send.cm/qr/69DQ8
200 OK 334 B IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type PNG image data, 135 x 135, 1-bit grayscale, non-interlaced\012- data
Hash 8e972b5480904baad9e19e169115dca9
e23b478a4502c4efa4c5662f4d7ece5889b9aeeb
04eb4a3c84a6d9f1bf3c04f5c09483eb5d19854058b28057396b4441d7a26203
GET /qr/69DQ8 HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: image/png
content-length: 334
content-transfer-encoding: binary
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kA5tWtNw95WPJdgsTSRbkWfYF9Mze0EKmlNI4o9qdD3USdd9bM2CSJ4SIDByJfU5hnRmnGGtIyG3despTMwK8QG6FZrZX%2B%2Bhf6UMJITXAWhOceQBk4jfmt0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003619fa0b61-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
200 OK 82 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 82076, version 1.1\012- data
Hash dac78b0f1626eb1aa95d41b488e699c1
a377d0df34945fc45bdc030dc63139bd9cf28a2d
ee6d9467e82f91146b9f71f3ac572d66f4aeed0f261b30ef4765550edc11119d
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: font/woff
content-length: 82076
last-modified: Thu, 17 Sep 2020 12:29:20 GMT
vary: Accept-Encoding
etag: "5f6356a0-1409c"
expires: Sat, 11 Nov 2023 16:42:52 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 335271
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ckQpCqDl1BABSXjqP3ICBiFj5Ttl89XI1AzFlxSb9qg8nCUeM5m1hgHZvqkVgZtV%2B1on9aWviL08zmutl3Wd%2FHpDmZXHfX0FlnE5DYUxJnjE2E%2ByK8LVnW4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c70036fa180b61-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
200 OK 77 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 77420, version 1.1\012- data
Hash 2afba28a9ce96315436db858db163c47
550d4374a60527b4f68d4700019aaac11a9140a2
b51d665d9cfebb31a2b61491bf408a172a5791166a0eb99a57ae4a7acbcba0d4
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: font/woff
content-length: 77420
last-modified: Thu, 17 Sep 2020 12:29:21 GMT
vary: Accept-Encoding
etag: "5f6356a1-12e6c"
expires: Sat, 11 Nov 2023 16:43:34 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 172942
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=miCyiHRdTnflRrD78Mbyj8T%2FIy2zcKDdJIgl50kloIJIn6WBIb1wrBGgrFx7pYIcy7nnByxVM9Hn5VKAHeFgwJefq7qRhoaUtpfbjPE4bKUITipDKuYo9qQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c70036fa190b61-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff
200 OK 82 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 81760, version 1.1\012- data
Hash 220843e2f1927e726e78ca63f426ce50
d86801f8452cda25025530f406773162decd1458
ae9310191397b69cd6dd015ba0c6f9d674f493d35384f29c9c7d23e3c7df0d24
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: font/woff
content-length: 81760
last-modified: Thu, 17 Sep 2020 12:29:20 GMT
vary: Accept-Encoding
etag: "5f6356a0-13f60"
expires: Sat, 11 Nov 2023 16:45:04 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 424636
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ppSO4%2BTON7kySZSfZ%2FVZxGhvI2zWBKLa3L6WR7BcmDhOhhy41OMekppdQkTtLpYYzzwgjl%2BOImLcCn8SiMNAMM45XtlDRxXakMFKOVouddXzTW9pZ0g6IGw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c70036fa1a0b61-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/css/dl.min.css
200 OK 30 kB URL GET HTTP/3 send.cm/static/css/dl.min.css
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3e85e3b581d51ddba21136119002fc2d
038a7216f7187936b4f4e5bee0975bf44e3e1449
dde25a807ebc087b35d1bbe9b3030ea528a52e414ce29a7894abd937bf67e7c6
GET /static/css/dl.min.css HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: text/css
last-modified: Thu, 07 Sep 2023 13:24:21 GMT
etag: W/"2bee9-604c4c72211a7-gzip"
vary: Accept-Encoding
expires: Mon, 27 Nov 2023 02:49:46 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oq3gl09klnTXPwWCuNtKZ2tp%2BnKeurCUfwW3l5ld72ha3cqc6G7WqLrKPuTXJF4Z8C%2BgRcdc0nvHvsL6%2FTQTfBGl%2FqpNxTndI8yny9ifPFoBWEO9e%2B%2F%2F3XE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003609f60b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d2dkurdav21mkk.cloudfront.net/?rukdd=984022
200 OK 55 kB URL GET HTTP/2 d2dkurdav21mkk.cloudfront.net/?rukdd=984022
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash d8e22431e5dc3551b9d9513fd05dbd66
af121d40af2c3e867fd50ce0d5517ac9ddddf738
6af13c7a8a62f555ac44d97d21d7692684cdbbc08c4f69722e22e8e7f3f0d8c0
GET /?rukdd=984022 HTTP/1.1
Host: d2dkurdav21mkk.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 54835
date: Mon, 27 Nov 2023 02:39:27 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: g0_z_vh6Nvk7R78sQ4wa1j-XL-xXK2rVXdLVLfiysroB9iUeK2yj6g==
X-Firefox-Spdy: h2
walker.send.cm/s.php?action_name=send.cm%2Fjg8a6x2bh39i&idsite=1&rec=1&r=127732&h=2&m=39&s=31&url=https%3A%2F%2Fsend.cm%2Fjg8a6x2bh39i&_id=5ad4cba0a13fa5cc&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=CAONFl&pf_net=15&pf_srv=183&pf_tfr=95&uadata=%7B%7D
204 No Content 0 B URL POST HTTP/3 walker.send.cm/s.php?action_name=send.cm%2Fjg8a6x2bh39i&idsite=1&rec=1&r=127732&h=2&m=39&s=31&url=https%3A%2F%2Fsend.cm%2Fjg8a6x2bh39i&_id=5ad4cba0a13fa5cc&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=CAONFl&pf_net=15&pf_srv=183&pf_tfr=95&uadata=%7B%7D
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /s.php?action_name=send.cm%2Fjg8a6x2bh39i&idsite=1&rec=1&r=127732&h=2&m=39&s=31&url=https%3A%2F%2Fsend.cm%2Fjg8a6x2bh39i&_id=5ad4cba0a13fa5cc&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=CAONFl&pf_net=15&pf_srv=183&pf_tfr=95&uadata=%7B%7D HTTP/1.1
Host: walker.send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/3 204 No Content
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
content-encoding: none
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nlc2rr7h0gtwpG7HppMRCLyVWEVso%2BKjBs8JwXPonWNxs5r%2FpyMpWf8K4Ae3FoPwn1cUZBmJg0NmbwhgYOW9ieajySoHMAYcVW7wSDt%2B5RRScmj5SHMWdBtOxEC43HDS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c700384a2f0b61-OSL
alt-svc: h3=":443"; ma=86400
fvcwqkkqmuv.com/solid.gif?z=1951167&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
200 OK 43 B URL POST HTTP/2 fvcwqkkqmuv.com/solid.gif?z=1951167&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1951167&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: UID=2311262139adf8a76e51584b22b9a4fc9f33; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
send.cm/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL GET HTTP/3 send.cm/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (12331)
Hash 88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: application/javascript
last-modified: Thu, 16 Nov 2023 21:55:48 GMT
etag: W/"65568fe4-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0YeGOqQ59%2BcLyYpYrk246CD0YvPvwJ34CZNL6Lrp2xEB39sVQP%2FYgQEHHjo0ezBBq08t4ciWqcFT9guIyErT5bsG8tsieUJTi%2BHdirvx0UASj2Ev39uokWk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c7003619fe0b61-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 29 Nov 2023 02:39:27 GMT
cache-control: max-age=172800, public
content-encoding: gzip
riperfienwa.com/VkpaY1M3KDkObDd3OEUmJCZnRmEQb2glN2QuMRYhMissUWI7ITFNMDolLwc1JCU0F304Ly5GYRAcOyQ7IwQ0CB8UPRgyAT49GCA0IgsPJSszCB8XHBciazkVLiIMKQs5GxIwAhgQMxQiHD02NwMFJRUwFh8OHiUFMw8YNhkULTEvCyF6HScCIgMOBDgdHB8xMAIiKiQVMQQMIWMfKB4xawMfGxQVHg8yJxQQHxwiBiEbGCICBg9qECYOHxskCxA6AzE4ExsYBCQUGwsTHQEmbzoXA3s7OzQyAAgPOxoIDhcdASZvIRYXED80OxgBEQhiNQg9JTYOD3cQFRl6awILPRsKNwUlPBhTPzIYNlc1DgwqOhAABzsiJDIGGCdqNx0cWxQFHDY6Cy4EFjQSYgIIISQZCCI6BwUzbzkLMQQCNBZiKBlTNHAgKQw9JncRLzojBjkzBhQFPQYXFCw
200 OK 1.2 kB URL GET HTTP/2 riperfienwa.com/VkpaY1M3KDkObDd3OEUmJCZnRmEQb2glN2QuMRYhMissUWI7ITFNMDolLwc1JCU0F304Ly5GYRAcOyQ7IwQ0CB8UPRgyAT49GCA0IgsPJSszCB8XHBciazkVLiIMKQs5GxIwAhgQMxQiHD02NwMFJRUwFh8OHiUFMw8YNhkULTEvCyF6HScCIgMOBDgdHB8xMAIiKiQVMQQMIWMfKB4xawMfGxQVHg8yJxQQHxwiBiEbGCICBg9qECYOHxskCxA6AzE4ExsYBCQUGwsTHQEmbzoXA3s7OzQyAAgPOxoIDhcdASZvIRYXED80OxgBEQhiNQg9JTYOD3cQFRl6awILPRsKNwUlPBhTPzIYNlc1DgwqOhAABzsiJDIGGCdqNx0cWxQFHDY6Cy4EFjQSYgIIISQZCCI6BwUzbzkLMQQCNBZiKBlTNHAgKQw9JncRLzojBjkzBhQFPQYXFCw
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerAmazon
Subjectriperfienwa.com
Fingerprint4B:12:B3:11:21:59:25:3B:20:8F:04:FD:04:71:69:B3:30:E1:A0:FA
ValidityWed, 22 Nov 2023 00:00:00 GMT - Fri, 20 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3049), with no line terminators
Hash 37f4bef4d2acb72825cf6c0c41fb331e
758817e6a3df09cf271cef5278bc0d6005eee11a
36e1a87a26d374bcd2016359b4c0e5f231e94110a72e088fb141312fe96b86ad
GET /VkpaY1M3KDkObDd3OEUmJCZnRmEQb2glN2QuMRYhMissUWI7ITFNMDolLwc1JCU0F304Ly5GYRAcOyQ7IwQ0CB8UPRgyAT49GCA0IgsPJSszCB8XHBciazkVLiIMKQs5GxIwAhgQMxQiHD02NwMFJRUwFh8OHiUFMw8YNhkULTEvCyF6HScCIgMOBDgdHB8xMAIiKiQVMQQMIWMfKB4xawMfGxQVHg8yJxQQHxwiBiEbGCICBg9qECYOHxskCxA6AzE4ExsYBCQUGwsTHQEmbzoXA3s7OzQyAAgPOxoIDhcdASZvIRYXED80OxgBEQhiNQg9JTYOD3cQFRl6awILPRsKNwUlPBhTPzIYNlc1DgwqOhAABzsiJDIGGCdqNx0cWxQFHDY6Cy4EFjQSYgIIISQZCCI6BwUzbzkLMQQCNBZiKBlTNHAgKQw9JncRLzojBjkzBhQFPQYXFCw HTTP/1.1
Host: riperfienwa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1197
date: Mon, 27 Nov 2023 02:39:28 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: YecSDo6jGL7dsNyQDo_3-o68dVBL8mIqsjZJj2pkkDpecjToRgcvzw==
X-Firefox-Spdy: h2
send.cm/lib/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2
200 OK 74 kB URL GET HTTP/3 send.cm/lib/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 74256, version 329.-17761\012- data
Hash 418dad87601f9c8abd0e5798c0dc1feb
a6b003ef506e92d05cde73adf67487d7fd7ec6df
f18c486a80175cf02fee0e05c2b4acd86c04cdbaecec61c1ef91f920509b5efe
GET /lib/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/lib/@fortawesome/fontawesome-free/css/fa.min.css
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: font/woff2
content-length: 74256
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
etag: "12210-5ae64b14b0680"
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cache-control: max-age=259200
cf-cache-status: HIT
age: 6076
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ZZ2SM5dWagRLoRIGSnBgWUaWSKy2y0NHlhoC8CqChc0V83OLObBGgi3X%2BzzhDh6P%2BaFec8g38RZdP1U2m4RomQApzSJRyOm2BUxFZOdLd1uZOr4MpRiqmQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c7003a7a850b61-OSL
alt-svc: h3=":443"; ma=86400
walker.send.cm/s.js
200 OK 46 kB IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (63519)
Hash e5461eb0cef4256771e360d6306c3033
f31a23f1e2d15a7a03992010c359833efba3e6b8
78c25da6082dd620e0fe7f12d7ef6e3c6015304575d9ced465b4e84e15a7d82a
GET /s.js HTTP/1.1
Host: walker.send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=65842
etag: W/"10132-602c8b81f787d"
last-modified: Sun, 13 Aug 2023 07:16:06 GMT
cache-control: max-age=259200
cf-cache-status: HIT
age: 2312
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zizhW3hA9nXun%2BVV26kWhwYzqXwWtYEsh%2B6kVeLf88mRrnHOv4WF5cGTlf9LeJcEL9%2FoH1%2BO4nS9FuHj4qEL57AAnNCH5yDobigEe1PW%2F2O%2BGHHLo2RCD00EaC7lAEbm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c700375a210b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
200 OK 5.1 kB URL GET HTTP/3 send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (7301), with no line terminators
Hash 5927506f3a8ddc31dd0a8b52ea986018
3ff8a137aed49530bfa1590a5c666b77564b4069
1106520c59d1087aa784fc7495b11de7a32133b1ce584d11cff3b706fff1c5b8
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8khUrfgw8A%2FGd%2FbX%2ByVnRJOzib93MlSkJEhFIyrhhku4nanY8JyMNj1jJgZG3LweaBtoIYF3Sm1ja91%2FO%2BpXEpkz%2BvyTkK5XzUTijO%2FNBn4pxAt2WqJKffg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003b3aa80b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
limurol.com/ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
200 OK 7 B URL GET HTTP/2 limurol.com/ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF5:B7:17:E8:F4:87:B4:48:99:C9:D2:6D:DA:4A:E3:52:D3:E9:8C:0E
ValiditySat, 28 Oct 2023 13:52:28 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
GET /ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: CHCK=1; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
UID=23112621392ccf8a483e1e4ca9af5674be6f; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
200 OK 7 B URL GET HTTP/2 limurol.com/ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF5:B7:17:E8:F4:87:B4:48:99:C9:D2:6D:DA:4A:E3:52:D3:E9:8C:0E
ValiditySat, 28 Oct 2023 13:52:28 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
GET /ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: CHCK=1; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
UID=231126213925c98b03ad5e4c568d755887e0; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 636 B URL GET HTTP/3 send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 0dfafd58c3151d838e2172a961bb304d
aa8c53154fea685088b830b552e05fc8bf360c0f
8dca6636707e73ef7f1f2c32deb6ba66cfea9969edd5c5eb0ea39d740b859373
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Mon, 27 Nov 2023 02:39:28 GMT
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
vary: accept-encoding
cache-control: max-age=300, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RzF64JlCNDgG44f%2FljSGX0H158knAVsupzJmL2frz9qHg6m7lw7PTa3fvKpHvsGyBi3jzt%2F%2BYMKfRcw4lgtQeDIGU5H0vGOMtJT1y6GoB9t5W6x2wxv7RnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003ada920b61-OSL
alt-svc: h3=":443"; ma=86400
limurol.com/ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
200 OK 7 B URL GET HTTP/2 limurol.com/ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF5:B7:17:E8:F4:87:B4:48:99:C9:D2:6D:DA:4A:E3:52:D3:E9:8C:0E
ValiditySat, 28 Oct 2023 13:52:28 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
GET /ssp/req/1951167/?pb=c31c129292cd7cfcaf4da981f1f521ab1701059968&psp=Kwy0aISrMnTKFFtsRjBxNDL2KrOHlcmzrXSxkmJB5RzbR10IOYaIUFyTP9wYh9AKjYZJEw4ShIcT040ysDr0mAVHMG1ghd7Ripfk0dgIf54W5vce1ceNGkVNU4Xu-yIwOUmiopr5dXIi-cxk5e1abMVBCsjuRQH9H3UKiD16gR1utx1I1UGnLh31RpcyTBDO-1fOw04DR8tapk5P7XhjN1gPgazsnVvJ0xUnb2WMUOYl2sfFF-VrAPPA7PC_mKATRE7InoT7PXuMAXHxwgNghqsvxW0PgpepYw0tNeWk-6zLYJnUW0KGs9H5LF6ysB6zWH_vMQ7LlcVWEde07PFbUHlhcSe4KEgcUDdf00Cz5drmUiPGYDx2SX0uVXiEXFwQE_KWfpEhjx908_Es0pzKZnhT-Dn5yDrZqUSaM6-kTn7hen8PBa5ICT1mhQKTyMurrWVEVA9NxYehXqM2AwUgQj5DICmGAqQyi__DDEa-kgI3GFJazi4f-vXfnMHXE1OoCFZ7IEr0jPWR4Hu1-m0YKLSKhqFmBVRW-Adf1mylT4nrR-C4d0V4-gPS7T7H0FkfezVpNDrhnposyv2DwwEwZFkb44pFirZ0NZqMDLhLTgr7UzmGrwRZUzY5WWIzCNvWVbNHeP0T2StXxqVLSt_hzCibD5eYYpoUQFxDLzK8yyjRcBShFrM6X8cgwKm4oTaHxCj9UZgrsPWd99Yp7cCMkH9YXdltXDRc7z7gh3Vv1mRY9ZspDMi9wDqzzMUMLjNz23ZO9tROQKfQ07Y7PCXVDDIaE35BWVkW8cSkOB9Sg3mhUQOsAostNOlBcpIAe96-XCPZKSf7_Mt4TUt3QUwfQrNghzgjTgyhUEzWE1pl_rM9vtqSSlca&im=1&cb=_clj90o6ail86d0ystubx3b&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=231126213968f05f57c51c4e7a9a8316de06; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff
200 OK 82 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 81760, version 1.1\012- data
Hash 220843e2f1927e726e78ca63f426ce50
d86801f8452cda25025530f406773162decd1458
ae9310191397b69cd6dd015ba0c6f9d674f493d35384f29c9c7d23e3c7df0d24
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i; cf_clearance=gddFK3j6QdQeNNzX1rG8x0n9rg1W0badZdF5w7dTpKg-1701052768-0-1-730ca2d2.73a07051.5b213570-0.2.1701052768
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: font/woff
content-length: 81760
last-modified: Thu, 17 Sep 2020 12:29:20 GMT
vary: Accept-Encoding
etag: "5f6356a0-13f60"
expires: Sat, 11 Nov 2023 16:45:04 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 424637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=asS0ZoRyV9HIO1TongL%2FK8pi1K4cqdJe5SLYDUqdGwu4EGe82uoIVbi9ORHS%2FEqnqOBO0J6EiWJO3mEpQPSWTdTc8vLTniCadN189UsFZkh8AHpimRMreZo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003daaf40b61-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
200 OK 82 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 82076, version 1.1\012- data
Hash dac78b0f1626eb1aa95d41b488e699c1
a377d0df34945fc45bdc030dc63139bd9cf28a2d
ee6d9467e82f91146b9f71f3ac572d66f4aeed0f261b30ef4765550edc11119d
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i; cf_clearance=gddFK3j6QdQeNNzX1rG8x0n9rg1W0badZdF5w7dTpKg-1701052768-0-1-730ca2d2.73a07051.5b213570-0.2.1701052768
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: font/woff
content-length: 82076
last-modified: Thu, 17 Sep 2020 12:29:20 GMT
vary: Accept-Encoding
etag: "5f6356a0-1409c"
expires: Sat, 11 Nov 2023 16:42:52 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 335272
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hrpzhcwfBDKwugv5l6fEgCEV4KnSJX%2F0u7i3R2kfzLpmD1JHa1boipLCw80Jniso0nsQwLO1P4O9Ym7MvNt43m7GR19%2F8K6PW7CwqK9KI9NqhkoXQg6OqII%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003daaf50b61-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
200 OK 77 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 77420, version 1.1\012- data
Hash 2afba28a9ce96315436db858db163c47
550d4374a60527b4f68d4700019aaac11a9140a2
b51d665d9cfebb31a2b61491bf408a172a5791166a0eb99a57ae4a7acbcba0d4
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i; cf_clearance=gddFK3j6QdQeNNzX1rG8x0n9rg1W0badZdF5w7dTpKg-1701052768-0-1-730ca2d2.73a07051.5b213570-0.2.1701052768
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: font/woff
content-length: 77420
last-modified: Thu, 17 Sep 2020 12:29:21 GMT
vary: Accept-Encoding
etag: "5f6356a1-12e6c"
expires: Sat, 11 Nov 2023 16:43:34 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 172943
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W%2FQWBk0ODXcCWm6EdXWKk4vAcAWo7JTAKEP4VIFS47JPSPW87655VNLGPSg9%2F244RQrKgIWnSYl%2FF0J0GmDAiXLK5bfe0dFsvXelrdnYWucuJZWDFfNZFH4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003daaf70b61-OSL
alt-svc: h3=":443"; ma=86400
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:ZDeXoz_kCtu7sV28Wn3JEwnx2VBLew:LoxZ7MHMqPUCzfBS; Expires=Wed, 26-Nov-2025 02:39:28 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:28 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3HkZD1ltv5i_2LNfVNj9dydITgDkxf0Vrsya78rI3FjFzFXrUtF9BzoqVYPKUlOVygtrx_3Q
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-RyzOFwBDgl8Rn_K31cC9SQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
riperfienwa.com/utx?cb=93BKAga7Kwd0&top=send.cm&tid=984022
204 No Content 0 B URL GET HTTP/2 riperfienwa.com/utx?cb=93BKAga7Kwd0&top=send.cm&tid=984022
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerAmazon
Subjectriperfienwa.com
Fingerprint4B:12:B3:11:21:59:25:3B:20:8F:04:FD:04:71:69:B3:30:E1:A0:FA
ValidityWed, 22 Nov 2023 00:00:00 GMT - Fri, 20 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=93BKAga7Kwd0&top=send.cm&tid=984022 HTTP/1.1
Host: riperfienwa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 27 Nov 2023 02:39:28 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://send.cm
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Mon, 27 Nov 2023 02:40:28 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: z3uSbBz6Hf5I9bnIDsd4r8xiGGKip8aZV1gPG9oO8HZ8gyv7mtzCTA==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/3 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:xDydzI_4z-BalZezNbfFwoCNej5uAg:egdVmcEiIXk03dbm; Expires=Wed, 26-Nov-2025 02:39:29 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:29 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1kD2o6N9AMLwBUG8GD4yfFIuK7vdkagMalRx7ucLeTxMyd3hhQCroWSW8Rn17hutVV2ou8
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-gHUMPEhAQmqGH6y7hOgnMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3HkZD1ltv5i_2LNfVNj9dydITgDkxf0Vrsya78rI3FjFzFXrUtF9BzoqVYPKUlOVygtrx_3Q
302 Found 404 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3HkZD1ltv5i_2LNfVNj9dydITgDkxf0Vrsya78rI3FjFzFXrUtF9BzoqVYPKUlOVygtrx_3Q
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (397)
Hash 03dcfb693e08da819423bc007026b071
761fa5a38612a5fc88138af32e09b4f7f9de47ba
af45b8c94d88f5f6d65d53e4791d582d23d554806c57f31bace4024c990e4eaf
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3HkZD1ltv5i_2LNfVNj9dydITgDkxf0Vrsya78rI3FjFzFXrUtF9BzoqVYPKUlOVygtrx_3Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:bugjuEeJfls5BWwCLS3QWpNcZRyS-g:f_WvkE6NluDSXV-S;Path=/;Expires=Wed, 26-Nov-2025 02:39:29 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:29 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3MgjBEDsv382nj7_mbhW6pBwtu9p1pBbXlUV3_XGk5tcI4HAblYOPhC6aZwjNSEEiUXILF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1879067793%3A1701052769137768&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-vy7EigKlswoeq7K-RfqWlg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 404
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pogothere.xyz/asd100.bin
200 OK 103 kB IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 103 kB (102799 bytes)
Hash 63910618214ae68dec64f85106b425ba
08ad09ec0f3dea682ba6aba3cdb76115c0c3b20f
74e493ecdbb706eb1367d6b6a5051b5a486a59c64a5b7af6469b465decb23155
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 111
last-modified: Mon, 27 Nov 2023 02:37:38 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UoQbpIAQ92GCBPlAa10eYnQ6GQ8p86YsFvshugKw2t8vLu6EmWvde2ZVlpwhxLEI4IkmVhuttyW67Hh7VeugRLTir%2FIwtF0BXPQoKGHZYkDi6Gf5wfBe7lxXSQSBqTET"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c7003e3d736702-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fvcwqkkqmuv.com/get/1951167?zoneid=1951167&jp=_clqg9avbbosttocal90e14&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
200 OK 1.7 kB URL GET HTTP/2 fvcwqkkqmuv.com/get/1951167?zoneid=1951167&jp=_clqg9avbbosttocal90e14&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (3988), with no line terminators
Hash ed8e09b2e9bdb7059af5f0f722793d05
a185b05717b1369a32e8a52fe773ad7435c2a094
006d846107a1fa0614b27510fcfc2d1ead74f0dfdf5fe023b28cb57753d8f84e
GET /get/1951167?zoneid=1951167&jp=_clqg9avbbosttocal90e14&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8274254519069696&eclog=0&sp=1&im=1 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
UID=231126213929b77277a90d45e1a43509c036; Path=/; Expires=Mon, 30 Dec 2024 02:39:28 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
riperfienwa.com/utx?cb=32ex1rflAQV3&top=send.cm&tid=903813
204 No Content 0 B URL GET HTTP/2 riperfienwa.com/utx?cb=32ex1rflAQV3&top=send.cm&tid=903813
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerAmazon
Subjectriperfienwa.com
Fingerprint4B:12:B3:11:21:59:25:3B:20:8F:04:FD:04:71:69:B3:30:E1:A0:FA
ValidityWed, 22 Nov 2023 00:00:00 GMT - Fri, 20 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=32ex1rflAQV3&top=send.cm&tid=903813 HTTP/1.1
Host: riperfienwa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 27 Nov 2023 02:39:29 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://send.cm
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Mon, 27 Nov 2023 02:40:29 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: P3obwx892BqLLNp1VNNZKDToubzDzRvCQ5lXMZz4MysytOHjdAnYiA==
X-Firefox-Spdy: h2
nopoloferewer.com/MXo2TUkeRVU+dFUQeDkYABZ5DyVFTFQIDHUtBQM5ZR1gFyxcShA5IFVHD316CUsFazlYHgt8b0IOVzk8QkcHayBfHFlwb0dHB2N6BVQFeWcBXENweAROBXV7CUoHe3sBSg97eRcORiwuDEsQPT1FFgt8fgFLBnh7Bk0FfXAA
204 No Content 0 B URL GET HTTP/3 nopoloferewer.com/MXo2TUkeRVU+dFUQeDkYABZ5DyVFTFQIDHUtBQM5ZR1gFyxcShA5IFVHD316CUsFazlYHgt8b0IOVzk8QkcHayBfHFlwb0dHB2N6BVQFeWcBXENweAROBXV7CUoHe3sBSg97eRcORiwuDEsQPT1FFgt8fgFLBnh7Bk0FfXAA
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectnopoloferewer.com
Fingerprint1C:1B:31:D2:BE:DB:1E:11:2D:94:5D:E0:D3:C4:E7:24:97:8D:D8:19
ValidityFri, 17 Nov 2023 18:18:56 GMT - Thu, 15 Feb 2024 18:18:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MXo2TUkeRVU+dFUQeDkYABZ5DyVFTFQIDHUtBQM5ZR1gFyxcShA5IFVHD316CUsFazlYHgt8b0IOVzk8QkcHayBfHFlwb0dHB2N6BVQFeWcBXENweAROBXV7CUoHe3sBSg97eRcORiwuDEsQPT1FFgt8fgFLBnh7Bk0FfXAA HTTP/1.1
Host: nopoloferewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Mon, 27 Nov 2023 02:39:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d2tbdsVeRRtDXJ0u4gWMh66PMu%2FtDBCJGsYHE4hdrpyHKZcKfvrouixiM2L6l278x4wssFFc3l45pyySai%2FDZJCL0rk6EtkdC%2BEXQnnpNSi1srd0cGgqpBG7SpkVzkD5Rrmc8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c70041cd4fb4f7-OSL
alt-svc: h3=":443"; ma=86400
nopoloferewer.com/popunder.gif
200 OK 1.2 kB URL GET HTTP/3 nopoloferewer.com/popunder.gif
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectnopoloferewer.com
Fingerprint1C:1B:31:D2:BE:DB:1E:11:2D:94:5D:E0:D3:C4:E7:24:97:8D:D8:19
ValidityFri, 17 Nov 2023 18:18:56 GMT - Thu, 15 Feb 2024 18:18:55 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ebadb70078067c238ed2a57b37444e1c
8a69d764a6ef02c1d24288aa02afe4bef735808f
cc7e8a23c850fe9fd825f6bba0d6893bcbb57bf7f326f7c495d740fc727e9614
GET /popunder.gif HTTP/1.1
Host: nopoloferewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 9902
last-modified: Sun, 26 Nov 2023 23:54:27 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x9YYg2GvmNA5wEcdiHbGeyr5TXjmyEw%2FLVfCoHtWsjZqOhSbdyZuAxc%2FvFZ8lYs7f%2F7SWdNu%2Fd8l43n19STIOtHobMQ00EgpAthdc6wNcII2Ss3h9Bor5Ke7OF4tT%2FACaHxdDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c7003f6ce6b4f7-OSL
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 7ee1dd5e387f29e7e6a104ba72d47528
90e695cf1afbdb3c4b723752a865185d849458d4
83ed4bfd3d068b6c38310a9ed51f074b6081ac16cc33e4def5f689f6c4569b3a
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 27 Nov 2023 02:39:29 GMT
Last-Modified: Mon, 27 Nov 2023 00:59:43 GMT
Server: ECAcc (amb/6B0A)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9aYZlGBAx4PHAbe70LfD0zTra65a-yc7wYdymPMKiIqsL59ny5LnXA==
Age: 5986
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3MgjBEDsv382nj7_mbhW6pBwtu9p1pBbXlUV3_XGk5tcI4HAblYOPhC6aZwjNSEEiUXILF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1879067793%3A1701052769137768&theme=glif
403 Forbidden 26 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3MgjBEDsv382nj7_mbhW6pBwtu9p1pBbXlUV3_XGk5tcI4HAblYOPhC6aZwjNSEEiUXILF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1879067793%3A1701052769137768&theme=glif
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type gzip compressed data, max compression\012- data
Hash 49dddb02c489efaba6a0b65964bf5184
72cf03b7eb7c05c73f30c73a85eb04332b9c9488
f55fd4f5a2fc05d5a60bcdb333d097079cd518c1087c1c2f874b762129ac72f0
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3MgjBEDsv382nj7_mbhW6pBwtu9p1pBbXlUV3_XGk5tcI4HAblYOPhC6aZwjNSEEiUXILF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1879067793%3A1701052769137768&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:29 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-6Y-UI6yUfV5hN5XyW3bJEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
professionalswebcheck.com/stats
200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 8c338570992611095316d22b31dda2ba
0183778060abfeab185753d9f34bed053cdf203a
36f026ef9854ef52a45ae07f5116d1abb725e71121b651c1a54676bf78adf281
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://send.cm
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=e852ef80-95be-46ad-8e34-183021cc9b31:3:1; expires=Thu, 24 Nov 2033 02:39:29 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
d3efeah7vk80fy.cloudfront.net/VZ2xlRkEEAwsgfhMFAXt4V19dd3JBBhYpLxdRPQkKETUVN3kdShE8JVpcQyogCQtYYCQJD1h3ZwYIB3t1QRgVKSpaHAooIA0fFSg1AUoQJ3wKAx8vLQsNQHQHUkJVY3NXRBIvLwMDEjVkVVwLMmRVXFR2b1dJVgRkVVwSLy9RWEB1A0JeVT53U0lWBGRVXB-cwZFQtVHZ0SVxMY3NXCwAlKghJVwBzV11VdnBXXUB0cQEFFyMnCBRAdAdWXFBocUEZWHd0U19ddHlXXVN0cVdVU3Y
548 B URL d3efeah7vk80fy.cloudfront.net/VZ2xlRkEEAwsgfhMFAXt4V19dd3JBBhYpLxdRPQkKETUVN3kdShE8JVpcQyogCQtYYCQJD1h3ZwYIB3t1QRgVKSpaHAooIA0fFSg1AUoQJ3wKAx8vLQsNQHQHUkJVY3NXRBIvLwMDEjVkVVwLMmRVXFR2b1dJVgRkVVwSLy9RWEB1A0JeVT53U0lWBGRVXB-cwZFQtVHZ0SVxMY3NXCwAlKghJVwBzV11VdnBXXUB0cQEFFyMnCBRAdAdWXFBocUEZWHd0U19ddHlXXVN0cVdVU3Y
IP
File type ASCII text, with very long lines (761), with no line terminators
Hash 1a6a05bb1734c7ced8929fbbf5c454e7
4cc08b75f9eb3e1f5d8c6f48a9649892ea825a4d
591cd35be5f0e64adaba441df74351279818c6b74a7d8f7738c68b3ff199bf3f
GET /VZ2xlRkEEAwsgfhMFAXt4V19dd3JBBhYpLxdRPQkKETUVN3kdShE8JVpcQyogCQtYYCQJD1h3ZwYIB3t1QRgVKSpaHAooIA0fFSg1AUoQJ3wKAx8vLQsNQHQHUkJVY3NXRBIvLwMDEjVkVVwLMmRVXFR2b1dJVgRkVVwSLy9RWEB1A0JeVT53U0lWBGRVXB-cwZFQtVHZ0SVxMY3NXCwAlKghJVwBzV11VdnBXXUB0cQEFFyMnCBRAdAdWXFBocUEZWHd0U19ddHlXXVN0cVdVU3Y HTTP/1.1
Host: d3efeah7vk80fy.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://riperfienwa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 548
date: Mon, 27 Nov 2023 02:39:30 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hmeSxyvNjw_kStmIvte7dcDlUHJwh_GYvnmMpf5Wq8I-0z39Do03uQ==
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=e88710c4642b4dc5b8bf92a4489c991b
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=e88710c4642b4dc5b8bf92a4489c991b
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 2b2eb5a5fc81d68ae36712024ca42645
60bd441a94992f107a5ae4625b8f4ef153549fb1
149d75eaa884dd4e3508abb4cb91b3a252874ad59d22adad2e5ba187a63d23fd
GET /gid.js?userId=e88710c4642b4dc5b8bf92a4489c991b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:30 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://send.cm
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=e88710c4642b4dc5b8bf92a4489c991b; expires=Tue, 26 Nov 2024 02:39:30 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 7ee1dd5e387f29e7e6a104ba72d47528
90e695cf1afbdb3c4b723752a865185d849458d4
83ed4bfd3d068b6c38310a9ed51f074b6081ac16cc33e4def5f689f6c4569b3a
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Mon, 27 Nov 2023 02:39:30 GMT
Server: ECAcc (amb/6B09)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6wa0GeltR3Lu4JKvJOZlzgv5jdWYcns2t6plPYdvVxyd8Otz-2tohQ==
professionalswebcheck.com/stats
200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3dd54a96de8a82a31f0b17602ed91038
df391cb72df713ba55868e2ec4ae834edb0ab64f
de3ade5260235c729971e7718a239671a21d987840d2b38bb245f00197574eff
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 02:39:30 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://send.cm
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=1d63a1da-ebb6-4944-b020-bbaed707d4fb:1:1; expires=Thu, 24 Nov 2033 02:39:30 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
atservineor.com/?rb=0TbAdIRNvqqHowy4wqqxxSMnECY7vGcaAsh_jCuFGKRUNdBQv0YFEtIsQeymg_4IbVQC6OdZSLNieika4nq00XNLJlEjxOUG6wWvzi4CCV6Lz9pz9bb517pC-mXPK96IIAxm3ktOxkjb3hq1yA-ztMdVW3tBadrohf2yn2WfsBLQah0wUc0zzdk92xhEWRgEyG-SKznrAxZLqKkEXCmoDUMhHBMPd9pO&request_ab2=0&zoneid=4277204&js_build=iclick-v1.632.0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=4&pl=https%3A%2F%2Fsend.cm%2Fjg8a6x2bh39i&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.632.0&bs=a8b6dbc8-2189-4ad9-b253-53a7bf1d2e53&userId=e88710c4642b4dc5b8bf92a4489c991b&m=link
200 OK 2.3 kB URL GET HTTP/2 atservineor.com/?rb=0TbAdIRNvqqHowy4wqqxxSMnECY7vGcaAsh_jCuFGKRUNdBQv0YFEtIsQeymg_4IbVQC6OdZSLNieika4nq00XNLJlEjxOUG6wWvzi4CCV6Lz9pz9bb517pC-mXPK96IIAxm3ktOxkjb3hq1yA-ztMdVW3tBadrohf2yn2WfsBLQah0wUc0zzdk92xhEWRgEyG-SKznrAxZLqKkEXCmoDUMhHBMPd9pO&request_ab2=0&zoneid=4277204&js_build=iclick-v1.632.0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=4&pl=https%3A%2F%2Fsend.cm%2Fjg8a6x2bh39i&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.632.0&bs=a8b6dbc8-2189-4ad9-b253-53a7bf1d2e53&userId=e88710c4642b4dc5b8bf92a4489c991b&m=link
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectatservineor.com
Fingerprint7F:A6:D8:C6:07:B2:43:13:77:39:5A:91:57:E3:4C:1C:7A:E3:EF:51
ValidityWed, 11 Oct 2023 05:20:30 GMT - Tue, 09 Jan 2024 05:20:29 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 301532bd3c517f04f4585249265cf578
6c3c56ccf42c2e2c8a10b4a5a535499db5f307e4
b745e70ac58ca5e731bdf5b86ab845eef177e2ce86fe26939277cb8369e55571
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?rb=0TbAdIRNvqqHowy4wqqxxSMnECY7vGcaAsh_jCuFGKRUNdBQv0YFEtIsQeymg_4IbVQC6OdZSLNieika4nq00XNLJlEjxOUG6wWvzi4CCV6Lz9pz9bb517pC-mXPK96IIAxm3ktOxkjb3hq1yA-ztMdVW3tBadrohf2yn2WfsBLQah0wUc0zzdk92xhEWRgEyG-SKznrAxZLqKkEXCmoDUMhHBMPd9pO&request_ab2=0&zoneid=4277204&js_build=iclick-v1.632.0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=4&pl=https%3A%2F%2Fsend.cm%2Fjg8a6x2bh39i&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.632.0&bs=a8b6dbc8-2189-4ad9-b253-53a7bf1d2e53&userId=e88710c4642b4dc5b8bf92a4489c991b&m=link HTTP/1.1
Host: atservineor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Cookie: OAID=e88710c4642b4dc5b8bf92a4489c991b; oaidts=1701052769
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:30 GMT
content-type: application/json
x-trace-id: 31052de3f6faaaae471c1e8295994eed
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=e88710c4642b4dc5b8bf92a4489c991b; expires=Tue, 26 Nov 2024 02:39:30 GMT; path=/; secure; SameSite=None
oaidts=1701052770; expires=Tue, 26 Nov 2024 02:39:30 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Mon, 04 Dec 2023 02:39:30 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
evidenceguidance.com/9c/ed/24/9ced2453f41586bc39632e754938332a.json
200 OK 411 B URL GET HTTP/1.1 evidenceguidance.com/9c/ed/24/9ced2453f41586bc39632e754938332a.json
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectevidenceguidance.com
Fingerprint73:DA:5D:A0:74:AB:D2:A0:E4:AD:F8:6A:1A:42:80:4C:E9:E5:01:99
ValiditySun, 26 Nov 2023 06:32:48 GMT - Sat, 24 Feb 2024 06:32:47 GMT
File type JSON data\012- , ASCII text, with very long lines (411), with no line terminators
Hash 0945485224403a0e1fad31cea1985553
793f4983b2de76a39d65781fb79e758e516d09eb
b536a6299d5f1059b0a3b1be8e87f97a16b826b48d2b9b4de842f4069f6ed2b8
GET /9c/ed/24/9ced2453f41586bc39632e754938332a.json HTTP/1.1
Host: evidenceguidance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 27 Nov 2023 02:39:30 GMT
Content-Type: application/json
Content-Length: 411
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ab257828bb36a713113e92a825646401
Strict-Transport-Security: max-age=0; includeSubdomains
evidenceguidance.com/9c/ed/24/9ced2453f41586bc39632e754938332a.json
200 OK 407 B URL GET HTTP/1.1 evidenceguidance.com/9c/ed/24/9ced2453f41586bc39632e754938332a.json
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectevidenceguidance.com
Fingerprint73:DA:5D:A0:74:AB:D2:A0:E4:AD:F8:6A:1A:42:80:4C:E9:E5:01:99
ValiditySun, 26 Nov 2023 06:32:48 GMT - Sat, 24 Feb 2024 06:32:47 GMT
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 4df3e30c9b0ded8b0ac5a48d67d7fc68
1576908c2301bf277826b0af24c6299445a4bc44
2814f18cd82c5db7a26874f283f6cd7ad4c079728b56f94739ccfc4222bf8ea8
GET /9c/ed/24/9ced2453f41586bc39632e754938332a.json HTTP/1.1
Host: evidenceguidance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 27 Nov 2023 02:39:30 GMT
Content-Type: application/json
Content-Length: 407
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ed544126d7710943552029556c46f313
Strict-Transport-Security: max-age=0; includeSubdomains
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/3 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:y8T7mQXmYY3Nqv7vLNXeB0vkDSn08w:SOl0JI-Ws9hLXPgw; Expires=Wed, 26-Nov-2025 02:39:30 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:30 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3_2bvif-esqdgJG3-rpJFkt35RXBlsmMEpmSfNgiJxPK88tl1alptguI5SC2bT1MSj2lKT-Q
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-3tJCjUc283lwR5qHoGcnDw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:zn5r4PMTqbYXDk4_OtfKMXnpy12rLg:vulhSkTTW1RT0_Zb; Expires=Wed, 26-Nov-2025 02:39:30 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:30 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0VQrnj1dHYDeYc4Fcr1_GDf0oC_POYLy_sl0he1m9aLpFKsFPgM9aRMyNkJYTquA9qzoNY7Q
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-U3HRFKFY5CkMEcAtCI4StQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3_2bvif-esqdgJG3-rpJFkt35RXBlsmMEpmSfNgiJxPK88tl1alptguI5SC2bT1MSj2lKT-Q
302 Found 403 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3_2bvif-esqdgJG3-rpJFkt35RXBlsmMEpmSfNgiJxPK88tl1alptguI5SC2bT1MSj2lKT-Q
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (395)
Hash e0bd812875f02488300ed7494ba4ca65
c96ca61651b88998aa46b7dd30cbb1515d6fe964
3ceb5c398f21ce1cb218b33d19d2a6551594a60f210b52207c7a9d1db2be7da9
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3_2bvif-esqdgJG3-rpJFkt35RXBlsmMEpmSfNgiJxPK88tl1alptguI5SC2bT1MSj2lKT-Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:XVSkDS1m6e_w2J0Eig8loyX3CAyotQ:zwAUXFkixSbFT5Sj;Path=/;Expires=Wed, 26-Nov-2025 02:39:30 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:30 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0Hu7VShgovq0F0ML2JNBltGwA1-XMhlumsQeVzvb0yoqCiBq4VAX8LYI8QltiXCIx3P8qQJg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-285166971%3A1701052770989936&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-SlhNPk4Jcv-OG9L7P__ldg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 403
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0VQrnj1dHYDeYc4Fcr1_GDf0oC_POYLy_sl0he1m9aLpFKsFPgM9aRMyNkJYTquA9qzoNY7Q
302 Found 403 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0VQrnj1dHYDeYc4Fcr1_GDf0oC_POYLy_sl0he1m9aLpFKsFPgM9aRMyNkJYTquA9qzoNY7Q
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (398)
Hash 7466b5379b2fc450aa5d5fe25e500665
1db7ecf754c40a50a198940c649c8f159a9f2290
e712d8c894be202bb0008aa347cd4ae7cd6dee0d4bc37d0c1003082577d0424c
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0VQrnj1dHYDeYc4Fcr1_GDf0oC_POYLy_sl0he1m9aLpFKsFPgM9aRMyNkJYTquA9qzoNY7Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:nDGy0uWijjwxQdGrNKNoL9iYOGo4fg:4rFmolk_bFlVSu01;Path=/;Expires=Wed, 26-Nov-2025 02:39:31 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:31 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3VtP9JW6UR-AOuaXpztymTzC-gRTeYTZtRTj9UjxttVTagnp0ntlD4zm4Gc-tT92CLoUJv&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1660147883%3A1701052771036758&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-bcO6ZQQuek3Vtx5tewFp1g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 403
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0Hu7VShgovq0F0ML2JNBltGwA1-XMhlumsQeVzvb0yoqCiBq4VAX8LYI8QltiXCIx3P8qQJg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-285166971%3A1701052770989936&theme=glif
403 Forbidden 804 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0Hu7VShgovq0F0ML2JNBltGwA1-XMhlumsQeVzvb0yoqCiBq4VAX8LYI8QltiXCIx3P8qQJg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-285166971%3A1701052770989936&theme=glif
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators
Hash 11d1a8941fac6ee86bb9041193ef8b01
f2cd4c4d6584355753614866e4b7b043a8d419d0
92660469151095a54838cf1b3a9c1f1ec88ad9198f92fbb148e891dc0aa57e94
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0Hu7VShgovq0F0ML2JNBltGwA1-XMhlumsQeVzvb0yoqCiBq4VAX8LYI8QltiXCIx3P8qQJg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-285166971%3A1701052770989936&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:31 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-be77AsFZ_zq6VOyWf0WKXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dismantlepenantiterrorist.com/pxf.gif?uuid=1d63a1da-ebb6-4944-b020-bbaed707d4fb&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2
0 B URL GET dismantlepenantiterrorist.com/pxf.gif?uuid=1d63a1da-ebb6-4944-b020-bbaed707d4fb&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2
IP
Requested by https://send.cm/jg8a6x2bh39i
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=1d63a1da-ebb6-4944-b020-bbaed707d4fb&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2 HTTP/1.1
Host: dismantlepenantiterrorist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
atservineor.com/tag.min.js
200 OK 81 kB URL GET HTTP/2 atservineor.com/tag.min.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectatservineor.com
Fingerprint7F:A6:D8:C6:07:B2:43:13:77:39:5A:91:57:E3:4C:1C:7A:E3:EF:51
ValidityWed, 11 Oct 2023 05:20:30 GMT - Tue, 09 Jan 2024 05:20:29 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash f98d2b56f0a3cb5931f906af99482894
24be5bb9d3277835a954809df6e7a894f4d0468b
e7a07587ad65e34dd4ffd2a7f01167813688c3088860f5d4d89cbb4551f4f326
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /tag.min.js HTTP/1.1
Host: atservineor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: text/javascript; charset=utf-8
content-length: 25606
content-encoding: br
x-trace-id: d477343f102f06233e8e5cee1e142bfe
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 24 Nov 2023 13:08:05 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82c70032de107131
200 OK 0 B URL POST HTTP/3 send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82c70032de107131
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/82c70032de107131 HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12179
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i; cf_clearance=gddFK3j6QdQeNNzX1rG8x0n9rg1W0badZdF5w7dTpKg-1701052768-0-1-730ca2d2.73a07051.5b213570-0.2.1701052768; c_7hyj5tegwm4sd2=jg8a6x2bh39i
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=ltouoPi8piQbiq..gGMO1Z1Jlm8fa0oFHoFOya8Cl8I-1701052769-0-1-730ca2d2.73a07051.5b213570-0.2.1701052769; path=/; expires=Tue, 26-Nov-24 02:39:29 GMT; domain=.send.cm; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YOSIA%2FiMTemhh6hztfY0ilToA7MaXYBnBAvBatnrkkpwy4EFrgCv1IqsiEGJU%2FE5vW2PjbWmCmiyTlisaOIEpeDHQkn7xThCsr3n2NV7L%2BLne2rmaWDhwR8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c70043cbe00b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 02:39:30 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 0321b9aea66512f32552d5c8e3642f47
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 27 Nov 2023 02:39:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ksw45wnHnA4olyRyGKBehklNCpC1VUTuN3rPIIBCMUUVHwm43DrBYdxIz%2Br6d2FqCEePZquoh%2F1skLZCUb3LYcLd6DVOvjaqPmhEwaHydKz8dRAfp8qr713RJlU9q%2BaC1dnV5N8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c70047c80b6553-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
send.cm/static/js/jquery.min.js
200 OK 93 kB URL GET HTTP/3 send.cm/static/js/jquery.min.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (32072)
Hash bdce12c949e78d570c8d44e9c2b23508
9afdc4fec954646bd6270caf82f107fdef605bc5
c73b004ebf31b395cf237c3d2b13c1e576f385e04660ceb5f7be163ff3c201dc
GET /static/js/jquery.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Sat, 26 Sep 2020 12:00:16 GMT
etag: W/"16b88-5b0362d29f400-gzip"
vary: Accept-Encoding
expires: Mon, 27 Nov 2023 02:48:38 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7rrghNHYlVSYuyadAXMegmRGTwNjYD92Xa4FRUx%2BpYecp4Nlf3HxR3UbaE9wo4hVaO6r63z8jOvna2inG1bQ8PHqZm%2Bq0Ym8q7FsjhzQZGPRFthd3zWm0Tk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003609f90b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nopoloferewer.com/c3RCcjRcSyEBCRBGDwhQQUEOJGUHMRUnRCA2ciBVITIhNmYfTGQGXRdJe0oAQ0ZwVEQaEH9DEgAAIwZBAElzVF0dEi1PEgVJc1wHR1pxRhpDUjdPBVUAMhNTTkVkAkAHGH9DA0NFckcGRENzRAVC
204 No Content 0 B URL GET HTTP/2 nopoloferewer.com/c3RCcjRcSyEBCRBGDwhQQUEOJGUHMRUnRCA2ciBVITIhNmYfTGQGXRdJe0oAQ0ZwVEQaEH9DEgAAIwZBAElzVF0dEi1PEgVJc1wHR1pxRhpDUjdPBVUAMhNTTkVkAkAHGH9DA0NFckcGRENzRAVC
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectnopoloferewer.com
Fingerprint1C:1B:31:D2:BE:DB:1E:11:2D:94:5D:E0:D3:C4:E7:24:97:8D:D8:19
ValidityFri, 17 Nov 2023 18:18:56 GMT - Thu, 15 Feb 2024 18:18:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c3RCcjRcSyEBCRBGDwhQQUEOJGUHMRUnRCA2ciBVITIhNmYfTGQGXRdJe0oAQ0ZwVEQaEH9DEgAAIwZBAElzVF0dEi1PEgVJc1wHR1pxRhpDUjdPBVUAMhNTTkVkAkAHGH9DA0NFckcGRENzRAVC HTTP/1.1
Host: nopoloferewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 27 Nov 2023 02:39:28 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F0kpNuKtx0o6RLL06ZNaqMYpADmIG8cKcXjkEVY5wevvt9yaHS7Bh6vexRPwz88XpEhIhMGjHPfdRhikNP9%2F7hU4LqrKcgElRTYvV16nVlEkZrwcSRF%2BvRD19w9C%2FH9zrJ0uPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c70038ed357128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
send.cm/lib/feather-icons/feather.min.js
200 OK 66 kB URL GET HTTP/3 send.cm/lib/feather-icons/feather.min.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lib/feather-icons/feather.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5f50abca-101aa"
expires: Sun, 13 Aug 2023 21:42:42 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 415055
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MnpKZt3fJT97%2BBHi5aFHhlDOiD4rZmJh6NF8w0bOf5TXAqHN8Wg9EUtyKt9qYEijiIGaYqkAM9W4O%2FGuDA0lNNgFyjzExuMDxDdyeyhR6tN1DvpZVhd21Jg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003619fb0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/lib/bootstrap/js/bootstrap.bundle.min.js
200 OK 79 kB URL GET HTTP/3 send.cm/lib/bootstrap/js/bootstrap.bundle.min.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (65297)
Hash a454220fc07088bf1fdd19313b6bfd50
265a733cb7fbc481fd2510a659a85ad55c93c895
7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c
GET /lib/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: application/javascript; charset=utf8
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
etag: W/"1332b-5ae64b14b0680-gzip"
vary: Accept-Encoding
expires: Mon, 27 Nov 2023 02:48:08 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EEgBSn2veCpjdI6FzDz%2BFRvY8jB1JE1%2BjeYUWlJMmRUNhOlAt9t7OY%2FuFo09slhE8U3u%2Bo98S5UkCCQFZiTEgRIm%2FPAY8R%2F2bUfh4qgOgulUKBEVfwwL1oQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003a1a740b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/jg8a6x2bh39i
200 OK 0 B IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /jg8a6x2bh39i HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=0;includeSubDomains;
expires: Sun, 26 Nov 2023 02:39:29 GMT
set-cookie: aff=59249; domain=.send.cm; path=/; expires=Mon, 11-Dec-2023 02:39:29 GMT
c_7hyj5tegwm4sd2=jg8a6x2bh39i; domain=.send.cm; path=/
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t8GeCWu65E2zkxr4yB5N%2FErn7iT3VEtl72OJtmdbwDIGix0yGZLjyZV61lJT6iCPqeT2SoP6MAwTR%2F1YaXXsZAJytopFSxwA%2FoZ8HiiCc8qyMLA%2BMA2HdHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c700396a620b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1kD2o6N9AMLwBUG8GD4yfFIuK7vdkagMalRx7ucLeTxMyd3hhQCroWSW8Rn17hutVV2ou8
302 Found 0 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1kD2o6N9AMLwBUG8GD4yfFIuK7vdkagMalRx7ucLeTxMyd3hhQCroWSW8Rn17hutVV2ou8
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1kD2o6N9AMLwBUG8GD4yfFIuK7vdkagMalRx7ucLeTxMyd3hhQCroWSW8Rn17hutVV2ou8 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:32bM57RzormQbRADUxwqv1z_C6hYlg:of0hrR6sZcUVsiOg;Path=/;Expires=Wed, 26-Nov-2025 02:39:29 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:29 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2CPej0Trb8vrwvYEObFYSvoJTXCI86CGyi9uX8wWl4gNd7BlqnNz5LK9uP9UxcIIcOJY07&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S84005708%3A1701052769180002&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-EtrFujajEp8LjaMq_39zig' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 399
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
atservineor.com/5/4277204/?oo=1&aab=1
200 OK 2.8 kB URL GET HTTP/2 atservineor.com/5/4277204/?oo=1&aab=1
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectatservineor.com
Fingerprint7F:A6:D8:C6:07:B2:43:13:77:39:5A:91:57:E3:4C:1C:7A:E3:EF:51
ValidityWed, 11 Oct 2023 05:20:30 GMT - Tue, 09 Jan 2024 05:20:29 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3022), with no line terminators
Hash 20cc14d26c9888b260bf11ef4f42c985
77368512e4fe5add77ebbcbe13fa76162f7f46a7
43ab7935482c2f4aec0845371515dc79beca2f48b76e3da31c267bd15362ad90
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/4277204/?oo=1&aab=1 HTTP/1.1
Host: atservineor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: application/json
x-trace-id: f3ea2ad9885fa60a3864322b6830b382
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=e88710c4642b4dc5b8bf92a4489c991b; expires=Tue, 26 Nov 2024 02:39:29 GMT; path=/; secure; SameSite=None
oaidts=1701052769; expires=Tue, 26 Nov 2024 02:39:29 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
riperfienwa.com/Y1R2MjcCNhVfCAJpFBRCEThLFwUlcUR0U1AxEFdWC2MAWQ9TMg8cVA87A1ZRETsYRhkNMQIXBSUCLABPDwYdd3IiIwVVUQsZMHNvF2AgAw4HMEV4dSE8L0J7GzAkYmYIHzNmYjUaRVlTMDwzCn01JBVjTgwzNWNDOg01Y30nZR4BbRQNP3AEF2UnYFA1HyVCVisVGV1+ImQQdGQEZTdnWDIeRUV8IixORHsyJzhjfzIcI1l9NQ1FfG8xFj9EexQZMnddNT8gZEAvGRtgYTsSJABVUjA8ZFAxPyBkQDAYDwtlNBE0A3ZTHhNkY1ZnIwJbNBYxYGE7FltRQDkSJ0ZhKw5GYWEbGS8BeTsXAXNbKDMeeGEUFgxkBlICElx1OwwjcAcABTN0cRoZGHF1MRUSc1M0DDBwWAABM2hgKzBGZwZaMBJ6WzsMIHwHAAISZGJQDVBYRAw6Bg9vLB8Aa0cSbAw
200 OK 3.1 kB URL GET HTTP/2 riperfienwa.com/Y1R2MjcCNhVfCAJpFBRCEThLFwUlcUR0U1AxEFdWC2MAWQ9TMg8cVA87A1ZRETsYRhkNMQIXBSUCLABPDwYdd3IiIwVVUQsZMHNvF2AgAw4HMEV4dSE8L0J7GzAkYmYIHzNmYjUaRVlTMDwzCn01JBVjTgwzNWNDOg01Y30nZR4BbRQNP3AEF2UnYFA1HyVCVisVGV1+ImQQdGQEZTdnWDIeRUV8IixORHsyJzhjfzIcI1l9NQ1FfG8xFj9EexQZMnddNT8gZEAvGRtgYTsSJABVUjA8ZFAxPyBkQDAYDwtlNBE0A3ZTHhNkY1ZnIwJbNBYxYGE7FltRQDkSJ0ZhKw5GYWEbGS8BeTsXAXNbKDMeeGEUFgxkBlICElx1OwwjcAcABTN0cRoZGHF1MRUSc1M0DDBwWAABM2hgKzBGZwZaMBJ6WzsMIHwHAAISZGJQDVBYRAw6Bg9vLB8Aa0cSbAw
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerAmazon
Subjectriperfienwa.com
Fingerprint4B:12:B3:11:21:59:25:3B:20:8F:04:FD:04:71:69:B3:30:E1:A0:FA
ValidityWed, 22 Nov 2023 00:00:00 GMT - Fri, 20 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3081), with no line terminators
Hash 6fcd1fa4d69ffff9a39c438fc521e9bb
bcf8c23701471ea02f1fe7337e637cc70cc163bf
369311a48aeed79deacc037ea68a76f779a4694e3ea9b6e7448b436cea09d861
GET /Y1R2MjcCNhVfCAJpFBRCEThLFwUlcUR0U1AxEFdWC2MAWQ9TMg8cVA87A1ZRETsYRhkNMQIXBSUCLABPDwYdd3IiIwVVUQsZMHNvF2AgAw4HMEV4dSE8L0J7GzAkYmYIHzNmYjUaRVlTMDwzCn01JBVjTgwzNWNDOg01Y30nZR4BbRQNP3AEF2UnYFA1HyVCVisVGV1+ImQQdGQEZTdnWDIeRUV8IixORHsyJzhjfzIcI1l9NQ1FfG8xFj9EexQZMnddNT8gZEAvGRtgYTsSJABVUjA8ZFAxPyBkQDAYDwtlNBE0A3ZTHhNkY1ZnIwJbNBYxYGE7FltRQDkSJ0ZhKw5GYWEbGS8BeTsXAXNbKDMeeGEUFgxkBlICElx1OwwjcAcABTN0cRoZGHF1MRUSc1M0DDBwWAABM2hgKzBGZwZaMBJ6WzsMIHwHAAISZGJQDVBYRAw6Bg9vLB8Aa0cSbAw HTTP/1.1
Host: riperfienwa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1202
date: Mon, 27 Nov 2023 02:39:29 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: BfOYk7hCGY4Xeo_fa0Y8h1erKNrH0ZNhr-Zd_7YYNEmJQoJUSIV39A==
X-Firefox-Spdy: h2
send.cm/lib/@fortawesome/fontawesome-free/css/fa.min.css
200 OK 6.8 kB URL GET HTTP/3 send.cm/lib/@fortawesome/fontawesome-free/css/fa.min.css
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (7103), with no line terminators
Hash 3a4e6fe620850879f073fbeb7d915969
1ea842aabcf1d80ffd383b84c8da0650baefc68f
5a072970160446a139243170334741139bd414e1285dfd785bd552db7c263f80
GET /lib/@fortawesome/fontawesome-free/css/fa.min.css HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: text/css
last-modified: Mon, 31 Jan 2022 10:52:41 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"61f7bf79-1a60"
expires: Sun, 13 Aug 2023 21:42:22 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 2588202
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J24nGl2sv4J3N2h%2F7%2BAL6dvgBSoHb8C0bApoFsWZLlVpeNV0plLsq6UPICnEFyRC%2FLGHUAPwOU9j1x0528uHo1TsxN2YX1jkOsaUp5ZRmvYSJLyiiHc3eSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003609f50b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fvcwqkkqmuv.com/aas/r45d/vki/1951167/2819e174.js
200 OK 89 kB URL GET HTTP/2 fvcwqkkqmuv.com/aas/r45d/vki/1951167/2819e174.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (65106)
Hash 764a5bc32e66371622b9551873c04251
7256372bfb2638d44ded2a7345a678c8d7e987ff
42636e00abe239c7a412581cfcd7f15c09dfe42b19ca8f259ba477e4e97a8d9a
GET /aas/r45d/vki/1951167/2819e174.js HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: application/javascript
last-modified: Wed, 15 Nov 2023 14:55:11 GMT
vary: Accept-Encoding
etag: W/"6554dbcf-15c1f"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 02:39:30 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: bb90159c6b020ff76989b2df563b2019
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 27 Nov 2023 02:39:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YGfkNLdPltWn6Ek8vkceo%2BIBqOx%2BrOSHFfYqGHBIOy4OOUs4NbTaVyK3fUkckmJOg6ggrVncm3yXRtV2ng3%2BOGy7JPxFUjBF15Tl4IdQhuwF%2FX0kJhasRkH9IFeluGmWvsh74co%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c70047c8096553-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
send.cm/static/css/auth.min.css
200 OK 789 B URL GET HTTP/3 send.cm/static/css/auth.min.css
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (789), with no line terminators
Hash f095cdbc5703353ae870aa6fd1504bb8
395b5898fde4cb72dc30e7752bde4e68317fb299
d7091a28d7048b34315acc78d543eb1181751aec851df73f83da7d3b07081116
GET /static/css/auth.min.css HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: text/css
last-modified: Tue, 23 Mar 2021 17:04:40 GMT
etag: W/"315-5be372d95fefb-gzip"
vary: Accept-Encoding
expires: Mon, 27 Nov 2023 02:57:03 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tvMBiw0dkE0FfzXW0eQFg4oRfx%2FGhU%2F7Lx6Xhhks2KXOvz5nRvgk6jn%2BZPgKnkaF2yDpwKgt1k59kw%2BExnlczbtsjYfJxaTdcS%2FEcwDQnCQm8npxQ%2BbUPug%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003609f80b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3VtP9JW6UR-AOuaXpztymTzC-gRTeYTZtRTj9UjxttVTagnp0ntlD4zm4Gc-tT92CLoUJv&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1660147883%3A1701052771036758&theme=glif
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3VtP9JW6UR-AOuaXpztymTzC-gRTeYTZtRTj9UjxttVTagnp0ntlD4zm4Gc-tT92CLoUJv&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1660147883%3A1701052771036758&theme=glif
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3VtP9JW6UR-AOuaXpztymTzC-gRTeYTZtRTj9UjxttVTagnp0ntlD4zm4Gc-tT92CLoUJv&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1660147883%3A1701052771036758&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:31 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-NEkZEl9h87HPr0f13141Wg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
send.cm/assets/js/dashforge.js
200 OK 2.3 kB URL GET HTTP/3 send.cm/assets/js/dashforge.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (2286), with no line terminators
Hash 6c469db96744ab501de112c9fac8f15e
a9795764586d64d918bb8a433b1d3043a61a6a70
d7d2ab9143404f0500f004976b62f44516128747d69ef3994a9a18b479173efe
GET /assets/js/dashforge.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: application/javascript; charset=utf8
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-control: max-age=259200
cf-bgj: minify
cf-polished: origSize=3370
etag: W/"d2a-5d2f044f765a3-gzip"
expires: Mon, 27 Nov 2023 02:58:20 GMT
last-modified: Sun, 12 Dec 2021 10:17:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vqs7U%2BXucAxiI%2BqPyF8o%2FwbJ7qbOuPODWO2zmcoHYk9zuSc%2FIXl49T7Ub61D48HkC7379rqYI8sbfn1N6FAvpDoD0y1Vdc5ZIokD6tly0YUmhcezMx5q4u8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003619fc0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/lib/perfect-scrollbar/perfect-scrollbar.min.js
200 OK 18 kB URL GET HTTP/3 send.cm/lib/perfect-scrollbar/perfect-scrollbar.min.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (18216)
Hash 4a10bcfa0a9c9fa9d503b5a498cac31e
c4f6c403e99fb37cb496c3844b332823db7c5837
a4ec9d558eeb7bc7359fe7c4820deea2c951fdd8bd34cb0e15727412c7f6c634
GET /lib/perfect-scrollbar/perfect-scrollbar.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
etag: W/"4773-5ae64b14b0680-gzip"
vary: Accept-Encoding
expires: Mon, 27 Nov 2023 02:53:53 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oHEo6dmJ9n8%2BnWhLS3049F4caqKTUftGNjO356mvgPEqxOOraBtyJAmeMaNwoWM97cdZS2xvKqlhiAt312zESJhWQAzqhIOGtOZl%2F3QVpPrCjmmEBCvoesI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003619fd0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/static/js/clipboard.min.js
200 OK 9.0 kB URL GET HTTP/3 send.cm/static/js/clipboard.min.js
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Unicode text, UTF-8 text, with very long lines (9258), with no line terminators
Hash db9c29b300b6e957b611f437fe482b0c
a7ca1b86b66aa417e5ded8bddf571bd28775d7d1
02b7776bbff33fa250331338c8a085b5447d8575283a7943519c56f72215b2b2
GET /static/js/clipboard.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 14 Dec 2022 18:00:20 GMT
etag: W/"234a-5efcd82834534-gzip"
vary: Accept-Encoding
expires: Mon, 27 Nov 2023 02:49:08 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bsq642PawT9SLcxgxp%2B7Tlh0OLOiTNZlUb6E0HhhNlZ1CUeb%2FpnDn8ZwhpglqLm4%2B7vBqSyaQy9ng%2BGaM8uBqmzMtqc0%2Bpz7%2BqtzJUv6XslO4henykR9zx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003a1a730b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2CPej0Trb8vrwvYEObFYSvoJTXCI86CGyi9uX8wWl4gNd7BlqnNz5LK9uP9UxcIIcOJY07&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S84005708%3A1701052769180002&theme=glif
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2CPej0Trb8vrwvYEObFYSvoJTXCI86CGyi9uX8wWl4gNd7BlqnNz5LK9uP9UxcIIcOJY07&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S84005708%3A1701052769180002&theme=glif
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2CPej0Trb8vrwvYEObFYSvoJTXCI86CGyi9uX8wWl4gNd7BlqnNz5LK9uP9UxcIIcOJY07&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S84005708%3A1701052769180002&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Nov 2023 02:39:29 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-oU1EQ-IDpHr9DnJS8iK2ng' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nopoloferewer.com/WTRUTk52Czc9cwxjbQYUHAUkGSAfUDEJFD9XAhx3OGI4NBYBX3I6Jz0JbX59YQVnaD4wUGl/aCpANTo7Kglnfn5oEj0gKDYJZH5+aBIic393B2BgfW0aZGg7ZAVhen1hBmx+f28GZH53bwRyOj44U2l/aClAICJzaANkf35sBmN5em8HZQ
204 No Content 0 B URL POST HTTP/3 nopoloferewer.com/WTRUTk52Czc9cwxjbQYUHAUkGSAfUDEJFD9XAhx3OGI4NBYBX3I6Jz0JbX59YQVnaD4wUGl/aCpANTo7Kglnfn5oEj0gKDYJZH5+aBIic393B2BgfW0aZGg7ZAVhen1hBmx+f28GZH53bwRyOj44U2l/aClAICJzaANkf35sBmN5em8HZQ
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerLet's Encrypt
Subjectnopoloferewer.com
Fingerprint1C:1B:31:D2:BE:DB:1E:11:2D:94:5D:E0:D3:C4:E7:24:97:8D:D8:19
ValidityFri, 17 Nov 2023 18:18:56 GMT - Thu, 15 Feb 2024 18:18:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /WTRUTk52Czc9cwxjbQYUHAUkGSAfUDEJFD9XAhx3OGI4NBYBX3I6Jz0JbX59YQVnaD4wUGl/aCpANTo7Kglnfn5oEj0gKDYJZH5+aBIic393B2BgfW0aZGg7ZAVhen1hBmx+f28GZH53bwRyOj44U2l/aClAICJzaANkf35sBmN5em8HZQ HTTP/1.1
Host: nopoloferewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Mon, 27 Nov 2023 02:39:31 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DBs75OJZ3lM3SxGU3jl%2BqURuX0KjBQanEZYxR8MG5%2FCiFercXHc5dG7Tus2xNCkyByoEjFvnjIkjQCHlpyKl%2FD9gBivDSJtVgpc%2BUDIgB5L%2F25LyzN2%2FH3jLUgP%2FG8%2FPIHL09Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7004b6f87b4f7-OSL
alt-svc: h3=":443"; ma=86400
200 OK 510 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Size 510 kB (509682 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jg8a6x2bh39i HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 02:39:27 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=0;includeSubDomains;
expires: Sun, 26 Nov 2023 02:39:27 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LGfS12%2FlYh2xzxfTak%2FRhzf91A1c1AJTDscRvNL0vDPa5YlVh7QDZG%2FP6HIG0OAe9M7SOXNsws6poLTo3ZUI9xgi3cggG%2B%2FnY6LH4pcdiq584BLPMQrXSWw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: lang=english; domain=.send.cm; path=/
c_7hyj5tegwm4sd1=jg8a6x2bh39i; domain=.send.cm; path=/
aff=59249; domain=.send.cm; path=/; expires=Mon, 11-Dec-2023 02:39:27 GMT
__cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; SameSite=None; Secure; path=/; expires=Mon, 27-Nov-23 03:09:27 GMT; HttpOnly
server: cloudflare
cf-ray: 82c70032de107131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
send.cm/js/share.js
200 OK 329 B IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (332), with no line terminators
Hash 1d2236286294d62230ccc88e96b5297b
de15f3e22b3e2719f872e47a63b5702c48835a3f
c482daeb5dbeb1b8b60adbd8a47e025cbfe19ea0a0f798d8f77b862781694dbc
GET /js/share.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: application/javascript; charset=utf8
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-control: max-age=259200
cf-bgj: minify
cf-polished: origSize=354
etag: W/"162-5ae64b15a48c0-gzip"
expires: Mon, 27 Nov 2023 02:57:30 GMT
last-modified: Thu, 03 Sep 2020 08:39:39 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sqnj5hbPX%2FsnnrvQ8Su5ONqLgNnWBHzdgXch2yrurXr9iYoCgptXORy7ewvYW0LA79lseQvrHy6iaepz57AyoJpNOrCSSxIYYdkooAv9zyZfBSDOad23lOU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003a2a7c0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/favicon.ico
200 OK 65 kB IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 64x64, 32 bits/pixel\012- data
Hash 22dab3b36a487940c539e179b7edd7ea
ad1d193daab9eb56c4d27b10e0f0638307c262cc
b64c225956915ee8b619ea190276ebe838880d3a16793a5614487e8be5b5d3bf
GET /favicon.ico HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i; cf_clearance=gddFK3j6QdQeNNzX1rG8x0n9rg1W0badZdF5w7dTpKg-1701052768-0-1-730ca2d2.73a07051.5b213570-0.2.1701052768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: image/vnd.microsoft.icon
last-modified: Thu, 03 Sep 2020 08:39:39 GMT
etag: W/"fcae-5ae64b15a48c0"
expires: Mon, 27 Nov 2023 03:00:25 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TNwLYaJKKKde8pV%2BjikT5am4WUezN4%2FBSxwIMUXaBh0RaibG23KJKQATgacJq5JB13qAy60UDapZXYbsPvGunBfO7t27Z8reco5evUkWqKyqaraBHxhS%2Bb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c7003d8af20b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82c70032de107131
200 OK 0 B URL POST HTTP/3 send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82c70032de107131
IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/82c70032de107131 HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12180
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/jg8a6x2bh39i
Cookie: lang=english; c_7hyj5tegwm4sd1=jg8a6x2bh39i; aff=59249; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdWKfw3WpiSMB; _pk_id.1.43ee=5ad4cba0a13fa5cc.1701052771.; _pk_ses.1.43ee=1; __PPU___PPU_SESSION_URL=%2Fjg8a6x2bh39i
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 02:39:28 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=gddFK3j6QdQeNNzX1rG8x0n9rg1W0badZdF5w7dTpKg-1701052768-0-1-730ca2d2.73a07051.5b213570-0.2.1701052768; path=/; expires=Tue, 26-Nov-24 02:39:28 GMT; domain=.send.cm; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1c8KT1Oi%2B6JPF7uENa82G8WqjUUJE57j57F6BaKkVNG%2BgzOS25P6A3ZBJManVxW%2FKnqs31rO%2B1iUuEQW0p75kPsF9l3BAlPVG3zj0jBuiZIew%2BkRxdgiv8M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003cdad30b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pogothere.xyz/
200 OK 27 B IP
Requested by https://send.cm/jg8a6x2bh39i
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash c0dcd1500f10489d10f6c3f55a41df5f
3d128dd177f6572f695d35696e14b2b447cc7b9c
db21382fef40b5df0af453af8d775ec647b7db60c491d0879daf34c2a3c9d5a0
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 02:39:29 GMT
content-type: text/plain
set-cookie: csu=1543828016200960@1@1701052769; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJRMVLx65n%2Bdoj04ubkFTVEKvAVdaMZTFi92%2BhNqeoP7mP%2Fr5XaSsXIO5Ai3WTJj35gHNcV4DgZBRd%2Bib7MO9nHDqNaT6Pjsp2pWTdfZ%2Fdusc1VvADdDElsyC%2FpQu1zC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c7003e3d756702-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.70.55
212.117.190.201
139.45.195.8
0.0.0.0
3.126.241.83