Report - percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

Report Overview

Visited public
2023-12-04 05:53:36
Tags
URL
percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Finishing URL
percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
IP / ASN
91.143.90.3
#35366 ISPpro Internet KG
Title
Bot check

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
percentraced.com	unknown	2023-11-06	2023-11-11 02:19:55	2023-12-03 12:13:02	4.0 kB	194 kB	91.143.90.3
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-12-03 05:48:43	1.7 kB	80 kB	142.250.74.67
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2023-12-03 07:56:40	3.4 kB	820 kB	142.250.74.131
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2023-11-19 18:48:38	2.4 kB	75 kB	142.250.74.132
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-12-03 06:08:10	457 B	7.1 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-04 05:53:23	high	91.143.90.3	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-12-04 05:53:23	high	91.143.90.3	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed
2023-12-04	medium	percentraced.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (16)

	URL	From	Size	First Seen	Last Seen
	www.google.com/recaptcha/api.js	ScriptElement	850 B	2023-11-14	2024-08-20
Pretty URL www.google.com/recaptcha/api.js IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-14 09:30 Last Seen2024-08-20 19:39 Times Seen3579 Hash 57e10dcd72dd2953878092014eae522b 95ba7e48825c26c5d9395ef2edb73e790bce6fa7 c7b54326365940d062bce26ed41579eebcb4946a86ba280790b603926692bd59 Loading...

	www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 09:42 Times Seen4652925 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js	ScriptElement	476 kB	2023-11-14	2024-08-20
Pretty URL www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js IP 142.250.74.131 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-14 09:02 Last Seen2024-08-20 19:39 Times Seen12206 Hash 23b9dd721490a4062ba8d01454ef6ba9 efdbb7331585411f7d397dacbf51fd3e95f3031d 4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7 Loading...

	percentraced.com/assets/default/js/jquery.min.js	ScriptElement	96 kB	2023-03-07	2025-05-11
Pretty URL percentraced.com/assets/default/js/jquery.min.js IP 91.143.90.3 ASN #35366 ISPpro Internet KG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07 Last Seen2025-05-11 05:55 Times Seen1718 Hash 13c0a5055cca7b2463b2f73701960b9e e6082a7b52db82604ac446d2e6a32cb5af263781 20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104 Loading...

	percentraced.com/assets/default/js/jquery.poptrox.min.js	ScriptElement	9.7 kB	2023-03-07	2025-05-08
Pretty URL percentraced.com/assets/default/js/jquery.poptrox.min.js IP 91.143.90.3 ASN #35366 ISPpro Internet KG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:26 Last Seen2025-05-08 12:26 Times Seen614 Hash 3dfba0ccc03b9fcf9886c4037996687d fbe37a44231e24bbc3050e664566c344039a9241 0841b64d35bb922c573cb186dcbb14c888bbf0c96259de63d53aa568f41dc629 Loading...

	percentraced.com/assets/default/js/jquery.scrolly.min.js	ScriptElement	831 B	2023-03-07	2025-05-10
Pretty URL percentraced.com/assets/default/js/jquery.scrolly.min.js IP 91.143.90.3 ASN #35366 ISPpro Internet KG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:26 Last Seen2025-05-10 19:03 Times Seen710 Hash 1ed5a78bde1476875a40f6b9ff44fc14 91ee4deda8189fde4432a8f58cfe3b5f2aed9dcf 8b6571ea2c3631ff50bb4b96e7f9081c6e33ebaadef9cb2ca5955d5e0b625a02 Loading...

	percentraced.com/assets/default/js/util.js	ScriptElement	12 kB	2023-03-07	2025-05-10
Pretty URL percentraced.com/assets/default/js/util.js IP 91.143.90.3 ASN #35366 ISPpro Internet KG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:26 Last Seen2025-05-10 19:03 Times Seen910 Hash fd2716a7b68ce7748c9676787b61db43 e32e958f74bd5edc4e1fbdd9fa6c30425d3c7954 c2e1e72b0de356f6ce184e3af4fa8ab6590a2581162905a27d77886b2d960e00 Loading...

	percentraced.com/assets/default/js/main.js	ScriptElement	2.2 kB	2023-03-07	2025-05-08
Pretty URL percentraced.com/assets/default/js/main.js IP 91.143.90.3 ASN #35366 ISPpro Internet KG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:26 Last Seen2025-05-08 12:26 Times Seen622 Hash a35ee3c87481af498add7a03a32e4964 6e76c90d1aa1dba4591097acf1211cddf4091b1c f0f8fe4b70486583c669e54eab436390c2211f8b9f93ad1e838236337766c0e1 Loading...

	percentraced.com/assets/default/js/skel.min.js	ScriptElement	9.1 kB	2023-03-13	2025-02-06
Pretty URL percentraced.com/assets/default/js/skel.min.js IP 91.143.90.3 ASN #35366 ISPpro Internet KG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 04:30 Last Seen2025-02-06 20:34 Times Seen583 Hash aa84b1bec533778c07f1344970e59588 955b722a7638bb20970efbc79e12d8bb628a36a6 a01bae4c6a381cac6b2fae6b982cddf8d4e4a4e9438543fd0c5eb24d6d4d5829 Loading...

	www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw	ScriptElement	69 B	2023-03-07	2025-05-11
Pretty URL www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 09:23 Times Seen116383 Hash 45ecf7458f42da80ac248ad42d610372 a5b3edf8328769bc754e6e616a957ceed4fdadd7 75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf Loading...

	www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw	ScriptElement	54 kB	2024-08-20	2024-08-20
Pretty URL www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:51 Last Seen2024-08-20 16:51 Times Seen1 Hash 67b96231fbc91adeebf96890b803b918 ce7657d8a51292de4f49ba1af29c41ca188ff62c d437794aad0c633ff4b740b6f7caab0e892ec8c82775bcab8ce959386e73e170 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 30decc9a1cb9aa76257e993b1e32b4bf	18 kB	2024-08-20 16:51	2024-08-20 16:51
Pretty Observations First Seen2024-08-20 16:51 Last Seen2024-08-20 16:51 Times Seen1 Hash 30decc9a1cb9aa76257e993b1e32b4bf 63497c1ec94dc22a10f76ca3334fe012babcfd31 ab75e11a59b540b202e857e9cf41201b4282715f41fdbd95aa087a8ea702a92a Loading...

	#2 Eval - cf1dd8609868435e7eb1006b517c1abb	64 B	2023-11-07 15:55	2024-08-20 20:32
Pretty Observations First Seen2023-11-07 15:55 Last Seen2024-08-20 20:32 Times Seen3193 Hash cf1dd8609868435e7eb1006b517c1abb 0fb005e6e00be62e448385d3ff0a2513e49f4806 a01b7ce49084f117d7034cc7571519fd95e62401da4c9976d4275da0dd08f8e9 Loading...

	#3 Eval - cf876ca4f502b2fa2671272b6f64b213	17 kB	2023-11-07 15:55	2024-08-20 20:32
Pretty Observations First Seen2023-11-07 15:55 Last Seen2024-08-20 20:32 Times Seen3188 Hash cf876ca4f502b2fa2671272b6f64b213 ab94320e0991ce49c95343610f2d38b5e8c8f28a 8d333c3dd690fdf8b52bf7827ca62cf9e923b844bfae8155bf33b5200b376d92 Loading...

	#4 Eval - 8d799e5e3b9450dd4c1aef6e122df0de	22 B	2023-11-07 15:55	2024-08-20 20:32
Pretty Observations First Seen2023-11-07 15:55 Last Seen2024-08-20 20:32 Times Seen3187 Hash 8d799e5e3b9450dd4c1aef6e122df0de 1c074fc167af588bc86e54b4ceb4017ce0a7791a e69ebca4238490aa2b0c08845343b95b35a04efaca3e62b2732e1ca661bb3374 Loading...

	#5 Eval - 224ac2edd48a4d27399a35d4a94d8f17	22 B	2023-11-07 15:55	2024-08-20 20:32
Pretty Observations First Seen2023-11-07 15:55 Last Seen2024-08-20 20:32 Times Seen3194 Hash 224ac2edd48a4d27399a35d4a94d8f17 33a0fd7fc8561e1cca8737032f7b24d32c47d171 bd86e6f419efd867fc86701b061f5cab02b0f38086c64d9a8e8f00b98bbc96cb Loading...

HTTP Transactions (25)

URL IP Response Size

percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

91.143.90.3

200 OK

2.3 kB

URL User Request GET HTTP/1.1
percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
2.3 kB (2276 bytes)
Hash
4be1101092c79d0f117cd2a78aa6aa49
562096c89feff32c3bd735e7285f4fde98b47d0b
18aaf3b24bfbe5a4cf639d2008262e96f88703429575c9de271c8b30cd32458a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /1U020can4p03xj58-8qijls21r60dg3c2qc5m00001 HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:18 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
X-Powered-By: PHP/7.4.33
Content-Length: 2276
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

percentraced.com/assets/default/css/main.css

91.143.90.3

200 OK

27 kB

URL GET HTTP/1.1
percentraced.com/assets/default/css/main.css
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with CRLF line terminators
Size
27 kB (27423 bytes)
Hash
eb481d892f1cb775ce159266b031af72
6b869543656e9677edfa5c2514d8b1b9dad2828f
d37cfc96c79f3e929aa8cc1d9bc12ec5e4eaa2e02572169870d81ab09b2fa0e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/css/main.css HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "6b1f-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 27423
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

percentraced.com/assets/default/js/jquery.poptrox.min.js

91.143.90.3

200 OK

9.7 kB

URL GET HTTP/1.1
percentraced.com/assets/default/js/jquery.poptrox.min.js
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with very long lines (9628), with CRLF line terminators
Size
9.7 kB (9694 bytes)
Hash
3dfba0ccc03b9fcf9886c4037996687d
fbe37a44231e24bbc3050e664566c344039a9241
0841b64d35bb922c573cb186dcbb14c888bbf0c96259de63d53aa568f41dc629

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/js/jquery.poptrox.min.js HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "25de-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 9694
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

percentraced.com/assets/default/js/jquery.scrolly.min.js

91.143.90.3

200 OK

831 B

URL GET HTTP/1.1
percentraced.com/assets/default/js/jquery.scrolly.min.js
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with very long lines (770), with CRLF line terminators
Size
831 B (831 bytes)
Hash
1ed5a78bde1476875a40f6b9ff44fc14
91ee4deda8189fde4432a8f58cfe3b5f2aed9dcf
8b6571ea2c3631ff50bb4b96e7f9081c6e33ebaadef9cb2ca5955d5e0b625a02

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/js/jquery.scrolly.min.js HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "33f-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 831
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

percentraced.com/assets/default/js/skel.min.js

91.143.90.3

200 OK

9.1 kB

URL GET HTTP/1.1
percentraced.com/assets/default/js/skel.min.js
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with very long lines (9033), with CRLF line terminators
Size
9.1 kB (9086 bytes)
Hash
aa84b1bec533778c07f1344970e59588
955b722a7638bb20970efbc79e12d8bb628a36a6
a01bae4c6a381cac6b2fae6b982cddf8d4e4a4e9438543fd0c5eb24d6d4d5829

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/js/skel.min.js HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "237e-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 9086
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

percentraced.com/assets/default/js/util.js

91.143.90.3

200 OK

12 kB

URL GET HTTP/1.1
percentraced.com/assets/default/js/util.js
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with CRLF line terminators
Size
12 kB (12433 bytes)
Hash
fd2716a7b68ce7748c9676787b61db43
e32e958f74bd5edc4e1fbdd9fa6c30425d3c7954
c2e1e72b0de356f6ce184e3af4fa8ab6590a2581162905a27d77886b2d960e00

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/js/util.js HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "3091-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 12433
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

percentraced.com/assets/default/js/main.js

91.143.90.3

200 OK

2.2 kB

URL GET HTTP/1.1
percentraced.com/assets/default/js/main.js
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with CRLF line terminators
Size
2.2 kB (2165 bytes)
Hash
a35ee3c87481af498add7a03a32e4964
6e76c90d1aa1dba4591097acf1211cddf4091b1c
f0f8fe4b70486583c669e54eab436390c2211f8b9f93ad1e838236337766c0e1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/js/main.js HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "875-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 2165
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

percentraced.com/assets/default/css/font-awesome.min.css

91.143.90.3

200 OK

30 kB

URL GET HTTP/1.1
percentraced.com/assets/default/css/font-awesome.min.css
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with very long lines (30240), with CRLF line terminators
Size
30 kB (30407 bytes)
Hash
3f220a7a278f1b8c1907d51b5d3a432c
7142cb72cee5ec2e8d835e717defb289af735e56
6447236bb613f55ff97de0779f4e2870f5c880af831643af5761ac39766674a5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/css/font-awesome.min.css HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/assets/default/css/main.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "76c7-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 30407
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

percentraced.com/assets/default/js/jquery.min.js

91.143.90.3

200 OK

96 kB

URL GET HTTP/1.1
percentraced.com/assets/default/js/jquery.min.js
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
ASCII text, with very long lines (32038), with CRLF line terminators
Size
96 kB (95962 bytes)
Hash
13c0a5055cca7b2463b2f73701960b9e
e6082a7b52db82604ac446d2e6a32cb5af263781
20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/default/js/jquery.min.js HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:14 GMT
ETag: "176da-5ec432fe42c80"
Accept-Ranges: bytes
Content-Length: 95962
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2

142.250.74.67

200 OK

31 kB

URL GET HTTP/2
fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30976, version 1.0\012- data
Size
31 kB (30976 bytes)
Hash
5c8f124fd7d2657767fb95a63c783012
d3eb799b7ba989b7b3a1fec7155ff4304f9bc67e
721b76567962131c87e729818f3f1f866ade2857fa5e11e52f8bd71e376f357f

HTTP Headers

GET /s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://percentraced.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:14:05 GMT
expires: Thu, 28 Nov 2024 21:14:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 27 Apr 2023 00:56:58 GMT
content-type: font/woff2
age: 376757
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2

142.250.74.67

200 OK

31 kB

URL GET HTTP/2
fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30976, version 1.0\012- data
Size
31 kB (30976 bytes)
Hash
5c8f124fd7d2657767fb95a63c783012
d3eb799b7ba989b7b3a1fec7155ff4304f9bc67e
721b76567962131c87e729818f3f1f866ade2857fa5e11e52f8bd71e376f357f

HTTP Headers

GET /s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://percentraced.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:14:05 GMT
expires: Thu, 28 Nov 2024 21:14:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 27 Apr 2023 00:56:58 GMT
content-type: font/woff2
age: 376757
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

percentraced.com/favicon.ico

91.143.90.3

200 OK

198 B

URL GET HTTP/1.1
percentraced.com/favicon.ico
IP
91.143.90.3:80
ASN
#35366 ISPpro Internet KG

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001

File type
MS Windows icon resource - 1 icon, 16x16, 2 colors\012- data
Size
198 B (198 bytes)
Hash
c6acedaff906029fc5455d9ec52c7f42
92cbd806ca421aa2c9ff5e1ff76bbc20913a2f81
9deb629637088856fe61dc868bf40a7d21ed942e4117659f3d6c3408f59b906b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: percentraced.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 05:53:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Sun, 30 Oct 2022 16:43:13 GMT
ETag: "c6-5ec432fd4ea40"
Accept-Ranges: bytes
Content-Length: 198
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon

www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js

142.250.74.131

200 OK

191 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (563)
Size
191 kB (190682 bytes)
Hash
23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7

HTTP Headers

GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://percentraced.com
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 22:20:10 GMT
expires: Mon, 02 Dec 2024 22:20:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27192
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css

142.250.74.131

200 OK

25 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (56398), with no line terminators
Size
25 kB (24606 bytes)
Hash
eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

HTTP Headers

GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 12:11:40 GMT
expires: Mon, 02 Dec 2024 12:11:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/css
vary: Accept-Encoding
age: 63702
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js

142.250.74.131

200 OK

191 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (563)
Size
191 kB (190682 bytes)
Hash
23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7

HTTP Headers

GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 22:20:10 GMT
expires: Mon, 02 Dec 2024 22:20:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27192
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.67

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size
15 kB (15344 bytes)
Hash
5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc

HTTP Headers

GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 330556
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/recaptcha/api.js

142.250.74.132

200 OK

2.8 kB

URL GET HTTP/2
www.google.com/recaptcha/api.js
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT

File type
gzip compressed data\012- data
Size
2.8 kB (2783 bytes)
Hash
dbea793eae9b403f450ae72e6d113d63
51545d27bbf3337936039b997637ec55873f7e9b
58fb71d3b166cfe5ff4723e6ab4bb88d2fada14c89ad7e14b442a05a44943b6c

HTTP Headers

GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Mon, 04 Dec 2023 05:53:22 GMT
date: Mon, 04 Dec 2023 05:53:22 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js

142.250.74.131

200 OK

191 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (563)
Size
191 kB (190682 bytes)
Hash
23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7

HTTP Headers

GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 22:20:10 GMT
expires: Mon, 02 Dec 2024 22:20:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27193
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css

142.250.74.131

200 OK

25 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (56398), with no line terminators
Size
25 kB (24606 bytes)
Hash
eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

HTTP Headers

GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 12:11:40 GMT
expires: Mon, 02 Dec 2024 12:11:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/css
vary: Accept-Encoding
age: 63703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js

142.250.74.131

200 OK

191 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (563)
Size
191 kB (190682 bytes)
Hash
23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7

HTTP Headers

GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 22:20:10 GMT
expires: Mon, 02 Dec 2024 22:20:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 27193
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css?family=Nunito+Sans:300,400,600

142.250.74.106

200 OK

6.4 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Nunito+Sans:300,400,600
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (6567), with no line terminators
Size
6.4 kB (6432 bytes)
Hash
e6be40fe087559d949a45d7e10009343
8d548510d6029349ef706fe00fe8f2df57277df3
0d1f3580d7bb04d75bbe40df206e5c6aeb8819940e7130f68bfe835ad5c4f934

HTTP Headers

GET /css?family=Nunito+Sans:300,400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 05:53:22 GMT
date: Mon, 04 Dec 2023 05:53:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed

142.250.74.132

200 OK

102 B

URL GET HTTP/3
www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT

File type
ASCII text, with no line terminators
Size
102 B (102 bytes)
Hash
b581f6e6ac7eb4d572233bdd384918f8
12a90cd14cfea2286982801538560f638670eaff
b62f36160407c81030404ab242125afd42fa0da6626ef11e5f406dda12acf144

HTTP Headers

GET /recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Mon, 04 Dec 2023 05:53:23 GMT
date: Mon, 04 Dec 2023 05:53:23 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/api2/logo_48.png

142.250.74.131

200 OK

2.2 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/api2/logo_48.png
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
2.2 kB (2228 bytes)
Hash
ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a

HTTP Headers

GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 23:42:11 GMT
expires: Mon, 04 Dec 2023 23:42:11 GMT
cache-control: public, max-age=604800
age: 540672
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU

142.250.74.132

200 OK

7.3 kB

URL GET HTTP/3
www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7484), with no line terminators
Size
7.3 kB (7253 bytes)
Hash
8fa6aec3a003b4ef46de3f4ba0d399bb
c21acdcaa5a1ea6dac7cecb1ca093d2023f06ee2
4396fe4adb11ad2f42508158b0171dfe0175d9f2641821d678bc3278018972bd

HTTP Headers

GET /recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 04 Dec 2023 05:53:23 GMT
content-security-policy: script-src 'nonce-4CCjwKzSwBcUQiLQCFGbfg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw

142.250.74.132

200 OK

62 kB

URL GET HTTP/3
www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
http://percentraced.com/1U020can4p03xj58-8qijls21r60dg3c2qc5m00001
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (53590)
Size
62 kB (62115 bytes)
Hash
c901a4f4ec3ea94e3ade67196605d18b
b2e8633e6147935b9232953c950a2a0fa9ae7b08
953df4d32134b68c5d9676e56bcd91eff3f85b75f87f676f67622e26874c5d0e

HTTP Headers

GET /recaptcha/api2/anchor?ar=1&k=6Lf2Q_oUAAAAAPuHL-4TbwHMZajtdrTxLXEPfdeU&co=aHR0cDovL3BlcmNlbnRyYWNlZC5jb206ODA.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=g2x63wl6gvkw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://percentraced.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 04 Dec 2023 05:53:22 GMT
content-security-policy: script-src 'nonce-TPF7yre2ztwxgZVHBOILVQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by