| ablecolony.com/wsf1nit26j?dev=r&key=7ff94e9461629d2f54ff14725863196e&kw=[%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/&res=7.31&rvzs=17&scrHeight=1440&scrWidth=2560&ship=&tz=11&v=20.8.v.1 |  192.243.59.13 | | 1.5 kB |
URL ablecolony.com/wsf1nit26j?dev=r&key=7ff94e9461629d2f54ff14725863196e&kw=[%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/&res=7.31&rvzs=17&scrHeight=1440&scrWidth=2560&ship=&tz=11&v=20.8.v.1 IP192.243.59.13:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (670) Hashb8da77d31e802990d32e173da75b59d7 c7b597fb191e51e67eeba2f6da2b4a42f71d9494 40efc9fe0c880ca3a4cf58f2ca12f7f43b78215b2eb181119d7634154f0e0b37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wsf1nit26j?dev=r&key=7ff94e9461629d2f54ff14725863196e&kw=[%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/&res=7.31&rvzs=17&scrHeight=1440&scrWidth=2560&ship=&tz=11&v=20.8.v.1 HTTP/1.1
Host: ablecolony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 29 Mar 2024 01:14:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=14217017; expires=Sat, 30 Mar 2024 01:14:10 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.7cSYM2n_CEHc7gG_ihiL1cg_P56AyeExaQaepGggjSs; expires=Fri, 29 Mar 2024 01:15:10 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 587ae16aafdf27bcd7edd93d0c2cacf9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ablecolony.com/api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false | 172.240.108.68 | 302 Found | 0 B |
URL User Request GET HTTP/1.1ablecolony.com/api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false IP172.240.108.68:443
CertificateIssuerLet's Encrypt Subjectablecolony.com Fingerprint72:52:48:30:ED:69:2D:E0:F6:1F:B2:28:46:E6:BF:09:21:CB:DD:D1 ValiditySun, 24 Mar 2024 10:22:04 GMT - Sat, 22 Jun 2024 10:22:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false HTTP/1.1
Host: ablecolony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ablecolony.com/api/users?token=L3dzZjFuaXQyNmo_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0xNDIxNzAxNw
Cookie: u_pl=14217017; ain=eyJhbGciOiJIUzI1NiJ9.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.7cSYM2n_CEHc7gG_ihiL1cg_P56AyeExaQaepGggjSs; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 29 Mar 2024 01:14:11 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375b936df968c1b9ac267527ed096ab7&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult
Set-Cookie: iprc08b72f5e910645475e6b781a376dc973=5123635; expires=Sat, 30 Mar 2024 01:14:11 GMT
pdhtkv=true; expires=Sat, 30 Mar 2024 01:14:11 GMT
uncs=1; expires=Sat, 30 Mar 2024 01:14:11 GMT
pdhtkv28=true; expires=Sat, 30 Mar 2024 01:14:11 GMT
uncs28=1; expires=Sat, 30 Mar 2024 01:14:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5feba38f47a71469cc50d45ba4b700fe
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375b936df968c1b9ac267527ed096ab7&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult |  78.46.92.254 | 302 Found | 0 B |
URL User Request GET HTTP/1.1gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375b936df968c1b9ac267527ed096ab7&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectgl0a7loeki02do.com FingerprintC1:F3:C7:35:64:E3:41:7F:25:74:FE:4F:BE:FB:FB:DC:51:D4:7C:2A ValidityTue, 30 Jan 2024 18:44:34 GMT - Mon, 29 Apr 2024 18:44:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375b936df968c1b9ac267527ed096ab7&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult HTTP/1.1
Host: gl0a7loeki02do.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ablecolony.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 01:14:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=ghzwdvh9bl; expires=Sat, 30-Mar-2024 01:14:11 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc; expires=Sat, 30-Mar-2024 01:14:11 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc
Strict-Transport-Security: max-age=31536000
|
|
| 3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc | 78.46.92.254 | 200 OK | 1.4 kB |
URL User Request GET HTTP/1.13tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash99748512cd7437ea3ac5c68451496923 63b5febdbd82c8117f74da8b254aecbda0b0b302 d0a17fd2701bb4c0baa8a37c32bbf9623e724b7892b3e0cf85711af30149d861
GET /1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ablecolony.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 01:14:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| www.google.com/recaptcha/api.js | 142.250.74.132 | 200 OK | 1.0 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js IP142.250.74.132:443
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint32:A3:19:7A:6B:D5:C7:5E:CA:7C:C8:08:79:14:56:FD:FC:3E:06:F0 ValidityMon, 26 Feb 2024 08:18:59 GMT - Mon, 20 May 2024 08:18:58 GMT
Hashd3582a18d9deb04d2efb7f72e9791ad6 f601a2bd444914f635345c99c759a4d99170acf1 ad93c886a06bcd038db80445f35b984f9e1e601ff0922fd655152c0aba6e3783
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 29 Mar 2024 01:14:12 GMT
date: Fri, 29 Mar 2024 01:14:12 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-547JG5H | 142.250.74.136 | 200 OK | 51 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-547JG5H IP142.250.74.136:443
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (1906) Hashb3670d9376195e6b12dc11279b9c2633 58b027261e1a91c318ef7d206400ff35c851ff5a 1c0ed521d53eb9861a883d6e9b5ea2229b3eb5ae9c3242175c5eee737025b9d8
GET /gtm.js?id=GTM-547JG5H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 29 Mar 2024 01:14:12 GMT
expires: Fri, 29 Mar 2024 01:14:12 GMT
cache-control: private, max-age=900
last-modified: Fri, 29 Mar 2024 00:30:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51206
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 3tght76h.com/1/bg.png | 78.46.92.254 | 200 OK | 61 kB |
IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typePNG image data, 400 x 299, 8-bit grayscale, non-interlaced Hashd7096ad35844972e015e865729d13235 42c79d98b50275dcc447bd61d845ee2ed52ae45e 8bccdb408e67a3b44e0f5d417486c8d251f2e4acbae8542465aad3c7052341dd
GET /1/bg.png HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 01:14:12 GMT
Content-Type: image/png
Content-Length: 61362
Last-Modified: Wed, 15 Nov 2023 13:23:49 GMT
Connection: keep-alive
ETag: "6554c665-efb2"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| 3tght76h.com/favicon.png | 78.46.92.254 | 404 Not Found | 114 B |
IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashac5ea41aae137cead073d37a7bb732bc 85bde4b57e1f38bd7ff0e6cf4b6ac5f626a5fbae fcdc802dabd14bed15efb9235ee0decac4adb6908dca03eeba74e2bf8f4eb5a7
GET /favicon.png HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 01:14:12 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js | 142.250.74.163 | 200 OK | 203 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size203 kB (203410 bytes) Hash48c590d47c8b1868cecab334e9a34cbe 5f1a9f94294ec337f657ac2ebec1c74e097ce5b3 f3756825df5194a174b7a55ebd3b484c276766eef21343d34b053b98ed386801
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://3tght76h.com
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203410
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:49 GMT
expires: Fri, 28 Mar 2025 17:27:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css | 142.250.74.163 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeASCII text, with very long lines (56398), with no line terminators Hasheb4bc511f79f7a1573b45f5775b3a99b d910fb51ad7316aa54f055079374574698e74b35 7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:39:33 GMT
expires: Fri, 28 Mar 2025 17:39:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/css
vary: Accept-Encoding
age: 27279
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js | 142.250.74.163 | 200 OK | 203 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size203 kB (203410 bytes) Hash48c590d47c8b1868cecab334e9a34cbe 5f1a9f94294ec337f657ac2ebec1c74e097ce5b3 f3756825df5194a174b7a55ebd3b484c276766eef21343d34b053b98ed386801
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203410
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:49 GMT
expires: Fri, 28 Mar 2025 17:27:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:43:03 GMT
expires: Fri, 28 Mar 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 81070
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js | 142.250.74.163 | 200 OK | 203 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size203 kB (203410 bytes) Hash48c590d47c8b1868cecab334e9a34cbe 5f1a9f94294ec337f657ac2ebec1c74e097ce5b3 f3756825df5194a174b7a55ebd3b484c276766eef21343d34b053b98ed386801
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203410
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:49 GMT
expires: Fri, 28 Mar 2025 17:27:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/nEhDHjjHjcdBG08FyLy0i5xrGkwI3cHNOIEdz9e3VkI.js | 142.250.74.132 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/nEhDHjjHjcdBG08FyLy0i5xrGkwI3cHNOIEdz9e3VkI.js IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeJavaScript source, ASCII text, with very long lines (17560) Hash6b2d436ebcf8235b50c4b8d512b85f79 23b71327a14502cf34bdf8780b4b08f6a2723738 9c48431e38c78dc7411b4f05c8bcb48b9c6b1a4c08ddc1cd38811dcfd7b75642
GET /js/bg/nEhDHjjHjcdBG08FyLy0i5xrGkwI3cHNOIEdz9e3VkI.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7467
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:53:40 GMT
expires: Fri, 28 Mar 2025 17:53:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Mar 2024 16:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 26433
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.163 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:35:26 GMT
expires: Thu, 04 Apr 2024 17:35:26 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 27527
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css | 142.250.74.163 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeASCII text, with very long lines (56398), with no line terminators Hasheb4bc511f79f7a1573b45f5775b3a99b d910fb51ad7316aa54f055079374574698e74b35 7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:39:33 GMT
expires: Fri, 28 Mar 2025 17:39:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/css
vary: Accept-Encoding
age: 27280
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js | 142.250.74.163 | 200 OK | 203 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size203 kB (203410 bytes) Hash48c590d47c8b1868cecab334e9a34cbe 5f1a9f94294ec337f657ac2ebec1c74e097ce5b3 f3756825df5194a174b7a55ebd3b484c276766eef21343d34b053b98ed386801
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203410
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:49 GMT
expires: Fri, 28 Mar 2025 17:27:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv | 142.250.74.132 | 200 OK | 40 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv IP142.250.74.132:443
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
Hashc3d51236de9b1d3f5519b81a9f6688b7 48dec9e142f2dfac12106d36fa2ce595cbbe4e8f c927843bc69029e9d5467e8b201931ce9496f22f8ef21f81e24b9c97a3f441b4
GET /recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 29 Mar 2024 01:14:12 GMT
content-security-policy: script-src 'nonce-yjKSTROwLWtJgiOkh4QwXg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf | 142.250.74.132 | 200 OK | 102 B |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeASCII text, with no line terminators Hash9f9c09e710bf4b791f895d28bca13b4e e83642a8b6872cebbacd4a3902a7c55d7e6b89bb bfe921737a9444ea43003fcee8f7ba1f9bfa429502ed435976605a5a87fa6a18
GET /recaptcha/api2/webworker.js?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=lweqsalrl1zv
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 29 Mar 2024 01:14:13 GMT
date: Fri, 29 Mar 2024 01:14:13 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unpkg.com/axios/dist/axios.min.js |  104.16.124.175 | 302 Found | 42 kB |
URL GET HTTP/2unpkg.com/axios/dist/axios.min.js IP104.16.124.175:443
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 29 Mar 2024 01:14:12 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.8/dist/axios.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HT3W9N2SHPQH6QCTX55HWAVB-fra
cf-cache-status: HIT
age: 45
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86bc00718bc31bfa-OSL
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui | 142.250.74.132 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui IP142.250.74.132:443
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeHTML document, ASCII text, with very long lines (7675), with no line terminators Hashc023ea9b0eb8d16fe88391a76f036e21 ea45664a702cfbfca958fbf5503f4c65a3e827b6 c5b84f8bc9b823edbfcb75b5a78bcec951289103d4488833836cd09fc19f1e2e
GET /recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 29 Mar 2024 01:14:13 GMT
content-security-policy: script-src 'nonce-qOi2bsur1vOYJf1XOEvF2g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unpkg.com/axios@1.6.8/dist/axios.min.js | 104.16.124.175 | 200 OK | 42 kB |
URL GET HTTP/2unpkg.com/axios@1.6.8/dist/axios.min.js IP104.16.124.175:443
Requested byhttps://3tght76h.com/1/?lpkey=176211a467fc518d51&uclick=ghzwdvh9bl&uclickhash=ghzwdvh9bl-ghzwdvh9bl-17dz-166o-ir8n-bza7-oc1n-5a75cc CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (41442) Hash3b5b3d36fde8ffe8ed76b1efbfc65410 d63107d0912fdb387530d5ce2d512c928d73d122 29d600462a30694efd15b9848b4ca42d178cd067009275c35a30580121114304
GET /axios@1.6.8/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3tght76h.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 01:14:12 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"a209-1jEH0JEv2zh1MNXOLVEsko1z0SI"
via: 1.1 fly.io
fly-request-id: 01HS1FGRYZKY14C0JK748EAY1W-arn
cf-cache-status: HIT
age: 1154294
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86bc0071abc81bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|