| kalraumisurvey.space/js/s-storageService.js.c6af5467.js | 172.67.167.172 | | 1.3 kB |
URL kalraumisurvey.space/js/s-storageService.js.c6af5467.js IP 172.67.167.172:0
File typeASCII text, with very long lines (2170), with no line terminators Hash1dd6476392dd0aa73210c07c992a5500 891106e98f6ae5d3a7d873a2ac10f85defd94f72 c54f5eb5635eba322d15e2d5e5f8e6cf073ba6a732041d3d905dbb57a452670e
GET /js/s-storageService.js.c6af5467.js HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"65707060-87a"
last-modified: Wed, 06 Dec 2023 13:00:16 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=66quRVPntmxjZKbLTGTS3QmhlT0CmviB1kaWGtPxn2bdabtGQqZMC7wuGU9Baf1w0MhCOeQIs8sZSKwzYw4wK2PidADYXWMDVdFBL2Azp%2B%2FSwcp8Z59jAuU1XJuc9KjYX0UukANrMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8316259e29ba568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/scripts/prefetcher.js | 172.67.167.172 | | 4.5 kB |
URL kalraumisurvey.space/scripts/prefetcher.js IP 172.67.167.172:0
File typeASCII text, with very long lines (10761), with no line terminators Hashb1515a41bd47d83919c0f9d453006b65 10ce4d4cb080725e5cee62304ef07fef85971ef7 a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f
GET /scripts/prefetcher.js HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"65707061-2a09"
last-modified: Wed, 06 Dec 2023 13:00:17 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=axg6Aybz%2F74K5a8CnDlwAa0IdB6PJTIcZiU%2BoMHuo%2B1T3oGi2w4zRQL2kwwm%2FzO9JmxunwV0KpsCGD20rlBOgeULcctxT0%2BBLUwVcXCQsDH4PgoEWMix%2Fhre0mfUbPqEBnjAPCLUUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8316259f4b51568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/js/_prefetcher.3614355a.js | 172.67.167.172 | | 705 B |
URL kalraumisurvey.space/js/_prefetcher.3614355a.js IP 172.67.167.172:0
File typeASCII text, with very long lines (1371), with no line terminators Hashf26371701ca0ea880b86d89062e8f61a 807bd478ad4368f28d8330556e8e326224671cc1 05f31d6772c32c0f3eca3da7fffc56de88f99cb11fd022215ee95a80ba6798b7
GET /js/_prefetcher.3614355a.js HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"65707062-55b"
last-modified: Wed, 06 Dec 2023 13:00:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eprb3pBhCEqgs%2FX2Xq79nE3QUBFIGSC74iwRcnYWeXJm7imispVATBjlU7ZFpLwXnSAEa35SWZXgOUXct5EEiCBSoWmhP%2BhFczqgxzwLlwfTMo8igCLcjNmx0z7jWIl3LJ3ONNdtvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8316259e29b3568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dortmark.net/sync-metrics | 139.45.197.248 | | 17 B |
URL dortmark.net/sync-metrics IP 139.45.197.248:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 665
Origin: https://kalraumisurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: f63c396d20fe1e4b02d7b139e11a3c37
access-control-allow-origin: https://kalraumisurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| dortmark.net/sync-do | 139.45.197.248 | | 0 B |
IP 139.45.197.248:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://kalraumisurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 17:11:15 GMT
content-length: 0
access-control-allow-origin: https://kalraumisurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| dortmark.net/sync-do | 139.45.197.248 | | 179 B |
IP 139.45.197.248:0
File typeJSON data\012- , ASCII text, with no line terminators Hash081142aa1c9267422ee7fd25ac457579 cf8a223610da412aab4cc9aec68f6f304258b3ce 58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://kalraumisurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: 701d3f72072ee177a8003857b20c577e
access-control-allow-origin: https://kalraumisurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| kalraumisurvey.space/img/comments/person-1.webp | 172.67.167.172 | | 1.1 kB |
URL kalraumisurvey.space/img/comments/person-1.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash56441eb05774cd7ed15d829e06947346 25649e1ed3820d97bd8bcdc737974e0c65adc1aa 5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02
GET /img/comments/person-1.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 1122
last-modified: Wed, 06 Dec 2023 13:00:17 GMT
vary: Accept-Encoding
etag: "65707061-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aDdoq1CgB5rCOTshDY0mohAqn0Tgwekcj86NZ5pUgdmq5IHqS6llUlQs66ssGkJKV0JSl4KiNeyAiaU0uO%2BBujvxahaCr7%2BcWexP9X1qeMwyIgw5SMR%2BBDQhjUNizyX0WIo4%2B%2FX81g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a378b1568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/img/comments/person-14.webp | 172.67.167.172 | | 1.7 kB |
URL kalraumisurvey.space/img/comments/person-14.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash7dc8c2c56e77f2a329230f677b6e5bf8 23b56b25ef6370e93d6c070c212684ba99612fcc 49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc
GET /img/comments/person-14.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 1672
last-modified: Wed, 06 Dec 2023 13:00:17 GMT
vary: Accept-Encoding
etag: "65707061-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JpTrVZKrQHNt%2FaloH5S7BsI1149pGWlAoX2J%2FRxe7EtpeB%2F0L6IYwLoBLuXmhSYFusMapNf31FsAnbXSadbGsxDLog13DiqFf%2FLLIO9%2BbS0ywssehwp0SuSSddzkF24itgOkBe%2B3GA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a378b4568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/img/comments/person-2.webp | 172.67.167.172 | | 1.1 kB |
URL kalraumisurvey.space/img/comments/person-2.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashcd20c1e86fd66d301b6e35a97af461fd 3f92712ef775681d59dfd96bb9b6429227a944e9 0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0
GET /img/comments/person-2.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 1104
last-modified: Wed, 06 Dec 2023 13:00:18 GMT
vary: Accept-Encoding
etag: "65707062-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QleUUdTNXgj4eJUJ2bvsOnMQt2MzRZtJAyYyMEPMnTx3Alr%2B5kLbWq0BX%2BOotK5gSVsiKDZ%2BgrFi%2FlouGbS1mU9YVMANoiKkwdzs2%2FozemGvfRJTO1WcbIuIpYS%2FGduOAUmmCgCn1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a378b5568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/img/comments/person-4.webp | 172.67.167.172 | | 1.4 kB |
URL kalraumisurvey.space/img/comments/person-4.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hasha78233e0cf1abbb3c5c98ef32a087d96 5ac6cdfb7f9e7be828a4d01e57f10379ef173889 3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7
GET /img/comments/person-4.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 1356
last-modified: Wed, 06 Dec 2023 13:00:17 GMT
vary: Accept-Encoding
etag: "65707061-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6318
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mzX8YqJkfsn62zt6%2BLFXTyPKzV1ByQo2vnI5tds0utYhf6xcIe9urPRN2%2F8e1as9LXiwgqXsm1MUbRiOqR%2Frsc7EWpPhBg66Ktt2nzMwNKsBlRcrw0b3B%2FDVBmwbODDJc0JfXtPeUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a378b8568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/img/comments/person-5.webp | 172.67.167.172 | | 1.8 kB |
URL kalraumisurvey.space/img/comments/person-5.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash10f4b15b0a471e17ef598de73ffb319b e3fd3478fa27f2cce0a9b945c50d640832594594 21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378
GET /img/comments/person-5.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 1846
last-modified: Wed, 06 Dec 2023 13:00:18 GMT
vary: Accept-Encoding
etag: "65707062-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6318
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4PG3tuK7tkoZzQPQGAlzit5fx6ZejdTwkqsW1IqPPaVqifWT9Gh%2F%2FlpuDNICHnY8Cc0nRBnDbJoJ%2BnbbAlHue3lGAdoSdXXhctLoFyPzFcHk2ByQOAMs8zYhe5oQhaDSPcYrx7DMmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a388cb568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api.js?render=explicit&hl=en | 142.250.74.132 | | 2.4 kB |
URL www.google.com/recaptcha/api.js?render=explicit&hl=en IP 142.250.74.132:0
File typegzip compressed data\012- data Hash301344183494fcaad4f4be09db1af910 e7211b619a3de5708925891865494f2603568d32 62b16a129c5ba6fd0ad795412afc79fc0aba6f374647a9829c6fbd349c5316eb
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 06 Dec 2023 17:11:15 GMT
date: Wed, 06 Dec 2023 17:11:15 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kalraumisurvey.space/pfe/current/stattag.js | 172.67.167.172 | | 9.2 kB |
URL kalraumisurvey.space/pfe/current/stattag.js IP 172.67.167.172:0
File typeASCII text, with very long lines (19024), with no line terminators Hasheee0fa1cefab154ab482da73fe023bee 1d3c88baee1b8527a30190d694cc8c6378b7f3bc 333132f2f62e5bcef5ab8a1950e7a8342023c0cea68b563b1130bea16dd0bc6a
GET /pfe/current/stattag.js HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"65707060-4a50"
last-modified: Wed, 06 Dec 2023 13:00:16 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6318
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aiEhj5PdGZ0PbMD9v64dtWgBpfBp7Az612AlwKUTybaBzb2RjDex7iSn%2B6mPsFIG69OqSfFPju77ILOkYGmsNtxUqj9lRBy7p1TWwAdofapqVOca9201CCAYRzmhbiLcSO4E0vuo4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a17e69568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/img/comments/person-3.webp | 172.67.167.172 | | 982 B |
URL kalraumisurvey.space/img/comments/person-3.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash489a7f64f96c92f3325af92fa2af78b5 098cbcbd7ee329321d2fb7bac74535ab258a1f97 fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f
GET /img/comments/person-3.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 982
last-modified: Wed, 06 Dec 2023 13:00:17 GMT
vary: Accept-Encoding
etag: "65707061-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6318
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OwVMqFJelLaXhCCs%2FPTD9PHl1nH9epnrRbS94qHGUkj7THGw3bcn6nWXrnkjh0YjV7zYb8Tw%2FHsHGvfGgrOsOjVzXcBWmtXKd54CTKaQCbqSbkVnXnyrUCzctDk7K%2FnR66RceCgI4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a388d6568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/img/comments/person-9.webp | 172.67.167.172 | | 1.7 kB |
URL kalraumisurvey.space/img/comments/person-9.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash12f578cbef79e63d347e2c8384c03ce6 496afa2132dc6a09052596587de749aefa634975 be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa
GET /img/comments/person-9.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 1654
last-modified: Wed, 06 Dec 2023 13:00:17 GMT
vary: Accept-Encoding
etag: "65707061-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6318
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TlFMTE9lXj7DaYMfbCWvnmoQgA%2FIomBYWsEQBIKP792DN%2Fum1doXs%2BSbibnHD9wVGPnTwelv0RUpS3QZq4RF7W3ZlwkMkn7BmH5zq%2BBXQVx%2FnxMCB52GTMQQmfupkeDHLciNMaPbMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a388d9568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/js/v-index.mjs.d38a70ed.js | 172.67.167.172 | | 10 kB |
URL kalraumisurvey.space/js/v-index.mjs.d38a70ed.js IP 172.67.167.172:0
File typeASCII text, with very long lines (35287), with no line terminators Hash0c43d70da24f6d40bd19159def0f36b5 60629d05c7f6e0da906b2d39cf527a7be7731057 cdb8232fdfbdea443d1c55f3ea3bdee31cdb55986bfb441dfbb5a7edcc486ed0
GET /js/v-index.mjs.d38a70ed.js HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"65707060-89d7"
last-modified: Wed, 06 Dec 2023 13:00:16 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xRdtS0L1CMKkeO6%2ByF4CwLzuXbGnaPz7GqkbMYKk7Lzum4uhWp6Tp1Yrb%2FZcdRqdCLwpOSpZocjlnMPz%2BkAqUDnKKO9u7SWkVfoN2BgYcv3vtQDTosNl%2B6Je3lfWBMmGtkDdRwOS9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a18e70568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/img/comments/person-11.webp | 172.67.167.172 | | 1.5 kB |
URL kalraumisurvey.space/img/comments/person-11.webp IP 172.67.167.172:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash0100f949c3302195d906e13bc199399d 2b39580485f3e9ca81a8a2ead4747f89731800f4 10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511
GET /img/comments/person-11.webp HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: image/webp
content-length: 1526
last-modified: Wed, 06 Dec 2023 13:00:17 GMT
vary: Accept-Encoding
etag: "65707061-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6317
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jSnaoAe7tSAsquTEW95SAR1dN%2BYT8YGgCcHcQChcaDwdxzfUa6ACyXLeiTHvrzx4qp7IH09yHQpYrmGNsfmvdAGl7yaYsK8kAP%2FipoGxxRohtEyG0QdbmMvH1eSzyLEl89zGmG9Y3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a388dd568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| kalraumisurvey.space/js/v-node.js.8ec9d2f8.js | 172.67.167.172 | | 3.1 kB |
URL kalraumisurvey.space/js/v-node.js.8ec9d2f8.js IP 172.67.167.172:0
File typeASCII text, with very long lines (6251), with no line terminators Hash1d81b11b8c664054f71cd9a03a0f7630 bafb26aafc54b7b85f038bb512cead54ce11282f 67316469e90547536f7c0c044815a60330d1b5279f5ad05f06d4890d0005e242
GET /js/v-node.js.8ec9d2f8.js HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"65707062-186b"
last-modified: Wed, 06 Dec 2023 13:00:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I8a0K1zObXDo3xz1tizI9XKgaIbZ82gSUATikyHMOftb9kEQ2aOvUBR5suRAPsWt3KSa9XfHbxoWOcZGssGFOoBH%2FY%2F92czGM3w7Z75xcktrKEmDGkPVncER42VmuUaSx9aqDSm8XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a18e75568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dortmark.net/sync-metrics | 139.45.197.248 | | 17 B |
URL dortmark.net/sync-metrics IP 139.45.197.248:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1605
Origin: https://kalraumisurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: d3c2501a5082e49682dd8aa6f1a16ed7
access-control-allow-origin: https://kalraumisurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a | 139.45.195.253 | | 12 B |
URL datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a IP 139.45.195.253:0
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1367
Origin: https://kalraumisurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 06 Dec 2023 17:11:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://kalraumisurvey.space
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js | 142.250.74.99 | | 191 kB |
URL www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js IP 142.250.74.99:0
File typeASCII text, with very long lines (563) Size191 kB (190682 bytes) Hash23b9dd721490a4062ba8d01454ef6ba9 efdbb7331585411f7d397dacbf51fd3e95f3031d 4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kalraumisurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 13:18:51 GMT
expires: Thu, 05 Dec 2024 13:18:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 13945
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kalraumisurvey.space/js/config/comments/en.json | 172.67.167.172 | | 1.6 kB |
URL kalraumisurvey.space/js/config/comments/en.json IP 172.67.167.172:0
File typeJSON data\012- , Unicode text, UTF-8 text Hash78839fd14b7a4af467f2af5e01fa3e78 6caef62470c7af62bff2f68158df90ff3d7944b0 e7c39794bf2d944828bebc5f9cb494b6377a69e40d506918ee52a7582794fefa
GET /js/config/comments/en.json HTTP/1.1
Host: kalraumisurvey.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; syncedCookie=true; oaidts=1701882681; ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 17:11:15 GMT
content-type: application/json
last-modified: Wed, 06 Dec 2023 13:00:16 GMT
vary: Accept-Encoding
etag: W/"65707060-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3MpTJhr8%2BPU1REYHBHPbufhyuSZ2MeL04aaa6MP%2FzyNfHGnoGGb3StuS13Pkagj%2FAFL218%2Bm7km5nI8i3wVT%2Bs7QiLJmyZZF9aPBFs1nexN1BwKhIy%2Frovr8%2BLHFXAkGP4zr6bgUzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831625a18e6e568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dortmark.net/sync-metrics | 139.45.197.248 | | 17 B |
URL dortmark.net/sync-metrics IP 139.45.197.248:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 747
Origin: https://kalraumisurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 17:11:16 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: ac363b18e2ce048fa1ce289dc72282b8
access-control-allow-origin: https://kalraumisurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 | 139.45.195.8 | | 43 B |
URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 IP 139.45.195.8:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 17:11:34 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3k0b6tn7gidrndpjkm3608de8p4bq0vb; expires=Thu, 05 Dec 2024 17:11:34 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|