Report - xvs.1bendiigo-au.com/c/1wer?UIKXufJe9

Report Overview

Submitted URL
xvs.1bendiigo-au.com/c/1wer?UIKXufJe9
IP
95.161.131.182
ASN
#47158 IT LTD
Submitted
2022-10-12 08:28:47
Access
Website Title
Final URL
Tags
None
urlquery detections
Scam / Brand infringement

Detections

urlquery
4
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.9 kB	34.160.144.191
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	52.89.20.60
128.menkiteta.live	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	72 kB	49 kB	109.74.203.139
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	662 B	1.4 kB	142.250.74.3
jsontdsexit2.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	402 B	641 B	65.108.244.197
xvs.1bendiigo-au.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	513 B	95.161.131.182
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.35
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	7.1 kB	23.36.77.32
ajax.googleapis.com	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	382 B	32 kB	142.250.74.170
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	1.9 kB	104.18.20.226
ghfyhjgj.inoferia.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	457 B	1.2 kB	172.67.141.165
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	652 B	1.5 kB	23.36.76.226
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
genuine-prizes.life	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	91 kB	57.128.27.169
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	796 B	93.184.220.29
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	62 kB	34.120.237.76
cdn.jsdelivr.net	439	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	394 B	23 kB	151.101.85.229

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-12	medium	genuine-prizes.life/media/mainstream/frame.html	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1	87 kB	2023-03-08	2023-03-11
Pretty URL genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1 IP 57.128.27.169 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:11:25 Last Seen2023-03-11 20:59:57 Times Seen1 Hash 887ce440faaad1501652580498c8b8f8 d71f7b8c85452c69995d6e37431be6c2366bfe45 4fc4cca7c99333e34dca27dd5dc04cb534b6a8f5a389df366bbc0da8a48b6735 Loading...

	128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D	496 B	2023-03-08	2023-03-08
Pretty URL 128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:26:45 Last Seen2023-03-08 13:26:45 Times Seen1 Hash c39d361c8d36c36568e85dd1763f6011 849d9501decd2a7479a55fd486aa3b61f9ed5b16 428ebed8b95d06043b0a060b51502244cd1d743555e0f63185f0c93401555952 Loading...

	cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-05-08
Pretty URL cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js IP 151.101.85.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-05-08 15:24:53 Times Seen15737 Hash a454220fc07088bf1fdd19313b6bfd50 265a733cb7fbc481fd2510a659a85ad55c93c895 7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c Loading...

	128.menkiteta.live/media/mainstream/all/ab/2008_1.js	15 kB	2023-03-07	2024-02-11
Pretty URL 128.menkiteta.live/media/mainstream/all/ab/2008_1.js IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-02-11 18:13:53 Times Seen7399 Hash 70a301508a891eb3c9f0e7d43cbd2072 37b7e329763c1285514bac3d77808a1a3389b6da e86620b8e47101a2701a71369c8f40d6ac250beeea5a86b69fd407035b57b549 Loading...

	128.menkiteta.live/media/mainstream/sound.js	5.0 kB	2023-03-07	2024-02-24
Pretty URL 128.menkiteta.live/media/mainstream/sound.js IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-02-24 19:24:45 Times Seen7589 Hash 1f1fed792da20aa1e75213d3f1839a0d b5744653854dc322effae7e83ba3b99f8818dffc 32cde492155502743e1b7c5ec41ba974216be8c331db01e5cd933726443241df Loading...

	128.menkiteta.live/media/mainstream/all/ab/2008_3.js	7.5 kB	2023-03-07	2024-02-11
Pretty URL 128.menkiteta.live/media/mainstream/all/ab/2008_3.js IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-02-11 18:13:53 Times Seen6084 Hash f235f98748487db96795fd73ed48a46d 4cf6f3d733184af759d2f6d2251321df778accdd 5ee7e3f6c675569417eabed4df39057a60e056b0a5eb5abbecf0c1979780d684 Loading...

	128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D	159 B	2023-03-07	2024-05-08
Pretty URL 128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-05-08 15:16:45 Times Seen3860 Hash 9a1faa7af595fcc37df537d166e60db8 685f77872d79510459078c4874685ab2fa7134ad b22f15ea1331a585549a4f1663ad5767da13c94abf77d4a4785158ddabfbd92e Loading...

	genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1	162 B	2023-03-08	2023-03-08
Pretty URL genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1 IP 57.128.27.169 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:26:45 Last Seen2023-03-08 13:26:45 Times Seen1 Hash 4910d978f0e7c58c30bbf8783dee2745 56aece5789e97c976360a709eaa76f0a4875b6ee 031e3a775c79d047af0dbda2eaf2450de88ecb53143ce2458c29795ba7ad4f8b Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js	90 kB	2023-03-07	2024-05-08
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-08 16:59:00 Times Seen142678 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	128.menkiteta.live/media/mainstream/icon.js	6.6 kB	2023-03-07	2024-02-24
Pretty URL 128.menkiteta.live/media/mainstream/icon.js IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-02-24 19:24:45 Times Seen8630 Hash a8e36248f01478844f0c4db185e945a0 d822225c2e21cd5fd7910f825da1e646b21dc078 9195437b3d4ffd3d3652df03d4de4ff03c454386ec19a1777da588a2f83827c2 Loading...

	128.menkiteta.live/media/mainstream/u.js	25 kB	2023-03-07	2024-01-22
Pretty URL 128.menkiteta.live/media/mainstream/u.js IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-01-22 00:38:38 Times Seen6790 Hash e44aa4ca20702394c8ca04144c3e9e74 b3734a4cde021bb14d2d296c0ae5dfa8112376f6 e075018e9a06d85a147b1f0d79e8e777da51019b4f306076f8fbba751d42d566 Loading...

	128.menkiteta.live/media/mainstream/all/ab/no/2.js	416 B	2023-03-07	2024-03-13
Pretty URL 128.menkiteta.live/media/mainstream/all/ab/no/2.js IP 109.74.203.139 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-03-13 05:58:11 Times Seen7219 Hash 9075531370b86e49402928b23fc26c0e b88fc53cd5ef41285a5c1be4b1aecc1a54a7ce0e 31e764b82e550f1e27b814ac8047f8832da32e4a3d7045043f8de1e312112ca3 Loading...

HTTP Transactions (62)

URL IP Response Size

xvs.1bendiigo-au.com/c/1wer?UIKXufJe9

95.161.131.182

302 Found

232 B

URL HTTP/1.1
xvs.1bendiigo-au.com/c/1wer?UIKXufJe9
IP
95.161.131.182:0
ASN
#47158 IT LTD

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
232 B (232 bytes)
Hash
fad021c4b3122645f1288c534425f9a2
5cf28b9df6c69bc438cb5cd26e49d59ebb892720
814dea649c34b8e093c228a8f3157a8e42281de73a2715334b4a54ac5de3fc2f

HTTP Headers

GET /c/1wer?UIKXufJe9 HTTP/1.1
Host: xvs.1bendiigo-au.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Date: Wed, 12 Oct 2022 08:28:36 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Location: https://ghfyhjgj.inoferia.xyz/bKN9L91N?UIKXufJe9
Content-Length: 232
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

firefox.settings.services.mozilla.com/v1/

54.230.111.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
1aac651ec250c598683dd17ca2002c07
11595ac82e017f95190c2a36dc77323a3fedcbfc
93fa640d042452ae8455d026e30e3b4594c13d4be65f3552a4b5edae027c02f9

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Content-Length, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 12 Oct 2022 07:49:13 GMT
Expires: Wed, 12 Oct 2022 08:31:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SHAgqEd4pNDf0EgYt5yz172-8TNPKiENQWwPyvpx7ZIL--P0I5CtEQ==
Age: 2363

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e0602913f3d432ffbfaa654440972ee1
e5aaf31749e65875fd840091f9a3bba641de413d
5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5495AD212166703DCD1D17D7AA6FF4D1C40E73DFAD703D24F00F60F35BC7D56C"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10669
Expires: Wed, 12 Oct 2022 11:26:26 GMT
Date: Wed, 12 Oct 2022 08:28:37 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cf115053c2c98937c2d3c1bba367d815
dfcf225bde5123f0476e6b319823136fa77537f6
e5748cb4844096548cf4c2d8d5bee9e245035c4632ae1a59bfd3b2d99bd4cd9b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5748CB4844096548CF4C2D8D5BEE9E245035C4632AE1A59BFD3B2D99BD4CD9B"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5763
Expires: Wed, 12 Oct 2022 10:04:40 GMT
Date: Wed, 12 Oct 2022 08:28:37 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 0TTZuCVfKJONohFs5L46DyjJ/zyBfAVCVzx24bY4JnjQ43XJ2vl/EpmKbh9IV3c4mtvPJTQ+Q2piuIy16Ur3ow==
x-amz-request-id: FJNHBX27HYC67TQX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 12 Oct 2022 08:01:12 GMT
age: 1645
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.76.226

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
dcb68448b58f68926d67b95acf9d6954
f270569fccd5692bffa9298b1a01f1e9a855ee03
9ee9bdd36d63d11757228b9e3efb69aafaac14b0d3293da64aa05b5bc3dceef7

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "9EE9BDD36D63D11757228B9E3EFB69AAFAAC14B0D3293DA64AA05B5BC3DCEEF7"
Last-Modified: Mon, 10 Oct 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4268
Expires: Wed, 12 Oct 2022 09:39:45 GMT
Date: Wed, 12 Oct 2022 08:28:37 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 12 Oct 2022 08:28:37 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.76.226

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
dcb68448b58f68926d67b95acf9d6954
f270569fccd5692bffa9298b1a01f1e9a855ee03
9ee9bdd36d63d11757228b9e3efb69aafaac14b0d3293da64aa05b5bc3dceef7

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "9EE9BDD36D63D11757228B9E3EFB69AAFAAC14B0D3293DA64AA05B5BC3DCEEF7"
Last-Modified: Mon, 10 Oct 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4268
Expires: Wed, 12 Oct 2022 09:39:45 GMT
Date: Wed, 12 Oct 2022 08:28:37 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 12 Oct 2022 07:29:41 GMT
Expires: Wed, 12 Oct 2022 07:43:39 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: j7RoghlMq3z6nSh1CO8sA3XuUgedKzuFDIxmggduGE-zRJkxLPM-IQ==
Age: 3536

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
34c15fee665f03aab24038618bb2d9a7
6b90ea5a496581b83daf1764938d1db1a5a32bb4
93e99055eb4a94f808eed2fac338d6c480047c30a56498b2a65036a7d5bdea04

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6456
Cache-Control: max-age=91549
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 08:28:37 GMT
Etag: "6345241a-1d7"
Expires: Thu, 13 Oct 2022 09:54:26 GMT
Last-Modified: Tue, 11 Oct 2022 08:06:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9fbb3f12a650115e2677abe126ff692e
bab3ce957fc701508270c598e227e25dbc3d071b
dbe6290fdeeb7414a23f1925737c89dd6fb9fc045fea3c38dd89601e8d0e2ec8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBE6290FDEEB7414A23F1925737C89DD6FB9FC045FEA3C38DD89601E8D0E2EC8"
Last-Modified: Tue, 11 Oct 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21571
Expires: Wed, 12 Oct 2022 14:28:08 GMT
Date: Wed, 12 Oct 2022 08:28:37 GMT
Connection: keep-alive

push.services.mozilla.com/

52.89.20.60

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.89.20.60:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MGzPJclmG9BostbWFDnVwQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QVW52wcoC9MPQbLRuHbIqS4GqUo=

genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1

57.128.27.169

200 OK

90 kB

URL HTTP/1.1
genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1
IP
57.128.27.169:0
ASN
#0

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (62480), with CRLF line terminators
Size
90 kB (90142 bytes)
Hash
88ad38168d5ca854a95d3841c4ecbb37
6119259af21c28dd5e09dd17ae04951ffbef4223
d87f2264b3766b172d44d92021cca3c3bdd4cb986a9571efbb4e15352a7ffed8

HTTP Headers

GET /?u=6af80k9&o=u1x26yz&m=1 HTTP/1.1
Host: genuine-prizes.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:38 GMT
Content-Type: text/html
Content-Length: 90142
Connection: keep-alive
set-cookie: sid=t4~kgsru5dqjzq1minr0sirsbuw; path=/
sid=t4~kgsru5dqjzq1minr0sirsbuw; path=/
p1=https://menkiteta.live/nsefyfnw/; path=/
s1=dfezd6utc7yzpn24; path=/
cache-control: private, no-transform

genuine-prizes.life/media/mainstream/frame.html

57.128.27.169

200 OK

39 B

URL HTTP/1.1
genuine-prizes.life/media/mainstream/frame.html
IP
57.128.27.169:0
ASN
#0

File type
HTML document text\012- HTML document, ASCII text, with no line terminators
Size
39 B (39 bytes)
Hash
086707e4369f60afedcafb16050a7618
8216b0cc6876cbd44f01c158e7dff3833ceccd41
a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /media/mainstream/frame.html HTTP/1.1
Host: genuine-prizes.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1
Cookie: sid=t4~kgsru5dqjzq1minr0sirsbuw; p1=https://menkiteta.live/nsefyfnw/; s1=dfezd6utc7yzpn24
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:38 GMT
Content-Type: text/html
Content-Length: 39
Connection: keep-alive
Last-Modified: Thu, 20 May 2021 06:08:14 GMT
Vary: Accept-Encoding
ETag: "60a5fcce-27"
Cache-Control: no-transform
Accept-Ranges: bytes

genuine-prizes.life/favicon.ico

57.128.27.169

200 OK

0 B

URL HTTP/1.1
genuine-prizes.life/favicon.ico
IP
57.128.27.169:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: genuine-prizes.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1
Cookie: sid=t4~kgsru5dqjzq1minr0sirsbuw; p1=https://menkiteta.live/nsefyfnw/; s1=dfezd6utc7yzpn24
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:38 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
last-modified: Sat, 06 Jun 2020 22:52:46 GMT
accept-ranges: bytes
etag: "e2e33b32553cd61:0"
Cache-Control: no-transform

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10837
Expires: Wed, 12 Oct 2022 11:29:16 GMT
Date: Wed, 12 Oct 2022 08:28:39 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10837
Expires: Wed, 12 Oct 2022 11:29:16 GMT
Date: Wed, 12 Oct 2022 08:28:39 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10837
Expires: Wed, 12 Oct 2022 11:29:16 GMT
Date: Wed, 12 Oct 2022 08:28:39 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12284 bytes)
Hash
5a61ea2d6a9b25c5567339c60f503bc6
19dd911262d941074183edd995d59abc84a42cd5
0ff68c4572b0eda2ddce4ce76b39cd268dcf5182acdaacb0274c23e2c5f50b3d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12284
x-amzn-requestid: 7df5e0e3-155f-4cfd-b1e1-62310edf4516
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3B7JFbxIAMFxnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e37a-0882e1333f26304f1d89c3c9;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7WAk09ANiNHmH9U2PMQRQ8WjASq6GKpEw-zsLtg97Y-DedBaEumK5A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:59:07 GMT
age: 37772
etag: "19dd911262d941074183edd995d59abc84a42cd5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74c4905d-ef25-43db-8882-67009cd34f1a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.0 kB (3985 bytes)
Hash
eda06240feabfa1b019765fe963c2d9c
3bbdd5560213e9b49ab7c079c5f2549d68890720
cd3724bfc1355b419c46df1259bfa40b4b4517a81bd45a4392d34e22c14a3d6e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74c4905d-ef25-43db-8882-67009cd34f1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3985
x-amzn-requestid: 6da73a65-c346-4040-9a03-63d5d6845adf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z1Cr1HeVoAMFubg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634517e5-34af0c8d6dc8218963b7319c;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 07:14:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LAjdvQ29NhOnJjwigVkIjb7vx5tCPJPrHOOPmUD5Vh9N45WN4ZZXCg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 12 Oct 2022 07:45:22 GMT
age: 2597
etag: "3bbdd5560213e9b49ab7c079c5f2549d68890720"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c79c4ae45beb4f37d53cf29ff7bb57db
b4e0f4691d675ba1b8d1bc8434ed61e291d7e567
fcdb3d4ccc42df651589469840fa4f96806ab648a4b542017fcd359da104f4a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDB3D4CCC42DF651589469840FA4F96806AB648A4B542017FCD359DA104F4A1"
Last-Modified: Tue, 11 Oct 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14808
Expires: Wed, 12 Oct 2022 12:35:27 GMT
Date: Wed, 12 Oct 2022 08:28:39 GMT
Connection: keep-alive

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b429ef-0b4d-4ac1-a57e-0512cbe70108.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13724 bytes)
Hash
e885fe35564ed7fefe0fb0fda2b9ebe7
bf37aa53466c3764d205de17070753b3204d78e4
187a99359986ae3131d303c09baf25ffa0dcf1ca80e09c9bee56434bff6f07d1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b429ef-0b4d-4ac1-a57e-0512cbe70108.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13724
x-amzn-requestid: 3f358e0a-786b-48fc-9e45-bda97026e544
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3Ak_FbjoAMFfQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e152-134d2c6f4efafecb71df10e6;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:34:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C2z9SP8_BZ-lf9NPNR-24Tjtc98JRz54D4Lmeie9QmTKNIDCR9knNg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:48:15 GMT
age: 38424
etag: "bf37aa53466c3764d205de17070753b3204d78e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F829a81b7-8a2b-4381-a830-9c534e3312fe.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12187 bytes)
Hash
2b15495e3e13c06fd0d67523870405ed
3cb8b43735e86c93733affa10818c47693c80fce
f65edddef18295076f79a48e9a6c95d07ed244a2ae618cb4229b6c1bd434cd57

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F829a81b7-8a2b-4381-a830-9c534e3312fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12187
x-amzn-requestid: e0271885-6c76-4a8c-98a2-4df8ee86a688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZzuA_FmaoAMF3AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6344906c-6fe5dce86e61bd8027759559;Sampled=0
x-amzn-remapped-date: Mon, 10 Oct 2022 21:36:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ROEKJli245ZEsFkeeHB5X8rleZ5J_guNsrNe50nMZIQO-KFzJsk7Kw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 12 Oct 2022 04:00:27 GMT
age: 16092
etag: "3cb8b43735e86c93733affa10818c47693c80fce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50df13c8-d4e3-4d87-8794-332894dfce82.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.1 kB (7108 bytes)
Hash
f5d47115d404a4b49a15c5aa29f132c2
22a32b863ce79c6165cc90e998f1498bf9e74fd0
549725a62e4c15820c47249ae933120bbb091a55331be511b486307e33ec59c0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50df13c8-d4e3-4d87-8794-332894dfce82.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7108
x-amzn-requestid: 9f8e92e1-b64f-46b4-8a87-4d0e5c21bdaf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BzOEmzoAMFsoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e347-3ec5e4d50d2e14a17f88a64d;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:42:31 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 07WNuyF4EIA2AAZyB4kU669K49Jzqys2YvkfnzEb2aIn3Dq6K_CT2g==
via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:09:12 GMT
age: 37167
etag: "22a32b863ce79c6165cc90e998f1498bf9e74fd0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd963da4f-2224-4a6b-870c-5a00d4eeea55.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6391 bytes)
Hash
695b6d44466cc04c8a285331df94e54d
da11e5b4d9a5f744d41b868ab2b214d4eed5ae61
d4238fc77feff12cc6b2affe91b69cab59d54432d664b2bcd9fda46b229a46c3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd963da4f-2224-4a6b-870c-5a00d4eeea55.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6391
x-amzn-requestid: e102aa4b-a49b-410a-8e7d-a4b0c199527f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3B7fEIEoAMFi2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e37c-166ba51a39a11397074a990c;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _SU9U-oPxR9eP_v2NEhokLeiaS7pwa-2aoFNCDbD-59eSlCF73r29w==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:48:37 GMT
etag: "da11e5b4d9a5f744d41b868ab2b214d4eed5ae61"
content-type: image/jpeg
age: 38402
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D

109.74.203.139

200 OK

21 kB

URL HTTP/1.1
128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (841), with CRLF line terminators
Size
21 kB (21261 bytes)
Hash
b5eb69113f64ea425d4be59c0f9763a4
4b956a1ed506dc7ccee719c2c843887bddd1b8a4
8bcfdc44dfb1aefacdd26b61dfa5d1e36228285a62219057b0d66af9e6aa92a0

HTTP Headers

GET /nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://genuine-prizes.life/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:35 GMT
Content-Type: text/html
Content-Length: 21261
Connection: keep-alive
cache-control: private, no-transform

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 08:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js

151.101.85.229

200 OK

22 kB

URL HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
IP
151.101.85.229:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (65297)
Size
22 kB (22291 bytes)
Hash
b42d5b84d4ed3ea8e741d1f01f76eae5
d788cb207310f1be23336afa14e3dd481ab506a6
a9ac86748302a43acb528cfca2913be33dee6dde7c811cdc71ae60da67b717ae

HTTP Headers

GET /npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.3.1
x-jsd-version-type: version
etag: W/"1332b-JlpzPLf7xIH9JRCmWaha1VyTyJU"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 12 Oct 2022 08:28:39 GMT
age: 2531841
x-served-by: cache-fra19146-FRA, cache-bma1655-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22291
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

142.250.74.170

200 OK

31 kB

URL HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
142.250.74.170:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (65451)
Size
31 kB (31021 bytes)
Hash
903bc7a7e510f87aa5d0201eb59a0832
ac9aa4dd94cde1bcba9037e94087138b127e41fc
41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 09 Oct 2022 07:20:46 GMT
expires: Mon, 09 Oct 2023 07:20:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
age: 263273
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1

104.18.20.226

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
0766d347418f854fee7eb1d7b1c50254
82fdf8e4ca7e5ca497ec0b83c27b655dc697919f
092d6de05457a1d6798c1b0f6981c3bffc5b22c0b767daafd93a7ae83117a607

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 12 Oct 2022 08:28:39 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "3B662B507B3F5C208091A9A651BBE44F5729CF47"
Expires: Wed, 12 Oct 2022 19:00:00 GMT
Last-Modified: Wed, 12 Oct 2022 07:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 908
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 758e769b19e51c0a-OSL

128.menkiteta.live/media/mainstream/all/ab/no/2.js

109.74.203.139

200 OK

416 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/no/2.js
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
416 B (416 bytes)
Hash
9075531370b86e49402928b23fc26c0e
b88fc53cd5ef41285a5c1be4b1aecc1a54a7ce0e
31e764b82e550f1e27b814ac8047f8832da32e4a3d7045043f8de1e312112ca3

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /media/mainstream/all/ab/no/2.js HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: application/javascript
Content-Length: 416
Connection: keep-alive
Last-Modified: Mon, 19 Jul 2021 15:30:43 GMT
Vary: Accept-Encoding
ETag: "60f59aa3-1a0"
Cache-Control: no-transform
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 08:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

128.menkiteta.live/media/mainstream/sound.js

109.74.203.139

200 OK

2.8 kB

URL HTTP/1.1
128.menkiteta.live/media/mainstream/sound.js
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type
ASCII text, with very long lines (5014), with no line terminators
Size
2.8 kB (2752 bytes)
Hash
09c52e4905459a9bf11355cd322cd1f7
56a1e4688aef512a91c0ba5d029df4df3070cc79
56afbbc4576ced1c55d9557f54beda4452576a3079e43863dce8435f7ae0d9b3

HTTP Headers

GET /media/mainstream/sound.js HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 02 Jul 2021 23:05:00 GMT
Vary: Accept-Encoding
ETag: W/"60df9b9c-1396"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/like.png

109.74.203.139

200 OK

357 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/like.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type
PNG image data, 15 x 14, 8-bit colormap, non-interlaced\012- data
Size
357 B (357 bytes)
Hash
17586a0aeb3f7b2aa7fb15a9251fbcd4
6adffad1183c93bc0dc114c89c77365734ec0dd6
8bf8dc3a4b6f7e4fa2a6fa74495c212f37a301311980cbc758050993ed9c07e1

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /media/mainstream/all/ab/like.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Content-Length: 357
Connection: keep-alive
Last-Modified: Thu, 08 Jul 2021 14:13:27 GMT
Vary: Accept-Encoding
ETag: "60e70807-165"
Cache-Control: no-transform
Accept-Ranges: bytes

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
92da13a45f3c816a5a1d9511d7ad8e19
b24ca3b58ffe6ca1750073a56fba370bdb158103
d9128811fb8f5a7c6836f6cf3a68ea7e4066269b1ff3d5b32c90d39e6cce3853

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9128811FB8F5A7C6836F6CF3A68EA7E4066269B1FF3D5B32C90D39E6CCE3853"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17168
Expires: Wed, 12 Oct 2022 13:14:47 GMT
Date: Wed, 12 Oct 2022 08:28:39 GMT
Connection: keep-alive

128.menkiteta.live/media/mainstream/all/ab/fr3.jpg

109.74.203.139

200 OK

13 kB

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/fr3.jpg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size
13 kB (12653 bytes)
Hash
d4c4d54f35d743b00bad88891db426f1
f22b88d760c27c571cf498d90ecb475b6c7620eb
d5ca021f54ec41d520896cd2251071bb3e1c406c67d2fc5d14adf41703bf3077

HTTP Headers

GET /media/mainstream/all/ab/fr3.jpg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:26 GMT
Vary: Accept-Encoding
ETag: W/"60e70806-e11"
Content-Encoding: br
Cache-Control: no-transform

jsontdsexit2.com/ExtService.svc/getextparams

65.108.244.197

200 OK

448 B

URL HTTP/1.1
jsontdsexit2.com/ExtService.svc/getextparams
IP
65.108.244.197:0
ASN
#24940 Hetzner Online GmbH

File type
JSON data\012- , Unicode text, UTF-8 text, with very long lines (421), with no line terminators
Size
448 B (448 bytes)
Hash
8c8cbb84fd076e9a7b6f44765a65d2eb
fcaf73c66464aed0d6cf72902a3f0c75ef19e8ba
05efe3f900ac9e9c003c627edc64f0f98b1adf2c6bbad0bd7886f23589564484

HTTP Headers

GET /ExtService.svc/getextparams HTTP/1.1
Host: jsontdsexit2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://128.menkiteta.live
Connection: keep-alive
Referer: https://128.menkiteta.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:40 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 448
Connection: keep-alive
Access-Control-Allow-Origin: *

128.menkiteta.live/media/mainstream/all/ab/fr11.jpg

109.74.203.139

200 OK

3.6 kB

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/fr11.jpg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size
3.6 kB (3561 bytes)
Hash
13dd6246c34600214797cf2f7d8b5800
ade72040a0d9ce63ebffc1eeaf442ebb3f1e38c8
7aed55502dc5c2c7d2d6f92f156964e4c6f11fc5f656b51edab2e023b6047c46

HTTP Headers

GET /media/mainstream/all/ab/fr11.jpg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:25 GMT
Vary: Accept-Encoding
ETag: W/"60e70805-c55"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/flag-icon/flags/1x1/no.svg

109.74.203.139

200 OK

331 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/flag-icon/flags/1x1/no.svg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Size
331 B (331 bytes)
Hash
d748f0d9f64c0ca1a40a0f6ec6bbb746
a76adb95e9ea9a737c72e4640b8d49b9e28cbb38
bdfbd626e4e76d0dc506e10be7dd429e4c4da684986cbd45e5398f1e9e1f28cc

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /media/mainstream/flag-icon/flags/1x1/no.svg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/media/mainstream/flag-icon/css/flag-icon.css
Cookie: cookie1=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/svg+xml
Content-Length: 331
Connection: keep-alive
Last-Modified: Wed, 19 May 2021 13:17:22 GMT
Vary: Accept-Encoding
ETag: "60a50fe2-14b"
Cache-Control: no-transform
Accept-Ranges: bytes

128.menkiteta.live/favicon.ico

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/favicon.ico
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Cookie: cookie1=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
last-modified: Mon, 09 Aug 2021 05:32:32 GMT
accept-ranges: bytes
etag: "636c1f3df8cd71:0"
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/icon.js

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/icon.js
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/icon.js HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 02 Jul 2021 23:04:10 GMT
Vary: Accept-Encoding
ETag: W/"60df9b6a-19aa"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/box-iphone13pro.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/box-iphone13pro.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/box-iphone13pro.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Mon, 11 Oct 2021 16:58:52 GMT
Vary: Accept-Encoding
ETag: W/"61646d4c-d95"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/fr4.jpg

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/fr4.jpg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/fr4.jpg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Mon, 19 Jul 2021 16:41:49 GMT
Vary: Accept-Encoding
ETag: W/"60f5ab4d-10d3"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/x1.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/x1.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/x1.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Sun, 27 Jun 2021 23:25:02 GMT
Vary: Accept-Encoding
ETag: W/"60d908ce-251"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/2008_2.css

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/2008_2.css
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/2008_2.css HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: text/css
Connection: close
Last-Modified: Sun, 21 Aug 2022 15:13:38 GMT
Vary: Accept-Encoding
ETag: W/"63024ba2-1f21"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/2008_3.js

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/2008_3.js
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/2008_3.js HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Sun, 21 Aug 2022 11:54:17 GMT
Vary: Accept-Encoding
ETag: W/"63021ce9-1d39"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/fr5.jpg

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/fr5.jpg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/fr5.jpg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:26 GMT
Vary: Accept-Encoding
ETag: W/"60e70806-be3"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/fr1.jpg

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/fr1.jpg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/fr1.jpg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:25 GMT
Vary: Accept-Encoding
ETag: W/"60e70805-b7b"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/box_open.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/box_open.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/box_open.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:24 GMT
Vary: Accept-Encoding
ETag: W/"60e70804-a7d"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/top_red.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/top_red.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/top_red.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Sun, 27 Jun 2021 23:25:02 GMT
Vary: Accept-Encoding
ETag: W/"60d908ce-11d0"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/alert.mp3

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/alert.mp3
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/alert.mp3 HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Cookie: cookie1=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: audio/mpeg
Connection: close
Last-Modified: Wed, 19 May 2021 13:13:55 GMT
Vary: Accept-Encoding
ETag: W/"60a50f13-2262"
Content-Encoding: br
Cache-Control: no-transform

ghfyhjgj.inoferia.xyz/bKN9L91N?UIKXufJe9

172.67.141.165

302 Found

0 B

URL HTTP/2
ghfyhjgj.inoferia.xyz/bKN9L91N?UIKXufJe9
IP
172.67.141.165:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /bKN9L91N?UIKXufJe9 HTTP/1.1
Host: ghfyhjgj.inoferia.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
date: Wed, 12 Oct 2022 08:28:37 GMT
content-type: text/html; charset=UTF-8
location: https://genuine-prizes.life/?u=6af80k9&o=u1x26yz&m=1
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _subid=376l60j322dor;Expires=Saturday, 12-Nov-2022 08:28:37 GMT;Max-Age=2678400;Path=/
0252d=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEzNFwiOjE2NjU1NjMzMTd9LFwiY2FtcGFpZ25zXCI6e1wiMTZcIjoxNjY1NTYzMzE3fSxcInRpbWVcIjoxNjY1NTYzMzE3fSJ9.uoi49ekEJ4McDT8QuNxbcyHMUHEXKxAc4IrdTFjGH1k;Expires=Wednesday, 24-Jul-2075 16:57:14 GMT;Max-Age=1665649717;Path=/
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iv1Qs43GSIe3vqW4Zl6VTs6iSwlt5G13%2FWBu4%2Fs1U3HcrpM%2BaLN4Yr3peuKwLRqC30OhaFkQx%2B6Fx6ewYzJoIQGlh98tiwvw4%2BFRj1L8JFECu0hvhHOpQXcohfCCdRrFlUaqlSuLfMw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 758e768ce90bb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

128.menkiteta.live/media/mainstream/flag-icon/css/flag-icon.css

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/flag-icon/css/flag-icon.css
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/flag-icon/css/flag-icon.css HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: text/css
Connection: close
Last-Modified: Wed, 19 May 2021 13:17:10 GMT
Vary: Accept-Encoding
ETag: W/"60a50fd6-9b7e"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/2008.css

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/2008.css
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/2008.css HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: text/css
Connection: close
Last-Modified: Sun, 21 Aug 2022 12:32:12 GMT
Vary: Accept-Encoding
ETag: W/"630225cc-542a"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/iphone13pro.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/iphone13pro.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/iphone13pro.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Mon, 11 Oct 2021 16:58:52 GMT
Vary: Accept-Encoding
ETag: W/"61646d4c-7200"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/fr6.jpg

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/fr6.jpg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/fr6.jpg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:26 GMT
Vary: Accept-Encoding
ETag: W/"60e70806-afe"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/logo.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/logo.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/logo.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Wed, 25 Aug 2021 15:47:52 GMT
Vary: Accept-Encoding
ETag: W/"61266628-4914"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/2008_1.js

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/2008_1.js
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/2008_1.js HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Sun, 21 Aug 2022 11:54:17 GMT
Vary: Accept-Encoding
ETag: W/"63021ce9-39a7"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/box_closed.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/box_closed.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/box_closed.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:24 GMT
Vary: Accept-Encoding
ETag: W/"60e70804-16cc"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/muti_iphone13pro.png

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/muti_iphone13pro.png
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/muti_iphone13pro.png HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/png
Connection: close
Last-Modified: Mon, 11 Oct 2021 16:58:52 GMT
Vary: Accept-Encoding
ETag: W/"61646d4c-67e4"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/all/ab/fr2.jpg

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/all/ab/fr2.jpg
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/all/ab/fr2.jpg HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Thu, 08 Jul 2021 14:13:26 GMT
Vary: Accept-Encoding
ETag: W/"60e70806-aff"
Content-Encoding: br
Cache-Control: no-transform

128.menkiteta.live/media/mainstream/u.js

109.74.203.139

200 OK

0 B

URL HTTP/1.1
128.menkiteta.live/media/mainstream/u.js
IP
109.74.203.139:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /media/mainstream/u.js HTTP/1.1
Host: 128.menkiteta.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://128.menkiteta.live/nsefyfnw/?u=6af80k9&o=u1x26yz&m=1&f=1&sid=t4~kgsru5dqjzq1minr0sirsbuw&fp=oy05Dx34KoAnkRGLEJqBNnTogb45jtSe813Z%2Fck7T%2F8O4LJgctF3JR%2ByixwzVkmzqbpxMIOlCLXmB8UB1Pzt%2FCzTPRgLFN5J8jlGDFmXF4Wny0YJugu3m1LvVxlw5JCtzbOgk1xM6879BPR9pK3WZ3pJcjFjx%2FLHj%2F9cuvGpq7O1DZ9Nsh9Y%2FQ4O9e8wInzY2T%2FbHgwirUNJxAo29FEc3NolXdRvAxnOVdkQI2bhtzwJzWpTxKVZJaOKfsErQZM5AuNbJM74cwhb4%2BIg51JHyXiJXNBHSFZBA3I55LIraZUDknTta41iEAyMDkEnqusoftCaEJuDz3z3AO0Dow3srRLsMGjvs7j8VxM1EwjmO1HwfbWdXCHLhOfjg0nLk04HIqH8CG30vYdIuT4nEn21BaqSP60HKhvSupxRHGn3g6%2FU8kn7BgmAdDLSG5CWoVsGjgmyMdCbq4pmHothEnqp%2FtSgK4MeHwR4jIQc4XHRZwRoaZmzWF6zJseo8CqaA8%2BB9vCTaQ%2BoMomJJ9dksTdC6AcTaCiW8TpLsT%2Bbz6zKulHNv0N5DwBTxByx28EcDzWHJyMb%2F%2Ffwe3ZVEsmTv5K%2F%2BjXVgHSKLqPzTFkb1r1ZVRl1OHI59urNlZTOsAyhJLX0AET3DifnBYxMwRWd67UxhmJLgNa8Bj%2BgTISQPpbDiE2TxNn0h2YrvACGO3QmbTYACca2iG%2B1lEJhqQMzyMty5IZQzsJnhEfioQYDvrUD%2FzBc%2FcXWs93zdYuu03lFTA7SBlj9C3%2Bpy7jOB5pzTJWfxCeTsR18ybb4bsh9tx0CgtoOdwkpRDeUkHClomUFEO%2BHCfEzKnTLi9iKFIVnP%2FBXpFGPn%2BBzqBjiga%2BrGRNVh%2B5WdHtFDxBqllFCs55AoekCFdiw9GDs5S66KOawKLO9iTsmYcgeNX7h82MaW39Ymf9EVxWxGxTWGkofoSOMef%2FA%2FqzFoIeKodyBnDZDB2jlXVtmaRs%2BMHGxBAdCWsiUqBQF6OCAJa%2FCOzB%2BK7BagtH%2FC0UCywp%2Fu7P1uyD87kAbnjufmcdl191ljwRkF6B0poOyvxgBcD5Z4hsX8mgAHY0OiKWjuiMkTHXfPGRbLy%2F7MY7avjS9UOgZn3T%2Bvv0kS2hNq9jrlx%2FbOU94VaZGC%2BkU1wA9eIl8z3fGqp%2BMjZHv4IMdHL7zEWz0YKEukzg2NZD6YzXhObLeFk4REotGvSzO8Wv3cuPyEcgX6EE6pV3rNV%2FMcyStnOvcDIwkxrpiaRCxk2DFaTIR1B4%2Bcp%2FPFAiD6PHOOf44C07ZS4GdjZChawURKQUVuazOdRArRDgSrb0XuUtezmWMUbIpHaZ%2FtOHTCHu47its5BFC5Egh5t5hHq7fUHrY7E4Udl95R8xv2H%2BrFjVcdynNX3viscafXAQfk0%2FWSnZ2xFHXHisFOcOYsS0yZOWPMHpoZcdL%2BC8gUpafG9UjCdIcwNCh49NMVo7mBoekvK6pombiYsjLabgjhPcT4g9uPYw%2Fsv66jFCFVxudpHiM1JQ%2FsIHcdgln68heKukzN4VI3Q9vQ0%2B5dXb2xN6mvam%2BWic%2FiFqMOn66usFPTbThdDtdCL9xeqwuqx5fwD5SmMbIzJdkMVGDm3dVmBLcyI8YtdkGkA%2FPOej77eH8Z1npjTpxD0WWv2HHJWMufnxRk%2BpCvHrxaytarGMNTillYlAbBmQfML5finAzUP1%2F9WLvp0Xb2%2B2PsU%2FnYrfwJdwtwstzgVtxnyFmz6%2FI7niE8Z4zsE6HFZl1oKCXEgaYSme3y4eq97Eg7Bq0uBZJBV8Fpwuy3uiy%2FKgc5Cqe24B6O3x9%2FWUtdiPG13STmm5V2EzA%2B21pbHYKnddNaob%2FDKxs9aXIpYBouiRmY5BLA0EwBJlUJbEWh%2BlGTnxRmtRsxi3ecqNNttJBL6H4E%2BX4qbVGltbjcWQTwSMUcc8gKQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 12 Oct 2022 08:28:36 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 15 Jul 2022 22:33:08 GMT
Vary: Accept-Encoding
ETag: W/"62d1eb24-6259"
Content-Encoding: br
Cache-Control: no-transform

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations