| saint2.su/embed/nObL8thbTd4 | 91.149.226.78 | 200 OK | 2.6 kB |
URL User Request GET HTTP/1.1saint2.su/embed/nObL8thbTd4 IP 91.149.226.78:443
CertificateIssuerLet's Encrypt Subjectsaint2.su FingerprintD8:91:2E:43:4A:2A:D0:43:F7:AC:98:03:5C:7B:C0:39:0E:78:3B:E1 ValidityFri, 05 Apr 2024 13:19:55 GMT - Thu, 04 Jul 2024 13:19:54 GMT
File typeHTML document, ASCII text Hash83fc55aa1a1eb3459add5e6224596c64 99b9696675b0c84052d942cc604d3e0f36b7eab2 79515f0c3a3b2f42616ba9f934250b6ef904ee6631c4180d53b03b205de94715
GET /embed/nObL8thbTd4 HTTP/1.1
Host: saint2.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 08:47:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=3fmsqbvs5ft7elbeqeb9vugjpt; path=/; domain=.saint2.su
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Encoding: gzip
|
|
| saint2.su/css/player-additional.css | 91.149.226.78 | 200 OK | 1.8 kB |
URL GET HTTP/1.1saint2.su/css/player-additional.css IP 91.149.226.78:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectsaint2.su FingerprintD8:91:2E:43:4A:2A:D0:43:F7:AC:98:03:5C:7B:C0:39:0E:78:3B:E1 ValidityFri, 05 Apr 2024 13:19:55 GMT - Thu, 04 Jul 2024 13:19:54 GMT
Hashe194d3d68856c327660b808aec8a951b 110cac6be49b37530e50f74076b7042d6b75fefb 4bb8e34961f5716ecb8cf3e95e6473c4066bdfde2e05e72e5a1f6312ba480120
GET /css/player-additional.css HTTP/1.1
Host: saint2.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/embed/nObL8thbTd4
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=3fmsqbvs5ft7elbeqeb9vugjpt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 08:47:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 17:02:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6622a397-19c7"
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.js | 104.17.24.14 | 200 OK | 70 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.js IP 104.17.24.14:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash2849239b95f5a9a2aea3f6ed9420bb88 af32f706407ab08f800c5e697cce92466e735847 1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239
GET /ajax/libs/jquery/3.6.0/jquery.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 70371
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-46744"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1494187
expires: Thu, 17 Apr 2025 08:47:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zFibzgetugCreUMPKMtCuJeQgcF9eOj9oTDkNIufW8zqZsBoubdio%2BDVm4ak2AF2UjRF3rwYgX6C4iM7CN6SsCYKF%2BnA2OxtkpR7enTVutwsNc68kSE99il6UZe847SzXhz4%2BWXe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87ad8c38ef9d5685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.3.1/jquery.cookie.js | 104.17.24.14 | 200 OK | 789 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.3.1/jquery.cookie.js IP 104.17.24.14:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash86bfb3ae149e79524eafbcd1cd0a613a 4c7b840648637688378d746f24037cfdc7a5d2d0 5f8d4cdb53aa201c8dd93712d1342157480d75d03859ea50656ab9ab3d298d30
GET /ajax/libs/jquery-cookie/1.3.1/jquery.cookie.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 789
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-85e"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 905201
expires: Thu, 17 Apr 2025 08:47:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UfBQu%2Bx640uO8bMUizSVhdObuxtHZ175%2F07pI%2FQ5zyPnhSDwgBP4AI0UlV%2FgZLKUY8ObpINW1ygoSm9YHK1ndy1%2FYx0c770y1oHJOd0CzKpnTkCmc6FnLEj0N2j7UaAtKR4kEDCK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87ad8c38efa25685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.bunny.net/rubik/files/rubik-latin-500-normal.woff2 | 194.242.11.186 | 200 OK | 18 kB |
URL GET HTTP/2fonts.bunny.net/rubik/files/rubik-latin-500-normal.woff2 IP 194.242.11.186:443
ASN#34989 ServeTheWorld AS
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectfonts.bunny.net FingerprintCB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F ValidityTue, 09 Apr 2024 10:09:28 GMT - Mon, 08 Jul 2024 10:09:27 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18264, version 1.0 Hash523db333665c3c4bfa066cd376a93065 6f857ba7e2b0feecaac1606886174a971ea1d5ce e2ab9c14e82fc81f6a00ac2fd51038c8613ae1b29c9cc67205c6dd7bde44761a
GET /rubik/files/rubik-latin-500-normal.woff2 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Referer: https://fonts.bunny.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: font/woff2
content-length: 18264
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: "64a64285-4758"
last-modified: Thu, 06 Jul 2023 04:26:45 GMT
cdn-storageserver: SE-344
cdn-fileserver: 318
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/31/2023 20:02:29
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: c603ec97b8a1c63a52320e9b487c5af7
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| saint2.su/assets/saintLogo.png | 91.149.226.78 | 200 OK | 41 kB |
URL GET HTTP/1.1saint2.su/assets/saintLogo.png IP 91.149.226.78:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectsaint2.su FingerprintD8:91:2E:43:4A:2A:D0:43:F7:AC:98:03:5C:7B:C0:39:0E:78:3B:E1 ValidityFri, 05 Apr 2024 13:19:55 GMT - Thu, 04 Jul 2024 13:19:54 GMT
File typePNG image data, 1842 x 1228, 8-bit/color RGBA, non-interlaced Hash9f0dabe61af44e2f7b87d49e4e7ee074 46909887ab5efbaeab1319273ae8adf79548cfa0 876e378d0fd81a2398b7634a828c983d334c578ece02066a8c14cbe24c5c687c
GET /assets/saintLogo.png HTTP/1.1
Host: saint2.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/embed/nObL8thbTd4
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=3fmsqbvs5ft7elbeqeb9vugjpt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 08:47:25 GMT
Content-Type: image/png
Content-Length: 41139
Last-Modified: Sat, 30 Apr 2022 21:33:16 GMT
Connection: keep-alive
ETag: "626dab1c-a0b3"
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Accept-Ranges: bytes
|
|
| simp2.saint2.su/thumbs/gen-65cbe13a53f81-1707860282.jpg | 91.149.235.5 | 200 OK | 35 kB |
URL GET HTTP/2simp2.saint2.su/thumbs/gen-65cbe13a53f81-1707860282.jpg IP 91.149.235.5:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectsimp2.saint2.su FingerprintFF:88:86:B9:30:57:A6:27:A9:07:2D:25:D7:E8:92:C6:81:99:15:B4 ValidityFri, 05 Apr 2024 17:52:57 GMT - Thu, 04 Jul 2024 17:52:56 GMT
File typeJPEG image data, baseline, precision 8, 720x1280, components 3 Hash9301847fed7ee48f4c69e8b63c018e8a 553c4c3232ea1c9266d100906befde8eb77be518 4e34c1e0b4ba89702f9afba2ade141f07707bda6b8797d369677c68965a2e704
GET /thumbs/gen-65cbe13a53f81-1707860282.jpg HTTP/1.1
Host: simp2.saint2.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=3fmsqbvs5ft7elbeqeb9vugjpt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: image/jpeg
content-length: 35268
last-modified: Tue, 13 Feb 2024 21:38:03 GMT
etag: "65cbe13b-89c4"
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
access-control-allow-origin: *, *
access-control-allow-headers: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| na.nawpush.com/tags/163659?version_name=c | 45.133.44.24 | 200 OK | 1.2 kB |
URL GET HTTP/2na.nawpush.com/tags/163659?version_name=c IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectna.nawpush.com FingerprintE4:8A:6D:1E:95:BA:50:33:94:D3:16:FE:4C:61:AA:DE:72:B1:70:87 ValidityThu, 28 Mar 2024 03:00:38 GMT - Wed, 26 Jun 2024 03:00:37 GMT
Hash3ce381d9a44414757d5342e6a7779f33 fceb33a9d483307a0fda5e326e154be7389abcac 2771382eb5fd2aa3dc6d3ce5848d10bf1829106e429625b640f2ee3c96cf1e23
GET /tags/163659?version_name=c HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:26 GMT
content-type: application/json
content-length: 1188
server: nginx/1.24.0
cache-control: max-age=300, public
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| js.capndr.com/advertising.js | 45.133.44.53 | 200 OK | 0 B |
URL GET HTTP/2js.capndr.com/advertising.js IP 45.133.44.53:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectjs.capndr.com Fingerprint0D:30:A1:FB:7E:A0:EC:89:85:17:27:67:37:21:DA:E0:CB:E3:26:06 ValiditySun, 21 Apr 2024 03:00:41 GMT - Sat, 20 Jul 2024 03:00:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Sat, 27 Apr 2024 08:52:26 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| saint2.su/icons/apple-touch-icon.png | 91.149.226.78 | 200 OK | 19 kB |
URL GET HTTP/1.1saint2.su/icons/apple-touch-icon.png IP 91.149.226.78:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectsaint2.su FingerprintD8:91:2E:43:4A:2A:D0:43:F7:AC:98:03:5C:7B:C0:39:0E:78:3B:E1 ValidityFri, 05 Apr 2024 13:19:55 GMT - Thu, 04 Jul 2024 13:19:54 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashdbb95acc5a518f4f0cb4ea29a376e64c 6ece49b91bca3f4b890a4d3536b7ea84b07593bc 4f541cb49b8de0d09c94f289d75e32fce004cd6caa74c1d8ef6f618a4caee707
GET /icons/apple-touch-icon.png HTTP/1.1
Host: saint2.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/embed/nObL8thbTd4
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=3fmsqbvs5ft7elbeqeb9vugjpt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 08:47:26 GMT
Content-Type: image/png
Content-Length: 19089
Last-Modified: Sun, 29 May 2022 00:01:46 GMT
Connection: keep-alive
ETag: "6292b7ea-4a91"
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Accept-Ranges: bytes
|
|
| cdn.plyr.io/3.7.8/plyr.js | 104.27.195.88 | 200 OK | 34 kB |
URL GET HTTP/2cdn.plyr.io/3.7.8/plyr.js IP 104.27.195.88:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerCloudflare, Inc. Subjectcdn.plyr.io Fingerprint82:12:FB:B3:64:22:F5:22:7D:BA:01:9C:97:81:CF:4F:55:01:08:95 ValidityMon, 11 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash937aa0b508e5b8c675ccc9e44c1158af ab39c0e9b0ab16e21b410d0ae43a6756c741c0ba 4bdc4c42a18797aaabe38f455613328f0b27fc5279a907b0fac82c6ab2bcc67a
GET /3.7.8/plyr.js HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cf-bgj: minify
cf-polished: origSize=113183
etag: W/"714122a0383a143c50c9629e2bcb7e1f"
last-modified: Thu, 20 Apr 2023 10:33:44 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 13581810
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cmBv8Q4D8PhjE%2BNt7XkgRy2a7zYMtgF%2ByGn1CHozY56sefRjfJeIa8eidm3BNmGEFRNn0oB3qioimXKlqK8ENoVba077nM1mg2Vn2vXlwB2Tm%2FjjARATRUT9vYQp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ad8c38f9c156cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=163659 | 157.90.84.242 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1fp.metricswpsh.com/fp?tag_id=163659 IP 157.90.84.242:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=163659 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://saint2.su/
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sat, 27 Apr 2024 08:47:26 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://saint2.su
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| c150420df3.8c1204d49f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIzMTkwMjY3NjcwNTkzNDM1NjAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIxLjAiLCJ0YWdfaWQiOjE2MzY1OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= | 45.133.44.52 | 200 OK | 0 B |
URL GET HTTP/2c150420df3.8c1204d49f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIzMTkwMjY3NjcwNTkzNDM1NjAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIxLjAiLCJ0YWdfaWQiOjE2MzY1OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= IP 45.133.44.52:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectc150420df3.8c1204d49f.com Fingerprint90:79:BD:54:D4:E2:04:6E:65:85:C1:E2:1A:CD:05:C8:E0:44:57:F0 ValidityWed, 24 Apr 2024 02:50:16 GMT - Tue, 23 Jul 2024 02:50:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIzMTkwMjY3NjcwNTkzNDM1NjAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIxLjAiLCJ0YWdfaWQiOjE2MzY1OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1
Host: c150420df3.8c1204d49f.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:26 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=163659 | 157.90.84.242 | 204 No Content | 58 B |
URL OPTIONS HTTP/1.1fp.metricswpsh.com/fp?tag_id=163659 IP 157.90.84.242:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hash87385fcd2a67fc74d2fa67366ba68ea2 a604cdbb1d31ce257e8643eee9219c9c724c200c 9307cbb21345500294eae459b18a8ffb2bd2fcccd928a09efbc1e324fa9c9995
POST /fp?tag_id=163659 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
Content-Type: application/json;charset=utf-8
Content-Length: 1836
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 27 Apr 2024 08:47:26 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://saint2.su
Set-Cookie: id=3041792948308335708; Expires=Sun, 27 Apr 2025 08:47:26 GMT; Secure; SameSite=None
Vary: Origin
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 74.125.131.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP 74.125.131.84:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerGoogle Trust Services LLC Subjectaccounts.google.com Fingerprint24:73:6B:52:47:71:E2:CB:E3:4E:89:44:4B:29:D9:F4:C2:A0:F1:14 ValidityMon, 08 Apr 2024 07:33:55 GMT - Mon, 01 Jul 2024 07:33:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:YYqUMhW8g1PdhOBJbqypKmFzl1tGhg:AvvA_NEGM6bmQS0P; Expires=Mon, 27-Apr-2026 08:47:26 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 27 Apr 2024 08:47:26 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQylPsezWTLbcXQ0KWheWb1IfsdrXSZ4qPUWWocaJLlFegtSF8LjbblgO7-lFLSsdw26HbIlrA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-jq38R45fYkIo2DMPZR8-Aw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQylPsezWTLbcXQ0KWheWb1IfsdrXSZ4qPUWWocaJLlFegtSF8LjbblgO7-lFLSsdw26HbIlrA | 74.125.131.84 | 302 Found | 426 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQylPsezWTLbcXQ0KWheWb1IfsdrXSZ4qPUWWocaJLlFegtSF8LjbblgO7-lFLSsdw26HbIlrA IP 74.125.131.84:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerGoogle Trust Services LLC Subjectaccounts.google.com Fingerprint24:73:6B:52:47:71:E2:CB:E3:4E:89:44:4B:29:D9:F4:C2:A0:F1:14 ValidityMon, 08 Apr 2024 07:33:55 GMT - Mon, 01 Jul 2024 07:33:54 GMT
File typeHTML document, ASCII text, with very long lines (404) Hash29ef3014b4be4ee3ad6782aa2392cfc1 f799ecf16addb87f24f3e2ef76a858101e3db9fc 182c62fab91fbefd9b0e8ae4fa7b27fbb5d38cf67baf2310cc1c721241dd8d74
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQylPsezWTLbcXQ0KWheWb1IfsdrXSZ4qPUWWocaJLlFegtSF8LjbblgO7-lFLSsdw26HbIlrA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:stjOGNV3mgEdStTGbA0SE3PERgK1wg:zLVhNNgRas4cWbpc;Path=/;Expires=Mon, 27-Apr-2026 08:47:26 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 27 Apr 2024 08:47:26 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQxF5cqOrieiJNkbSsWXeo5T7Dsp0COmqmmqC2NEFZVmXW0_n_eXc5fXdyozU6QM0GWe3Xu9cg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S587244650%3A1714207646697272&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-1Mq0uuNWQBxtdSohRgCy9Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 426
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.bunny.net/css?family=rubik:500 | 194.242.11.186 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.bunny.net/css?family=rubik:500 IP 194.242.11.186:443
ASN#34989 ServeTheWorld AS
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectfonts.bunny.net FingerprintCB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F ValidityTue, 09 Apr 2024 10:09:28 GMT - Mon, 08 Jul 2024 10:09:27 GMT
Hashf5a068c1454b7f677c681d6969e29ed7 dd645bff900f48916a599acde472e704e65bed05 0ca697ffa06362339d4d2ed3f11332551adf970d82106120e35062bd256e6d4b
GET /css?family=rubik:500 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Tue, 23 Apr 2024 18:47:56 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/23/2024 18:47:56
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 702995473e7ce59c4fc6a5f3f66174ec
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQxF5cqOrieiJNkbSsWXeo5T7Dsp0COmqmmqC2NEFZVmXW0_n_eXc5fXdyozU6QM0GWe3Xu9cg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S587244650%3A1714207646697272&theme=mn&ddm=0 | 74.125.131.84 | 403 Forbidden | 15 kB |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQxF5cqOrieiJNkbSsWXeo5T7Dsp0COmqmmqC2NEFZVmXW0_n_eXc5fXdyozU6QM0GWe3Xu9cg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S587244650%3A1714207646697272&theme=mn&ddm=0 IP 74.125.131.84:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typegzip compressed data, max compression Hash9dc16525a7048e466300a65fdfdcdaf3 670d5c5fb2fbdef76a1e6c1882c8c7bda6e6fe57 ac6f4a31c127a6c319760dc440ce2845b8feb614b539fbb84aa7c9b32c10534c
GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQxF5cqOrieiJNkbSsWXeo5T7Dsp0COmqmmqC2NEFZVmXW0_n_eXc5fXdyozU6QM0GWe3Xu9cg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S587244650%3A1714207646697272&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 27 Apr 2024 08:47:26 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-t2GXEn9hqGRkHCYclNj95g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| js.wpadmngr.com/static/adManager.js | 45.133.44.52 | 200 OK | 1.7 kB |
URL GET HTTP/2js.wpadmngr.com/static/adManager.js IP 45.133.44.52:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectjs.wpadmngr.com Fingerprint60:8B:32:7F:ED:77:26:33:0E:F0:C1:0F:02:66:F5:DB:C6:0D:1F:70 ValidityMon, 11 Mar 2024 04:00:58 GMT - Sun, 09 Jun 2024 04:00:57 GMT
File typeJavaScript source, ASCII text, with very long lines (1887), with no line terminators Hash8263610639624a65707a41479379709a 1653610e4e9b3814c8e68eb96814378d71be9776 8e6ca46c563e6ef9d3245fe116672ac9ff7b807033852fa0452493b5fb2d8a0c
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 23 Apr 2024 09:45:14 GMT
etag: W/"6627832a-6c7"
content-encoding: gzip
expires: Sat, 27 Apr 2024 08:52:25 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cdn.plyr.io/3.7.8/plyr.css | 104.27.195.88 | 200 OK | 32 kB |
URL GET HTTP/2cdn.plyr.io/3.7.8/plyr.css IP 104.27.195.88:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerCloudflare, Inc. Subjectcdn.plyr.io Fingerprint82:12:FB:B3:64:22:F5:22:7D:BA:01:9C:97:81:CF:4F:55:01:08:95 ValidityMon, 11 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3.7.8/plyr.css HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cf-bgj: minify
cf-polished: origSize=32564
etag: W/"411acf0fd5fe4d42c580db72f82077fd"
last-modified: Thu, 20 Apr 2023 10:33:44 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 13056695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FCXGkTO78XJ8NLm7u0gmTizHm%2FzzwMFExAENyFaDR0C2J3Sr2Map31eoxyE54h46l4LQfdGS0UQV0SowgVA2T5L0gcD64dtTpF65J5NKdL2aHg0AmNRBLXeUJuKO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ad8c38f9bf56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| js.capndr.com/popunder-admanager/build.m.js | 45.133.44.53 | 200 OK | 97 kB |
URL GET HTTP/2js.capndr.com/popunder-admanager/build.m.js IP 45.133.44.53:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectjs.capndr.com Fingerprint0D:30:A1:FB:7E:A0:EC:89:85:17:27:67:37:21:DA:E0:CB:E3:26:06 ValiditySun, 21 Apr 2024 03:00:41 GMT - Sat, 20 Jul 2024 03:00:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder-admanager/build.m.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:26 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 16 Apr 2024 14:24:01 GMT
etag: W/"661e8a01-17ae8"
content-encoding: gzip
expires: Sat, 27 Apr 2024 08:52:26 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| mcpuwpsh.com/get/ | 94.130.197.240 | 200 OK | 14 kB |
IP 94.130.197.240:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectpuwpush.com Fingerprint53:1A:81:DB:A5:78:D8:1D:93:BF:BA:0F:71:6B:43:8D:3F:33:58:D1 ValidityFri, 01 Mar 2024 09:39:36 GMT - Thu, 30 May 2024 09:39:35 GMT
Hash8a8058b2d8e2eecf3df6e90954d2e37c 2a6cc4c1149900a54453d0addb9e2b1ca0804e19 59beb47649ebae5b0afe03fbe3e621909b6d63d207d995d947da1923fbe5669f
POST /get/ HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
Content-Type: text/plain;charset=UTF-8
Content-Length: 998
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 27 Apr 2024 08:47:27 GMT
content-type: application/json
content-length: 14249
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| saint2.su/icons/favicon-16x16.png | 91.149.226.78 | 200 OK | 610 B |
URL GET HTTP/1.1saint2.su/icons/favicon-16x16.png IP 91.149.226.78:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectsaint2.su FingerprintD8:91:2E:43:4A:2A:D0:43:F7:AC:98:03:5C:7B:C0:39:0E:78:3B:E1 ValidityFri, 05 Apr 2024 13:19:55 GMT - Thu, 04 Jul 2024 13:19:54 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash4ef8321dcb1532430b28ca92ee1484d0 59268b58e87b9b50d36d9f389c47e8aca5e3be38 e3f9335cb577f4989998a20171ea8af2d2eac5f23603b0523a291ed49eaf47ab
GET /icons/favicon-16x16.png HTTP/1.1
Host: saint2.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/embed/nObL8thbTd4
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=3fmsqbvs5ft7elbeqeb9vugjpt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 08:47:26 GMT
Content-Type: image/png
Content-Length: 610
Last-Modified: Sun, 29 May 2022 00:01:46 GMT
Connection: keep-alive
ETag: "6292b7ea-262"
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Accept-Ranges: bytes
|
|
| storage.multstorage.com/log/count.html | 172.67.174.51 | 200 OK | 882 B |
URL GET HTTP/2storage.multstorage.com/log/count.html IP 172.67.174.51:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerGoogle Trust Services LLC Subjectmultstorage.com Fingerprint63:F0:24:29:21:22:E5:42:33:61:B5:20:05:1B:EF:36:81:F5:7B:0A ValiditySun, 17 Mar 2024 08:38:54 GMT - Sat, 15 Jun 2024 08:38:53 GMT
File typeHTML document, ASCII text, with very long lines (919), with no line terminators Hash053b1fe641da8057571d40ebaf1624ab 09b2648b7d08c84621298f0b939cea5170a65022 6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:26 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: 0dfdd5061008220297cf1b29261fdf16
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6IPcKQz2JcJCTDGaQRiYl0dpxjIeacE1dOgAB2qeiVYoHHodKU%2FUoJ2W3QqqJca0FDfLm%2F8OLfQ7P%2B0j0p4fDMfU4trfNr3dLYR%2B0W99FcRPIX6QETBiIJCDkfsb03eBXveFHVtn04gEVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ad8c3ccbf30b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.plyr.io/3.7.8/plyr.svg | 104.27.195.88 | 200 OK | 5.8 kB |
URL GET HTTP/2cdn.plyr.io/3.7.8/plyr.svg IP 104.27.195.88:443
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerCloudflare, Inc. Subjectcdn.plyr.io Fingerprint82:12:FB:B3:64:22:F5:22:7D:BA:01:9C:97:81:CF:4F:55:01:08:95 ValidityMon, 11 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0515cfb132a7e4e063467814f50e32c4 2d89955170c71b3c1678526168318edd55e16996 f5322aaaaa48e83be4443010300845989622757a8b98ccab908f1e650171e4e2
GET /3.7.8/plyr.svg HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
Origin: https://saint2.su
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
etag: W/"3a727a9b7eef825081d78cc6e48aaadf"
last-modified: Thu, 20 Apr 2023 10:33:44 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 7069886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kWhoT8OfGlf%2BBIyqiirX1aF02%2F4%2BPXHq50GbUYJ%2B%2FyM%2Bf8MnmUA%2B56RyqRtoDH%2BTHV%2Fe1rbnNK3M9m92Vs75SwPrI9U1a0%2BqawFjNLkkPqUgWbPOPQp5sDv9gTUy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ad8c3aaadf56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| js.wpadmngr.com/static/adManager.m.js | 45.133.44.52 | 200 OK | 109 kB |
URL GET HTTP/2js.wpadmngr.com/static/adManager.m.js IP 45.133.44.52:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://saint2.su/embed/nObL8thbTd4 CertificateIssuerLet's Encrypt Subjectjs.wpadmngr.com Fingerprint60:8B:32:7F:ED:77:26:33:0E:F0:C1:0F:02:66:F5:DB:C6:0D:1F:70 ValidityMon, 11 Mar 2024 04:00:58 GMT - Sun, 09 Jun 2024 04:00:57 GMT
Size109 kB (109340 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saint2.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 08:47:25 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 23 Apr 2024 09:45:19 GMT
etag: W/"6627832f-1ab1c"
content-encoding: gzip
expires: Sat, 27 Apr 2024 08:52:25 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|