| www.mediapowers.tech/go/d449ef84-8ba6-433b-b276-f0af23d19861 | 3.70.16.242 | | 332 B |
URL www.mediapowers.tech/go/d449ef84-8ba6-433b-b276-f0af23d19861 IP3.70.16.242:0
File typeHTML document, ASCII text, with very long lines (332), with no line terminators Hash1881cb95eed7ac6c0e5968a407a3ba51 c3009aea48bf060c3c21b161a362499ea201bfbf 00a96269f873031557ce504bc2b9ee80f159664f0e54e24d125219d4db94e558
GET /go/d449ef84-8ba6-433b-b276-f0af23d19861 HTTP/1.1
Host: www.mediapowers.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Thu, 18 Apr 2024 12:14:49 GMT
content-type: text/html; charset=utf-8
content-length: 332
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
location: https://aff.telelime.space/?utm_medium=a403ed77cf7cee68a98b36c5224270cc02fcef9f&utm_campaign=target_DZ_dbd247&cid=92CT1tDoWYzdAvRr2zJpmh
set-cookie: bemob-viewer-id=4eda5d62-f169-4b97-b3e8-9d2b6c26ac86; Domain=www.mediapowers.tech; Path=/; Expires=Fri, 18 Apr 2025 12:14:49 GMT; HttpOnly; Secure; SameSite=None
bemob-uniq-visit:d449ef84-8ba6-433b-b276-f0af23d19861=1; Domain=www.mediapowers.tech; Path=/; Expires=Fri, 19 Apr 2024 12:14:49 GMT; HttpOnly; Secure; SameSite=None
bemob-rotation:d449ef84-8ba6-433b-b276-f0af23d19861:random:df097b5f0e33d85d6db45d8fd1d21455=0-0-0; Domain=www.mediapowers.tech; Path=/; Expires=Fri, 19 Apr 2024 12:14:49 GMT; HttpOnly; Secure; SameSite=None
bemob-click-id=92CT1tDoWYzdAvRr2zJpmh; Domain=www.mediapowers.tech; Path=/; Expires=Sat, 18 May 2024 12:14:49 GMT; HttpOnly; Secure; SameSite=None
vary: Accept
x-response-time: 6.596ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
|
|
| www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033 | 51.68.81.31 | | 4.4 kB |
URL www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033 IP51.68.81.31:0
File typeHTML document, ASCII text, with very long lines (3491) Hash845e6b6e96af952c30e55429405bcdb9 8910c28064d60d834e9148b81cd089f8b48c875f a1cbfaa79523810f2daa4e959b8d7c2c60616ee6378b1802ecaed958d0059d11
GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033 HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aff.telelime.space/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 12:14:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-transform
Accept-CH: Sec-CH-UA-Platform-Version
|
|
| www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033&eyeg=3fe68d955e2e88476550139e9808b355&eyer=0.5053462780567933&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=aff.telelime.space | 51.68.81.31 | 302 Found | 0 B |
URL User Request GET HTTP/1.1www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033&eyeg=3fe68d955e2e88476550139e9808b355&eyer=0.5053462780567933&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=aff.telelime.space IP51.68.81.31:443
CertificateIssuerLet's Encrypt Subjectwww.trimbuilder.foundation FingerprintB5:58:02:9F:AF:F9:81:27:25:64:61:1F:FC:22:AF:33:55:97:F6:60 ValidityMon, 08 Apr 2024 08:49:15 GMT - Sun, 07 Jul 2024 08:49:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033&eyeg=3fe68d955e2e88476550139e9808b355&eyer=0.5053462780567933&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=aff.telelime.space HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 18 Apr 2024 12:14:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033&eyeg=3&eyer=0.5053462780567933&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=aff.telelime.space
|
|
| www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033&eyeg=3&eyer=0.5053462780567933&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=aff.telelime.space | 51.68.81.31 | 302 Found | 0 B |
URL User Request GET HTTP/1.1www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033&eyeg=3&eyer=0.5053462780567933&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=aff.telelime.space IP51.68.81.31:443
CertificateIssuerLet's Encrypt Subjectwww.trimbuilder.foundation FingerprintB5:58:02:9F:AF:F9:81:27:25:64:61:1F:FC:22:AF:33:55:97:F6:60 ValidityMon, 08 Apr 2024 08:49:15 GMT - Sun, 07 Jul 2024 08:49:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7359179458143584274&website=24033-fd7afc9z&placement=24033&eyeg=3&eyer=0.5053462780567933&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=aff.telelime.space HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 18 Apr 2024 12:14:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://admoustache.aftrad-visit.com/track/smartlink?smartlink_id=1&publisher_id=441&network_id=5&click_id=33000332800e5bb8be0d9860e64cd9ee2af970418-202404-flb*5768231-bead7*M7359179458143584274*sl_5768231-bead7*f9c9fcc328bd234dc68f513f4cf1f46614dce972*24033-fd7afc9z*24033
|
|
| www.trimbuilder.foundation/favicon.ico | 51.68.81.31 | | 0 B |
URL www.trimbuilder.foundation/favicon.ico IP51.68.81.31:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Thu, 18 Apr 2024 12:14:51 GMT
Connection: keep-alive
|
|
| admoustache.aftrad-visit.com/track/smartlink?smartlink_id=1&publisher_id=441&network_id=5&click_id=33000332800e5bb8be0d9860e64cd9ee2af970418-202404-flb*5768231-bead7*M7359179458143584274*sl_5768231-bead7*f9c9fcc328bd234dc68f513f4cf1f46614dce972*24033-fd7afc9z*24033 | 104.26.6.190 | 302 Found | 247 B |
URL User Request GET HTTP/2admoustache.aftrad-visit.com/track/smartlink?smartlink_id=1&publisher_id=441&network_id=5&click_id=33000332800e5bb8be0d9860e64cd9ee2af970418-202404-flb*5768231-bead7*M7359179458143584274*sl_5768231-bead7*f9c9fcc328bd234dc68f513f4cf1f46614dce972*24033-fd7afc9z*24033 IP104.26.6.190:443
CertificateIssuerGoogle Trust Services LLC Subjectaftrad-visit.com Fingerprint98:82:E2:88:34:E5:9E:56:30:5B:90:4F:A3:20:44:5C:29:51:5F:01 ValidityThu, 04 Apr 2024 22:09:13 GMT - Wed, 03 Jul 2024 22:09:12 GMT
File typeHTML document, ASCII text Hash649cda50faf0158e321713a30a76f583 2634bfd932d456af7cb9b54a1ffd25f349979257 f566b24b525832604aaa7832dbd5f09063f4324ef8296615a033604d8b1a9615
GET /track/smartlink?smartlink_id=1&publisher_id=441&network_id=5&click_id=33000332800e5bb8be0d9860e64cd9ee2af970418-202404-flb*5768231-bead7*M7359179458143584274*sl_5768231-bead7*f9c9fcc328bd234dc68f513f4cf1f46614dce972*24033-fd7afc9z*24033 HTTP/1.1
Host: admoustache.aftrad-visit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 18 Apr 2024 12:14:51 GMT
content-type: text/html; charset=utf-8
content-length: 247
location: https://4774842.catchtheclick.com/?mob=KB175ouW35C2b-PbdWsK1pwEpJQqVU9FCrGeXfBp0t8DFVVz1-Uh0cA0IvAKYdcGHKZePq2lYxzxgBIkrpMzTg&tid=201HUACED7Xmbi86ndYA9MwHVbFhQDUR9EehfBhcTJfcBz5bEWx1Vy4ARAQDdVrSdujk5i&pubid=1B7fmUHKE
referrer-policy: no-referrer
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ho0oBIjikABDiSMlGzcZ9vsEIHbXlo8Rjt9Q%2BUK82ZVn6egtXFbLUOFGglDMUb02attPOqYmNFJZnflyIbP54nh2v4HXRN1796ZJXXCvu6CMkABne8b%2BlSXlaNw41uqPE4AuZXiQV32MJQjqB7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493b0cc73b523-OSL
X-Firefox-Spdy: h2
|
|
| 4774842.catchtheclick.com/?mob=KB175ouW35C2b-PbdWsK1pwEpJQqVU9FCrGeXfBp0t8DFVVz1-Uh0cA0IvAKYdcGHKZePq2lYxzxgBIkrpMzTg&tid=201HUACED7Xmbi86ndYA9MwHVbFhQDUR9EehfBhcTJfcBz5bEWx1Vy4ARAQDdVrSdujk5i&pubid=1B7fmUHKE | 116.202.159.170 | 200 OK | 899 B |
URL User Request GET HTTP/1.14774842.catchtheclick.com/?mob=KB175ouW35C2b-PbdWsK1pwEpJQqVU9FCrGeXfBp0t8DFVVz1-Uh0cA0IvAKYdcGHKZePq2lYxzxgBIkrpMzTg&tid=201HUACED7Xmbi86ndYA9MwHVbFhQDUR9EehfBhcTJfcBz5bEWx1Vy4ARAQDdVrSdujk5i&pubid=1B7fmUHKE IP116.202.159.170:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.catchtheclick.com Fingerprint71:DF:E4:67:F7:7C:21:D2:7A:F7:8A:98:0F:E3:D7:EE:CD:CA:C0:98 ValiditySun, 07 Apr 2024 20:30:58 GMT - Sat, 06 Jul 2024 20:30:57 GMT
File typeHTML document, ASCII text, with very long lines (814), with CRLF line terminators Hashd5058d052107e5dc8e93de08f1da22ef 2af38c7a2bb78ac35e71f2dd5f45f7a35ceedbfb 3652a4e3cc81329eadfc15ae6afaebfe1a63d1c3ceea324343f3063524a70417
GET /?mob=KB175ouW35C2b-PbdWsK1pwEpJQqVU9FCrGeXfBp0t8DFVVz1-Uh0cA0IvAKYdcGHKZePq2lYxzxgBIkrpMzTg&tid=201HUACED7Xmbi86ndYA9MwHVbFhQDUR9EehfBhcTJfcBz5bEWx1Vy4ARAQDdVrSdujk5i&pubid=1B7fmUHKE HTTP/1.1
Host: 4774842.catchtheclick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.16.1 (Ubuntu)
Date: Thu, 18 Apr 2024 12:14:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css | 104.17.24.14 | 200 OK | 5.6 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP104.17.24.14:443
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://king.okaynotification.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 12:14:52 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 235977
expires: Tue, 08 Apr 2025 12:14:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s9rZwzOphd1Wfiu4NvYSIoEBHGW18sNcxRNlCDEMn90Gs8gVMPtJQj%2FUXf%2FqiJ0Jgv14chW0TY2nZbIHN5bwco1ZdoNTd2gDs6xJc7Mr6IW06K3GH0F1pheNIP11M11dAhhqMUP%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876493b74b00b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| king.okaynotification.com/js2/t/video1/index.html | 188.114.96.1 | | 36 kB |
URL king.okaynotification.com/js2/t/video1/index.html IP188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1054), with CRLF line terminators Hashc6fd866df912752c347ef3551762b14b 78c6f9b69292ecdd14aae9b2864599ea5b12bc10 4b35ed8fa93c47a12533131bb24770e3afd522f136514a73c3d59e185b177300
GET /js2/t/video1/index.html HTTP/1.1
Host: king.okaynotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4774842.catchtheclick.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 12:14:51 GMT
content-type: text/html
last-modified: Wed, 17 Apr 2024 22:35:36 GMT
vary: Accept-Encoding
expires: Fri, 18 Apr 2025 12:14:51 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bzgTXfAvq1fJmM%2BF%2BJ0Nr223Y%2BbrQo56Tg2JI3EZ8R5KhkniAaLGHsvIxFhh72msbjJv73CqNLOBH%2Fl136NROtNkl6bdfb%2FrtCyohuZNJzr4Ab96ORjCUuDuxAB5yiaM%2B%2FenpjC%2Bt4TCji3Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493b50a2b1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mainstreamlp.s3-eu-west-1.amazonaws.com/cassandra/unnamed.gif | 52.92.35.90 | 403 Forbidden | 243 B |
URL GET HTTP/1.1mainstreamlp.s3-eu-west-1.amazonaws.com/cassandra/unnamed.gif IP52.92.35.90:443
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerAmazon Subject*.s3-eu-west-1.amazonaws.com Fingerprint49:42:4E:99:9B:99:CB:89:18:03:B0:67:44:1E:3F:5D:9A:CD:21:1C ValidityWed, 31 Jan 2024 00:00:00 GMT - Wed, 15 Jan 2025 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hash803a7d50a584095e0bf39538d7aeda3b ec1bc3fc0924f3334d8e19046be1d2b568251202 c40c7ae4c0f397d9147229dc79aa8603dc613d018a2116ce49a61973cb541e11
GET /cassandra/unnamed.gif HTTP/1.1
Host: mainstreamlp.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://king.okaynotification.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
x-amz-request-id: N63MWTC6Q3WQZXSF
x-amz-id-2: DScehX8i2m/JaFiIgaZx7wkaNiIoKFQSvvm1hQJ2gtmdfpessap3zZKjCZ3od2nn+VWLLfaznME=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Thu, 18 Apr 2024 12:14:51 GMT
Server: AmazonS3
|
|
| mainstreamlp.s3-eu-west-1.amazonaws.com/cassandra/giphy.gif | 52.92.35.90 | 403 Forbidden | 243 B |
URL GET HTTP/1.1mainstreamlp.s3-eu-west-1.amazonaws.com/cassandra/giphy.gif IP52.92.35.90:443
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerAmazon Subject*.s3-eu-west-1.amazonaws.com Fingerprint49:42:4E:99:9B:99:CB:89:18:03:B0:67:44:1E:3F:5D:9A:CD:21:1C ValidityWed, 31 Jan 2024 00:00:00 GMT - Wed, 15 Jan 2025 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hash69b032e0457a142d9973df7ba4797331 ebbf2912d97d5ff09f38656ae44a89d0e5632f12 cd73064bd7560f60c717090a3adb3fb2b5a23e7bfc7066c5689e004ef3ea9479
GET /cassandra/giphy.gif HTTP/1.1
Host: mainstreamlp.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://king.okaynotification.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
x-amz-request-id: N63V4ZKS14KSMS70
x-amz-id-2: NB7392TphPIXK4+7zL2BVHsKhmqekUYTHuxxjWvbNiUjz+MduwJqqIPULunUlyvOYOBGaR80boQ=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Thu, 18 Apr 2024 12:14:51 GMT
Server: AmazonS3
|
|
| king.okaynotification.com/js2/t/video1/style.css | 188.114.96.1 | 200 OK | 463 B |
URL GET HTTP/3king.okaynotification.com/js2/t/video1/style.css IP188.114.96.1:443
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerCloudflare, Inc. Subjectokaynotification.com FingerprintE7:BC:CA:F2:11:BF:26:81:DB:CB:A4:B9:61:82:CC:2A:EB:D3:29:E1 ValidityTue, 26 Dec 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash45ccd9c26d10cc621f19f8f2f150b11f ce959ae7c9ad6a24b660d3c52727c6ef20fab8b5 ff51eb67dfd5cc93ecf284898201caa25b90c74af20aef42d3f43fb003a81e31
GET /js2/t/video1/style.css HTTP/1.1
Host: king.okaynotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://king.okaynotification.com/js2/t/video1/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:51 GMT
content-type: text/css
last-modified: Thu, 21 May 2020 13:05:48 GMT
vary: Accept-Encoding
etag: W/"5ec67cac-48c"
expires: Fri, 18 Apr 2025 12:14:05 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 46
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yJoKUC9mveL5pVE0eu0hAKWNNds%2BWC6WP8FdQMvVyAVQWaIFxs5vhfPBD2oEL0%2BbPNfyjz%2FYNPM0HHDX3bnsZPPRfcIXACAQvE96zF6eh6MVfQi0eJIP9OLk%2F9QTW3oiBrzdgS8Fu%2FE0XWBl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493b6efd1b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| king.okaynotification.com/favicon.ico | 188.114.96.1 | 200 OK | 1 B |
URL GET HTTP/3king.okaynotification.com/favicon.ico IP188.114.96.1:443
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerCloudflare, Inc. Subjectokaynotification.com FingerprintE7:BC:CA:F2:11:BF:26:81:DB:CB:A4:B9:61:82:CC:2A:EB:D3:29:E1 ValidityTue, 26 Dec 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /favicon.ico HTTP/1.1
Host: king.okaynotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://king.okaynotification.com/js2/t/video1/index.html
Cookie: jjj=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:52 GMT
content-type: image/x-icon
content-length: 1
last-modified: Wed, 22 May 2019 17:07:05 GMT
etag: "5ce581b9-1"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lCiUAIuYWtErliGDY11%2B%2Fadt8bHXio5aJM9oA8%2FIgF%2FS%2F6Vu1sUiMIQydq0tgEM1WrHG0%2Fgs3%2B01rIla3RfjW1KgM2txY6JleJOGte4HitzKfH6lxymI9jsdtRb6oE4JJQkq%2BPR0fi9vDAJa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876493b9cd12b4f7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| king.okaynotification.com/js2/t/video1/inc.js | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3king.okaynotification.com/js2/t/video1/inc.js IP188.114.96.1:443
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerCloudflare, Inc. Subjectokaynotification.com FingerprintE7:BC:CA:F2:11:BF:26:81:DB:CB:A4:B9:61:82:CC:2A:EB:D3:29:E1 ValidityTue, 26 Dec 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash9a9be219ee1af9949fead4edb3b92006 ebccab958c1822defac53ff518fe6feba81dff93 2ddf117c0bdd9df9cfe9776bdbcb7146341023d6959360705437d8ffbf7e43ed
GET /js2/t/video1/inc.js HTTP/1.1
Host: king.okaynotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://king.okaynotification.com/js2/t/video1/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:52 GMT
content-type: application/javascript
last-modified: Mon, 16 Aug 2021 15:15:52 GMT
vary: Accept-Encoding
etag: W/"611a8128-3385"
expires: Fri, 18 Apr 2025 12:14:05 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 47
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qr1akG1yuxTj%2FoXTaVLfue1NZlaqx9mRt4tVo5ENiKsfPHlpQQLtFhNjIY70b3nr8PGjVh%2BJOq9u8F%2BZ99YXHLTwfA%2FeOzhyAkeI%2BPiBVo19c1JUd%2B3lVe%2BV4uWTZI0oMK6rekb5pT%2BcLpPh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493b6ffd8b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js | 142.250.74.170 | 200 OK | 90 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP142.250.74.170:443
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://king.okaynotification.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:56:44 GMT
expires: Wed, 16 Apr 2025 09:56:44 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 181088
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| specializedlink.com/c.php | 46.4.25.9 | 200 OK | 0 B |
URL GET HTTP/1.1specializedlink.com/c.php IP46.4.25.9:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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 CertificateIssuerLet's Encrypt Subjectspecializedlink.com FingerprintC7:0B:63:0B:F0:33:2F:97:34:30:50:14:9B:FD:EF:7A:C1:88:02:3E ValiditySat, 16 Mar 2024 05:24:51 GMT - Fri, 14 Jun 2024 05:24:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.php HTTP/1.1
Host: specializedlink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://king.okaynotification.com/
Origin: https://king.okaynotification.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 18 Apr 2024 12:14:52 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://king.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| bonga.netflowcorp.com/c.php?v1=2&va=2 | 0.0.0.0 | | 0 B |
URL GET bonga.netflowcorp.com/c.php?v1=2&va=2 IP0.0.0.0:0
Requested byhttps://king.okaynotification.com/js2/t/video1/index.html#1=a&cinfo=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
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.php?v1=2&va=2 HTTP/1.1
Host: bonga.netflowcorp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://king.okaynotification.com/
Origin: https://king.okaynotification.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| king.okaynotification.com/js2/t/video1/index.html | 188.114.96.1 | 200 OK | 18 kB |
URL User Request GET HTTP/2king.okaynotification.com/js2/t/video1/index.html IP188.114.96.1:443
CertificateIssuerCloudflare, Inc. Subjectokaynotification.com FingerprintE7:BC:CA:F2:11:BF:26:81:DB:CB:A4:B9:61:82:CC:2A:EB:D3:29:E1 ValidityTue, 26 Dec 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js2/t/video1/index.html HTTP/1.1
Host: king.okaynotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4774842.catchtheclick.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 12:14:51 GMT
content-type: text/html
last-modified: Wed, 17 Apr 2024 22:35:36 GMT
vary: Accept-Encoding
expires: Fri, 18 Apr 2025 12:14:51 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bzgTXfAvq1fJmM%2BF%2BJ0Nr223Y%2BbrQo56Tg2JI3EZ8R5KhkniAaLGHsvIxFhh72msbjJv73CqNLOBH%2Fl136NROtNkl6bdfb%2FrtCyohuZNJzr4Ab96ORjCUuDuxAB5yiaM%2B%2FenpjC%2Bt4TCji3Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493b50a2b1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|