Report - takelipin.xyz/mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB

Report Overview

Submitted URL
takelipin.xyz/mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
IP
172.67.221.196
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-05 13:03:30
Access
public
Website Title
Walmart
Final URL
takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012#
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
takelipin.xyz	unknown	unknown	No data	No data	8.8 kB	490 kB	104.21.78.128
phoashiw.net	unknown	2023-12-26	2023-12-26	2024-02-26	1.0 kB	38 kB	139.45.197.250
jouteetu.net	260109	2021-07-08	2021-07-15	2024-05-04	1.3 kB	1.9 kB	139.45.197.251
amunfezanttor.com	unknown	2023-03-31	2023-03-31	2024-05-03	1.0 kB	1.1 kB	139.45.197.250

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	phoashiw.net	Sinkholed
2024-05-05	medium	amunfezanttor.com	Sinkholed
2024-05-05	medium	amunfezanttor.com	Sinkholed
2024-05-05	medium	phoashiw.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	unknown	54 B	2023-04-10	2024-05-05
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 16:38:09 Last Seen2024-05-05 15:03:36 Times Seen511 Hash 28cc0bcb4a54d1daa123e74bd48af35f 2d9994621a9efc8fa24665295daab507b8161588 e419a553bed0affa01aac0ae0f89ee8a515f6ef2c96d75e3842d6a7f00f21c53 Loading...

	takelipin.xyz/mgwemzpad/cf9db0aa88167b8d2219bcde10757d78.static.js	88 kB	2023-03-07	2024-05-18
Pretty URL takelipin.xyz/mgwemzpad/cf9db0aa88167b8d2219bcde10757d78.static.js IP 104.21.78.128 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-18 23:44:29 Times Seen98974 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	unknown	110 B	2024-05-05	2024-05-05
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 15:03:36 Last Seen2024-05-05 15:03:36 Times Seen1 Hash 26bb9b96da9ac53038a8f764c704e9b9 e418e1ba792ac7e0f01e766cc2acfd06732a7516 4163a8fbc254f9d2ad9e760164e37e94167b27333fc7ddd3d810bb63db0e85d8 Loading...

	unknown	549 B	2024-05-05	2024-05-05
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 15:03:36 Last Seen2024-05-05 15:03:36 Times Seen1 Hash c4c75e2d15792cb406feffcd0c8e05bb 3e49fa37001ac8d69ae69b72a85f695c081d075d 8af73b1737bb894ab53f294171564b4502486618c1df3423a562e26bc0e7aa23 Loading...

	phoashiw.net/pfe/current/micro.tag.min.js?z=7417207&sw=/sw-check-permissions-9372d.js	37 kB	2024-04-25	2024-05-15
Pretty URL phoashiw.net/pfe/current/micro.tag.min.js?z=7417207&sw=/sw-check-permissions-9372d.js IP 139.45.197.250 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 13:01:48 Last Seen2024-05-15 20:42:51 Times Seen2522 Hash 32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de Loading...

	unknown	49 B	2023-04-11	2024-05-17
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 21:30:12 Last Seen2024-05-17 17:24:10 Times Seen405 Hash 22f5f2a0f440f9be5a552b8e9723410d c00a079a183ddbba6fef4bfc0941a4b67fa93dbc 65a4aae08beef1e5bf2d3e039d2902ab03f33ae2d2b66865d9a6db1d64150789 Loading...

	takelipin.xyz/mgwemzpad/630ecda0529b7e4c2ee389887a9a10aa.static.js	3.1 kB	2023-03-07	2024-05-17
Pretty URL takelipin.xyz/mgwemzpad/630ecda0529b7e4c2ee389887a9a10aa.static.js IP 104.21.78.128 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:40:21 Last Seen2024-05-17 06:31:20 Times Seen588 Hash 03d61bebb9362e3571c134d17e88261e c966e468ebbc5ac203bb35ea7b3a5cc586768b37 d25d6be4101c96b081881ae7f929b86cfc535abfadfdd3f62ebd71c17f76afdd Loading...

	unknown	361 B	2024-05-05	2024-05-05
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 15:03:36 Last Seen2024-05-05 15:03:36 Times Seen1 Hash e81cadd29c49cbbf3204130359f3fe15 0eb0c0cba6d144e087a5a6d14e20cb1808c0742f d0309822db4f4ee83beeb04d3117ca5f9b0e6281f72aee0d745b153118eac5d0 Loading...

	unknown	482 B	2024-05-05	2024-05-05
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 15:03:36 Last Seen2024-05-05 15:03:36 Times Seen1 Hash 48a8d18abe505b7311e490acb178c054 215e7a5da7bb828e164f50ce91f181bc14eb0619 40ccc6300ce4d0c1863b89edbf49e8827ecdb2d844b49dcf7148840422d214b8 Loading...

	takelipin.xyz/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	12 kB	2023-03-07	2024-05-18
Pretty URL takelipin.xyz/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP 104.21.78.128 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-05-18 23:29:36 Times Seen44392 Hash 88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142 Loading...

		Size	First Seen	Last Seen
	#1 Eval - bb446d81ec566b5e0f602d123f1bcd42	80 B	2024-05-05	2024-05-05
Pretty Observations First Seen2024-05-05 15:03:36 Last Seen2024-05-05 15:03:36 Times Seen1 Hash bb446d81ec566b5e0f602d123f1bcd42 266133d26c31dc12873f0acb51531a086ea70469 a983578534ec5bd265d229f3fa07cf05ff9335308fc5f7fd217fcdfefba406a2 Loading...

HTTP Transactions (21)

URL IP Response Size

takelipin.xyz/mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012

104.21.78.128

0 B

URL
takelipin.xyz/mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
IP
104.21.78.128:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012 HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 308 Permanent Redirect
date: Sun, 05 May 2024 13:03:04 GMT
content-length: 0
location: /mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Df5qLTjEgZmANXksxGTZ7e4hRx7wIawKCAJyVj1kGnsQYyJpOB4fl41z2uk7O5hU67y8mRl6CiOC6c%2BIqA0PRX2f5%2BYQrLQYf4oH6hfA7KHmAC73es7dQLhR5z9tXtMk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87f0edb46a180b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

takelipin.xyz/mgwemzpad/265da548e197cba99d3bf78b9213c512.static.png

104.21.78.128

200 OK

5.6 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/265da548e197cba99d3bf78b9213c512.static.png
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
PNG image data, 276 x 301, 8-bit colormap, non-interlaced
Size
5.6 kB (5586 bytes)
Hash
66271b99acf174bf87d903ffac88c5f5
69e67eb0440ff320c8603071207b43a95e90c2bb
a2f084594e048fe1bf77c215f4c9447bb355584eb749dc8a5841a0c250ca9172

HTTP Headers

GET /mgwemzpad/265da548e197cba99d3bf78b9213c512.static.png HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:04 GMT
content-type: image/png
content-length: 5586
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "84225356887b29f14dc2bfe695304c4b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=08tbPuGllkmIl6ncLr8d0Oozd%2F0FzhpOjn73IsTBCSPqik2wLGcYr9ClovgwS8br6fhMwngT%2BMFUJO%2Br%2FEZ%2B2RxZUCEcjLSROU2%2BrMztVlZiqBUrM%2F5pKoDM8yEDrl2t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 87f0edb73e77b4f1-OSL
alt-svc: h3=":443"; ma=86400

takelipin.xyz/mgwemzpad/842e1399567c4538084da368204becbd.static.png

104.21.78.128

200 OK

106 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/842e1399567c4538084da368204becbd.static.png
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
PNG image data, 502 x 502, 8-bit/color RGBA, non-interlaced
Size
106 kB (105669 bytes)
Hash
e95a7fa2f35fb57f79da2b064c580834
48127e7c3b8024ba4a286485933a9813d4fb36e0
9ddb29d2aa21d1b7f4f2425c3a52e10218e8cec185a8ee22acfe475ed05d6288

HTTP Headers

GET /mgwemzpad/842e1399567c4538084da368204becbd.static.png HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:04 GMT
content-type: image/png
content-length: 105669
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "0e3a15c376441cfabf44e7e677be32c8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R0H9vP0fhxyzPd7HKzz%2F1zHqz%2Bh3vMX9Ru4hCIhQ5CQ6y9Z3hk4y53Z5rter2oXxQGJwTinSMmz3%2BIznENtdR%2FrKfGRgYcDeuAXsyYVLlhilTiABjC1fIIYIv%2FJG7yqD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 87f0edb73e74b4f1-OSL
alt-svc: h3=":443"; ma=86400

takelipin.xyz/mgwemzpad/173d7730df022d8bf5fcfa06d94c07fe.static.png

104.21.78.128

200 OK

4.1 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/173d7730df022d8bf5fcfa06d94c07fe.static.png
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
PNG image data, 531 x 531, 8-bit colormap, non-interlaced
Size
4.1 kB (4106 bytes)
Hash
61e96f37c5aba413bbd7c26543557eb3
3d85fe67cbb38bc11e65f1ffa5b8e5c7e6aa1bbb
3159983c76cc2b5499d241506504e9554bd13cc6f8b4ec8e26b2ce6b0d704d66

HTTP Headers

GET /mgwemzpad/173d7730df022d8bf5fcfa06d94c07fe.static.png HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:04 GMT
content-type: image/png
content-length: 4106
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "87b4b775f10daf6a032a41020308d848"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OXauLRSJgIKWUDThUIaIKm9SrcVpjq1yP%2FrPAeD6c2qlr8EXxzMvt183ms%2FBjEc79sC2CKT77NA6q9KjTsmUsNhXrv%2FozCsnAenJLQEliJn3W8%2FF5OZYyC8ILetV16cK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 87f0edb73e72b4f1-OSL
alt-svc: h3=":443"; ma=86400

takelipin.xyz/mgwemzpad/8a3c7a902b8c4adf8a55cec0569ca06d.static.png

104.21.78.128

200 OK

169 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/8a3c7a902b8c4adf8a55cec0569ca06d.static.png
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
PNG image data, 533 x 363, 8-bit/color RGBA, non-interlaced
Size
169 kB (168989 bytes)
Hash
634f59e83aae6df6c034fa4a71118208
0984797c9b6a2a293d5f17a3acfae8eba895ca9f
93c9a2295b79f61da457d20ac666ae2de87f24291d860b8efef5f7263f6e7c68

HTTP Headers

GET /mgwemzpad/8a3c7a902b8c4adf8a55cec0569ca06d.static.png HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:04 GMT
content-type: image/png
content-length: 168989
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "6b78d9323de4a6aa0c662dfbe75eb4bb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DCVlO6sCVEZVmlLmAzs6BjVrFDGkAYllrHlBTTfu6g6BnS3YtHBSlgxBEKphWElt%2FC8UfVgtGo%2B%2FMto2Pky5o0CziodssmhDZt9tDLag8mDAhfRdbi8YdpYrrFPuH%2F2u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 87f0edb73e79b4f1-OSL
alt-svc: h3=":443"; ma=86400

takelipin.xyz/mgwemzpad/630ecda0529b7e4c2ee389887a9a10aa.static.js

104.21.78.128

200 OK

4.9 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/630ecda0529b7e4c2ee389887a9a10aa.static.js
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
JavaScript source, ASCII text
Size
4.9 kB (4865 bytes)
Hash
03d61bebb9362e3571c134d17e88261e
c966e468ebbc5ac203bb35ea7b3a5cc586768b37
d25d6be4101c96b081881ae7f929b86cfc535abfadfdd3f62ebd71c17f76afdd

HTTP Headers

GET /mgwemzpad/630ecda0529b7e4c2ee389887a9a10aa.static.js HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"e9f487001524fb22279b5a7a3256185d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6K2epkvLvjjuxmuwFkdZOw7%2BOcRiWTzns06G60GQE75cdrZMNZlt2E%2FNHWM2nebZy0TpWkfU0Pt5NTilkbYgvp%2Bd5mPxafgooLOEAQho22Qb%2FjgHTs2luYnHzPoDVOLJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 87f0edb84fb5b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

phoashiw.net/zone?&pub=0&zone_id=7417207&is_mobile=false&domain=takelipin.xyz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=7bc70f04-f5e5-4603-a910-c5c9863367ea&action=prerequest

139.45.197.250

200 OK

0 B

URL POST HTTP/2
phoashiw.net/zone?&pub=0&zone_id=7417207&is_mobile=false&domain=takelipin.xyz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=7bc70f04-f5e5-4603-a910-c5c9863367ea&action=prerequest
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerLet's Encrypt
Subjectphoashiw.net
Fingerprint12:E2:C2:5A:F8:C3:6C:34:5F:9E:3B:D2:D8:CD:40:77:A9:EA:BC:8B
ValidityFri, 15 Mar 2024 06:33:24 GMT - Thu, 13 Jun 2024 06:33:23 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=7417207&is_mobile=false&domain=takelipin.xyz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=7bc70f04-f5e5-4603-a910-c5c9863367ea&action=prerequest HTTP/1.1
Host: phoashiw.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/
Origin: https://takelipin.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:03:05 GMT
content-length: 0
x-trace-id: 687d714582934693623e9f7f57afcf93
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://takelipin.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

jouteetu.net/custom

139.45.197.251

200 OK

39 B

URL POST HTTP/2
jouteetu.net/custom
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerLet's Encrypt
Subjectjouteetu.net
FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65
ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT

File type
JSON text data
Size
39 B (39 bytes)
Hash
058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881

HTTP Headers

POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/
Content-Type: text/plain;charset=UTF-8
Content-Length: 420
Origin: https://takelipin.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: d47b06c808c8d710b93502e4f1064d3b
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://takelipin.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

jouteetu.net/custom

139.45.197.251

200 OK

39 B

URL POST HTTP/2
jouteetu.net/custom
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerLet's Encrypt
Subjectjouteetu.net
FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65
ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT

File type
JSON text data
Size
39 B (39 bytes)
Hash
058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881

HTTP Headers

POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/
Content-Type: text/plain;charset=UTF-8
Content-Length: 422
Origin: https://takelipin.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 3540e7e8f5ed32077e6e7d1628676f51
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://takelipin.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

jouteetu.net/custom

139.45.197.251

200 OK

39 B

URL POST HTTP/2
jouteetu.net/custom
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerLet's Encrypt
Subjectjouteetu.net
FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65
ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT

File type
JSON text data
Size
39 B (39 bytes)
Hash
058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881

HTTP Headers

POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/
Content-Type: text/plain;charset=UTF-8
Content-Length: 423
Origin: https://takelipin.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: f8b05db86209cbf6ecfad6a9a823df17
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://takelipin.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

amunfezanttor.com/event

139.45.197.250

200 OK

0 B

URL POST HTTP/2
amunfezanttor.com/event
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerLet's Encrypt
Subjectamunfezanttor.com
FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA
ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://takelipin.xyz/
Origin: https://takelipin.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:03:05 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://takelipin.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2

amunfezanttor.com/event

139.45.197.250

200 OK

94 B

URL POST HTTP/2
amunfezanttor.com/event
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerLet's Encrypt
Subjectamunfezanttor.com
FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA
ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT

File type
JSON text data
Size
94 B (94 bytes)
Hash
b7ee5b1c78dab8d25e19ac5c33634dbd
77b3e970e124331d52aad9ab3c5727736876dfd0
ee9f200045f310be825f9f874516fdf04a58634c0f07363e37112bc1517bc253

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/
Content-Type: application/json
Content-Length: 1045
Origin: https://takelipin.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://takelipin.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

takelipin.xyz/mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012

104.21.78.128

308 Permanent Redirect

7.5 kB

URL User Request GET HTTP/2
takelipin.xyz/mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7957), with no line terminators
Size
7.5 kB (7547 bytes)
Hash
8cc0476e165bac526adda6436561fc21
2bfc0d690f832d91f54bb6e33453e90418bd96da
2f2569a2b3796d9bb173eaeacd9d6e7b2282a72c3a35e9b8d967c8754f05a923

HTTP Headers

GET /mgwemzpad?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012 HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 308 Permanent Redirect
date: Sun, 05 May 2024 13:03:04 GMT
content-length: 0
location: /mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Df5qLTjEgZmANXksxGTZ7e4hRx7wIawKCAJyVj1kGnsQYyJpOB4fl41z2uk7O5hU67y8mRl6CiOC6c%2BIqA0PRX2f5%2BYQrLQYf4oH6hfA7KHmAC73es7dQLhR5z9tXtMk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87f0edb46a180b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

takelipin.xyz/mgwemzpad/7c54719486d752d52a13bccacf2cf359.static.css

104.21.78.128

200 OK

60 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/7c54719486d752d52a13bccacf2cf359.static.css
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
ASCII text, with very long lines (11831)
Size
60 kB (59888 bytes)
Hash
39279975798cdb8565e9b38656e22a4b
116f9f68aad4cf01b51046be681df533e7ff885b
395c2ca40b514b63aa516f6cf57bf7a605f71012e1ab5f3af25ff7b6a97a8652

HTTP Headers

GET /mgwemzpad/7c54719486d752d52a13bccacf2cf359.static.css HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:04 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"be36fdd4e369d1fdb68c5c4c5e260434"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KZBcKi3T%2FYTRV%2BCvMmSVqMvURD3IzCx4McWQCMvFaAGrHziDPJLx8CXb03XkVO9IjOvqTrVjIyurvfrWwtKqUr5N2A9Xhdk90%2Fmvj5mXJhHD9DdgPnX%2FcTV51kD2bGSv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 87f0edb73e70b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

takelipin.xyz/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js

104.21.78.128

200 OK

12 kB

URL GET HTTP/3
takelipin.xyz/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
JavaScript source, ASCII text, with very long lines (12331)
Size
12 kB (12332 bytes)
Hash
88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142

HTTP Headers

GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:04 GMT
content-type: application/javascript
last-modified: Tue, 30 Apr 2024 15:20:25 GMT
etag: W/"66310c39-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8L1CRc6RkGdR7lPymdn0CncDUp15ZIU%2BbMN%2F0pmsBpL1Oegiwda8X%2B%2B3eNJDKbSGcoNWbx7Z%2FnUX0DISLQuNpBVdPs7yrmzWtzUj0bDBCqnyfpm7KlwZL8rPiwDyHfUP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f0edb73e81b4f1-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 07 May 2024 13:03:04 GMT
cache-control: max-age=172800, public
content-encoding: gzip

takelipin.xyz/mgwemzpad/like.png

104.21.78.128

200 OK

10 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/like.png
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (10468), with no line terminators
Size
10 kB (10046 bytes)
Hash
efe85536aed5cd669fd73fc4d8002e2f
5792c36f2e76aaa73e3b552a78d97c26b0b6cd9e
e982b577243fa90815055fb47cae2659cc29caad44b29911eb9cd47f30492071

HTTP Headers

GET /mgwemzpad/like.png HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/7c54719486d752d52a13bccacf2cf359.static.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:05 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BYDhyxaR7hkgVOK0cf%2BrCBKz6hhxa1AqVJI7bh3nHKf8Dj4u28n47D4nc6tE1mc6x4wko8QhX8XlalsuFj7OEjfHe9kYSqC%2FEyXTKqNKpvTOJhK%2F2nyH3EyPro%2FM68P9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 87f0edb83fafb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

takelipin.xyz/mgwemzpad/88c24a70eeae16825cb88c6b122208a0.static.png

104.21.78.128

200 OK

4.1 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/88c24a70eeae16825cb88c6b122208a0.static.png
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
4.1 kB (4103 bytes)
Hash
4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0

HTTP Headers

GET /mgwemzpad/88c24a70eeae16825cb88c6b122208a0.static.png HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:05 GMT
content-type: image/png
content-length: 4103
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "459dbb2fe1c535e489cd83d3cb1fada5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UD9z4vdpO8TCMF7v0JDF64t7l2hZmyES6u5xOz3fRgpVNZ89gAJ3aBaNeqRjgMrZ0qoswutjN0ktbFjDSbAQPfBd5X1jl1e7b06b71Oiy2k9AynNji64qDEnPRoPZyYL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 87f0edb9392db4f1-OSL
alt-svc: h3=":443"; ma=86400

takelipin.xyz/sw-check-permissions-9372d.js?zoneId=7417207

104.21.78.128

200 OK

566 B

URL GET HTTP/3
takelipin.xyz/sw-check-permissions-9372d.js?zoneId=7417207
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
ASCII text, with very long lines (605), with no line terminators
Size
566 B (566 bytes)
Hash
27c09abe547979899437f551ac3dc001
125d94397f95ada047b6ba211cc946d55a6765ae
1501fc5c4c4ccd86285c7c73794a5c2d67a71f6609352b22e4b21db33de41c0b

HTTP Headers

GET /sw-check-permissions-9372d.js?zoneId=7417207 HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"c6ba28fa5924b173bf867021d842a344"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wWnU2CyjubXXnoDmKRDyfuHWJJPjbuuYTjKNiBbIc9Aq53AneNiWV0EteedhHaSYGFar7BwsZgY%2BgqHw9nGZ9hOiZxO3Zk9StUGGuajwvsWOtckh7NOPByNFj3TeaRet"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 87f0edbbdc48b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012

104.21.78.128

200 OK

7.5 kB

URL User Request GET HTTP/2
takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7957), with no line terminators
Size
7.5 kB (7547 bytes)
Hash
8cc0476e165bac526adda6436561fc21
2bfc0d690f832d91f54bb6e33453e90418bd96da
2f2569a2b3796d9bb173eaeacd9d6e7b2282a72c3a35e9b8d967c8754f05a923

HTTP Headers

GET /mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012 HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 13:03:04 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0PVFvB8ga2r25FAyfvJ1KRTUwTGA0rbxXsUufMDl1r4Fh%2BfX8jK1NJzsbc0RYtTRhfIePNV0T3fwN4fa9fGKmt%2BOYueGUy6cTJb7IdEwedz7g39GjtpR710jJvT3vFdQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87f0edb50ab10b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

takelipin.xyz/mgwemzpad/cf9db0aa88167b8d2219bcde10757d78.static.js

104.21.78.128

200 OK

88 kB

URL GET HTTP/3
takelipin.xyz/mgwemzpad/cf9db0aa88167b8d2219bcde10757d78.static.js
IP
104.21.78.128:443
ASN
#13335 CLOUDFLARENET

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerGoogle Trust Services LLC
Subjecttakelipin.xyz
Fingerprint35:66:44:8E:1B:42:1D:0E:7F:B9:6E:79:4A:00:6D:92:BC:AA:35:0E
ValiditySat, 04 May 2024 12:11:19 GMT - Fri, 02 Aug 2024 12:11:18 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /mgwemzpad/cf9db0aa88167b8d2219bcde10757d78.static.js HTTP/1.1
Host: takelipin.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"cd81fdefdd0599621470a78b8b8245f1"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4yXxrrA%2BhQN2Lvep63bOzjjKnqajKYEOqmOcVXe1vaycX3f4RcqQQPsyxlVjuswasW72Rk%2FBlL%2Bck17n6i%2FMSIJlOIVVcMHR0F1stjTLg0kREh%2Fx9kJ0%2BIS3AfbPC%2Bak"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 87f0edb84fbdb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

phoashiw.net/pfe/current/micro.tag.min.js?z=7417207&sw=/sw-check-permissions-9372d.js

139.45.197.250

200 OK

37 kB

URL GET HTTP/2
phoashiw.net/pfe/current/micro.tag.min.js?z=7417207&sw=/sw-check-permissions-9372d.js
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://takelipin.xyz/mgwemzpad/?bemobdata=c=01046546-535f-48cd-af25-0b46f018ddf3..l=3aba3d3f-74ad-48ac-9e34-c58cbf3c3a92..a=0..b=0..r=http://xtbws~BEMOB_DOT~bemobtrcks~BEMOB_DOT~com..ts=1714898682012
Certificate
IssuerLet's Encrypt
Subjectphoashiw.net
Fingerprint12:E2:C2:5A:F8:C3:6C:34:5F:9E:3B:D2:D8:CD:40:77:A9:EA:BC:8B
ValidityFri, 15 Mar 2024 06:33:24 GMT - Thu, 13 Jun 2024 06:33:23 GMT

File type
JavaScript source, ASCII text, with very long lines (37142), with no line terminators
Size
37 kB (37142 bytes)
Hash
32d6dbd00a639e2cd10d1704b9159bd5
0dab4c95675393f1d0e13d20f13d80ee12e41d95
9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=7417207&sw=/sw-check-permissions-9372d.js HTTP/1.1
Host: phoashiw.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://takelipin.xyz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:03:05 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:51 GMT
etag: W/"662a3513-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash