| dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip | 45.82.68.79 | 200 OK | 2.2 kB |
URL User Request GET HTTP/1.1dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip IP45.82.68.79:443
CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (369), with CRLF line terminators Hash165a679901b2b330e8cbc16d52208fa8 2fa0adcec1c6fb9f46d8e60944d4572a9a9081b9 779a9a1adba7c6591977e51b06855617eb014476d7b87185add862855e040a6f
GET /smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| dtsoft.site/t/2/css/style.css?v=1 | 45.82.68.79 | 200 OK | 2.6 kB |
URL GET HTTP/1.1dtsoft.site/t/2/css/style.css?v=1 IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
Hash9e50160d7829850cdb121d2c3f111dc2 681c24f36b72158cda6f786351e6114f4b508a45 811d7c2abf5044276a87afc961f02c4344603aaf3cdc664140d608e10992f1cf
GET /t/2/css/style.css?v=1 HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:25 GMT
Content-Type: text/css
Last-Modified: Sat, 18 Feb 2023 22:05:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"63f14bc0-26e9"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
|
|
| dtsoft.site/t/2/js/script.js?v=4 | 45.82.68.79 | 200 OK | 816 B |
URL GET HTTP/1.1dtsoft.site/t/2/js/script.js?v=4 IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash25faef5a308adc8cdf8ec952d55fa5b4 84ad5ed0f654c3f49093df9e620dc63f25cdc0d3 1f7cbca72a6839edfba2c67ef9164346f150a67c2e19a0df39cd095d2f42e5ad
GET /t/2/js/script.js?v=4 HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:25 GMT
Content-Type: application/javascript
Last-Modified: Mon, 04 Mar 2024 21:42:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"65e64037-8f8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
|
|
| dtsoft.site/t/2/img/list-sign.png | 45.82.68.79 | 200 OK | 557 B |
URL GET HTTP/1.1dtsoft.site/t/2/img/list-sign.png IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typePNG image data, 16 x 12, 8-bit/color RGBA, non-interlaced Hash10863836b5500dffd98229d0a1786021 6d38a546498cb17047fcf1463962bece2204596f 4f6e1fcdc5168393db639a8f7542eaf6fc49a4fd7cb56adc8b8a6699e0119568
GET /t/2/img/list-sign.png HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/t/2/css/style.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:25 GMT
Content-Type: image/png
Content-Length: 557
Last-Modified: Sat, 18 Feb 2023 22:05:53 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "63f14bc1-22d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| dtsoft.site/t/2/img/download.png | 45.82.68.79 | 200 OK | 2.4 kB |
URL GET HTTP/1.1dtsoft.site/t/2/img/download.png IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typePNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced Hash95900d417fe5c00242dcd0d89013d6d2 804b0191e1a84b52e1d44c2d1bb0c1d164db3b87 0e733df09c2adeffae9dee8e38a5f9dca55f4aeb4e15bce6e9ed45d2cd7293e0
GET /t/2/img/download.png HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/t/2/css/style.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:25 GMT
Content-Type: image/png
Content-Length: 2381
Last-Modified: Sat, 18 Feb 2023 22:05:53 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "63f14bc1-94d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| dtsoft.site/t/2/img/arrow.png | 45.82.68.79 | 200 OK | 1.6 kB |
URL GET HTTP/1.1dtsoft.site/t/2/img/arrow.png IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typePNG image data, 37 x 63, 8-bit/color RGBA, non-interlaced Hash67ef5ef312a804b6885ddd7c701dc146 a87b065c7453e4d4467ad24f1fbbd4c18d92059a 0609fc6fbc2093fb074c7b37bb89ea57d8b92955ed2f24daa8432e8636f64c74
GET /t/2/img/arrow.png HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/t/2/css/style.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:26 GMT
Content-Type: image/png
Content-Length: 1619
Last-Modified: Sat, 18 Feb 2023 22:05:52 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "63f14bc0-653"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| dtsoft.site/t/2/img/save.png | 45.82.68.79 | 200 OK | 1.3 kB |
URL GET HTTP/1.1dtsoft.site/t/2/img/save.png IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typePNG image data, 80 x 83, 8-bit/color RGBA, non-interlaced Hash95754f5a8a8fedf7e75495bedef52914 ed543d4955fd096d3ad0b0ba7adb51c6ae1771df f7670c65f9cca90a4063e218fb45c1c32bbc2b54018534b84c8fe9be21e84b46
GET /t/2/img/save.png HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/t/2/css/style.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:26 GMT
Content-Type: image/png
Content-Length: 1326
Last-Modified: Sat, 18 Feb 2023 22:05:54 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "63f14bc2-52e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| dtsoft.site/t/2/img/rocket.png | 45.82.68.79 | 200 OK | 2.1 kB |
URL GET HTTP/1.1dtsoft.site/t/2/img/rocket.png IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typePNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced Hash270540d772593e92f9738eb52a048f40 d39c80b794126ba2f081386ea350198b5de676d6 c735dc410cfa654b45c479ccc8dbecf37532af47872252f6f6bea57ceb733a4b
GET /t/2/img/rocket.png HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/t/2/css/style.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:26 GMT
Content-Type: image/png
Content-Length: 2129
Last-Modified: Sat, 18 Feb 2023 22:05:54 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "63f14bc2-851"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| dtsoft.site/t/2/img/download-arrow.gif | 45.82.68.79 | 200 OK | 3.9 kB |
URL GET HTTP/1.1dtsoft.site/t/2/img/download-arrow.gif IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typeGIF image data, version 89a, 152 x 156 Hashac86ad94e703306211ff941b093a34b5 4c5898e3c8b7408edd7c4ddf1d2687208a87a96e fedebe44d1f01acaa634b760299ed27f8ef31e181a49780183927d731353cb65
GET /t/2/img/download-arrow.gif HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/t/2/css/style.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:26 GMT
Content-Type: image/gif
Content-Length: 3894
Last-Modified: Sat, 18 Feb 2023 22:05:53 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "63f14bc1-f36"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| translate.google.com/translate_a/element.js?cb=googleTranslateElementInit | 216.58.211.14 | 200 OK | 31 kB |
URL GET HTTP/2translate.google.com/translate_a/element.js?cb=googleTranslateElementInit IP216.58.211.14:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typegzip compressed data, max compression Hashe2f9075df9b15fa795f4370de3837867 b5d29acf0b2ade38f4abe5137778e79a3a6bcfdd b25de77d940dd563a50f64de4d6c65f37314b3c10a382e8a6112cad439dc92ce
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 19:43:25 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,400i&subset=cyrillic | 142.250.74.106 | 200 OK | 1.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,400i&subset=cyrillic IP142.250.74.106:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashc876ced2d8e252a71e404a1dd6809455 9c43a575eaf5085000358aed8194eaf0abfabcec c62de5c9dd0918d84be7d6c2557ba08b4a21f843948681c18511e21852363119
GET /css?family=Roboto:300,400,400i&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 19:43:25 GMT
date: Tue, 07 May 2024 19:43:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15740, version 1.0 Hashb9c29351c46f3e8c8631c4002457f48a e57e59c5780995ff2937ab2b511a769212974a87 f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dtsoft.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:32:46 GMT
expires: Fri, 02 May 2025 02:32:46 GMT
cache-control: public, max-age=31536000
age: 493840
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dtsoft.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 296089
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=BgM/d=0/rs=AN8SPfq0d33yBxzMYYqNCamwNK0h9W1I4w/m=el_main_css | 142.250.74.35 | 200 OK | 4.0 kB |
URL GET HTTP/2www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=BgM/d=0/rs=AN8SPfq0d33yBxzMYYqNCamwNK0h9W1I4w/m=el_main_css IP142.250.74.35:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeASCII text, with very long lines (20367), with no line terminators Hash72d3a735ccca1027f6b3afba2c93e3a7 67f8eff8d17334c59c28fc1753bf451527c7490d c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=BgM/d=0/rs=AN8SPfq0d33yBxzMYYqNCamwNK0h9W1I4w/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 19:04:03 GMT
expires: Tue, 06 May 2025 19:04:03 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 88763
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dtsoft.site/img/360ts_favicon.png | 45.82.68.79 | 200 OK | 17 kB |
URL GET HTTP/1.1dtsoft.site/img/360ts_favicon.png IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash67f8aa85e636e93ad87ea8b9cff919f7 d41417dcb5acf5e66c05510882e1b858843521cc fd35eb36e1a41c8bc87dbbbdf80ca2c0e2e5fbbab245c3a0492d0dbd55b9e732
GET /img/360ts_favicon.png HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip
Cookie: googtrans=/ru/en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:26 GMT
Content-Type: image/png
Content-Length: 17182
Last-Modified: Fri, 11 Aug 2023 08:39:21 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "64d5f3b9-431e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.tlVaMKdtlm8.O/am=ABA/d=1/exm=el_conf/ed=1/rs=AN8SPfodhSEIn_SeJc-BRVOcbmQF4EFWgg/m=el_main | 216.58.207.202 | 200 OK | 73 kB |
URL GET HTTP/2translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.tlVaMKdtlm8.O/am=ABA/d=1/exm=el_conf/ed=1/rs=AN8SPfodhSEIn_SeJc-BRVOcbmQF4EFWgg/m=el_main IP216.58.207.202:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (2297) Hash9b289af026f3e548d1d06033fa868b46 7916969abb1e3aa9e953f4d7e7cb8ca1380f98f7 dc5d2a255869ad274247f1bb8c353794f470a1fca09d9f8c98968178c5b8a717
GET /_/translate_http/_/js/k=translate_http.tr.no.tlVaMKdtlm8.O/am=ABA/d=1/exm=el_conf/ed=1/rs=AN8SPfodhSEIn_SeJc-BRVOcbmQF4EFWgg/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 72600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 18:16:21 GMT
expires: Tue, 06 May 2025 18:16:21 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 04 May 2024 07:10:07 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 91625
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg | 216.58.207.227 | 200 OK | 3.3 kB |
URL GET HTTP/3fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg IP216.58.207.227:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeSVG Scalable Vector Graphics image Hash2bd5c073a88b83ed74db88282a56ddfb d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650 ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 13:00:35 GMT
expires: Tue, 06 May 2025 13:00:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 110571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/branding/product/2x/translate_24dp.png | 142.250.74.35 | 200 OK | 1.8 kB |
URL GET HTTP/3www.gstatic.com/images/branding/product/2x/translate_24dp.png IP142.250.74.35:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashc69c796362406f9e11c7f4bf5bb628da e489ce95ab56208090868882113d7416abf46775 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=BgM/d=0/rs=AN8SPfq0d33yBxzMYYqNCamwNK0h9W1I4w/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 13:13:48 GMT
expires: Wed, 07 May 2025 13:13:48 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 23378
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback | 142.250.74.106 | | 1.4 kB |
URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback IP142.250.74.106:0
Hasha3eefe14b1b4698460d992bd1673a26b a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4 87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 07 May 2024 19:43:26 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=CUUTUvrfCkGrY0SDWo5BYxTF2RCoSKpAgOK_AO5o-ZqDhiOa3NLW3orxEM_wqVF7H_XGptiKdRPVgiL_i-hwWCFS18mywTmsPZnBl5A5lZDdjmKEptJAaDV5SD0DZvU7MSpMavAcyU2wLqRpZYpiBgeUO0JJ3lWpF9NLGJtTaJA; expires=Wed, 06-Nov-2024 19:43:26 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
expires: Tue, 07 May 2024 19:43:26 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dtsoft.site/360ts/360TS_Setup_Mini_WW.ADBcash.CPI202311S19_6.6.0.1065.exe | 45.82.68.79 | 200 OK | 1.5 MB |
URL GET HTTP/1.1dtsoft.site/360ts/360TS_Setup_Mini_WW.ADBcash.CPI202311S19_6.6.0.1065.exe IP45.82.68.79:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerLet's Encrypt Subjectdtsoft.site Fingerprint1C:67:0A:12:EE:E7:65:C8:BB:C1:01:82:B9:86:65:A3:E9:E0:C2:81 ValiditySat, 06 Apr 2024 21:30:35 GMT - Fri, 05 Jul 2024 21:30:34 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 4 sections Size1.5 MB (1488104 bytes) Hashc1a2839277487b16f3a80b52f1efb39e 689e75b411a530a28597ecea9a6283700576ec56 2086255aa9dd46e1ce72441abad47ea9c845a010ebc92cd6cb4414c37d5b20d7
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /360ts/360TS_Setup_Mini_WW.ADBcash.CPI202311S19_6.6.0.1065.exe HTTP/1.1
Host: dtsoft.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip
Cookie: googtrans=/ru/en-US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:43:27 GMT
Content-Type: application/octet-stream
Content-Length: 1488104
Last-Modified: Thu, 30 Nov 2023 11:14:57 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "65686eb1-16b4e8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 | 216.58.207.227 | 200 OK | 9.6 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 IP216.58.207.227:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 9628, version 1.0 Hashd9ac47c7e500fb7083b8d595eaf6fe12 112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933 495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dtsoft.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 118150
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 216.58.207.202 | 200 OK | 0 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP216.58.207.202:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://dtsoft.site/
Origin: https://dtsoft.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://dtsoft.site
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 07 May 2024 19:43:36 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 216.58.207.202 | 200 OK | 131 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP216.58.207.202:443
Requested byhttps://dtsoft.site/smart/MTA0fDkw?uv=2&land=1&auto=1&time=20&pack2=1&cdfu=https://dtsoft.site/opera/installer.exe&link=https://clickermann.ru/wp-content/uploads/cm413_32.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dtsoft.site/
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1185
Origin: https://dtsoft.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://dtsoft.site
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 07 May 2024 19:43:36 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| clickermann.ru/wp-content/uploads/cm413_32.zip | 45.130.41.88 | | 2.0 MB |
URL User Request GET clickermann.ru/wp-content/uploads/cm413_32.zip IP45.130.41.88:0
CertificateIssuerLet's Encrypt Subjectclickermann.ru Fingerprint55:70:16:29:F9:42:2A:06:DE:A2:8B:8E:D4:E5:56:B7:95:94:15:47 ValidityTue, 23 Apr 2024 06:34:18 GMT - Mon, 22 Jul 2024 06:34:17 GMT
File typeZip archive data, at least v1.0 to extract, compression method=store Size2.0 MB (1986406 bytes) Hash63d865f82483a86b6337851c24db055b edbea534e4f763bc06eb2cd352c1bea565874504 adadb1a6fec9dabbf75d4d7812820d7b98b1f3bf7b400e3ee7b34ab26db9b216
GET /wp-content/uploads/cm413_32.zip HTTP/1.1
Host: clickermann.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dtsoft.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Tue, 07 May 2024 19:43:47 GMT
content-type: application/zip
content-length: 1986406
last-modified: Sun, 22 Mar 2020 08:15:07 GMT
etag: "5e771e8b-1e4f66"
expires: Thu, 06 Jun 2024 19:43:47 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|