send.cm/qr/64F0U
172.67.70.55200 OK 346 B IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type PNG image data, 135 x 135, 1-bit grayscale, non-interlaced\012- data
Hash 2c99ae81b7eeb9f64b8f88e93f9ac2a0
3a1d08319943b2ec4cc2a45f7a4c93535e680f0f
3091f53c917ec5074a07692595122ae927dfeb93b16facac6b2d1a06effae56e
GET /qr/64F0U HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: image/png
content-length: 346
content-transfer-encoding: binary
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F9J8UYAnbgYiyhSIpcvJdUMMpQia%2FEVoQipsoVHlPKiZGUrNZLPYpBEkCY2j6S6CyP%2FlfOOVdbsiMHI87rRTli%2FlLW59hk9pP%2F9h%2FQ8eeH7ADPMXjMG4nLk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d8d85712a-OSL
alt-svc: h3=":443"; ma=86400
d2dkurdav21mkk.cloudfront.net/?rukdd=984022
54.230.241.40200 OK 55 kB URL GET HTTP/2 d2dkurdav21mkk.cloudfront.net/?rukdd=984022
IP 54.230.241.40:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash ec9cc450c766db16a8f50c6f61d3b2b6
3b9a222db989c139ed80b783456a27800b44ef80
90fe3a0597cc4d5045221981c1f718c9e030e25f49bd9ca58e21de1e04372e20
GET /?rukdd=984022 HTTP/1.1
Host: d2dkurdav21mkk.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 54819
date: Wed, 22 Nov 2023 04:42:11 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f4N4jumbAYhYVC3UVqoTUCVl5ibCGFmAN3Vg6x0-40DDdZZsOm4G2A==
age: 72305
X-Firefox-Spdy: h2
send.cm/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
172.67.70.55200 OK 86 kB URL GET HTTP/3 send.cm/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type gzip compressed data, from Unix\012- data
Hash 4117b079f61c838742074f23a1496e1b
c72c4525e53dbfd170685ae76a453d3c02ed6f29
f5e73652dfc64034b681b9ee3e7a88ce867eacb66d1efc8ab8ac8c96e21a6bc2
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript
last-modified: Thu, 16 Nov 2023 21:55:48 GMT
etag: W/"65568fe4-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mXVqaARI35NQweoSVsqWMzUxHWw%2FZGIGuaLawXhsJyJm4f%2BjdP5kYCL9gPABO9fmgTHTriktNncwmDiDKiqZOxOQRlUCru0x0vNA%2FYAfWQSiBpa6%2Bj7FaAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a5665d8d8a712a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 25 Nov 2023 00:47:16 GMT
cache-control: max-age=172800, public
content-encoding: gzip
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
172.67.70.55200 OK 77 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 77420, version 1.1\012- data
Hash 2afba28a9ce96315436db858db163c47
550d4374a60527b4f68d4700019aaac11a9140a2
b51d665d9cfebb31a2b61491bf408a172a5791166a0eb99a57ae4a7acbcba0d4
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: font/woff
content-length: 77420
last-modified: Thu, 17 Sep 2020 12:29:21 GMT
vary: Accept-Encoding
etag: "5f6356a1-12e6c"
expires: Sat, 11 Nov 2023 16:43:34 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 2232146
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DhSWXnOyt7YqHRBybOn%2FHiPZmXSEGWak2CBYFxNRGkpZiU9fsME6EJT%2BVpiFt9fFIN0%2FJ%2BdrtW81%2FWI6jj8KN%2BHzSirr%2BEtBrsSGftYNyLZ4eWtg3Xg1FRU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665eee43712a-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff
172.67.70.55200 OK 82 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 81760, version 1.1\012- data
Hash 220843e2f1927e726e78ca63f426ce50
d86801f8452cda25025530f406773162decd1458
ae9310191397b69cd6dd015ba0c6f9d674f493d35384f29c9c7d23e3c7df0d24
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: font/woff
content-length: 81760
last-modified: Thu, 17 Sep 2020 12:29:20 GMT
vary: Accept-Encoding
etag: "5f6356a0-13f60"
expires: Sat, 11 Nov 2023 16:45:04 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 72305
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x9p1cAukH9fnDeabTgmBjB6sdMrAtWqxfwPtWHZ4ZL%2BS%2BH%2BgiTuM%2F1qdc9Kk21YzUWWa7hle58E8gMGyJp406YGeiVS6PLKaY42mQfTlfgN4Xrkf34C4PRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665eee45712a-OSL
alt-svc: h3=":443"; ma=86400
send.cm/lib/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2
172.67.70.55200 OK 74 kB URL GET HTTP/3 send.cm/lib/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 74256, version 329.-17761\012- data
Hash 418dad87601f9c8abd0e5798c0dc1feb
a6b003ef506e92d05cde73adf67487d7fd7ec6df
f18c486a80175cf02fee0e05c2b4acd86c04cdbaecec61c1ef91f920509b5efe
GET /lib/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/lib/@fortawesome/fontawesome-free/css/fa.min.css
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: font/woff2
content-length: 74256
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
etag: "12210-5ae64b14b0680"
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cache-control: max-age=259200
cf-cache-status: HIT
age: 1582
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oNF2zUfdIC%2F6NyQOgLYOBRBzJ7TBVZdeTaE7wlIKskUZIQH9%2FZ28p5gESb%2FpnqVoDYwSkGgUZlqYEoaT1uZjVe1GFx3ZPTg78fleSMuZcOYTY2P%2FEcL6ItU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a5665f8e9a712a-OSL
alt-svc: h3=":443"; ma=86400
greataseset.org/OUFvRG0Wfgw3UG4qAHEJcS0aIjwIBz4TJw8COhYnW3IYFD8JBEkwBF18VnxZCXNdYh1QJVJ1S0o1DjAYSnxeYgRXJwB5S098XmpeDW9ccEMJZxp5XB81HyUKBHBJNBlNLVJ1WglxWHRdDXJXc1wK
188.114.97.1204 No Content 0 B URL GET HTTP/2 greataseset.org/OUFvRG0Wfgw3UG4qAHEJcS0aIjwIBz4TJw8COhYnW3IYFD8JBEkwBF18VnxZCXNdYh1QJVJ1S0o1DjAYSnxeYgRXJwB5S098XmpeDW9ccEMJZxp5XB81HyUKBHBJNBlNLVJ1WglxWHRdDXJXc1wK
IP 188.114.97.1:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectgreataseset.org
FingerprintD2:AF:3D:29:24:C6:85:99:AC:62:8F:82:D9:FA:BE:A3:4D:BE:18:35
ValidityWed, 15 Nov 2023 06:34:33 GMT - Tue, 13 Feb 2024 06:34:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /OUFvRG0Wfgw3UG4qAHEJcS0aIjwIBz4TJw8COhYnW3IYFD8JBEkwBF18VnxZCXNdYh1QJVJ1S0o1DjAYSnxeYgRXJwB5S098XmpeDW9ccEMJZxp5XB81HyUKBHBJNBlNLVJ1WglxWHRdDXJXc1wK HTTP/1.1
Host: greataseset.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 23 Nov 2023 00:47:16 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2D9y6F3QJZ9niEb3reB%2FoOoDS%2BY2odG1MimEPzA5B5hwTaNUDz0WnUraoV6P7kK9o1m%2F1VrMatT4KfXv9qKQhqwAMnIHR3GpcRmZuHJ%2Bt27GBUmHk6leQOvPxjYtZEV5oME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665f98565684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
wouldmakefea.org/a3RYdk0KFjsbcgpJOlA4GRhlU38tUWowKVkQMwM/DxUuRHwGHzNYLgcbLRIrGRs2AmMFESxTfy1BAkR5XhceEQgqIjshFxM5EC4YWhwARyIhJTUGDykxNxADAxAMLjdfGxE1B05GGjcgBCMIRQstEjA7GDMhaRkcOj4BPidSFQswOg47aQYrIwwdTg89ORYgJBwsGSAHJTkvRg48Ng0FDgxNDz4jXyccARwPOiBGBT0mL0McBwx9RAs5LAIuHhwAGRUPUhIbMBsZPg0FATowCTkMLgMREBs9EQkjJR47HhEDPSMrGh4cABk9JS04GxwLGyJpFRU6PB41FSpZMy4dOiUeICE9BREgOiElDx4VMwM0NCs9Ij0uNQAFGRElPDcQRxsgNTA0LD4YPT46PRgOEWsBBzcYPVYSFgYKJzMqRDw6PG0
108.157.214.118200 OK 1.2 kB URL GET HTTP/2 wouldmakefea.org/a3RYdk0KFjsbcgpJOlA4GRhlU38tUWowKVkQMwM/DxUuRHwGHzNYLgcbLRIrGRs2AmMFESxTfy1BAkR5XhceEQgqIjshFxM5EC4YWhwARyIhJTUGDykxNxADAxAMLjdfGxE1B05GGjcgBCMIRQstEjA7GDMhaRkcOj4BPidSFQswOg47aQYrIwwdTg89ORYgJBwsGSAHJTkvRg48Ng0FDgxNDz4jXyccARwPOiBGBT0mL0McBwx9RAs5LAIuHhwAGRUPUhIbMBsZPg0FATowCTkMLgMREBs9EQkjJR47HhEDPSMrGh4cABk9JS04GxwLGyJpFRU6PB41FSpZMy4dOiUeICE9BREgOiElDx4VMwM0NCs9Ij0uNQAFGRElPDcQRxsgNTA0LD4YPT46PRgOEWsBBzcYPVYSFgYKJzMqRDw6PG0
IP 108.157.214.118:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerAmazon
Subjectwouldmakefea.org
Fingerprint9A:D6:98:4E:29:26:C7:0A:99:C0:DA:F1:BF:A2:8B:FC:61:22:31:01
ValidityWed, 15 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3021), with no line terminators
Hash a9937883a33e6ac8a2e493ab40aa2e89
e864833cb04ddf44f4485ae4d03fdf8a3c05a6c0
ec6faee48b95512ca6bddfa38e8b8e4246b8b78f6d4cceafdebcf17c17da49cd
GET /a3RYdk0KFjsbcgpJOlA4GRhlU38tUWowKVkQMwM/DxUuRHwGHzNYLgcbLRIrGRs2AmMFESxTfy1BAkR5XhceEQgqIjshFxM5EC4YWhwARyIhJTUGDykxNxADAxAMLjdfGxE1B05GGjcgBCMIRQstEjA7GDMhaRkcOj4BPidSFQswOg47aQYrIwwdTg89ORYgJBwsGSAHJTkvRg48Ng0FDgxNDz4jXyccARwPOiBGBT0mL0McBwx9RAs5LAIuHhwAGRUPUhIbMBsZPg0FATowCTkMLgMREBs9EQkjJR47HhEDPSMrGh4cABk9JS04GxwLGyJpFRU6PB41FSpZMy4dOiUeICE9BREgOiElDx4VMwM0NCs9Ij0uNQAFGRElPDcQRxsgNTA0LD4YPT46PRgOEWsBBzcYPVYSFgYKJzMqRDw6PG0 HTTP/1.1
Host: wouldmakefea.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1174
date: Thu, 23 Nov 2023 00:47:16 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 a8de383ae0e22ed372880220fd20b198.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: m-Ze8Eb9TCgCpxf8YHBI0ZHB8h4EsRIz2936ljmXEuGdBKQ0z-LGBg==
X-Firefox-Spdy: h2
send.cm/favicon.ico
172.67.70.55200 OK 11 kB IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 64x64, 32 bits/pixel\012- data
Hash 22dab3b36a487940c539e179b7edd7ea
ad1d193daab9eb56c4d27b10e0f0638307c262cc
b64c225956915ee8b619ea190276ebe838880d3a16793a5614487e8be5b5d3bf
GET /favicon.ico HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: image/x-icon
last-modified: Thu, 03 Sep 2020 08:39:39 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5f50abcb-fcae"
expires: Sun, 13 Aug 2023 21:41:26 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 2480142
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I2Hg3X0rDO%2F4E3ZK3%2BfN3s6ZgZoCR%2F%2FVe3sQ5Rlr0mZ%2BVbsNAtaBjJzE6V3FKFceAThVbMgS1hj00cm75vrb43Ju3oKPnJa16S%2BKbI3PXHlr%2B6bdm4VXblM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566614f91712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/static/js/clipboard.min.js
172.67.70.55200 OK 3.2 kB URL GET HTTP/3 send.cm/static/js/clipboard.min.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Unicode text, UTF-8 text, with very long lines (8941)
Hash ad98572d415d2f2452845a6068a913c0
6674f81dd01c76be986cf0a8172d1073e56d7ef4
baff7541be9c20f7f977f6993ce39cfa937a7bde69db6e7beebb8f68372682a1
GET /static/js/clipboard.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 14 Dec 2022 18:00:20 GMT
etag: W/"234a-5efcd82834534-gzip"
vary: Accept-Encoding
expires: Thu, 23 Nov 2023 01:04:34 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FTmJXxFb1d2PxUdUXqW2QWKC8IitKDz%2F6sE79XIwC%2FkqKLEiE5ayPI1t2fLpTS143IjWmGSt3kUYOsjou2QX%2BcpbstLBr6fHCftf7cqabVmrUWwfMKrD0KI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665f7e93712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
172.67.70.55200 OK 30 kB URL User Request GET HTTP/2 send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
IP 172.67.70.55:443
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (53192)
Hash 71cd03ccc5ca4855374f7b49010075a6
bd7b7045b5fb22554ddb1ff7c3e1e0b1cca36cdd
77ca8689404358d09108320ad1290f0b4877ca13d9d597b20b5ec56e800697fd
GET /zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 00:47:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=0;includeSubDomains;
expires: Wed, 22 Nov 2023 00:47:15 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=63fLVBqbykrKoasFwfvYMsme8wSxsSQxHZI8EtAMgH0ytXwZyFbnAOwggqBBO06QFOKBDxB%2Fv0%2BdP52vWbbbTmLjdMb4DCFumDuIyyz1NoAKNgrMCvGjsbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; domain=.send.cm; path=/
lang=english; domain=.send.cm; path=/
aff=2297; domain=.send.cm; path=/; expires=Thu, 07-Dec-2023 00:47:15 GMT
__cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; SameSite=None; Secure; path=/; expires=Thu, 23-Nov-23 01:17:15 GMT; HttpOnly
server: cloudflare
cf-ray: 82a5665a4ef75696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
wouldmakefea.org/utx?cb=zGRrNYT85eey&top=send.cm&tid=984022
108.157.214.118204 No Content 0 B URL GET HTTP/2 wouldmakefea.org/utx?cb=zGRrNYT85eey&top=send.cm&tid=984022
IP 108.157.214.118:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerAmazon
Subjectwouldmakefea.org
Fingerprint9A:D6:98:4E:29:26:C7:0A:99:C0:DA:F1:BF:A2:8B:FC:61:22:31:01
ValidityWed, 15 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=zGRrNYT85eey&top=send.cm&tid=984022 HTTP/1.1
Host: wouldmakefea.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 23 Nov 2023 00:47:16 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://send.cm
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Thu, 23 Nov 2023 00:48:16 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 a8de383ae0e22ed372880220fd20b198.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: v1Wuf94HJwZtFuVdNXAJKRb4UjnqkAzeFKEeasvv0OOzUv76REPosg==
X-Firefox-Spdy: h2
walker.send.cm/s.php?action_name=send.cm%2Fzqsuln66tga1&idsite=1&rec=1&r=579833&h=0&m=47&s=18&url=https%3A%2F%2Fsend.cm%2Fzqsuln66tga1%2FWR.v6.24.EI.x86.x64.ByMi.exe&_id=7de6636a7a3de932&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=BDTEcj&pf_net=20&pf_srv=164&pf_tfr=9&pf_dm1=383&uadata=%7B%7D
172.67.70.55204 No Content 0 B URL POST HTTP/3 walker.send.cm/s.php?action_name=send.cm%2Fzqsuln66tga1&idsite=1&rec=1&r=579833&h=0&m=47&s=18&url=https%3A%2F%2Fsend.cm%2Fzqsuln66tga1%2FWR.v6.24.EI.x86.x64.ByMi.exe&_id=7de6636a7a3de932&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=BDTEcj&pf_net=20&pf_srv=164&pf_tfr=9&pf_dm1=383&uadata=%7B%7D
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /s.php?action_name=send.cm%2Fzqsuln66tga1&idsite=1&rec=1&r=579833&h=0&m=47&s=18&url=https%3A%2F%2Fsend.cm%2Fzqsuln66tga1%2FWR.v6.24.EI.x86.x64.ByMi.exe&_id=7de6636a7a3de932&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=BDTEcj&pf_net=20&pf_srv=164&pf_tfr=9&pf_dm1=383&uadata=%7B%7D HTTP/1.1
Host: walker.send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/3 204 No Content
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
content-encoding: none
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LTDXfzdmvZc9AtSYvuFPtD0oZr%2Bxbs7ZOat6mgu3ZNgHBWW%2BBsbHt2j0GSTe619douGSTUHXLQ2AUNv6%2BluOFK1BhD4GyT%2B5MvhHiYDxzqSDpJrNsYoQLtFkWoppbm3N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566616fa2712a-OSL
alt-svc: h3=":443"; ma=86400
walker.send.cm/s.js
172.67.70.55200 OK 22 kB IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (63519)
Hash e5461eb0cef4256771e360d6306c3033
f31a23f1e2d15a7a03992010c359833efba3e6b8
78c25da6082dd620e0fe7f12d7ef6e3c6015304575d9ced465b4e84e15a7d82a
GET /s.js HTTP/1.1
Host: walker.send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=65842
etag: W/"10132-602c8b81f787d"
last-modified: Sun, 13 Aug 2023 07:16:06 GMT
cache-control: max-age=259200
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F0%2FbwrijqdTLpe%2B%2FVjehLtq8BN9jcOYea7b7WaXFaWii5oER%2BhgMsIncogQDIu1JYs7xs4nPeMOy3MhKzQB%2BjbSz1Q4u%2BlVQTZIsNx%2Fy8pnaUoj2%2FAKx1bHpcTA5Er3F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a5665f6e8d712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d2dkurdav21mkk.cloudfront.net/5Z245cFgEAVcWZxMHXU1hX1oJQmpBBEofNhdTXz4oICJ+AmoWP3FFfhMUXU1oQQJYHj9aSFweO1pfHxE8BVMNViwXAVJNMw0CWBUsCg9WHn4SDwQdNx0HVRw5Qlx/RXZXSwtAcB9fCFVrJUsLQDQOAEwIfVVeQUhuOFgNVWslSwtAKhFLCjFpV1cXQHFCXA-kXPQQFVlVqIVwJQWhXXwlBfVVeXxkqAghWCH1VKAhBaUleHwVlVg
54.230.241.40 621 B URL d2dkurdav21mkk.cloudfront.net/5Z245cFgEAVcWZxMHXU1hX1oJQmpBBEofNhdTXz4oICJ+AmoWP3FFfhMUXU1oQQJYHj9aSFweO1pfHxE8BVMNViwXAVJNMw0CWBUsCg9WHn4SDwQdNx0HVRw5Qlx/RXZXSwtAcB9fCFVrJUsLQDQOAEwIfVVeQUhuOFgNVWslSwtAKhFLCjFpV1cXQHFCXA-kXPQQFVlVqIVwJQWhXXwlBfVVeXxkqAghWCH1VKAhBaUleHwVlVg
IP 54.230.241.40:0
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (872), with no line terminators
Hash d074f6de3833a4810b4ea73c3e3d42a4
38e5a1bd482562bac30a5711e2250a04fc8847ea
e8782fe19fe056a37d5901997cdf7c11677565d0a4ac060c006270aed3ece0ce
GET /5Z245cFgEAVcWZxMHXU1hX1oJQmpBBEofNhdTXz4oICJ+AmoWP3FFfhMUXU1oQQJYHj9aSFweO1pfHxE8BVMNViwXAVJNMw0CWBUsCg9WHn4SDwQdNx0HVRw5Qlx/RXZXSwtAcB9fCFVrJUsLQDQOAEwIfVVeQUhuOFgNVWslSwtAKhFLCjFpV1cXQHFCXA-kXPQQFVlVqIVwJQWhXXwlBfVVeXxkqAghWCH1VKAhBaUleHwVlVg HTTP/1.1
Host: d2dkurdav21mkk.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wouldmakefea.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 621
date: Thu, 23 Nov 2023 00:47:17 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AVPsvYQiclnvvVjySjIG_XARjpXbIAs5zSyt4DrYcaWZajWGo9Ueiw==
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3dbhAG-Z49KFA3u2SxERD5AQcMmUHWlDut4rpWmMD2I-T14yNZFH0Vff6NeIVk7fxIWnC8Ug
142.250.74.109302 Found 401 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3dbhAG-Z49KFA3u2SxERD5AQcMmUHWlDut4rpWmMD2I-T14yNZFH0Vff6NeIVk7fxIWnC8Ug
IP 142.250.74.109:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (393)
Hash 62925e0f85acce4d271224fe4a50926d
9a8fa18b19430f59530661a00f32d981cf435e41
3c6b0ab270fd344d8075d5651009a683dd69f4ee0bbfe193d61a56ea8cbe5011
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3dbhAG-Z49KFA3u2SxERD5AQcMmUHWlDut4rpWmMD2I-T14yNZFH0Vff6NeIVk7fxIWnC8Ug HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:h6_iSZGb4OVRie4pZwlBKa8CNZ2gjw:m4qjhSLqRAnEplhF;Path=/;Expires=Sat, 22-Nov-2025 00:47:17 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 23 Nov 2023 00:47:17 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp113DLszWgGdECHlMOkV_XYsIftopYu9lea5pX-6BltHkh-aSaZW6KNSWvj1_dVWIdP09J4&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-116589745%3A1700700437106598&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-CUjNoDbGbfMTGAbDeiNgbg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 401
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp19LiGIpxxStRI25RxQxo19-Q9IygdLmmdCcFem2ztOM4ASXOxZaz9MQTZ8wO2jZtwgV5tnpQ
142.250.74.109302 Found 405 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp19LiGIpxxStRI25RxQxo19-Q9IygdLmmdCcFem2ztOM4ASXOxZaz9MQTZ8wO2jZtwgV5tnpQ
IP 142.250.74.109:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (397)
Hash 70e30c531e72cd41ecb319ba8a7fbbf3
2f63c7a8cc1796031d261ad923605e32c35e14b8
15b8bc4e157f9184f2ae11cca224178e00c9a5032fec3e2ecada17985a56bca2
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp19LiGIpxxStRI25RxQxo19-Q9IygdLmmdCcFem2ztOM4ASXOxZaz9MQTZ8wO2jZtwgV5tnpQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:IU9PcRnOMzOUgeznhiJCaRdSsaN2QA:4wH-_yHhG2LuUFyn;Path=/;Expires=Sat, 22-Nov-2025 00:47:17 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 23 Nov 2023 00:47:17 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp23MGnJ1mF9SHkLk6KVqF-zy4F_39M2m3GgV-EdnGSDlOYbEmFxKLDgQFT3Zl7tJjkBA3wd&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-956140749%3A1700700437160402&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-Qj80viJan19R7yqwsv8uZw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
172.67.70.55200 OK 77 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 77420, version 1.1\012- data
Hash 2afba28a9ce96315436db858db163c47
550d4374a60527b4f68d4700019aaac11a9140a2
b51d665d9cfebb31a2b61491bf408a172a5791166a0eb99a57ae4a7acbcba0d4
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1; cf_clearance=_hHclcwcKHZBqLnFZGzApCk0z2JelBxuiyxBol59ues-1700700437-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1700700437
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:17 GMT
content-type: font/woff
content-length: 77420
last-modified: Thu, 17 Sep 2020 12:29:21 GMT
vary: Accept-Encoding
etag: "5f6356a1-12e6c"
expires: Sat, 11 Nov 2023 16:43:34 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 2232147
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V6ha7aORc7nLJxXnOpCc%2F%2Boh5DvzFE133fAB5D8vl6XPdJgMu6QDsExurqhls3AuahLl2NgWAhBQUtgHPA%2BTfqtfJ96af8%2F1j7jPJqLjxbt9HYpvzwYb2Zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566688b4f712a-OSL
alt-svc: h3=":443"; ma=86400
send.cm/lib/bootstrap/js/bootstrap.bundle.min.js
172.67.70.55200 OK 108 kB URL GET HTTP/3 send.cm/lib/bootstrap/js/bootstrap.bundle.min.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (65297)
Size 108 kB (108403 bytes)
Hash a454220fc07088bf1fdd19313b6bfd50
265a733cb7fbc481fd2510a659a85ad55c93c895
7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c
GET /lib/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=utf8
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
etag: W/"1332b-5ae64b14b0680-gzip"
vary: Accept-Encoding
expires: Thu, 23 Nov 2023 01:01:56 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6rIDwexl7getKi%2F8c4RLwh7zwuIyImBIo0tfR8qO9HOblhJFk3vfQq9NjZNpxqsyT26eNxrZnY2OXA1t3mrskic3lu41boJIZmGpWXSONGUIUXatNtra67k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665f7e95712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696
172.67.70.55200 OK 82 kB URL POST HTTP/3 send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash f02698865c3a44b2ab5d6d9368c8cb9b
3898eef32f5cb5cd67373976169ee64f9e5011a5
f7819f876cdf73865fd236a3e86918c6c57e0b0011e1df9ac3541709836288ea
POST /cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696 HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12219
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1; cf_clearance=_hHclcwcKHZBqLnFZGzApCk0z2JelBxuiyxBol59ues-1700700437-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1700700437
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:17 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=_hHclcwcKHZBqLnFZGzApCk0z2JelBxuiyxBol59ues-1700700437-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1700700437; path=/; expires=Fri, 22-Nov-24 00:47:17 GMT; domain=.send.cm; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=45PV%2BllndA9X0bGzjUR0E%2F1l1tHdlsnk6r8jOFgzdaEG8q4TpqVm9PWtV4tHcl%2FM4i8p0lNMo6LhQUkkzVyZ8hZWGst8fliyw%2FBIpMPPNL5a1DL0qwWkwSc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566685b38712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 02b3eaef42cf377f3c6206f46e435c86
edea35ee9474ddbb9aa9326bee94792aad979cb4
20e3c34a4ed623d4c7022f276e679580ea3bda238430f5dd12e8409e560e4496
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 23 Nov 2023 00:47:17 GMT
Last-Modified: Thu, 23 Nov 2023 00:27:51 GMT
Server: ECAcc (ska/F791)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eyEAXTerRTNMitfUnFbtXiBYwoduEem2vadV_A2AaCRl7eNO2CPZmw==
Age: 1166
send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696
172.67.70.55200 OK 76 B URL POST HTTP/3 send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash 695918f93ad16d9a580d93b2bc486847
629871274a2178618c6dc920375b53c5eeb79150
afcab0b4269cb750f065224a1c75331491f7922243bd7d4c6849c2430e03b19b
POST /cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696 HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12220
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:17 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=_hHclcwcKHZBqLnFZGzApCk0z2JelBxuiyxBol59ues-1700700437-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1700700437; path=/; expires=Fri, 22-Nov-24 00:47:17 GMT; domain=.send.cm; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cws1QTTgzQQHh%2FmPFxYyv%2BNjUtclpVExxZpbnUwCBabVqBzMPTx1HCVSc7bp93i3Jg6tUAdVLPOgXpWslk7fstmw1MJDCelg1wqd7HaXRG%2BNf4gf28PMDC8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a56663a8bc712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp23MGnJ1mF9SHkLk6KVqF-zy4F_39M2m3GgV-EdnGSDlOYbEmFxKLDgQFT3Zl7tJjkBA3wd&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-956140749%3A1700700437160402&theme=glif
142.250.74.109403 Forbidden 805 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp23MGnJ1mF9SHkLk6KVqF-zy4F_39M2m3GgV-EdnGSDlOYbEmFxKLDgQFT3Zl7tJjkBA3wd&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-956140749%3A1700700437160402&theme=glif
IP 142.250.74.109:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators
Hash 9009022e6e14b6b02e7eb73db31b301d
f299209607f8891b089d32857f5d4e6e44562e31
5b439c03beddce9a1724c08d45d00bae2e561c9f298841ea595a23a673303614
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp23MGnJ1mF9SHkLk6KVqF-zy4F_39M2m3GgV-EdnGSDlOYbEmFxKLDgQFT3Zl7tJjkBA3wd&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-956140749%3A1700700437160402&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 23 Nov 2023 00:47:17 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-d219z10eNyM9VdnGUgA1Tg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
friendshipmale.com/sfp.js
172.64.99.2200 OK 54 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP 172.64.99.2:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 2d0450888479d4ddda305bd96206b240
5b4595aab1cd3f854718e05db9be0c65a12ab2f6
44de073e74ff24c6b1c0fe1f3ac5b33d793560e85ef24fb6ce89e76c2cf90af6
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 00:47:18 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: c80d30f8f41a5f1a9873218b125e3424
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 23 Nov 2023 00:47:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7nEN7Be5hiLFxOpzuOQN5x6ps0eU7PQPg%2BXUS8J9oLW%2BAgYjZgd5FOosIdm%2Bmn%2BjcieqpAPmRq7zLGEXcZBaRXiRDGNnQilkOmM1LIggsMnKPzgm9aNRFGhv9lIF4XYriXPF1qQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a5666d1ee98891-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 142.250.74.109:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:H-DMvEs089Hkd59JZfUVONLtgQ7ejQ:n_NAnXEMCayccseZ; Expires=Sat, 22-Nov-2025 00:47:16 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 23 Nov 2023 00:47:16 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3dbhAG-Z49KFA3u2SxERD5AQcMmUHWlDut4rpWmMD2I-T14yNZFH0Vff6NeIVk7fxIWnC8Ug
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-lmYB8rRy01yM6IMZZBNKng' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
172.67.70.55200 OK 7.4 kB URL GET HTTP/3 send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (7432), with no line terminators
Hash 8a5b1326b7c6c5a44a4b4f121932e8d5
83100baf6b426a5b8aaf351d62f80539b5e21652
1dc9caa8ce2c1a5c44a49b7fcceced9f08a23d9710903bc50faf96b7fac27e1e
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
vary: accept-encoding
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rKewTrAbXJLVOTmBdRCPWNdwWQy0CnLeA05PsMJiYjzfUq9d2lhhUsPJMevFSgdMfGiUS0qdUodZ7Lm2nJInjQgVDIEYHPGiROiBFM0AseBcenQVEHKMP70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566619fbc712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pogothere.xyz/asd100.bin
172.64.166.32200 OK 102 kB IP 172.64.166.32:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 3512
last-modified: Wed, 22 Nov 2023 23:48:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1u8m4RRdorDE1d%2FfxhKsLY4NkDK4XenkPsQozk5EQhf%2FAirZ2ihjpNRonKeLFjcUMcYYt6JLJCay5zZvIB0PnPTm45f%2BtcKQ0DcqGJSKSTfydWsAkEBU2UFK8zPsGJZX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a566620fce6547-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dismantlepenantiterrorist.com/pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0
0.0.0.0 0 B URL GET dismantlepenantiterrorist.com/pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0
IP 0.0.0.0:0
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0 HTTP/1.1
Host: dismantlepenantiterrorist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
send.cm/static/css/dl.min.css
172.67.70.55200 OK 180 kB URL GET HTTP/3 send.cm/static/css/dl.min.css
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 180 kB (179945 bytes)
Hash 3e85e3b581d51ddba21136119002fc2d
038a7216f7187936b4f4e5bee0975bf44e3e1449
dde25a807ebc087b35d1bbe9b3030ea528a52e414ce29a7894abd937bf67e7c6
GET /static/css/dl.min.css HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: text/css
last-modified: Thu, 07 Sep 2023 13:24:21 GMT
etag: W/"2bee9-604c4c72211a7-gzip"
vary: Accept-Encoding
expires: Thu, 23 Nov 2023 01:01:24 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=af3CgZ37cgBW7KTwNgzUfPUVRwBJd1N7LPTIRAVVvT1NrZcCbNIGaeQ2P3wTbY6YHzkCifICLdOqJrZJKZ7b35JcjeZ6%2FpKTFT7DbiEP8Pv127xhekyW%2BVw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d7d7c712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp113DLszWgGdECHlMOkV_XYsIftopYu9lea5pX-6BltHkh-aSaZW6KNSWvj1_dVWIdP09J4&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-116589745%3A1700700437106598&theme=glif
142.250.74.109403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp113DLszWgGdECHlMOkV_XYsIftopYu9lea5pX-6BltHkh-aSaZW6KNSWvj1_dVWIdP09J4&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-116589745%3A1700700437106598&theme=glif
IP 142.250.74.109:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp113DLszWgGdECHlMOkV_XYsIftopYu9lea5pX-6BltHkh-aSaZW6KNSWvj1_dVWIdP09J4&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-116589745%3A1700700437106598&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 23 Nov 2023 00:47:17 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-bioOXce75n-lSNg-bMqjFQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
greataseset.org/popunder.gif
188.114.97.1200 OK 35 B URL GET HTTP/3 greataseset.org/popunder.gif
IP 188.114.97.1:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectgreataseset.org
FingerprintD2:AF:3D:29:24:C6:85:99:AC:62:8F:82:D9:FA:BE:A3:4D:BE:18:35
ValidityWed, 15 Nov 2023 06:34:33 GMT - Tue, 13 Feb 2024 06:34:32 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: greataseset.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:17 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 104711
last-modified: Tue, 21 Nov 2023 19:42:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=onlRGTZ0nU69LblnLUmu9CivG7UDESsQrpZVB4f0TCmh4HW8WAt1pXUCrN0nxhR81DNmquwPDJjkZuIQ2dU5fyhNadu4RDI9oMtbA9TFyfG1Hckiz%2Bgv%2By%2FMFRrMYhAt5xE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a56666ce84b4f3-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/css/auth.min.css
172.67.70.55200 OK 789 B URL GET HTTP/3 send.cm/static/css/auth.min.css
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (789), with no line terminators
Hash f095cdbc5703353ae870aa6fd1504bb8
395b5898fde4cb72dc30e7752bde4e68317fb299
d7091a28d7048b34315acc78d543eb1181751aec851df73f83da7d3b07081116
GET /static/css/auth.min.css HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: text/css
last-modified: Tue, 23 Mar 2021 17:04:40 GMT
etag: W/"315-5be372d95fefb-gzip"
vary: Accept-Encoding
expires: Thu, 23 Nov 2023 01:16:46 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qnTHj4F5QcjfNbJEboUzpP%2B1GuqIa%2FGMNER%2FrG7UuvKLtFz96y7pEBkJuKMUTIk676c7ABwSY8L55LwZWP%2BwyleJNGTOp8r38yc0Vp1SM8uxXxIHfTwZoK4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d7d7d712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
evidenceguidance.com/9c/ed/24/9ced2453f41586bc39632e754938332a.json
192.243.59.13403 Forbidden 0 B URL GET HTTP/1.1 evidenceguidance.com/9c/ed/24/9ced2453f41586bc39632e754938332a.json
IP 192.243.59.13:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerLet's Encrypt
Subjectevidenceguidance.com
Fingerprint38:01:65:F0:F8:72:F1:97:B1:4C:8B:99:F6:DD:5C:EE:DF:2F:EE:D4
ValidityWed, 27 Sep 2023 00:51:09 GMT - Tue, 26 Dec 2023 00:51:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9c/ed/24/9ced2453f41586bc39632e754938332a.json HTTP/1.1
Host: evidenceguidance.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.19.5
Date: Thu, 23 Nov 2023 00:47:18 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
send.cm/js/share.js
172.67.70.55200 OK 329 B IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (332), with no line terminators
Hash 1d2236286294d62230ccc88e96b5297b
de15f3e22b3e2719f872e47a63b5702c48835a3f
c482daeb5dbeb1b8b60adbd8a47e025cbfe19ea0a0f798d8f77b862781694dbc
GET /js/share.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=utf8
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-control: max-age=259200
cf-bgj: minify
cf-polished: origSize=354
etag: W/"162-5ae64b15a48c0-gzip"
expires: Thu, 23 Nov 2023 00:47:53 GMT
last-modified: Thu, 03 Sep 2020 08:39:39 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lOcX3ZZ3sd2RigWEJTnjIbD624lurFhCqpjFVkty%2B2DT%2FMCeFCSo6qzq7OlNxly3WVvO3auywGyj4veYLwA7VuarZBNEudv3kQLnd%2BYia7J5wA8beVFMb7I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665f7e96712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/lib/feather-icons/feather.min.js
172.67.70.55200 OK 66 kB URL GET HTTP/3 send.cm/lib/feather-icons/feather.min.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lib/feather-icons/feather.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=utf8
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5f50abca-101aa"
expires: Sun, 13 Aug 2023 21:42:42 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 62724
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tp9UN41KM8Q58h1EPqlzzePxdLBf%2FtNI7rHMtnVyvKihj75oRneyEqZq5d1V7Bg%2Ft%2BpoXAABWTe5jJzCiqL4gLW%2FkxxOzErPOcrCRcuIgtRR2GXgOBw%2FD9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d8d87712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
172.67.70.55302 Found 7.4 kB URL GET HTTP/3 send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1; cf_clearance=_hHclcwcKHZBqLnFZGzApCk0z2JelBxuiyxBol59ues-1700700437-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1700700437
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Thu, 23 Nov 2023 00:47:17 GMT
vary: accept-encoding
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZaqLhBSJHzEiDG%2BQhe5eUW9TqdWSdsV3%2FkALx%2F8%2F6QYwqiOllj7GaS1N3Wg00KmDx5R31p9I%2FotRr2m4pjy47CSgL79el2SQ8RXFpYtLbJcqOxNuNPlAh0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566673a9a712a-OSL
alt-svc: h3=":443"; ma=86400
send.cm/lib/@fortawesome/fontawesome-free/css/fa.min.css
172.67.70.55200 OK 6.8 kB URL GET HTTP/3 send.cm/lib/@fortawesome/fontawesome-free/css/fa.min.css
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (7103), with no line terminators
Hash 3a4e6fe620850879f073fbeb7d915969
1ea842aabcf1d80ffd383b84c8da0650baefc68f
5a072970160446a139243170334741139bd414e1285dfd785bd552db7c263f80
GET /lib/@fortawesome/fontawesome-free/css/fa.min.css HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: text/css
last-modified: Mon, 31 Jan 2022 10:52:41 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"61f7bf79-1a60"
expires: Sun, 13 Aug 2023 21:42:22 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 2235871
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XwQNu%2FMSEzeVcBAfaPHDSNCCsFa%2FWq%2FNLFY%2Fkn8%2F5RC3F0pu81KI2yNEh08z7YNPUkY1mKolnyyD6%2Bvr5oJTzSPDj%2FaHgz8r5H%2F4c%2FnIgCkSTgcsdVGuV2c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d6d7a712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/static/js/jquery.min.js
172.67.70.55200 OK 93 kB URL GET HTTP/3 send.cm/static/js/jquery.min.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (32072)
Hash bdce12c949e78d570c8d44e9c2b23508
9afdc4fec954646bd6270caf82f107fdef605bc5
c73b004ebf31b395cf237c3d2b13c1e576f385e04660ceb5f7be163ff3c201dc
GET /static/js/jquery.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=utf8
last-modified: Sat, 26 Sep 2020 12:00:16 GMT
etag: W/"16b88-5b0362d29f400-gzip"
vary: Accept-Encoding
expires: Thu, 23 Nov 2023 01:10:44 GMT
cache-control: max-age=259200
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ogPA%2FOmcLzFOesK7Sx%2BW51Ecq8%2FssIjAWQrv7xsts0prLIh%2FM64yefaun56hlKCU2mNoGiazPP9q9aNhqMsSSRQC9HOrLS%2BfR3zPia7OXsC%2FoUXoZzsfZgs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d8d84712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/assets/js/dashforge.js
172.67.70.55200 OK 2.3 kB URL GET HTTP/3 send.cm/assets/js/dashforge.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (2286), with no line terminators
Hash 6c469db96744ab501de112c9fac8f15e
a9795764586d64d918bb8a433b1d3043a61a6a70
d7d2ab9143404f0500f004976b62f44516128747d69ef3994a9a18b479173efe
GET /assets/js/dashforge.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=utf8
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-control: max-age=259200
cf-bgj: minify
cf-polished: origSize=3370
etag: W/"d2a-5d2f044f765a3-gzip"
expires: Thu, 23 Nov 2023 00:59:40 GMT
last-modified: Sun, 12 Dec 2021 10:17:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivBdqr4%2B5Eua%2BR4nDLVJ19Fo5h8vDC%2FDnQldLTQn%2BeGkOgVj9Sjnxzh%2FMRE1Jyv4v8Mu02K1Imvxtf0wZzDach4aPexeZ5FUdRsHVsvxV%2FSawpy5ZlBPDb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d8d88712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/lib/perfect-scrollbar/perfect-scrollbar.min.js
172.67.70.55200 OK 18 kB URL GET HTTP/3 send.cm/lib/perfect-scrollbar/perfect-scrollbar.min.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (18216)
Hash 4a10bcfa0a9c9fa9d503b5a498cac31e
c4f6c403e99fb37cb496c3844b332823db7c5837
a4ec9d558eeb7bc7359fe7c4820deea2c951fdd8bd34cb0e15727412c7f6c634
GET /lib/perfect-scrollbar/perfect-scrollbar.min.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: application/javascript; charset=utf8
last-modified: Thu, 03 Sep 2020 08:39:38 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5f50abca-4773"
expires: Sun, 13 Aug 2023 21:42:47 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 2401061
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QAEskpRtL0KtuNW6CdyySTDVQ3CaLslvtjh9uJhYbhBCvNXRmBLgkG4isI64JQjH7mQoB7A4xY7goT%2BPBcZJYi%2BsZqsTdpL0uY3L%2FT5b%2B8UDNxlH1V5gpEA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665d8d89712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 142.250.74.109:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:Nd9OjiEMei95OvWIflHJtcC6FxYiCA:C1NfX4X6YgBQIvY3; Expires=Sat, 22-Nov-2025 00:47:16 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 23 Nov 2023 00:47:16 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp19LiGIpxxStRI25RxQxo19-Q9IygdLmmdCcFem2ztOM4ASXOxZaz9MQTZ8wO2jZtwgV5tnpQ
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-imcq5HdLR1DJvUYEYd5K0g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.166.32200 OK 27 B IP 172.64.166.32:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e300aa2dec6affcbc14599693de96974
41938ab0e9e54d5a3d8fb42a02fda840871de158
38fcdb77fc11fccbbb49d93bf8ae94d2fd3d66c399eed4cbee9ef88b3880370e
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://send.cm/
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: text/plain
set-cookie: csu=2038622815919912@1@1700700436; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://send.cm
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vsIe6qIbStYwqtU6B2%2BN5G7Dw%2Fd%2F3pnxZmGduB3vDDkNGabvgKlefjvGhuy%2BHtTMRvHl8J4JfKdMdn%2BzUA9WPEuuEPP1wJn8U52G4vV%2FmsCDP4EYXC3m%2BHyUnkBZ7a6z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566621fde6547-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
professionalswebcheck.com/stats
3.124.25.122200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP 3.124.25.122:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash fac4c288fc158258244d57ce43f3c1e0
27aa8315a86a39668e09a42fdffa0c3e26e04fe0
09f8714d3f09c96ba426c8f1407f2545801481e63ddabb110e1540c62b4b7c89
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://send.cm
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 00:47:17 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://send.cm
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=2919aa85-fdff-4592-ab5c-5a86ae280ea6:3:1; expires=Sun, 20 Nov 2033 00:47:17 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
dismantlepenantiterrorist.com/pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0
0.0.0.0 0 B URL GET dismantlepenantiterrorist.com/pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0
IP 0.0.0.0:0
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0 HTTP/1.1
Host: dismantlepenantiterrorist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://send.cm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
172.67.70.55302 Found 7.4 kB URL GET HTTP/3 send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Thu, 23 Nov 2023 00:47:16 GMT
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
access-control-allow-origin: *
vary: accept-encoding
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2OnwDAJNjGdadSpECX5inayoYS8kDhBVQUTWkT5GRxuogGSCvss%2FtAcOQAqSMYLau5cRxYJhYXLaudm8l79T3FAKw1wQrSo4gnLiJX7xrbHtKOdyF2KDabY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a56660df54712a-OSL
alt-svc: h3=":443"; ma=86400
send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
172.67.70.55200 OK 7.4 kB URL GET HTTP/3 send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type ASCII text, with very long lines (7392), with no line terminators
Hash c801c90bea0340088398dea9102e0cc2
895afe546bf3654fb4086082ee595d8f1b1870b7
6c6054e3bf67d41ede14d4c42018810b07545b8f1b3a1259316395999cdd4746
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1; cf_clearance=_hHclcwcKHZBqLnFZGzApCk0z2JelBxuiyxBol59ues-1700700437-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1700700437
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
x-content-type-options: nosniff
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B7WLVacx4ni%2B5Yzq91s8l%2FtQGlfWNTk3COnEFIJ%2BH8hWv9DF5daGo9haCX%2BcjNRuWQ60vJLX1a%2FkWZ5o7Pal583OUTX2ASTi3ZsYwYLYpjKMXbQjScrWVP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566676ab6712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
172.67.70.55200 OK 82 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 82076, version 1.1\012- data
Hash dac78b0f1626eb1aa95d41b488e699c1
a377d0df34945fc45bdc030dc63139bd9cf28a2d
ee6d9467e82f91146b9f71f3ac572d66f4aeed0f261b30ef4765550edc11119d
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem; _pk_id.1.43ee=7de6636a7a3de932.1700700439.; _pk_ses.1.43ee=1; cf_clearance=_hHclcwcKHZBqLnFZGzApCk0z2JelBxuiyxBol59ues-1700700437-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1700700437
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:17 GMT
content-type: font/woff
content-length: 82076
last-modified: Thu, 17 Sep 2020 12:29:20 GMT
vary: Accept-Encoding
etag: "5f6356a0-1409c"
expires: Sat, 11 Nov 2023 16:42:52 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 2501586
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FBp1f%2FjRxVt1agLPBD209hQHHenFRMi0%2BSy2XoT4tROD%2FKynW%2FPIzLqBu1W0ZcC%2Bh2xCF%2FOEzDYvWz1vd1235vxWJt6zAo%2BRsBPHC1iyOkSrwdiRzqs8OFQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a566688b4e712a-OSL
alt-svc: h3=":443"; ma=86400
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
172.67.70.55200 OK 82 kB URL GET HTTP/3 send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
IP 172.67.70.55:443
Requested by https://send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
Certificate IssuerGoogle Trust Services LLC
Subjectsend.cm
Fingerprint4A:FF:4D:B2:CC:85:F4:52:F9:78:AF:EB:79:F3:A2:6A:66:3E:98:D1
ValidityThu, 05 Oct 2023 16:49:19 GMT - Wed, 03 Jan 2024 16:49:18 GMT
File type Web Open Font Format, TrueType, length 82076, version 1.1\012- data
Hash dac78b0f1626eb1aa95d41b488e699c1
a377d0df34945fc45bdc030dc63139bd9cf28a2d
ee6d9467e82f91146b9f71f3ac572d66f4aeed0f261b30ef4765550edc11119d
GET /static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff HTTP/1.1
Host: send.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://send.cm/static/css/dl.min.css
Cookie: c_7hyj5tegwm4sd1=zqsuln66tga1; lang=english; aff=2297; __cflb=04dToPXYGQwzSVHrRvdmaaKmJbS8hsdHepPXHAnBem
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 00:47:16 GMT
content-type: font/woff
content-length: 82076
last-modified: Thu, 17 Sep 2020 12:29:20 GMT
vary: Accept-Encoding
etag: "5f6356a0-1409c"
expires: Sat, 11 Nov 2023 16:42:52 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
cf-cache-status: HIT
age: 2501585
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TK7JJT6eu148sBugxhg9%2BbR84h7ObUknn9aWORb5v7ikGGrhnA8VfAK%2BEK23TjudNUUAtaCv%2B4YprmC51IW5PsbhQcnlommuCV1%2FR186J9kbGbmxyehiydE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a5665eee40712a-OSL
alt-svc: h3=":443"; ma=86400