGuXiGDdXANWgjrDEoIU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909dabe820b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=31c3aab392984c33b2c86f52b2d7a4a4

188.114.97.1

15 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=31c3aab392984c33b2c86f52b2d7a4a4
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33136), with no line terminators
Size
15 kB (14856 bytes)
Hash
495750a1bba9517fe62d7881fea4ccb4
03aaeb560bce2b2acc7eb86beaaef64586331130
b5e41cb2180d8c4e1ab1504b0e69c6ca7eecde422a7329c64c6fa55c1b129635

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-1.com&timeout=30&tb=true&nrid=31c3aab392984c33b2c86f52b2d7a4a4 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ob.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jl5v2iGR%2BpeqbgtXRTuTfE5m34W9t8Qah3lOAmpvtFyE3M0y%2FxZ8U3p4g6fUU2Vb8SgHLnH6k0S83%2BWk6iZEq7RF7MjAnqv0F3ttp13kEzUVZ1msNLWmH65x1%2B67ECqNv6S1%2B2KUR8j6Oqb9Kydl2xyd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909db4f4a0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

9.5 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ob.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bj7%2BgH%2F5Rsa98Xlr%2FjLvxCNnJ5FuGJwqwDmu7uiuBzMMjhmpMlQvv5lbxJF9iJxwDZLZ8OIvLbXtygs7STDZrcBlvnW1k2QlWGNeJ0fI8kXR7VSCZ2s5%2BTV%2BpO1egFSeWxZkgwh2XfguWkmFBCrA5Su5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909dbafc20b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ob.check-tl-ver-94-1.com/space-robot/assets/trls.js

188.114.97.1

28 kB

URL
ob.check-tl-ver-94-1.com/space-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
28 kB (28142 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: ob.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ob.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F6ffwzwpCm6N2%2F7bxWlbE02ObNYtM1Ybpcqo5ETVMcR55mc60Qq1oNpF9Izspy9HVmCvD7c1xZMWcJ3jxFkoj%2B%2BQYWQKGwkA4nFB24hWUscS2Ija6T0hnAnity%2BPXzDVTfSrlexb1fW4QkE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909daae7a0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ob.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147120
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fa.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651

188.114.96.1

16 kB

URL
fa.check-tl-ver-54-3.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1380), with CRLF line terminators
Size
16 kB (15871 bytes)
Hash
9a97caf42661ea48c9a8d347229b398a
5ee1404818c517813439e1a056b4016531fa11c7
8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd

HTTP Headers

GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=8e371pmqna9uo46fa1&sub_id=17136824&nrid=2b2976bcbe38497f9f7af4fa90265635&hash=ADq6Oj8sYfLZ_sid9nUGTg&exp=1714160651 HTTP/1.1
Host: fa.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:12 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8VavvS%2FkpDu2%2BUkoQW9QKpvtyjtmxj9D7BuAHFcHnAsQ2VjYwLTYj3uDehiGhwkvTMxXGfKfUUzxoYbjBI%2BL%2FSB3zqXxygrCZMoIVZuYhunjBkpaVK3v705OB9eaQFUf3nvc1XiQpyNd5eI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9099b4bd356be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyMyZybXRjPXQmc2h1PTg1NDUxYWU4NjA3ZDk1NmE3MWZmNzMxYTNhYmI3OTcxMTMyYzg0ZjY1ODVjMDdmNmVlNDljMjllYWZlZDE4MzMzYTFiZDYyYjcyYTNkZjQyOGZmZWFlYTE4NjgyZDhmYmU1N2UxNzViNWE2MmE3MjQ0YjJlN2MxMTU1ZDc5ZGI4YTBkMDU1Yjg4ZTRkNGVhOTYyZWQxY2JkMjgxNzM1MTJlMjI5ODhjNWMxYjEzOTZkZGY2MDQwMmE1ODM2OGM&uuid=&pii=&in=false

192.243.59.12

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyMyZybXRjPXQmc2h1PTg1NDUxYWU4NjA3ZDk1NmE3MWZmNzMxYTNhYmI3OTcxMTMyYzg0ZjY1ODVjMDdmNmVlNDljMjllYWZlZDE4MzMzYTFiZDYyYjcyYTNkZjQyOGZmZWFlYTE4NjgyZDhmYmU1N2UxNzViNWE2MmE3MjQ0YjJlN2MxMTU1ZDc5ZGI4YTBkMDU1Yjg4ZTRkNGVhOTYyZWQxY2JkMjgxNzM1MTJlMjI5ODhjNWMxYjEzOTZkZGY2MDQwMmE1ODM2OGM&uuid=&pii=&in=false
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyMyZybXRjPXQmc2h1PTg1NDUxYWU4NjA3ZDk1NmE3MWZmNzMxYTNhYmI3OTcxMTMyYzg0ZjY1ODVjMDdmNmVlNDljMjllYWZlZDE4MzMzYTFiZDYyYjcyYTNkZjQyOGZmZWFlYTE4NjgyZDhmYmU1N2UxNzViNWE2MmE3MjQ0YjJlN2MxMTU1ZDc5ZGI4YTBkMDU1Yjg4ZTRkNGVhOTYyZWQxY2JkMjgxNzM1MTJlMjI5ODhjNWMxYjEzOTZkZGY2MDQwMmE1ODM2OGM&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:23 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391e77bd54a45fc8610aeab81b2978a6&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:39:23 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:39:23 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:39:23 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:39:23 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8d44c71871c4948e707ba34d649a08bb
Strict-Transport-Security: max-age=0; includeSubdomains

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391e77bd54a45fc8610aeab81b2978a6&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391e77bd54a45fc8610aeab81b2978a6&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391e77bd54a45fc8610aeab81b2978a6&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9ibfv-xr46-0-usgm6o-9rib8n-9ribwj-c68c5e
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:24 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9xrsc-xr46-0-usgm6o-9rib8n-9ribwj-c9d0e8; expires=Sat, 27-Apr-2024 19:39:24 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5a89bpmqna9xrsc690&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5a89bpmqna9xrsc690&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5a89bpmqna9xrsc690&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=5a89bpmqna9xrsc690&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:24 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:24 GMT; path=/; samesite=lax
__cap=8; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eRRLUnwrteHukdOg0DZMBpqnZH4Rg19E0z5iNR2TbcSdRjK5WZhXRqLPtwoprYMx1FCCH48KGqFgRjPzo0vmLqD%2BvBYARrX1u%2FoGWNaqocaNCMMJkFdkhSk71Ss%2Fpj4KGEMuJY5pA4Ax"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909e37ddd56c4-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-54-3.com/space-robot/assets/style.css?v=4

188.114.96.1

2.4 kB

URL
rqqlj.check-tl-ver-54-3.com/space-robot/assets/style.css?v=4
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6532), with CRLF line terminators
Size
2.4 kB (2385 bytes)
Hash
8335155a7c4004d8296b7727a24273c4
387b7723ba35057b631809e1437c64cdd89f13bb
0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e

HTTP Headers

GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: rqqlj.check-tl-ver-54-3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-54-3.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=a0730pmqna9iba11c5&sub_id=17136824&nrid=9cc274b6b22448b6b7d199822c9dead9&hash=bZBcr2QxIXLAU4sAEgxuUA&exp=1714160659
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:19 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j1bUBeY8NL82cZScO0CKiF3LQ%2FK7v94MdVSxhAAn%2BeeAoPFyWBvarDmU%2BijoJTfn%2Bb4EoLK%2FMf5YUw%2FpgQq49AusCN3v0PMHPkcnbrWRtDEL8lqBMmYBmuY2pz6oxWbtUI8hvWNmk28s2fS762o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909c61e6156be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94457
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

rqqlj.check-tl-ver-154-1.com/space-robot/assets/apple-touch-icon.png

188.114.96.1

23 kB

URL
rqqlj.check-tl-ver-154-1.com/space-robot/assets/apple-touch-icon.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:24 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6870
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BlaTUbQUulWMd7G5lOcqbGRK2EpQ7hKFAEUId%2FMTxVpmKNJmneP%2BMjFucOJjeZMZ1KpC3Gjau32sKwgfoDpmXo7GDDHWgM6ZQdMDB7FaMl%2FJrMZUJsSLAks2p%2FWtxLMqA8Me9zazN0fHyZJcWea9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e5dfe456c6-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2

188.114.97.1

3.8 kB

URL
rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
3.8 kB (3817 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HxZD4gWMO7g4BrA1F6eaXvTdDk1xoeT8Yc4UwPiA74ElhzVLKorSDFDTKc%2FLjjmVgTETgrjum4CMsUG7E4lL%2F7hBQTzqBOh%2B8E5idLtBne3SDxaXRGq82ulESBj2UzF3OWxjZSYcZRSqeVjKyrI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909b808d30b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48373
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147122
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

la.check-tl-ver-154-1.com/space-robot/assets/corner.png

188.114.96.1

300 B

URL
la.check-tl-ver-154-1.com/space-robot/assets/corner.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: la.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://la.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:24 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQR1FO46aJYEifTrW2JqKEMS2U17lCk675FiMDcwCS7trmGeaQHzHQZYoDwvVfAtDdorInH9pphV1Ur3GitX65zHddztSK1BkEkF84IsumcqDczgCoECtBRflEpwx904lPtgslW09mxWEtfM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e729a556c6-OSL
alt-svc: h3=":443"; ma=86400

ob.check-tl-ver-94-1.com/space-robot/assets/main.js?v=3

188.114.97.1

39 kB

URL
ob.check-tl-ver-94-1.com/space-robot/assets/main.js?v=3
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
39 kB (38777 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: ob.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ob.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vitv4oaBmYNvJdO1PXOu3GJlSW%2F8OSkYgEsqzJUUT1BquSrKyBmYZNaHOy%2Bduckww2nHDYYGm3tlEzB0o6Bx4IaYyBPV9VYDol1cNaOeAUUy%2FKj3nOI4FzloveInFnIFgUTBhqUi4SRVRDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909dabe880b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

la.check-tl-ver-154-1.com/space-robot/assets/apple-touch-icon.png

188.114.96.1

23 kB

URL
la.check-tl-ver-154-1.com/space-robot/assets/apple-touch-icon.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: la.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://la.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:24 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVOr%2FLTZOset73v6V1fk8C3i4Z7EUfm7MuYk8IFLYsql9oAiJe6xMRhw5ESop0o6Uq9qEALAaM9WIIUHS%2Fc63ZMnXne8i2PKjtoc8lRDvGCiYXyJKnnA6j94Mx14UnyiRnewqhafXfstpmvY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e7eae456c6-OSL
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

15 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
15 kB (15101 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ea.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:15 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FRxGaS3RfKenfhGt84pvYLR9OMZVP5%2F1%2BfQWNOgDd31x%2BMJnrM1X3bTCcE5UdwcXixDSMJqBwxulLd%2BUDyHRzzrdZyvEbGfNXPSEdII2nLw6pkVJfB%2BQ575bEB5iD2WSvfoy8KpgQEpB%2FiTbWUw%2BsMQ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ac4d180b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.96.1

11 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
11 kB (11393 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Cookie: __psu=6d7993d5-c180-4fda-b93d-8214ec5c0a56
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:24 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TzyTWQogkJPhoTNo7byUseYXI%2B35W9zInRlVR%2FfPKQaMKTRdm6nHHF7uHbagsqmsSTRh7RkfBFXsYikX0v8K55GtTde6be5HK41fcUrkjhW%2FEBBWPT%2BNajrNbqA%2FQZDYEv9GesU8mPe8MGN36BttmbCeHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e58f8156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://la.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147122
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

lb.check-tl-ver-154-1.com/space-robot/assets/corner.png

188.114.96.1

300 B

URL
lb.check-tl-ver-154-1.com/space-robot/assets/corner.png
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: lb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lb.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:25 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qxrYrU5m%2FKe2hURuUMJd7aY0NoJNcdFg7brWM9CwFwZQwZU4qhDMvp0N6TuSPtDfI2qzkoDtK9swlzGLz1FqOhxSBt3a4p9CTr4C2Rf5tGOUkDTwp1gxjwtX4qt%2F5%2BnZ05vnh5%2FxT8s1nant"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e97d6d56c6-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lb.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://lb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94458
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

lb.check-tl-ver-154-1.com/space-robot/assets/main.js?v=3

188.114.96.1

2.2 kB

URL
lb.check-tl-ver-154-1.com/space-robot/assets/main.js?v=3
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (2745)
Size
2.2 kB (2189 bytes)
Hash
01c51ed0a287b5ddf6793778cfa3a72c
ebd2613cd806b8e080f556b0d254c0f7a6c738a9
4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5

HTTP Headers

GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: lb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lb.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:25 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CizX%2BQwq9%2BoFTiGSXeMomNPMlMTd3rvwmlPE%2BYYvfFVFPc0yvHH8Vh%2BSlMxfXIuxh9Ce8DYV8SXPzR6bpodwQWr3NPYusUAnxFssauxbqN%2FK6N2qZNicmal5cYNkZoPzplwWLwVDZZqEj3Kk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e98d8456c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=3c7bapmqna9uoa3f59&nrid=0b25cce7b70f0b319ced285c5f9a81c0&reason=tb_exit&attempt=3

188.114.96.1

23 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=3c7bapmqna9uoa3f59&nrid=0b25cce7b70f0b319ced285c5f9a81c0&reason=tb_exit&attempt=3
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
23 kB (23347 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=3c7bapmqna9uoa3f59&nrid=0b25cce7b70f0b319ced285c5f9a81c0&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-154-1.com/
Cookie: __psu=6d7993d5-c180-4fda-b93d-8214ec5c0a56
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:10 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nJcD6mwECIv7hQOH2xVkfvn7Te%2Ftm%2B2LFrShtvGQOnDep9pL1uh3g35%2FVU1uTxMHQ6C%2B0wwAkAwakfWNilhCNCjeh9eMviZbN%2BTbCjEhcB6U8%2FQ7QOI0WfJo7%2B7eNyaa3RJNIl4BusQZSEbSy8N%2BxrL9YA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a90990ee1456c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.96.1

9.5 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
9.5 kB (9536 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lb.check-tl-ver-154-1.com/
Cookie: __psu=6d7993d5-c180-4fda-b93d-8214ec5c0a56
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:25 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eJ3eGYH4l36SjuWmFZ4RSQPwBVZEQq8JvApLJTv%2FeA35f%2FKoI3VIAJrIKBWMc8815MRnvqZQ7Mt4FzdxJ0GWhqqrafkJ75MJUWs9bB0HzS77Lv5QfOaGKnjSJZ91KkRlLK7JD3O8OH0vLGfmkb8wUlxuVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ea9fc256c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147123
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

192.243.59.12

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (407)
Size
1.3 kB (1340 bytes)
Hash
471ab29cf0db0c9273f7f6d4f7dc4f1a
0340138955fdda88a6c2cc7fe0ace758eb89dda3
75d2949292775ab47af3364287b5e584392ae88fda44e4148349cf6c707f91c4

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 19:40:25 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6324661559be4b3459f7c3970d85ecf7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

rqqlj.check-tl-ver-154-1.com/space-robot/assets/trls.js

188.114.96.1

5.0 kB

URL
rqqlj.check-tl-ver-154-1.com/space-robot/assets/trls.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
5.0 kB (4965 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:24 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6276
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z2jo86Q7bhbZv5EXlOsGj15uxsZ8uXcm07pKSmKVGgLBx4tKeD0t5YGS7GUs9C%2B0dnglrDlMJmRrrCjB8ZYBF%2FkEe2XIvQfLRpUh3C2iLTq%2FVhqU7KHlshJWNH2hCUkDE2obrY%2F53RsS7cbfyLEb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e49e3f56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391b7c3d2869ff4fe1a116b09a42d422&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391b7c3d2869ff4fe1a116b09a42d422&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391b7c3d2869ff4fe1a116b09a42d422&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9xrsc-xr46-0-usgm6o-9rib8n-9ribwj-c9d0e8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:26 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9fyci-xr46-0-usgm6o-9rib8n-9ribwj-7030d1; expires=Sat, 27-Apr-2024 19:39:26 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:26 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:26 GMT; path=/; samesite=lax
__cap=9; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wv%2F9vtz9PSSaIned7EbrZKM%2FTQQIIwAnupp%2BF103XZFOvMGeOdUg8fEtwdptCI2pnCQAppV3Jw1kredkX2hY4VrjPYJWgcTrbvP4MYrEIfwzo%2FK76iDIevoQ5QFQZBKGr4Ogv27kbhHc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909f2fd8d56c4-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png

188.114.97.1

300 B

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Size
300 B (300 bytes)
Hash
f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2

HTTP Headers

GET /space-robot/assets/corner.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:26 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2128
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i7cfGdSfyYD5Q%2Fg67AYryHVqsyE2dbK0dyPoEawcUOJupSWv3DYbgfPbmKT%2Bv%2BPEGb281zhG2wto4IF1FumDgSWdJ2khrKF2RcsVUL0R6wyZvCaofkaZLxDuJrUA4uEpkbOCCXXkMOdaYZQrByQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909f41d000b65-OSL
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/assets/trls.js

188.114.97.1

20 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
20 kB (20517 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:26 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2128
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EgttMC6bxTqxSIcOAa742OoPV7dkuHN0IalV9rFti7ylO2W9%2BYhD1HKEoTCs5CSryn%2B1moJ2mCwuBIhxevSMT%2F1MTZiGyUEwtWh3ce7lFjzEiUF8drLAaGGlVNSwKwvbNN%2BPqz1iAjrdgfvlylY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909f41cfd0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661

188.114.97.1

42 kB

URL
rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
42 kB (42267 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:21 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aawMbmtlMiaKBeI%2FI3ZIT3oPK99393Jn4k6jN5C2Te%2FBwe2up%2BK0l4ULvbKI5VSKTpk6yROKs7lJgJ9%2FUPpt9VHsIII6Pg2AOQku1Ovnb1KEDm%2B%2BCZ%2BUKFtV5w%2BOumyC03yYHmHFecDLP4l6vc0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909d3aeb60b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rqqlj.check-tl-ver-94-1.com/blue-robot/assets/style.css

188.114.97.1

4.2 kB

URL
rqqlj.check-tl-ver-94-1.com/blue-robot/assets/style.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
4.2 kB (4228 bytes)
Hash
ff38fe2c7e467d3883201690baacfa93
edb4a93e0faa1c7b8968aab788b3e33e181c6c00
3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9

HTTP Headers

GET /blue-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=4acb3pmqna93v9rcfa&sub_id=17136824&nrid=d5799c1e742149c49abd4ec19790439d&hash=oBR8x4K0ZPsGchZRIXGvZg&exp=1714160654
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:14 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=esgFAhpxKf1hiwdouBfgTyUZfC5IjOExBBz46TDimS9h%2BmVU361Cavx1Yh9JyLnnsv7i9bXdrFe0p9F2qls4qbAtrSWJCCUzT0UUJog%2Be0BBHoBdXxvzFgU6cb99D3A0Xuil%2BHsRCBKXk9yv4hU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909a899ac0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

oa.check-tl-ver-94-1.com/space-robot/assets/trls.js

188.114.97.1

18 kB

URL
oa.check-tl-ver-94-1.com/space-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
18 kB (18027 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: oa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=cca7fpmqna9ibfv90c&sub_id=17136824&nrid=31c3aab392984c33b2c86f52b2d7a4a4&hash=PdbCWF6E5OLeYOyTz5z3CA&exp=1714160661
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:22 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MAlwpaIbg%2BOHIKA3ieC3z4jB9l7vSihTkZYNZ%2B1NcRknad2WvFQeeRVqbREVDfZ6IswSgrFu4EiCqvWirdkpJ7zdv8JD%2BNUnCs7nUNX9Npv3g995DclUtbst99CDxt2BRPCsREwPLN2abOU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909d7bb630b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147125
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-154-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=532e1ef8b40b4fcd8b1a7932f18e6839

188.114.96.1

14 kB

URL
cdnstatic.check-tl-ver-154-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=532e1ef8b40b4fcd8b1a7932f18e6839
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33138), with no line terminators
Size
14 kB (14009 bytes)
Hash
123df73e8390f308ec0010fd17f22ab7
3383bce9ca47275870f123694dd6dbc7948716dd
682c71c94a6835db3e71b331c8ebc5bc548a428778fccd0bfe3c84b05ff39842

HTTP Headers

GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=532e1ef8b40b4fcd8b1a7932f18e6839 HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lb.check-tl-ver-154-1.com/
Cookie: __psu=6d7993d5-c180-4fda-b93d-8214ec5c0a56
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:25 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2F8yCLTIgTPt4FWfhdapuQsF%2B2CkwXkNkcQZ%2F01burTlJSMK2r4Bbok7HeFYSim6EopZ%2F568okvOkChHJvHNyaD4V3Zl7x6uHq0aSXF8peBOSBk2TknHrpSCFQCiDF1%2BqhjjEnwLMzlpm%2BqlnJ7Klh%2BS6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909ea2ec856c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

na.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666

188.114.97.1

21 kB

URL
na.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
21 kB (20935 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666 HTTP/1.1
Host: na.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:27 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eJ1h4pW6kQFPKdvcohjScoBhYrVHJPli4SI%2FtUjRsrxKha2cZL5m6GFiMixsF%2BTYsV76VlBYB1lrtiD9pg1UBIcHGV9ylHGjE7aIl7uOZTvYgDVlLGlUKFS%2FBTUMJKZhAc3PGEisifMX3d8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909f64f570b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

na.check-tl-ver-94-1.com/space-robot/assets/trls.js

188.114.97.1

42 kB

URL
na.check-tl-ver-94-1.com/space-robot/assets/trls.js
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Size
42 kB (41835 bytes)
Hash
7f5c725b2c23b9687fa08d162a17427a
94973f1227871750d2ef13a367ce691f1a062527
c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3

HTTP Headers

GET /space-robot/assets/trls.js HTTP/1.1
Host: na.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://na.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:27 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bLHBiP5Io4dN3j33j18nc2dXQCAFTsaVFHi245zHKmZzrQ%2FYMIxSBvczTKTAA4icy8B25FccvD4k2y6NE38K0F92G%2Fma8UAxdiGGxw7jbtIbIbzErHjrKF1KPBuApv8sQbginlspsgzYJbY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909f708860b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

na.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png

188.114.97.1

1.2 kB

URL
na.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.2 kB (1163 bytes)
Hash
9d35b617fd258f648c37812252297dd3
7e32fd007f1c6fe1466d15439173082c0fbe82da
e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a

HTTP Headers

GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: na.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://na.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:27 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q6D%2BN%2F5LS3QMFbSJJ1OZmuOnsBLL%2Brmn2HNp%2FBh%2BUlum%2FVrOW4w3XPQII0HISbd%2FrOl6bp9dyQcj85ycDBIp33Lo4WAnjrVPLzaVJnFwQrrEU1PxXs5rRz2QqH9lAd%2FLUwaPPLQcwOIRfqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909f7c96c0b65-OSL
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://na.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48376
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js

142.250.74.35

9.9 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (38231)
Size
9.9 kB (9934 bytes)
Hash
0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522

HTTP Headers

GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://na.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 147125
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&sub_id=17136824&click_id=cca7fpmqna9ibfv90c&nrid=af460442fbc1ea576f19b95c8099050a&reason=tb_exit&attempt=3

188.114.97.1

470 B

URL
cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&sub_id=17136824&click_id=cca7fpmqna9ibfv90c&nrid=af460442fbc1ea576f19b95c8099050a&reason=tb_exit&attempt=3
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
470 B (470 bytes)
Hash
dc8aa0a2249f884dac1f684a88c59598
6b4d3f69a35479a007e9e951d218455c1569ef04
c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd

HTTP Headers

GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&sub_id=17136824&click_id=cca7fpmqna9ibfv90c&nrid=af460442fbc1ea576f19b95c8099050a&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ob.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:23 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AI52O7ow61DWEg16OnqYcqaXD3DZuuqyWEour9Mtx0OxMH6e06B9XejNOV3DMy%2BXB4K0lrtyliTY7oQsXgg2PBiCbwuojdR%2BVKSs0gPjituaDlhGc4dSPO4ySY%2BAJwHJPJMF3gpL3gsfTCxMura5UbfL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909dc88970b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA

188.114.97.1

21 kB

URL
cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
21 kB (20745 bytes)
Hash
dc65a2fbfc4c76147b8b778b759c8d91
b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855
7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958

HTTP Headers

GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://na.check-tl-ver-94-1.com/
Cookie: __psu=ad9a3b9d-65e6-487b-b5e9-6d788b8d116d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:27 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N3OGaJxpx45u4bNCL1ihNZRt%2BGrz9c2s3CCesHzRxsaBA%2B5%2BfDN3%2FLd%2FtCJFkv2ghAC%2F4Fx0wDnAQ1wUGqP%2Bl9gh6E92kMCGgbjBfPksItpky1kd3XchDspvsYIU%2Fa%2FaNKdc0KaOf44n3R8RKugZoY4k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909f7d9780b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nb.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png

188.114.97.1

23 kB

URL
nb.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
23 kB (23177 bytes)
Hash
f500ba7eee0ae7d1ceb44236ac253165
0614de220ecadb48038ed894d91120ba102c8367
ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5

HTTP Headers

GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: nb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nb.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:27 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5410
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aKSDEmgs0X2Y%2Fq4x8x97WGDfqS39osU5mlgPogSKFvH9IUPTR%2FMIfJCMmFKEjFeUUfIpN0utHL1NJEcIpBXsVw%2BwBi0GX8e5S8NoFd8Jcc1sod4Pftp8VmpcwXvaOoMf1P9iXzn0uxXOjEQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909fa1c120b65-OSL
alt-svc: h3=":443"; ma=86400

la.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2

188.114.96.1

7.5 kB

URL
la.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
7.5 kB (7511 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: la.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://la.check-tl-ver-154-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=5a89bpmqna9xrsc690&sub_id=17136824&nrid=532e1ef8b40b4fcd8b1a7932f18e6839&hash=F7or5H45-jJNM0EkukP4Qg&exp=1714160664
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:24 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6210
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8mY3iP5ptz%2F4N2r7%2FW%2FwlDuB17mTtvW6XeCdfiKq%2Ffqe%2B18qR3D%2BNuYEb0fcU%2FSruF%2F7SW%2B%2BZHnDsUx286gFD8jqKB%2BA6YoKMoI0zF9uYT9xessRgTyPrBpZ0%2FBxoBO%2BcKfAtRfrZcoBLL8s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909e739b556c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js

142.250.74.35

9.3 kB

URL
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (28368)
Size
9.3 kB (9308 bytes)
Hash
9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5

HTTP Headers

GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nb.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 48376
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

nb.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666

188.114.97.1

27 kB

URL
nb.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
27 kB (27153 bytes)
Hash
01041709ecf6a3f0b549820730593c03
55775e4279d24a34f601bf8180d9f280b8131e0d
51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51

HTTP Headers

GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=6fdc1pmqna9fyci7dd&sub_id=17136824&nrid=e3975a264d3a45f580973a469a0313f4&hash=IPYux_DfMUFIeObJbC26Ag&exp=1714160666 HTTP/1.1
Host: nb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://na.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:27 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fyuHTJgVpiqUdA0dKu%2B2hj%2B1098JmJzh1UZQu451P6D%2B%2FEWjtIqzcnRLsjnZ0sPZUvm8%2FHcp3jjsUqk8hLkhOYCqeRG4b%2FOnwVxkeJnBzlYO%2FrRdjDOOUVxcdivPlqXRauZS1NGQ1fEAn8E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a909f8daaa0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1

192.243.59.12

1.3 kB

URL
www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (418)
Size
1.3 kB (1347 bytes)
Hash
f06b128d27c0b4c0149001aadfe9f400
0cf77d6da5dc7e494276b850929ce27a679c29a2
c31ca74f93b5120905a8432229043e3b418a776110fb8dca7530a4b7b69ee6be

HTTP Headers

GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 19:40:27 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4ec7da61a1c99eaa9c2caad7486d6ef0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyNyZybXRjPXQmc2h1PWMzZDVjYzNhMmYyMTM3NmYzMGE2NDYxNDA2NTA0YTVhYzhlNDFhMjE3Y2YzYjNkNDExNTMwOTQzYWViNmJkYTZlYjdhYzg4MjlkNTQ0NGIzYmJhNTA0ZWYwYTZlMjBlNGIwMGFiYTlkMzhmNmM1YWM0ZGJmZTFkMWUyOTFkNGMwMjJhNzQ5ZWFlMTMzMzJkOTRlMjVkNjY2NjBlNDVmNzZmOGVmZWVlNTUzNjMyYzY0OWFiZjg3Njg3YTk4N2MyNGY4NDAwYQ&uuid=&pii=&in=false

192.243.59.12

0 B

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyNyZybXRjPXQmc2h1PWMzZDVjYzNhMmYyMTM3NmYzMGE2NDYxNDA2NTA0YTVhYzhlNDFhMjE3Y2YzYjNkNDExNTMwOTQzYWViNmJkYTZlYjdhYzg4MjlkNTQ0NGIzYmJhNTA0ZWYwYTZlMjBlNGIwMGFiYTlkMzhmNmM1YWM0ZGJmZTFkMWUyOTFkNGMwMjJhNzQ5ZWFlMTMzMzJkOTRlMjVkNjY2NjBlNDVmNzZmOGVmZWVlNTUzNjMyYzY0OWFiZjg3Njg3YTk4N2MyNGY4NDAwYQ&uuid=&pii=&in=false
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MDQyNyZybXRjPXQmc2h1PWMzZDVjYzNhMmYyMTM3NmYzMGE2NDYxNDA2NTA0YTVhYzhlNDFhMjE3Y2YzYjNkNDExNTMwOTQzYWViNmJkYTZlYjdhYzg4MjlkNTQ0NGIzYmJhNTA0ZWYwYTZlMjBlNGIwMGFiYTlkMzhmNmM1YWM0ZGJmZTFkMWUyOTFkNGMwMjJhNzQ5ZWFlMTMzMzJkOTRlMjVkNjY2NjBlNDVmNzZmOGVmZWVlNTUzNjMyYzY0OWFiZjg3Njg3YTk4N2MyNGY4NDAwYQ&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:39:28 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914a5026f789af99184f377c3eccbb8&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:39:28 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:39:28 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:39:28 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:39:28 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 84a25231f35eb8899450166d430ffee4
Strict-Transport-Security: max-age=0; includeSubdomains

www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ

172.240.127.234

1.3 kB

URL
www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (438)
Size
1.3 kB (1327 bytes)
Hash
cbfdacdf9b82d6f8f47a10acf6ea0815
de291f2eeab05bc0236b75bad9b9926541cbfcf2
2eac0f737fe02e78e0a954066c4c565e16875c552144d6b38e4d589ccaa56a76

HTTP Headers

GET /api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:39:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=15548089; expires=Sat, 27 Apr 2024 19:39:28 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.3XRPKMYtAZpXHYSP3cIfoi6Y54jOXooCzC0nbGKbZDY; expires=Fri, 26 Apr 2024 19:40:28 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2be0d7bcf01b61d4b1847868aedc26eb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914a5026f789af99184f377c3eccbb8&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049

192.64.81.118

0 B

URL
nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914a5026f789af99184f377c3eccbb8&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
IP
192.64.81.118:0
ASN
#19318 IS-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914a5026f789af99184f377c3eccbb8&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqna9fv52; uclickhash=pmqna9fv52-pmqna9fyci-xr46-0-usgm6o-9rib8n-9ribwj-7030d1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:39:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqna9fv52; expires=Sat, 27-Apr-2024 19:39:28 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqna9fv52-pmqna9fy15-xr46-0-usgm6o-9rib8n-9ribwj-8198cd; expires=Sat, 27-Apr-2024 19:39:28 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=1b9e5pmqna9fy15fd5&sub_id=17136824
Strict-Transport-Security: max-age=31536000

rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=1b9e5pmqna9fy15fd5&sub_id=17136824

188.114.97.1

0 B

URL
rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=1b9e5pmqna9fy15fd5&sub_id=17136824
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=1b9e5pmqna9fy15fd5&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1; __pl=7a39e371-b933-40d2-bc80-fffdd717b404; __cap=9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:39:29 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=1b9e5pmqna9fy15fd5&sub_id=17136824&nrid=b9dd703e5d7e4e228a931b19824d0ccb&hash=S581X0aa7Biqem39vZlYxg&exp=1714160668
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3; max-age=345600; path=/; samesite=lax
__pl=7a39e371-b933-40d2-bc80-fffdd717b404; expires=Sun, 26 Apr 2026 19:39:28 GMT; path=/; samesite=lax
__cap=10; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dGtP5nK%2BAQNkchxKndi42O8SHrOAao9lniuZM7rp4hU2IEoucrK36Rn6JxlfOS0AxvgDOLB7v9IoRlKU3eVyQ%2BWgf69xOdce4mNLQ1j5lyg9cWH%2BPTYYl0aAbF%2B6rTR7cPNCj41y1ro7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a90a020cd656c4-OSL
alt-svc: h3=":443"; ma=86400

mb.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2

188.114.97.1

22 kB

URL
mb.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
22 kB (21511 bytes)
Hash
7224243dd0b18bb2508a1d77d4b2a0b2
bd833c24aa241861316053fd8bd46a1bef3d343f
920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659

HTTP Headers

GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: mb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=21bc6pmqna9m7twe19&sub_id=17136824&nrid=f6d241c4def0453993b20a88e8b0a1ba&hash=F8GG04rZM9rr3vyxBeb6yA&exp=1714160656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:39:17 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3823
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FcC3Yb0ACL1PWQnWOyDl0GHPJzMrVcHF6iHCoMq%2BS6jL1JW%2B6TR822OMUNdBBXcOmxT8vQzTisZ6twn24VUQEKfR32rDrqjvVPA5px4oMZ7hi0Fe6KVyoQbntlQt%2FBzhVMmgBMg98reylEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a909bcad640b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

16 kB

URL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-94-2.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 94462
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (199)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP