GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
142.250.178.99200 OK 7.7 kB URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP 142.250.178.99:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 May 2025 21:38:30 GMT
expires: Thu, 14 May 2026 21:38:30 GMT
cache-control: public, max-age=31536000
age: 67957
last-modified: Wed, 23 Apr 2025 16:07:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
173.194.73.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 173.194.73.84:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:s-JZR-s8kh7BmGhbREl1zU-HUhTQ6Q:gCHjleASbYzAo_hk; Expires=Sat, 15-May-2027 16:31:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 May 2025 16:31:08 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mi1n9VHVine-b0fRqUDzOTmm_6qErN9oqw1lA4hPrXcMU32kHYN40lWl0Oxb437S7tlBn0FXw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-g83WHUD0I-CmbuE21-k5cg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mg0W6MZdz4GFNDC6tx48LPM1OqkZVQqSbuJz3COKIRVeIC5WRhNy13sp43mot9cp5Y1kFoh&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-49521861%3A1747326669030744
173.194.73.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mg0W6MZdz4GFNDC6tx48LPM1OqkZVQqSbuJz3COKIRVeIC5WRhNy13sp43mot9cp5Y1kFoh&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-49521861%3A1747326669030744
IP 173.194.73.84:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51
ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mg0W6MZdz4GFNDC6tx48LPM1OqkZVQqSbuJz3COKIRVeIC5WRhNy13sp43mot9cp5Y1kFoh&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-49521861%3A1747326669030744 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 May 2025 16:31:09 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-g7BpyRXikZZ7rp5hshP3dw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.TKaVzOltmto.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
142.250.74.68200 OK 0 B URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
IP 142.250.74.68:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1558
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Cookie: _GRECAPTCHA=09AMNxLB8OA5uzaSe5MjZJ2fDHr7vgds8xhxMxjnPsRFcwTS6tM3bCLomtybCrjOTqfM3KNL2C8Oh8tWNJZoFaZz8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Thu, 15 May 2025 16:31:10 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET qn.ethnicspue.com/1clkn/31269
23.109.170.114200 OK 6 B URL GET qn.ethnicspue.com/1clkn/31269
IP 23.109.170.114:443
Requested by https://datanodes.to/download
Certificate IssuerLet's Encrypt
Subjectqn.ethnicspue.com
Fingerprint13:C7:7F:6D:6E:BA:A5:B1:24:05:53:A9:75:60:09:DE:81:37:18:50
ValidityMon, 31 Mar 2025 06:33:52 GMT - Sun, 29 Jun 2025 06:33:51 GMT
File type ASCII text, with no line terminators
Hash 9082dc37e5e8046929da411544ad071a
41e0e3963ed94e59e8a2f115994c382712411537
b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1clkn/31269 HTTP/1.1
Host: qn.ethnicspue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 May 2025 16:31:07 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Fri, 16-May-2025 16:31:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Fri, 16-May-2025 16:31:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
142.250.74.68200 OK 945 B URL GET www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
IP 142.250.74.68:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
FingerprintC0:9B:21:A5:10:36:7E:DC:25:8D:0B:AB:4B:D9:D7:AD:92:06:96:49
ValidityMon, 21 Apr 2025 08:42:35 GMT - Mon, 14 Jul 2025 08:42:34 GMT
File type JavaScript source, ASCII text, with very long lines (945), with no line terminators
Hash 272038e5f3831c613843afda4b71c345
213808564963826d5911f6c9d4b953274aca852d
2beccf5b8fd1fd80313899b461fdaac0433b9c8dccd02e1bb600b60f044236a6
GET /recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 15 May 2025 16:31:07 GMT
date: Thu, 15 May 2025 16:31:07 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mi1n9VHVine-b0fRqUDzOTmm_6qErN9oqw1lA4hPrXcMU32kHYN40lWl0Oxb437S7tlBn0FXw
173.194.73.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mi1n9VHVine-b0fRqUDzOTmm_6qErN9oqw1lA4hPrXcMU32kHYN40lWl0Oxb437S7tlBn0FXw
IP 173.194.73.84:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mi1n9VHVine-b0fRqUDzOTmm_6qErN9oqw1lA4hPrXcMU32kHYN40lWl0Oxb437S7tlBn0FXw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:t0gJ7hgHZjydjLfrwuLaykCw45x0Uw:nh8S5kFc-ZYiS8pA;Path=/;Expires=Sat, 15-May-2027 16:31:09 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 May 2025 16:31:09 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mg0W6MZdz4GFNDC6tx48LPM1OqkZVQqSbuJz3COKIRVeIC5WRhNy13sp43mot9cp5Y1kFoh&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-49521861%3A1747326669030744
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-NDifeuCuz6P2tGxzvpExLA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 415
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
142.250.74.68200 OK 39 kB URL POST www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
IP 142.250.74.68:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
File type ASCII text, with very long lines (38751)
Hash 4e1ec94813b947bf33ccbc91017fc359
4a85992403ddc734ed21fc4c681db2d126c2954a
2ccaae212516a15024bf4b1e4016426e74af9a5f73c9d4bbefc6cb1d120567ea
POST /recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 10894
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-content-type-options: nosniff
cross-origin-resource-policy: same-site
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
date: Thu, 15 May 2025 16:31:10 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: _GRECAPTCHA=09AMNxLB8OA5uzaSe5MjZJ2fDHr7vgds8xhxMxjnPsRFcwTS6tM3bCLomtybCrjOTqfM3KNL2C8Oh8tWNJZoFaZz8; Expires=Tue, 11-Nov-2025 16:31:10 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 15 May 2025 16:31:10 GMT
cache-control: private
GET datanodes.to/theme_2023/src/assets/images/virus-scan.png
104.26.14.76200 OK 34 kB URL GET datanodes.to/theme_2023/src/assets/images/virus-scan.png
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash ed8693e5b49bbfec66898fd26b979317
0fe86ee5614e13c3c93672a4d57ef69555f3e701
5b6ef28011995150a50e6e59ca8728a5f0f92c7dfe27f08433e398a7fc177a9d
GET /theme_2023/src/assets/images/virus-scan.png HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:06 GMT
content-type: image/png
content-length: 33827
last-modified: Wed, 31 Jan 2024 09:41:40 GMT
etag: "65ba15d4-8423"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5516
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=srTqVOUr4xUm5He6WvCtWMDPt2rjSbWQY4gVWGoJPr9GLlCfLWYzpYH%2F1ut6UhjIR2yr%2B%2F9od4ZR2%2BG7agB4vzFb9G0nDu9Z91VPxCt4vfx0i0lv0U7zReblSAD4cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061438b11bfe-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1031&min_rtt=512&rtt_var=225&sent=67&recv=30&lost=0&retrans=0&sent_bytes=65687&recv_bytes=1929&delivery_rate=14963434&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=864&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js
104.26.14.76200 OK 667 B URL GET datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type Java source, ASCII text, with very long lines (666)
Hash 3bf8f7142f945fb29a79ec7ddde813ab
510746b341aec2afe4c3f6e4bdc58f3de28a6a7d
d9d4e80bef2de510da666b488f7d8c4faf40604a500ac13bb5f165a09763e15e
GET /theme_2023/dist/assets/LoadingIcon-59fcef50.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-29b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1Jou2Xzpti%2FTg7LncMYgKAnfJ9Vt6VIsY0xbDlUM8aGOk2qTmrvpPy2S3FP9kj8UV8xW%2F2hovTSh2qvh3YLJosBJsGINQTS3UtqYpfg2ny1hL3HpSVepUb%2FVuWBiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406188f3c1bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4235&min_rtt=512&rtt_var=7020&sent=159&recv=54&lost=0&retrans=0&sent_bytes=175313&recv_bytes=2936&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1558&x=0"
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.99200 OK 2.2 kB URL GET www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 10:27:36 GMT
expires: Thu, 22 May 2025 10:27:36 GMT
cache-control: public, max-age=604800
age: 21813
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ukankingwithea.com/
104.21.112.1200 OK 26 B IP 104.21.112.1:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 98e85b375ffe3564e46d942654875dda
57847131ae0a5e761ad0788e3139fe2ad44e15fe
0614c1eec396e14ee0fe0a6bb555ee7442db113ea927087689663796454c8233
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:08 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=aJKYTrGYBUiA9Zh8jwpdpxflnDYKhqMwfa3K2A%2FKN6Jlm1ni12uizyqpbOgp6X%2FICA0GBOV34MQShR8dfDXPnfiuLiw15XhhhDQeeptEeilthHWIIzKRxzjubAuOdODskBwG0rY%3D"}]}
content-encoding: br
set-cookie: csu=327119946983240@1@1747326668; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9404061e4df41c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css
142.250.74.99200 OK 79 kB URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 07beee6eb1882cc9366d133f575e2675
80ae26cac3a2bd2e83f228c99d36224bf239eb3d
99b577755ca8d781c85bae19125a29c57344161150fa31e976265b574d556ddd
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42061
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 10:04:51 GMT
expires: Fri, 15 May 2026 10:04:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/css
vary: Accept-Encoding
age: 23177
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ukankingwithea.com/
104.21.112.1200 OK 27 B IP 104.21.112.1:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 8c49bd206e6e3324af4a5eb8e112f442
477c70315e189e052dc5b2c8e9e92092ca8d694f
535088f35b494009a95bd8616e31cbf7fb876d8f3e778f489faa558f68ad261c
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 15 May 2025 16:31:08 GMT
content-type: text/plain
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iOtnJQB%2Fj75VMA5kZSzEcCU%2F021MHsyx7izJu%2BLuhXa%2F3A6jMlSyQlUIraeVBMiU0tExhNAh5WMeK4kNOcj7GZJ0I38t4iyvhF%2FDXwPlezzqiOicyAiGnCXqY1nR0VllLou9AYQ%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: csu=1212134811031169@1@1747326668; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 940406204d76712a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12906&min_rtt=10220&rtt_var=7876&sent=15&recv=14&lost=0&retrans=0&sent_bytes=3936&recv_bytes=1481&delivery_rate=1959&cwnd=12000&unsent_bytes=0&cid=baea38d94d4a2269&ts=259&x=16"
POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
142.250.74.68200 OK 0 B URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
IP 142.250.74.68:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1575
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Thu, 15 May 2025 16:31:10 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
104.26.14.76200 OK 79 kB URL GET datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (55448)
Hash 0141e4901d84ce0029f3b424362c7af2
571f2a8995a2ebf2d68f3fafdfd5d316ede31ff0
a30a91209bf26dabfad3b83901707969815ac9908e11b12dc52b7a80b8f4ee80
GET /theme_2023/dist/assets/FileActions-fa6032ae.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-13480"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SiIjlcTbYYdnd%2FwS5%2FHjlKqMkgQs0o%2FgKTV7OL4ePz%2BP5xEyOM0nrVKnlzFYHvpuks9Z7IzbtjYyJM5FIK7btaqNhAxWpxJWwmU6Jqn3Xt9DYNf81362dD0S%2B%2BrWBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406188f321bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1650&min_rtt=477&rtt_var=2205&sent=168&recv=63&lost=0&retrans=0&sent_bytes=179147&recv_bytes=2936&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1569&x=0"
X-Firefox-Spdy: h2
GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
142.250.74.68200 OK 73 kB URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
IP 142.250.74.68:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
File type HTML document, ASCII text, with very long lines (56645)
Hash f9aef18d6ca9832a7056ac8bb6e62e5b
d79b4227e029646f13b903b679511c82e74c0655
eaf7920666e2adeea1ebe7007ccba0643f808cde97a82b66a3cad848fe407c22
GET /recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 May 2025 16:31:08 GMT
content-security-policy: script-src 'nonce-aUwUA1tNxh8rilz3LAtrHQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2
142.250.178.99200 OK 7.9 kB URL GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 142.250.178.99:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 May 2025 21:38:08 GMT
expires: Thu, 14 May 2026 21:38:08 GMT
cache-control: public, max-age=31536000
age: 67979
last-modified: Wed, 23 Apr 2025 16:05:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
173.194.73.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 173.194.73.84:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:fyPxJ9VcK3Lrqf766gA4fQ3ed1P9mQ:C_fqVDIml33UwXeJ; Expires=Sat, 15-May-2027 16:31:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 May 2025 16:31:08 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mhe-4LRjsWGpvy-Rcu0fwTASJFxHEaNFellp4_0DdgQfYMPpToD0flAurx3T-vjY1g0CE1kAQ
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-adkMhnrK4wmqJO5UXYxWNw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
142.250.74.10200 OK 8.4 kB URL GET fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
IP 142.250.74.10:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Hash a1d4e0616226c98268848dcf99794ee1
93d82dcf1ed351b8797bd7ec3986b61bea2dd343
d585f2a922a586533e9e88963865d16543e72c91e142a9e2b6774a71c0ce4eb7
GET /css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 May 2025 16:31:07 GMT
date: Thu, 15 May 2025 16:31:07 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
104.26.14.76200 OK 1.1 kB URL GET datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type Java source, ASCII text, with very long lines (1119)
Hash 4838938921365808702372a0947114c2
8aa1c4e51dacf60f069c52a80039fbcc6dc50e70
555e00c6b3d5c3ff1b6e855201b7216e68c5783adaa25dafc2ad68d3ee75677c
GET /theme_2023/dist/assets/VirusScan-e53a5e80.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-460"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0Ujsv1bJXJBp7YoZwwXiOYw71SWJK5%2Bz5hl0AQAyBLCBu%2F8pGqVQMbhUzvPeVGHHE%2BHiK8iG%2F1KnopXRNIDUGh3Wbg7mkJ6Qb3t%2FOFuQ3Gz2CfmE1aCF8nEH72vwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406174d521bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=807&min_rtt=512&rtt_var=235&sent=147&recv=42&lost=0&retrans=0&sent_bytes=172291&recv_bytes=2196&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1352&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js?
104.26.14.76200 OK 8.5 kB URL GET datanodes.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js?
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, ASCII text, with very long lines (8465), with no line terminators
Hash bcac4ad7456f08aa6a103c2bba3f7d1f
d6b294a5a4a99e677fb89e0be413490ae4fb3220
3664040cf821f39624a8e158b3928c78eeb9add4f4c7a57190f002fabaaf093c
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js? HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; _ga_7DP7NV2LKF=GS2.1.s1747326667$o1$g0$t1747326667$j60$l0$h0; _ga=GA1.1.232187172.1747326668
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kqS9fMfHqITeVn747mzmCEMWevPjJ%2F4DaMwOMrkuXAgShthTWlpnzr50xSVdlCnm19JMmPLv8QEeUb7kBUvdDCPGch3wSBkAhvFX1y2QzgrxOiIKadhfzzNk9Pc0WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 94040619d93a1bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=929&min_rtt=477&rtt_var=46&sent=191&recv=87&lost=0&retrans=0&sent_bytes=207663&recv_bytes=3141&delivery_rate=30751615&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1765&x=0"
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js
142.250.74.99200 OK 653 kB URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Size 653 kB (652777 bytes)
Hash e95468d04c58cf02c6dc7a2b5b8d0767
d50cb8a0f60256d410d216da72a80105d4ad6a6f
6798aa15947bc933cb2b22bb61cf88b0334caba9f0a34e99d42b31792753636e
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 277679
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 10:04:51 GMT
expires: Fri, 15 May 2026 10:04:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 23177
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET undefined/VmF2Y1k3AxUOZjdcFEUsJA1LRmsQREQlPWQOFFUtZQMRCTZnUAJNOjoOAwc/JA4YF3c4BAJGaxAtIzQTGDQaACASMjtTOBU0OigObwwvJQtuO0QpNQQlRgQUPAUQKA0bCzsiLj8vHCowAiUdWjoCEiQqMyEPFCBhHSMfNgATMBVGaxArRDYNHSYvJRgTMEMoHRgSIw4qc1M0LTNuJxUrCC8xASUuD1IzFBs/WAA6ajU5OiRhYDEeBDIGCwUUC2VZIzo3bzIXJBs4BCQ2MgYlO0ZrFCciVmoMNjMuFg4FGjoPGFgQJD1mNCdaagw2MzUTEhkeOQwyREQhHB4rHDYzezcdOmoEMzJQPTo4JCJuMlMnMgxlVBsGDhAtFyQbOC8RACwZNR5TDBcVETlrFDIQNBc4ODMHfGQnLwkcYiQ1BGkZIhorPy4zGzo1DAsvDRw9OUUUfzwSGQ0paywxNysfEjwOKWIQE1cLBw
0.0.0.0 0 B URL GET undefined/VmF2Y1k3AxUOZjdcFEUsJA1LRmsQREQlPWQOFFUtZQMRCTZnUAJNOjoOAwc/JA4YF3c4BAJGaxAtIzQTGDQaACASMjtTOBU0OigObwwvJQtuO0QpNQQlRgQUPAUQKA0bCzsiLj8vHCowAiUdWjoCEiQqMyEPFCBhHSMfNgATMBVGaxArRDYNHSYvJRgTMEMoHRgSIw4qc1M0LTNuJxUrCC8xASUuD1IzFBs/WAA6ajU5OiRhYDEeBDIGCwUUC2VZIzo3bzIXJBs4BCQ2MgYlO0ZrFCciVmoMNjMuFg4FGjoPGFgQJD1mNCdaagw2MzUTEhkeOQwyREQhHB4rHDYzezcdOmoEMzJQPTo4JCJuMlMnMgxlVBsGDhAtFyQbOC8RACwZNR5TDBcVETlrFDIQNBc4ODMHfGQnLwkcYiQ1BGkZIhorPy4zGzo1DAsvDRw9OUUUfzwSGQ0paywxNysfEjwOKWIQE1cLBw
IP 0.0.0.0:0
Requested by https://datanodes.to/download
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /VmF2Y1k3AxUOZjdcFEUsJA1LRmsQREQlPWQOFFUtZQMRCTZnUAJNOjoOAwc/JA4YF3c4BAJGaxAtIzQTGDQaACASMjtTOBU0OigObwwvJQtuO0QpNQQlRgQUPAUQKA0bCzsiLj8vHCowAiUdWjoCEiQqMyEPFCBhHSMfNgATMBVGaxArRDYNHSYvJRgTMEMoHRgSIw4qc1M0LTNuJxUrCC8xASUuD1IzFBs/WAA6ajU5OiRhYDEeBDIGCwUUC2VZIzo3bzIXJBs4BCQ2MgYlO0ZrFCciVmoMNjMuFg4FGjoPGFgQJD1mNCdaagw2MzUTEhkeOQwyREQhHB4rHDYzezcdOmoEMzJQPTo4JCJuMlMnMgxlVBsGDhAtFyQbOC8RACwZNR5TDBcVETlrFDIQNBc4ODMHfGQnLwkcYiQ1BGkZIhorPy4zGzo1DAsvDRw9OUUUfzwSGQ0paywxNysfEjwOKWIQE1cLBw HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF
142.250.74.168200 OK 384 kB URL GET www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF
IP 142.250.74.168:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File type JavaScript source, ASCII text, with very long lines (6125)
Size 384 kB (384317 bytes)
Hash d3cf0e7821003abd70c061a0df67d844
6946736371897372104ac2762ee3bf2c724d9f16
da93c4a31fcc9d39381a1cf25fb4597985c0a34024ea7354ac4785f568660e41
GET /gtag/js?id=G-7DP7NV2LKF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 May 2025 16:31:07 GMT
expires: Thu, 15 May 2025 16:31:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 128477
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET datanodes.to/favicon.ico
104.26.14.76200 OK 2.5 kB IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash c813091dc9f029ba08588f60cc450755
d2b2f0efc676eff758c4194d80ff2e9ee973f556
682e513cfa795efc1e53c502e9a8aa3d91db160b7fd15f94de2a4156a6961474
GET /favicon.ico HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; _ga_7DP7NV2LKF=GS2.1.s1747326667$o1$g0$t1747326667$j60$l0$h0; _ga=GA1.1.232187172.1747326668
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: image/x-icon
last-modified: Thu, 01 Sep 2022 19:47:58 GMT
etag: W/"63110c6e-99d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1082
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NwMBT5sozDy6VZrYldr2yYol1hb1AcVXWGYmlkJGJ4FP50rJy0pw2kzjrrj9WvI40SXchPOt7fA9yHubPupRJOqu5szMizr5n8Bp1GiQ2drlcJdt2yBnFkXmcnj2Hg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061adab71bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1455&min_rtt=416&rtt_var=1287&sent=221&recv=120&lost=0&retrans=0&sent_bytes=234172&recv_bytes=3736&delivery_rate=30751615&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1921&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js
104.26.14.76200 OK 571 B URL GET datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, ASCII text, with very long lines (570)
Hash 438e021bb3322f23fb81092ef78dd510
51a31923f243d4af84ef0f6e710bdf202e52c6c9
85533b0eb874013bd2468499e014675813269c8983bf7e0abc366d1715020769
GET /theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-23b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AMIlUdqkCDBbUn6%2FSgv42LhoBZe9v2F4W%2ByGTupXhnRaKq98zjXAQzxJuyuDBIQh9NIeGvYlJyaUbPbGGtPGjtDqdoPYUWJ%2FKcU5y6kXzmj%2FR7EVNMBs7mndftod0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406189f471bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=3037&min_rtt=512&rtt_var=4763&sent=162&recv=57&lost=0&retrans=0&sent_bytes=176338&recv_bytes=2936&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1562&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js
104.26.14.76200 OK 28 kB URL GET datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, ASCII text, with very long lines (27942)
Hash 6b949827cd27578f8d96e716764745fd
fc5d054a81cc11c95726bf55f11fc0c96ae0f58b
579bb21ed189cf13357365e55a2dc69ca1e3866ce7566362e163cfe86b3f3aee
GET /theme_2023/dist/assets/transition-a1567fd4.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; _ga_7DP7NV2LKF=GS2.1.s1747326667$o1$g0$t1747326667$j60$l0$h0; _ga=GA1.1.232187172.1747326668
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-6d27"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WWNs9kYlX23rEYihT2%2ByjyiRGL38oNPOAed1GTRinB5jxb%2BuVRRIvgUZWgh%2B%2FL%2BYr4cBlKWraT3rsgbaVdiuGHSfTtzKH5zxemWbWQ126s4%2FvVCM%2FdLwcKjRqgChOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061a7a111bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=686&min_rtt=416&rtt_var=89&sent=201&recv=99&lost=0&retrans=0&sent_bytes=213932&recv_bytes=3644&delivery_rate=30751615&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1860&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/index-dd92db6d.js
104.26.14.76200 OK 6.4 kB URL GET datanodes.to/theme_2023/dist/assets/index-dd92db6d.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type Java source, ASCII text, with very long lines (6392)
Hash 6ce1ad7fa6b6028bd38010eb93880db5
dbf9628e8a116865693cbd5cce1c41fcaac94beb
ba8edc5521e36bb2e21448a0f062d3727e459e9165cb9aabbd48bb1b6befd6c7
GET /theme_2023/dist/assets/index-dd92db6d.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-18f9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y7nRTxWZksYTYatnT%2BVOZsVyaWfmCU1DjWsM8AHbJEuyQ1JvrcXooYwye6kT78Z2KaTZE9ffMlhoZofwiH%2BiOkSEUuKTD78rXQ7FdgVgrEntgSuFlIcFC0d2OuxnFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406188f421bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2197&min_rtt=477&rtt_var=3274&sent=165&recv=60&lost=0&retrans=0&sent_bytes=177183&recv_bytes=2936&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1567&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js
104.26.14.76200 OK 91 B URL GET datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hash 25e3a5dcaf00fb2b1ba0c8ecea6d2560
7850b3fd4aeb69387bdb5a60025d15c41351d5eb
cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa
GET /theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-5b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPHRD2s4r6wKbks2hyGL4Ua%2B%2FRMYkmuOB8YsDPf8OqkOA8l5MLxtiYFsEI6SZPqJsKycNBTaaGvyla9CZ7Vsuy8EOSm9wZDQUbJopB33ZzZkKTKnEBEsUxplGizpsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406189f431bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5994&min_rtt=512&rtt_var=10369&sent=156&recv=51&lost=0&retrans=0&sent_bytes=174728&recv_bytes=2936&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1558&x=0"
X-Firefox-Spdy: h2
POST datanodes.to/cdn-cgi/challenge-platform/h/g/jsd/r/0.42452957949398246:1747325501:sHjdrF_KFpp5zeZ5BlRdJ77nFqH3n6ai-Un0qfNjNC4/9404060fd9e21bfe
104.26.14.76200 OK 0 B URL POST datanodes.to/cdn-cgi/challenge-platform/h/g/jsd/r/0.42452957949398246:1747325501:sHjdrF_KFpp5zeZ5BlRdJ77nFqH3n6ai-Un0qfNjNC4/9404060fd9e21bfe
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.42452957949398246:1747325501:sHjdrF_KFpp5zeZ5BlRdJ77nFqH3n6ai-Un0qfNjNC4/9404060fd9e21bfe HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12066
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; _ga_7DP7NV2LKF=GS2.1.s1747326667$o1$g0$t1747326667$j60$l0$h0; _ga=GA1.1.232187172.1747326668
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:08 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=hbcVeqypXIwdCCXzV_gFalocYmHqyo5OiD0KEIrG.to-1747326668-1.2.1.1-.4YuSQbsBIsWZjWqHGMUSli_RT0h6J6KBqUVkdixfRKgxfqQfG7MY6gqg5lLLJOOsPy1q61veXn25TpLVXdqniPvewalIVy0U0H87DKzzCG__PblnQqxIi1yxAqJ2p7Mrk_Myd3A5w9RHaLRfRrfdSG6MjT1EKYi3JrlqhT1Z6CoK2vS9thWvuHqOARraLCReL7nGlKgcSrtGrjdCZe6acgwXnL404jr3DzOfiPCQM1iVA_Xh.gjmg2vaWQ20PksHjgBjsd4AL1dWc2ajhmK.eN9SY0cGVWrRY.WW8wC5brhGC9Ll1noFcwx5dgc5b0HObSvoJ3oT6eyYVNG7AFUm8kcyZJdJ1bE9fGfeVJ3p00; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=datanodes.to; Expires=Fri, 15 May 2026 16:31:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rCSj%2FEXEm0daYLXq3%2BOlWxB72hVr6y6hfnLPyAKikZqh%2BrNG2%2B7%2Fz7%2BiUlaTbrwTmPgr03g8JxYCOV8ugVMqy4tx%2F9hwF%2BQHT7nROnG6DQNOxxOXrh%2BeXyEcw%2BwkOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9404061bebfd1bfe-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1325&min_rtt=416&rtt_var=936&sent=231&recv=132&lost=0&retrans=0&sent_bytes=237206&recv_bytes=16097&delivery_rate=30751615&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=2090&x=0"
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MiO8tUdPnjX-fbi4p_3BfXe709EoQs4B--9TekoccVy4imTX_p74q9sgVVLuS7fXzKeAan6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S638320816%3A1747326669030974
173.194.73.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MiO8tUdPnjX-fbi4p_3BfXe709EoQs4B--9TekoccVy4imTX_p74q9sgVVLuS7fXzKeAan6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S638320816%3A1747326669030974
IP 173.194.73.84:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51
ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MiO8tUdPnjX-fbi4p_3BfXe709EoQs4B--9TekoccVy4imTX_p74q9sgVVLuS7fXzKeAan6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S638320816%3A1747326669030974 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 May 2025 16:31:09 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-6GQEyvpmN7wturAyhmbb-w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.TKaVzOltmto.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js
142.250.74.99200 OK 653 kB URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Size 653 kB (652777 bytes)
Hash e95468d04c58cf02c6dc7a2b5b8d0767
d50cb8a0f60256d410d216da72a80105d4ad6a6f
6798aa15947bc933cb2b22bb61cf88b0334caba9f0a34e99d42b31792753636e
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 277679
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 10:04:51 GMT
expires: Fri, 15 May 2026 10:04:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 23178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET datanodes.to/theme_2023/dist/assets/app-36afb1c9.css
104.26.14.76200 OK 53 kB URL GET datanodes.to/theme_2023/dist/assets/app-36afb1c9.css
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type Unicode text, UTF-8 text, with very long lines (53102)
Hash 2cdd57f3f007cbfdba60cf21c501419d
62720b0e8af26f35c3b3cea435fe42f9dd8a8b11
36afb1c9ed858b12e612a7e7db9bb7f6993c8f595ba4c600e226cd7c15be6b2f
GET /theme_2023/dist/assets/app-36afb1c9.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:06 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-cf77"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5516
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUfuZ6Lw2fiuXy4QKLTGos1knyeK8CT30wnZX0DxmjaO3K2grt092QygRHnHxcm2v3C8VpauyyUz6Yc%2FsFJawK2vfmM%2BdLB8IGmPD75yI97kCYKzBNgqB0575Jw35Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061428ab1bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1018&min_rtt=512&rtt_var=363&sent=44&recv=25&lost=0&retrans=0&sent_bytes=39215&recv_bytes=1929&delivery_rate=14613961&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=857&x=0"
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
142.250.178.99200 OK 8.0 kB URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP 142.250.178.99:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 May 2025 21:38:08 GMT
expires: Thu, 14 May 2026 21:38:08 GMT
cache-control: public, max-age=31536000
age: 67979
last-modified: Wed, 23 Apr 2025 16:07:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=232187172.1747326668>m=45je55d1v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&z=122010582
142.250.74.131200 OK 42 B URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=232187172.1747326668>m=45je55d1v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&z=122010582
IP 142.250.74.131:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.no
Fingerprint66:A3:1A:F5:73:DE:8E:7D:0E:AA:01:69:6B:5C:DA:3F:F8:63:CD:5F
ValidityMon, 21 Apr 2025 08:43:35 GMT - Mon, 14 Jul 2025 08:43:34 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=232187172.1747326668>m=45je55d1v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&z=122010582 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 May 2025 16:31:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mhe-4LRjsWGpvy-Rcu0fwTASJFxHEaNFellp4_0DdgQfYMPpToD0flAurx3T-vjY1g0CE1kAQ
173.194.73.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mhe-4LRjsWGpvy-Rcu0fwTASJFxHEaNFellp4_0DdgQfYMPpToD0flAurx3T-vjY1g0CE1kAQ
IP 173.194.73.84:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mhe-4LRjsWGpvy-Rcu0fwTASJFxHEaNFellp4_0DdgQfYMPpToD0flAurx3T-vjY1g0CE1kAQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:-CU0Ag1xna1XKjXx9-SsPT0HOnXsNQ:v99RjycU-dWeKDxF;Path=/;Expires=Sat, 15-May-2027 16:31:09 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 May 2025 16:31:09 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MiO8tUdPnjX-fbi4p_3BfXe709EoQs4B--9TekoccVy4imTX_p74q9sgVVLuS7fXzKeAan6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S638320816%3A1747326669030974
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-TJ4oJ0ODhMFgSyEbkD1Bdg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 415
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET nedukeration.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
108.157.229.43200 OK 3.1 kB URL GET nedukeration.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
IP 108.157.229.43:443
Requested by https://datanodes.to/download
Certificate IssuerAmazon
Subjectnedukeration.org
Fingerprint4F:F2:B7:F9:0A:52:0B:09:9A:23:CB:E8:FF:23:AB:32:D7:1F:D2:A4
ValidityTue, 29 Apr 2025 00:00:00 GMT - Thu, 28 May 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3072), with no line terminators
Hash f33e3759968064f9981929838611278a
d6ca3c37087c527f6c824f024ca1b110f3cdee25
b60aefeaed273c2277d7eb096f7ae0455065fc3dd6ba27c1ac317459812e19de
GET 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 HTTP/1.1
Host: nedukeration.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1219
date: Thu, 15 May 2025 16:31:08 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=yxgcN3dg64LfbIXh30mYDT9lpuLSVuKYuoU6lhWRhwkHSjW0yzjPL8ju0pKS26RRuCWyC6c0itdYz9mjIn5ttc8ESo2kBRKlrXI+3wpleriq4RbOUaUbTPvzs6In; Expires=Thu, 22 May 2025 16:31:08 GMT; Path=/
AWSALBCORS=yxgcN3dg64LfbIXh30mYDT9lpuLSVuKYuoU6lhWRhwkHSjW0yzjPL8ju0pKS26RRuCWyC6c0itdYz9mjIn5ttc8ESo2kBRKlrXI+3wpleriq4RbOUaUbTPvzs6In; Expires=Thu, 22 May 2025 16:31:08 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 fdac35835bcf0937b6f910eeac10720e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: kW29hiPzgmdumg_5k3FMs27ocnx9B0TzLzV-ZZZ9hFhb4o8UTQhifg==
X-Firefox-Spdy: h2
GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV
142.250.74.68200 OK 102 B URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV
IP 142.250.74.68:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
File type ASCII text, with no line terminators
Hash eb5ac6e09ab4e499923da321a3170bb0
bab2f66ae7f5b1341adf875707ea98bc63d78303
77fa05a500906d32604366ec2b46fa9958fac7c9c16f8006e1010e0cb883d345
GET /recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Thu, 15 May 2025 16:31:09 GMT
date: Thu, 15 May 2025 16:31:09 GMT
cache-control: private, max-age=300
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.178.99200 OK 16 kB URL GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.178.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 17:58:58 GMT
expires: Fri, 08 May 2026 17:58:58 GMT
cache-control: public, max-age=31536000
age: 599531
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js
104.26.14.76200 OK 3.5 kB URL GET datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, ASCII text, with very long lines (1681)
Hash 7b96d51da905a5c0edc478d43d79c7c8
17dd5bebfca4ffd4e42f72ef4ab9434a00d3e70f
d6d247a9877ed90663542f79369d23970577ba3910d707664fc06492d3878452
GET /theme_2023/dist/assets/open-closed-f13f7375.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; _ga_7DP7NV2LKF=GS2.1.s1747326667$o1$g0$t1747326667$j60$l0$h0; _ga=GA1.1.232187172.1747326668
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-d9f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H3J8QnWrt%2BFREEV79MwktIsr76vbebQ0zQC4XJZ0xhm4Tjnnlz6%2ByF1iuYbjoDsHw6QHT51i26Eu5S08%2BmGwPSlmoUBh%2BKl1ezXTMcTSwjY%2BXMUz1U7jn11rOwtt%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061a7a121bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1922&min_rtt=416&rtt_var=2353&sent=217&recv=115&lost=0&retrans=0&sent_bytes=231832&recv_bytes=3644&delivery_rate=30751615&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1886&x=0"
X-Firefox-Spdy: h2
GET nedukeration.org/TEZVelktJDYXZi17N1wsPipoX2sKY2c8PX4pN0wtfyQyEDZ9dyFUOiApIB4/Pik7DnciIyFfawogGD4xChBkNA0aPyYCOwkUBzMOPC8UK2h1HwIZHQQsABYXIB8TMw0VKAAsAD0LLyAdCiwQTj0aNhkxMycsESIMNAcUMGAbHgQ9HhkAID4xdBATES5pdBM3a3gHHRMyfhYDGR8VPBxDDDsQZRkNBhMCFDEmIgAoEAcsLQ8LCTUsNTMoEAQuAHUJFyAXBgE6X2sOHmUzKgM8bCgRFCUHIDF4Dww9DyYBEEIqAxIxHA02HCwjCA4RGCITJAcUFmgpERgsGjtrMQMAHQQFNh0gKhc4aH4ADSMaDwJkEgM0Exk4agYuFD82NiU4OCEPHg8QPx0HByMeGiwDS2khFhENDw8hGxYAOwMcHg4WLBQoaH8cLywDHy8UAgkJITEeIQovFA0hPhxmLB8OHgRcMz8pOwpkATICKxQtdwQwKBoNHTw
108.157.229.43200 OK 3.1 kB URL GET nedukeration.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
IP 108.157.229.43:443
Requested by https://datanodes.to/download
Certificate IssuerAmazon
Subjectnedukeration.org
Fingerprint4F:F2:B7:F9:0A:52:0B:09:9A:23:CB:E8:FF:23:AB:32:D7:1F:D2:A4
ValidityTue, 29 Apr 2025 00:00:00 GMT - Thu, 28 May 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3072), with no line terminators
Hash 350962b09869d50b391207854d0f39dd
838baaf24d43f17a0f5e0d079e8d23a954ae2693
ce49643f72fdedefe45cfea77f3680731d49f05d44e4c24dfb3f34f881c453e6
GET /TEZVelktJDYXZi17N1wsPipoX2sKY2c8PX4pN0wtfyQyEDZ9dyFUOiApIB4/Pik7DnciIyFfawogGD4xChBkNA0aPyYCOwkUBzMOPC8UK2h1HwIZHQQsABYXIB8TMw0VKAAsAD0LLyAdCiwQTj0aNhkxMycsESIMNAcUMGAbHgQ9HhkAID4xdBATES5pdBM3a3gHHRMyfhYDGR8VPBxDDDsQZRkNBhMCFDEmIgAoEAcsLQ8LCTUsNTMoEAQuAHUJFyAXBgE6X2sOHmUzKgM8bCgRFCUHIDF4Dww9DyYBEEIqAxIxHA02HCwjCA4RGCITJAcUFmgpERgsGjtrMQMAHQQFNh0gKhc4aH4ADSMaDwJkEgM0Exk4agYuFD82NiU4OCEPHg8QPx0HByMeGiwDS2khFhENDw8hGxYAOwMcHg4WLBQoaH8cLywDHy8UAgkJITEeIQovFA0hPhxmLB8OHgRcMz8pOwpkATICKxQtdwQwKBoNHTw HTTP/1.1
Host: nedukeration.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1218
date: Thu, 15 May 2025 16:31:08 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=+vvpGmLILg4GWX1Ra2i8BQN+Oyb3f3iQVQv6Nm7uw+XfMV+2BxV2UXVQbKEylGe+FjKGloaxyR6Zpi+PiML0s6SEdw7NVVoeshLjUWachXyVn/nq+imUMBNrzNZY; Expires=Thu, 22 May 2025 16:31:08 GMT; Path=/
AWSALBCORS=+vvpGmLILg4GWX1Ra2i8BQN+Oyb3f3iQVQv6Nm7uw+XfMV+2BxV2UXVQbKEylGe+FjKGloaxyR6Zpi+PiML0s6SEdw7NVVoeshLjUWachXyVn/nq+imUMBNrzNZY; Expires=Thu, 22 May 2025 16:31:08 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 fdac35835bcf0937b6f910eeac10720e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 7hBDXXICKwLG1MwbwXnEj_ov1fa37tAPKqCnAFD-Mkf6e_IPHL-a4g==
X-Firefox-Spdy: h2
GET d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643
54.230.245.20200 OK 384 kB URL GET d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643
IP 54.230.245.20:443
Requested by https://datanodes.to/download
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62
ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 384 kB (384402 bytes)
Hash d9e9ad648375690881cc564fd7a93c4a
aaaea2f33249432c8672c30658c182cb73d09dfb
2b3552d1fa10b098860c05622f88d6519051e407f3c734843558ddf3f257c78c
GET /?uxqed=1158643 HTTP/1.1
Host: d2eq4x4u2q3fwc.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 126873
date: Wed, 14 May 2025 18:36:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://datanodes.to
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _HQhNQM9PCV-37CfhqcOwG-dp0e1nMEGoSQUoICy-7io5UZ5lqVpCQ==
age: 78895
X-Firefox-Spdy: h2
GET yeranydwould.org/QjdaOEVtCDlLeCNcAwsQGm0/XCJ3RwsJcDt1aG4NGllifCQXD3xMLCYKawlwegFuC2MyXj4FdGRELlkxN0RnCWMrWTxXeGRBZwlrcQN0C3NsA3xNeHMRLkgkJQprHjU2QzYFdHUDbQt3dAFsAHFwBQ
188.114.97.1204 No Content 0 B URL GET yeranydwould.org/QjdaOEVtCDlLeCNcAwsQGm0/XCJ3RwsJcDt1aG4NGllifCQXD3xMLCYKawlwegFuC2MyXj4FdGRELlkxN0RnCWMrWTxXeGRBZwlrcQN0C3NsA3xNeHMRLkgkJQprHjU2QzYFdHUDbQt3dAFsAHFwBQ
IP 188.114.97.1:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectyeranydwould.org
Fingerprint84:24:93:E8:36:D2:DE:96:C1:97:4F:68:3C:A1:0A:B8:26:10:2A:CF
ValidityTue, 22 Apr 2025 10:20:46 GMT - Mon, 21 Jul 2025 11:19:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /QjdaOEVtCDlLeCNcAwsQGm0/XCJ3RwsJcDt1aG4NGllifCQXD3xMLCYKawlwegFuC2MyXj4FdGRELlkxN0RnCWMrWTxXeGRBZwlrcQN0C3NsA3xNeHMRLkgkJQprHjU2QzYFdHUDbQt3dAFsAHFwBQ HTTP/1.1
Host: yeranydwould.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 15 May 2025 16:31:08 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Kvpi3GVwrIOdAIEOfejAFrVAuLOTlzVrDnijEPjwjaEEQmWGjG%2FtyEuhc0RBaS2D8MFygnMn5Os5B0mmlv8sHbC%2FEXSRP4%2BVAdAFb%2BXkficq2Ltg94y7bKKW8ZzeL851W6fM"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9404061e4d62568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET yeranydwould.org/NUFqd1AafgkEbXsqU0UdYnkoEjsBBz0QAgITDSU1cXJbNBIELkwDOVF8W0ZmBHRfQ3ZFKA5KYQ1nGQMxQTQZSmETKAQRPwhnHEphG3FERX4AZx9KYRM1GhY3CHBMByRBLVdGZwF2WUVmA3dSQ2cD
188.114.97.1204 No Content 0 B URL GET yeranydwould.org/NUFqd1AafgkEbXsqU0UdYnkoEjsBBz0QAgITDSU1cXJbNBIELkwDOVF8W0ZmBHRfQ3ZFKA5KYQ1nGQMxQTQZSmETKAQRPwhnHEphG3FERX4AZx9KYRM1GhY3CHBMByRBLVdGZwF2WUVmA3dSQ2cD
IP 188.114.97.1:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectyeranydwould.org
Fingerprint84:24:93:E8:36:D2:DE:96:C1:97:4F:68:3C:A1:0A:B8:26:10:2A:CF
ValidityTue, 22 Apr 2025 10:20:46 GMT - Mon, 21 Jul 2025 11:19:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NUFqd1AafgkEbXsqU0UdYnkoEjsBBz0QAgITDSU1cXJbNBIELkwDOVF8W0ZmBHRfQ3ZFKA5KYQ1nGQMxQTQZSmETKAQRPwhnHEphG3FERX4AZx9KYRM1GhY3CHBMByRBLVdGZwF2WUVmA3dSQ2cD HTTP/1.1
Host: yeranydwould.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 15 May 2025 16:31:08 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ajlk4kQoGo06CH7b44%2FEsxid1tZaDqiDutpm6WdVEWA3yvtDy3ksf06hC0F2C%2Bo2yqoAelygFBMpNUFzFmIc13eVUl7hMRLdqJdAsN1BQ4ZJ4c4QSoDBxVvADQl2sIFkl5tm"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9404061f2eb5568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55d1v9175474265za200&_p=1747326667197&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&cid=232187172.1747326668&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1747326667&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20The%20Last%20Part%20Update%20RUNE%20rar&en=scroll&epn.percent_scrolled=90&tfd=6889
216.239.32.36204 No Content 0 B URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55d1v9175474265za200&_p=1747326667197&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&cid=232187172.1747326668&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1747326667&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20The%20Last%20Part%20Update%20RUNE%20rar&en=scroll&epn.percent_scrolled=90&tfd=6889
IP 216.239.32.36:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55d1v9175474265za200&_p=1747326667197&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&cid=232187172.1747326668&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1747326667&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20The%20Last%20Part%20Update%20RUNE%20rar&en=scroll&epn.percent_scrolled=90&tfd=6889 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 204 No Content
access-control-allow-origin: https://datanodes.to
date: Thu, 15 May 2025 16:31:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css
104.26.14.76200 OK 372 B URL GET datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type ASCII text, with very long lines (371)
Hash cdfb8cc2e705f53d307841b8e9e2fe02
c86370de829ba384fdcde4d556472b27eca7b803
4872b02d2bbe6f70834822916d6e55e3190f18172efaddf935dada716fdb5452
GET /theme_2023/dist/assets/Tooltip-4872b02d.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-174"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5517
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cljld0m4y9Cohq3KY%2Bq5SduKY9hXEiNGVWJmul1nT92llAlvkz2sicFVo0JNNMQp79%2B0wV1MK49hC8%2B42kk9Ej0wuc9gR4SPyOrFRqsHT3Et3yqu0P6GQPREBdIDmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406174d481bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=807&min_rtt=512&rtt_var=235&sent=150&recv=42&lost=0&retrans=0&sent_bytes=173442&recv_bytes=2196&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1353&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/Util-ba300788.js
104.26.14.76200 OK 2.9 kB URL GET datanodes.to/theme_2023/dist/assets/Util-ba300788.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (2854)
Hash 5813b7c66e53d58affc0cbed8e8de4d8
178cc0740966c30105212ab634ff274db3cca2f7
64e9941143b72dce37a3a356e68f051bbf5aaa12c3ac0b2f3972b471083d7477
GET /theme_2023/dist/assets/Util-ba300788.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; _ga_7DP7NV2LKF=GS2.1.s1747326667$o1$g0$t1747326667$j60$l0$h0; _ga=GA1.1.232187172.1747326668
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-b29"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TRlvfjAP4TMKFQ9ZC6PoWkUbtO%2FqylOhRHygvghZCUFN%2BAhXe4xlzh5RqO2Qc5DiJFQa4yZVbC3Q5oe9uoOXG9UkBDmYsu8wi7e4e5%2F5zNl%2BYCDdZmreiNqmUV6YjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061a69fb1bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=781&min_rtt=477&rtt_var=73&sent=198&recv=96&lost=0&retrans=0&sent_bytes=212147&recv_bytes=3644&delivery_rate=30751615&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1852&x=0"
X-Firefox-Spdy: h2
POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
142.250.74.68200 OK 0 B URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
IP 142.250.74.68:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1575
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
date: Thu, 15 May 2025 16:31:10 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js
104.26.14.76200 OK 17 kB URL GET datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, ASCII text, with very long lines (16550)
Hash e9abb5c958cc124ca4108f522fececdb
cb0430b6ad9229cf2179a201e15360e496f24491
8125fdfeff86def1e8543526af797cbb7eb4bd87a161da3f18968b3fd8a83e53
GET /theme_2023/dist/assets/Tooltip-298cb247.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; _ga_7DP7NV2LKF=GS2.1.s1747326667$o1$g0$t1747326667$j60$l0$h0; _ga=GA1.1.232187172.1747326668
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-40a7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsBPf7WoiFQlmGCgz5uyZynADjxlIJzJ3sPdXVt8iB27xbNWIo5f%2BVyqWOjLm79KIYvaHtEFY%2F7cPszYfp%2FFyIzKzddqLDijpe%2FmCENOZcEEWwqJcMD2%2F3y3tPk%2B4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061a6a0e1bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=686&min_rtt=416&rtt_var=89&sent=210&recv=99&lost=0&retrans=0&sent_bytes=224386&recv_bytes=3644&delivery_rate=30751615&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1861&x=0"
X-Firefox-Spdy: h2
GET d2ob6t3bgjo11t.cloudfront.net/?btbod=1158643
3.167.7.176200 OK 384 kB URL GET d2ob6t3bgjo11t.cloudfront.net/?btbod=1158643
IP 3.167.7.176:443
Requested by https://datanodes.to/download
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62
ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 384 kB (384393 bytes)
Hash d6fd53ee3333181b7ff84b531eaf867c
e5946989ddab459aa3f4462812d9fde7f416d220
0f6212f2f84622ce1abeaa4158561dc4f2cd0b1337d9cf854e2716c6b7a81231
GET /?btbod=1158643 HTTP/1.1
Host: d2ob6t3bgjo11t.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 126858
date: Thu, 15 May 2025 16:31:08 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: pdNp42J8rSCSSk_6R3m2j7MOmcs4Z8gjFVIfsx_6oAdlACGBITDyNQ==
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
142.250.178.99200 OK 7.8 kB URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 142.250.178.99:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 May 2025 21:38:40 GMT
expires: Thu, 14 May 2026 21:38:40 GMT
cache-control: public, max-age=31536000
age: 67947
last-modified: Wed, 23 Apr 2025 16:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js
104.26.14.76302 Found 8.5 kB URL GET datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 15 May 2025 16:31:07 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jn4eXJp%2FetKXiyyF9vmNV%2BpLjgl6%2BTRJDRRjRcxzvmrT2VHs8hqL8NfI9uoeCdLAU2T4W4xWQs%2BQR2qJ3CN9rambO3Y44oSOTxLm9gUn0bTE6gej4pijospwnyWnUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 940406181e821bfe-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=977&min_rtt=512&rtt_var=445&sent=153&recv=45&lost=0&retrans=0&sent_bytes=174199&recv_bytes=2310&delivery_rate=22984126&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=1479&x=0"
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55d1v9175474265za200&_p=1747326667197&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&cid=232187172.1747326668&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1747326667&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20The%20Last%20Part%20Update%20RUNE%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1705
216.239.32.36204 No Content 0 B URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55d1v9175474265za200&_p=1747326667197&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&cid=232187172.1747326668&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1747326667&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20The%20Last%20Part%20Update%20RUNE%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1705
IP 216.239.32.36:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55d1v9175474265za200&_p=1747326667197&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116025~103130498~103130500~103200001~103233427~103252644~103252646~103301114~103301116&cid=232187172.1747326668&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1747326667&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20The%20Last%20Part%20Update%20RUNE%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1705 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://datanodes.to
date: Thu, 15 May 2025 16:31:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.178.99200 OK 15 kB URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.178.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 May 2025 12:58:05 GMT
expires: Tue, 12 May 2026 12:58:05 GMT
cache-control: public, max-age=31536000
age: 271984
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET datanodes.to/30r5b7mxrkv2/The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar
104.26.14.76302 Found 83 kB URL User Request GET datanodes.to/30r5b7mxrkv2/The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar
IP 104.26.14.76:443
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /30r5b7mxrkv2/The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 15 May 2025 16:31:06 GMT
location: https://datanodes.to/download
cf-cache-status: BYPASS
set-cookie: file_code=30r5b7mxrkv2; domain=.datanodes.to; path=/; expires=Thu, 15-May-2025 17:31:06 GMT
lang=english; domain=.datanodes.to; path=/
file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; domain=.datanodes.to; path=/; expires=Thu, 15-May-2025 17:31:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PRX%2F7ZrWwr2pajgo%2BESrfOxPg5YcTtyMAC8WJSB6EcgmzWyF6UHZwpMed%2FTfwgRDqxorXUFkbl4cwWtAV909j%2BqFWtVcz08gtPhgdhm3t1UXhWPOnIxCBRtj%2FdRU7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404060f08dd1bfe-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=866&min_rtt=742&rtt_var=192&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3203&recv_bytes=1165&delivery_rate=5189964&cwnd=254&unsent_bytes=0&cid=367cdfd75c283ef2&ts=137&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
104.26.14.76200 OK 183 kB URL GET datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type JavaScript source, ASCII text, with very long lines (32531)
Size 183 kB (183021 bytes)
Hash 68168e1fcc3f0b89637287285c331e9b
2252e15424087258ef80a353512b685215e68335
df548d433ea12395b99a860e96667848bea70b8eeae6348959d3a1cee6fa57c4
GET /theme_2023/dist/assets/app-80bcdb82.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:06 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-2caed"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mv2Wjnc%2B%2BGxnxn1MIwGROeo6wtGDtUN71Fkeacq1si0faghfB%2FPDnj%2FrVutIr6fe8O0TbM8qhmCKSsYIf4okRnf7eS11FDhsHAMajntJqNYPlSrlw85Xzcaa8YY11A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061438b21bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=994&min_rtt=512&rtt_var=149&sent=94&recv=33&lost=0&retrans=0&sent_bytes=100276&recv_bytes=1929&delivery_rate=36826042&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=868&x=0"
X-Firefox-Spdy: h2
POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
142.250.74.68200 OK 0 B URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
IP 142.250.74.68:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1575
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Thu, 15 May 2025 16:31:11 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
142.250.74.68200 OK 0 B URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs
IP 142.250.74.68:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E
ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1575
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Thu, 15 May 2025 16:31:11 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET yeranydwould.org/SmpDZzhlVSAUBS4iBQluJBoONX4EAhdXags8FD1xHi8vNFp6AWUTUS5XclYNclx2UB46AydaCWwZNwZMPxl+Vh4jBCUIBWwcflYWeV5tVA5kXmUSBXtMNxdZLVdyQUg+Hi9aCX1edFQKfFx1Xwx+Ug
188.114.97.1204 No Content 0 B URL GET yeranydwould.org/SmpDZzhlVSAUBS4iBQluJBoONX4EAhdXags8FD1xHi8vNFp6AWUTUS5XclYNclx2UB46AydaCWwZNwZMPxl+Vh4jBCUIBWwcflYWeV5tVA5kXmUSBXtMNxdZLVdyQUg+Hi9aCX1edFQKfFx1Xwx+Ug
IP 188.114.97.1:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectyeranydwould.org
Fingerprint84:24:93:E8:36:D2:DE:96:C1:97:4F:68:3C:A1:0A:B8:26:10:2A:CF
ValidityTue, 22 Apr 2025 10:20:46 GMT - Mon, 21 Jul 2025 11:19:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SmpDZzhlVSAUBS4iBQluJBoONX4EAhdXags8FD1xHi8vNFp6AWUTUS5XclYNclx2UB46AydaCWwZNwZMPxl+Vh4jBCUIBWwcflYWeV5tVA5kXmUSBXtMNxdZLVdyQUg+Hi9aCX1edFQKfFx1Xwx+Ug HTTP/1.1
Host: yeranydwould.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 15 May 2025 16:31:08 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1N5QwvPTZyGZri4JEOJqzeMtWHRylHENRHGMHiyPm%2Bm33BmWmc5eYJv%2FuXGNPSZDDRRrfuqA707ydL95fxu1I5sdGQPFfItJAnTDx6FiXasethGl2nuVkcKL15Jepp%2BXomEi"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9404061f2eaf568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js
142.250.74.99200 OK 653 kB URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=hejwo8mhhq5p
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Size 653 kB (652777 bytes)
Hash e95468d04c58cf02c6dc7a2b5b8d0767
d50cb8a0f60256d410d216da72a80105d4ad6a6f
6798aa15947bc933cb2b22bb61cf88b0334caba9f0a34e99d42b31792753636e
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 277679
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 10:04:51 GMT
expires: Fri, 15 May 2026 10:04:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 23177
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET datanodes.to/download
104.26.14.76200 OK 83 kB IP 104.26.14.76:443
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (56938)
Hash e7f2214d9c9dfcd775b7adab4a819b1e
863315cf6ffdc2da0daed3ab5c35f3108539c2da
9d74e6e2367bbee13bea9ab68791b01f5ce553b08835e5d8bd69a147245d58f8
GET /download HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:06 GMT
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
set-cookie: affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd; domain=.datanodes.to; path=/; expires=Thu, 29-May-2025 16:31:06 GMT
expires: Wed, 14 May 2025 16:31:06 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6HZIfbPSZJ7hO0k%2BBjxnathaaUb1QE8Ds8s%2FHUgDEK4%2BeJ6hVjb1kLtNIQoPAmSiQt7pakmNGeZ0u2Y5t%2Bj3915sg0WhXcSlsJD%2Fi%2F4sk94vC1AlCGzkjT4fyQDk1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9404060fd9e21bfe-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=973&min_rtt=742&rtt_var=358&sent=10&recv=12&lost=0&retrans=0&sent_bytes=4011&recv_bytes=1310&delivery_rate=5189964&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=284&x=0"
X-Firefox-Spdy: h2
GET datanodes.to/images/logo.png?v=1
104.26.14.76200 OK 15 kB URL GET datanodes.to/images/logo.png?v=1
IP 104.26.14.76:443
Requested by https://datanodes.to/download
Certificate IssuerGoogle Trust Services
Subjectdatanodes.to
Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63
ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File type PNG image data, 364 x 230, 8-bit/color RGBA, non-interlaced
Hash c9338a5cbd74ee24aee2175a5ac9cfac
eb519e37c50d2dd8908d80a2dd203879f2a430c9
e73da34c3963cd34608bc4016fd1060cf58de21ef14321a153ec45bc004ff56e
GET /images/logo.png?v=1 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=30r5b7mxrkv2; lang=english; file_name=The.Last.of.Us.Part.I.Update.v1.1.4-RUNE.rar; affiliate=P6Qv1bFSj6gJ2fSUcUnMp%2FW47Oe8Or5MXSzb1BqAszvWTwcPD%2B62SgsvgGcGBrtAcXSY3s9pHzH5kTG4oZHl7rYM%2FXwWAmhd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 15 May 2025 16:31:06 GMT
content-type: image/png
content-length: 15350
last-modified: Tue, 16 Jan 2024 14:16:42 GMT
etag: "65a68fca-3bf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5516
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N7NmHS306hoqqtKGhhkH0YeuUicPAqN%2FSbR%2BXk7L9KvjDqQb5xzI0C30t0qKeoL4y9yDQ7ZrR65L1b9JCRtQ6X4W2jv6TRVOWUWBQxOEQMiDjkT%2FCVeklcNAhfJjHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9404061438af1bfe-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1069&min_rtt=512&rtt_var=301&sent=54&recv=27&lost=0&retrans=0&sent_bytes=49721&recv_bytes=1929&delivery_rate=14613961&cwnd=256&unsent_bytes=0&cid=367cdfd75c283ef2&ts=862&x=0"
X-Firefox-Spdy: h2