Report - csmoneseliskln.buzz/auth.php

Report Overview

Submitted URL
csmoneseliskln.buzz/auth.php
IP
104.21.7.185
ASN
#13335 CLOUDFLARENET
Submitted
2023-05-05 03:36:30
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
arquivos.blogdainformatica.com.br	unknown	2014-02-25	2020-03-04	2023-05-05	568 B	20 kB	172.67.169.137
csmoneseliskln.buzz	unknown	2023-05-04	2023-05-04	2023-05-04	940 B	1.7 kB	172.67.137.43
66jdgwet.top	unknown	2023-05-04	2023-05-04	2023-05-04	12 kB	989 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-05 03:36:25	medium	Client IP	172.67.137.43	ET INFO HTTP Request to a *.buzz domain
2023-05-05 03:36:25	medium	Client IP	172.67.137.43	ET INFO HTTP Request to a *.buzz domain
2023-05-05 03:36:26	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-05-05 03:36:26	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-05-04	medium	csmoneseliskln.buzz/auth.php

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	66jdgwet.top/6a34193f4/d9e5c/jquery.min.js	90 kB	2023-03-07	2024-04-24
Pretty URL 66jdgwet.top/6a34193f4/d9e5c/jquery.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:28:27 Last Seen2024-04-24 13:53:33 Times Seen23006 Hash 00727d1d5d9c90f7de826f1a4a9cc632 ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2 a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74 Loading...

	66jdgwet.top/8788e04f8	163 kB	2023-03-07	2023-05-24
Pretty URL 66jdgwet.top/8788e04f8 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 21:21:28 Last Seen2023-05-24 11:36:09 Times Seen55 Hash b3a0856bb7179faaf3d01d010ed3e980 bf6819a25a1ec1cd87b0def0f9cf1dc8fdea55af 0e0aa3312d2352edb3d677b6f33a37a5375ac0279c8a5a99a28937b761bb440f Loading...

	66jdgwet.top/6a34193f4/d9e5c/_combined.js	71 kB	2023-03-12	2023-05-24
Pretty URL 66jdgwet.top/6a34193f4/d9e5c/_combined.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:12:06 Last Seen2023-05-24 11:36:09 Times Seen108 Hash 7e3b42157a1f7ffe7f487daccac0790a 479bae9d5e559c6896e09f0cbefb91517ed535f7 886cf3523cea9de24f91bc8bbe89efff4a0dbc107759aa86bc6923e9c6b8be58 Loading...

	66jdgwet.top/8788e04f8	64 B	2023-03-14	2023-05-24
Pretty URL 66jdgwet.top/8788e04f8 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 19:52:17 Last Seen2023-05-24 11:36:09 Times Seen49 Hash 8f99bf1b021330bc746c28f2e29ac93f cece5f9c9854acbc521c298a757b70c9046b506a b76b27d1ebb23ade6b96fda8584fd7010b5bc93026aff8175856f5132f9d2d60 Loading...

	66jdgwet.top/6a34193f4/d9e5c/tool.js	278 kB	2023-03-12	2023-05-24
Pretty URL 66jdgwet.top/6a34193f4/d9e5c/tool.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:12:06 Last Seen2023-05-24 11:36:09 Times Seen109 Hash 77bca2c1b497d76bc29047688a70079d 10543e5f9b2063583a16fc1978c75f1f1fb67b02 47a3d6182786a8eb03749bfcd9f0ca6f72017758643b9b9a1e5d1a650c571dfe Loading...

	unknown	34 B	2023-04-11	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-04-24 15:58:04 Times Seen74930 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

HTTP Transactions (30)

URL IP Response Size

arquivos.blogdainformatica.com.br/drivers/impressoras/hp/hp-deskjet-ink-2770/HPEasyStart-13.6.5-DJ2700_51_4_4865_1_Webpack.exe?md5=L-IYYpZ-DlbHkScYj76Arg&expires=1682963056

172.67.169.137

19 kB

URL
arquivos.blogdainformatica.com.br/drivers/impressoras/hp/hp-deskjet-ink-2770/HPEasyStart-13.6.5-DJ2700_51_4_4865_1_Webpack.exe?md5=L-IYYpZ-DlbHkScYj76Arg&expires=1682963056
IP
172.67.169.137:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
19 kB (18934 bytes)
Hash
52bc3f2cde1172fe30ddbbcb4754bfed
e54615aa219af71f49fea527b4e20cb7f78d578c
8291082e9cdb58836d23b1ba836936304aaffd3ab4c89e0d82bce409617441bd

HTTP Headers

GET /drivers/impressoras/hp/hp-deskjet-ink-2770/HPEasyStart-13.6.5-DJ2700_51_4_4865_1_Webpack.exe?md5=L-IYYpZ-DlbHkScYj76Arg&expires=1682963056 HTTP/1.1
Host: arquivos.blogdainformatica.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Range: bytes=204699538-
If-Match: "640248e0-c33c188"
If-Unmodified-Since: Fri, 03 Mar 2023 19:22:08 GMT

HTTP/2 206 Partial Content
date: Fri, 05 May 2023 03:36:13 GMT
content-type: application/octet-stream
content-length: 18934
cf-ray: 7c25f019de20b52d-OSL
access-control-allow-origin: *
age: 30
cache-control: max-age=315360000
content-range: bytes 204699538-204718471/204718472
etag: "640248e0-c33c188"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Fri, 03 Mar 2023 19:22:08 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-apo-via: origin,host
x-powered-by: EasyEngine v4.3.1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BQevVlWgX865Sx4OwoyYYIoOtwEK2q8dZS%2BcQUZHlBh61e7PuSqB9dIAmOAerSKut3YILir1%2BZzf%2BifNNTRy2uPMvgIgNEoLjI%2BFss6j8Gz97uDtXBoe%2BRcHq5ef%2BpQrTl4t%2FRxd5Aa50trphnrnRo52IMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

csmoneseliskln.buzz/auth.php

172.67.137.43

200 OK

0 B

URL User Request GET HTTP/2
csmoneseliskln.buzz/auth.php
IP
172.67.137.43:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcsmoneseliskln.buzz
Fingerprint49:B9:AD:2D:C2:25:83:A7:9E:00:5F:5F:FB:0C:E8:7A:3E:F9:8F:37
ValidityWed, 03 May 2023 23:44:02 GMT - Tue, 01 Aug 2023 23:44:01 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
openphish	Steam

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /auth.php HTTP/1.1
Host: csmoneseliskln.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Fri, 05 May 2023 03:36:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 05 May 2023 04:36:13 GMT
Location: https://csmoneseliskln.buzz/auth.php
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L2AICI3V5bA%2FLtGXDb%2B7w92bU%2BR6oMSKITgAPpyHeSVsR%2Fs%2F1i6DjJ%2Bms9NyDg%2Bb9KI16PTXikIeEaEB7O0ysxRgFFWkpjpaeRxCTfJzUPA42FtR95vJ15xydAVfVAJ6TJdBAnjV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7c25f01bfa970b69-OSL
alt-svc: h2=":443"; ma=60

66jdgwet.top/8788e04f8

188.114.96.1

200 OK

63 kB

URL GET HTTP/2
66jdgwet.top/8788e04f8
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://csmoneseliskln.buzz/auth.php
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
63 kB (62842 bytes)
Hash
e8e76cd5a21d24a80365c8f15c0fb8da
80a1e5f75a1ec0daddb8c4c6826b6cb292c30022
819b8daa7a898f7f7c9973c6b59290bace465623cb28505e84f3cab5aa575360

HTTP Headers

GET /8788e04f8 HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csmoneseliskln.buzz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KHzixmR%2BZREmh5P%2FLrCKjDEkKMNaGVyLNRydK7Dg9uUOymkWVr%2BU8M2G180efL124y4kAdmHsdc5hVwAPaupxEkntaenKbnw3h5EQaO9QM0bvS0Jy85VncgfMw460pY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c25f01fb888b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

66jdgwet.top/6a34193f4/d9e5c/footerLogo_valve.png

188.114.96.1

200 OK

4.8 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/footerLogo_valve.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size
4.8 kB (4830 bytes)
Hash
08e17f7afac196cb953e5fc5121de080
abfced7b8858c02f91573043eb4e0c814a05601a
14339165da386ba64e12530277b633cafdf7db4ee7c5a63d91d0163974255d12

HTTP Headers

GET /6a34193f4/d9e5c/footerLogo_valve.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8B2E%2BywPoT6rY6KJbBR87Xb1qtABEm9NUqpvjMoi8u4N%2BhK3yrcqYfiJRxVLRGiXEmOQWdLvzHBH0FKnpmDDZ2UV45RFWzapF7t6HfYL3%2BjX3nL4Lff8%2BHKzsepnB4A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0217c80b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/shared_global.css

188.114.96.1

200 OK

42 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/shared_global.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (4303)
Size
42 kB (41563 bytes)
Hash
3ae4bee9a6fa0a8573199245b5a8ad72
2418937e951b290e1b762c69a5f9341e0a0eda24
194198d69578efe62a228db72248105f6981bd7382ff3927e6415fceabc63580

HTTP Headers

GET /6a34193f4/d9e5c/shared_global.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OVRpKI0N0hxJdee135y%2BJB5dZlAujxjcrXTwkBLVe9Ie4Iikh8cmam8u6XthXDd1BYzoaBkZtZ7LOLMLBGm0rLYDGmGsqDV%2FPhae9Y8rlRKnwq87LQykQo99R389djk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c4fb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/sits_landing.png

188.114.96.1

200 OK

6.2 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/sits_landing.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 114 x 43, 8-bit/color RGBA, non-interlaced\012- data
Size
6.2 kB (6219 bytes)
Hash
700d55e56438d9bea87a3def1ff5b16a
c71d3cd7e89408b10e3a74f95d663f0ec9c1331e
d10854d41f3ae559c722115ef1d4318b23cf6412f9c2d4970e76b6f97f8f6408

HTTP Headers

GET /6a34193f4/d9e5c/sits_landing.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s9cJivLFzxMpu2YbcLF1OKVKZWMq7p8hq%2FM7veB536Rp%2B26L64bSH6pcEnd9AhMBKryZ8N6uwTcYLHkxob5iJS6uhmSgLpeBh39nHHcA9UzOzS7mDFtv%2FOFU54nKsAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c6fb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/globalheader_logo.png

188.114.96.1

200 OK

8.0 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/globalheader_logo.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 264 x 66, 8-bit/color RGBA, non-interlaced\012- data
Size
8.0 kB (8016 bytes)
Hash
03ef0d2de7dfdcb0af1c5cf250592dab
3d9e1cc8d86b7d1c5abea539877af11944025944
557b4ef0473c0cb831e5679ad3e2bbd3af6dbbeaecedaaa8eefe4206997ab86f

HTTP Headers

GET /6a34193f4/d9e5c/globalheader_logo.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CpnuhGmWTbWSG9YKLlgUZpJrss5PaX1IZrVHWOC4YtEc6UhF%2BIrhNQhaOF8nx%2FC79Yga1rumtuM1R3oBsb8f57%2F2RdSnGjIRnF46DJTccf1b4ApimOhg8NWKUBMPY6A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c6eb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/throbber.gif

188.114.96.1

200 OK

3.2 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/throbber.gif
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
GIF image data, version 89a, 32 x 32\012- data
Size
3.2 kB (3208 bytes)
Hash
928e54c4c9683d8dd32867ee992d73c4
83b3252952e1e8c98deb5e6eb64e150c594dd97b
0c4d1b66cbed8c0ba7bfe1d047409e80b99684794ba66e9556503890eae17f2d

HTTP Headers

GET /6a34193f4/d9e5c/throbber.gif HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/gif
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DE0auU2Ou4a788ywPmvmpq5VcDM9I4MO8IH17vm9DaYbYKOIhPo3JMt4QRqCepbVwTDXxEt8aFgxmA6RuLQ7AmBBYAm2i6qfRpnbbggMKQfuHCGnSuF87znM2lOao5g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c75b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/motiva_sans.css

188.114.96.1

200 OK

2.1 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/motiva_sans.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (2270), with no line terminators
Size
2.1 kB (2136 bytes)
Hash
648215172b015a6e6fdb232ce79d2bbb
082090e50db263fbbb630af1580ca4508b4bec33
abab7087374dec13ea2936ed960ef4b12faa480d84d9359120030d094e49dd6f

HTTP Headers

GET /6a34193f4/d9e5c/motiva_sans.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Lt3co3a7kNvxmdb6%2BHvRZZpFRj2F8zCa2DdxIlS4ZecsjhxCpAUJdHB55Rlb%2F4RX13guDVpc90n74Duqa%2F8XWYK%2FNQDmq1tiZy88cRvVdo6OE8m%2BAJEKWrwMa78Gww%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c4db51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/shared_responsive.css

188.114.96.1

200 OK

17 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/shared_responsive.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (1667)
Size
17 kB (17392 bytes)
Hash
2487628ab9949f49a3ef4ce86041a963
b8fda7f267ad0dc5354a066cb7c6ca9d7794afe2
d37cb0c0d728b44f3745edc5448d99e56460f14480c3f77fa03adce80798e1d9

HTTP Headers

GET /6a34193f4/d9e5c/shared_responsive.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8bBo90yeGhZW1xFWqki8nxi6Fjv4rsHNr2NH6q4zpGRd7KMi%2BdfsTNAjSa%2FzDVJXUcCxxn9oVIFvlm1C52IZuk025wbpDnsSFx09fSNzkzAd0jI5Wm7vPi4DCoO2TQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c57b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/logo_valve_footer.png

188.114.96.1

200 OK

1.8 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/logo_valve_footer.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1846 bytes)
Hash
574c350c7b23ae794d5276f8580e0838
235c7b35c3468f8915eca01f7abdb43d34079609
8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787

HTTP Headers

GET /6a34193f4/d9e5c/logo_valve_footer.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dUG7lpOjY1VtErwKhPx2Yx70fTWS%2FvpY1UTFZF1rvbxWRFYLDmdyzSeIG9Ay50mrajd9A4BWCyMcK3UjK6PsbjqudtWUv5%2FhLfb%2FiS0hai0KYuTL4b4RDkzg1u7K9BA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c6ab51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/shared_responsive_adapter.js

188.114.96.1

200 OK

12 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/shared_responsive_adapter.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (12353), with no line terminators
Size
12 kB (12353 bytes)
Hash
c605484b2ef4f19ac11cb5cf33998207
2394a79871588549418c57d8f62601b6f2a8bc2d
b55cd6f63141dddd3a145ec703028c532a4a16d604b74c50ecf876023a2b7ecc

HTTP Headers

GET /6a34193f4/d9e5c/shared_responsive_adapter.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h5GugIT%2BTzXVJYJ3UpmVkiZ%2FObFS3%2FHPbAYWrliLPabLo9o9WfUQToTWpqib3vc5Q%2B9t3%2Fm2%2B0kqsZH%2Fs2%2BbtjnGUwK%2B89d2dtWR7JvLRE9byXk4PjYtsqNJ%2BlZtFCM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0215c67b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/header_menu_hamburger.png

188.114.96.1

200 OK

3.8 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/header_menu_hamburger.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3777 bytes)
Hash
eabc76eb57feae44add7faead028521e
4e3e53938fad15661d2d046a868338841a95db19
fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa

HTTP Headers

GET /6a34193f4/d9e5c/header_menu_hamburger.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ltF2YjSjk6FzxsSLE3XQ0ufkIFskvwcDm58P%2FnD5KVtFv3FQFfWISN%2FAsuUX26wQZaxZsqAHLwMZ0FI7QL3L%2FWMH6EHkLzGtgWOIgX1AceLuofPNmZEctDP5kEfMoZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c6bb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/header_logo.png

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/header_logo.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (10863 bytes)
Hash
a4e79c73ee13cb25b60fc4b0ba1f690c
b690c31b2eb1b0eb085e91aaae7e79f03debe7c1
6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8

HTTP Headers

GET /6a34193f4/d9e5c/header_logo.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MBmSYNpqpoI9lTFmspb%2BVx7wo4S5qHO1wcFAmDvRLWXpNeEQZ41rhQI8oMzjMe3FQKZeqedvkXS%2BREbXwjE9MrydISlc6%2F0sE8UIiGaYyqAQJvxEG7LKWV%2FNAew1xGU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c6cb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/icon_info.png

188.114.96.1

200 OK

3.4 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/icon_info.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size
3.4 kB (3421 bytes)
Hash
2374879b03f3153a3f1d3aa98d9c8006
aff35c2b6096e8dd3950ccb050d2f412f3c1cafc
0ad9ddd2543a22ec2270326fb195c2bb6fb1b46186e89e885a83ae24386176f2

HTTP Headers

GET /6a34193f4/d9e5c/icon_info.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RSJWSce7REVOWf8GGp5O4yo%2BNuGmgYt0zT5cYDhUBS6W8KnsUeYzAZ2HpoGIsMPRpgzaMVqcaWOAddcyGYBENbJqoOfpZkVop%2FNrDgp8iRNF%2B9Lw1MDAOle15APDM0Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c72b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/blue_refresh_icon.png

188.114.96.1

200 OK

500 B

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/blue_refresh_icon.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size
500 B (500 bytes)
Hash
667035fb9e237f93ed15df8f3d83a785
0728a954629c5966e1a1c4dee20129e86752a4a9
97b179c7e553d74ed86b7663fa0722b76854f0ef2398fe6fbadd98f2d0c1cdfa

HTTP Headers

GET /6a34193f4/d9e5c/blue_refresh_icon.png HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: image/png
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9bj5cmnyTzgD2AuxTOpN10RapWYVGeshMmPlg4XPfx5eDxLSi8BD9SCZ2vat0BJXzMvpKK3u3UiOLVd5MYEN5jvY5UItUrdVLt3ZKb9I3iKTRwIjBl5%2FOACmwbJbL1Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0216c74b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/jquery.min.js

188.114.96.1

200 OK

90 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/jquery.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (65447)
Size
90 kB (89664 bytes)
Hash
00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74

HTTP Headers

GET /6a34193f4/d9e5c/jquery.min.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X81wNO%2FlfSClFB3zHbOWQqRivlapcxka9llCcy0uSGqIJVt%2FYjtFUWXuAWhV3e0oECbyX21QQ%2Fi0yOcUjCG3xRT14l4I0O3ciLSSTc5Zg7CCjQyxCrCH0G1wuNHGrAc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c4cb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/buttons.css

188.114.96.1

200 OK

32 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/buttons.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text
Size
32 kB (32293 bytes)
Hash
2e1b39ed59a3c56c929df5b2f5699d6f
a39ab4d4e92b6be0bc2dacb71fdf1a1bb723e22a
de602cdc514519b8cd73baf6e905a05dc4af493895c478571e4f9c5aa6601eca

HTTP Headers

GET /6a34193f4/d9e5c/buttons.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RCvzhCkVpzkz0p15u4ls03RBcuudMRDl2RxLZWZbPDR%2BXt3ZgSYwge5TVlMLr9taZTDQN4jI25TWd8XGY8ubVwcyYusYiaX8S4Ey%2F70wtJnK4qy1JGJNejQwKV1RKck%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c4eb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/tooltip.js

188.114.96.1

200 OK

6.8 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/tooltip.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (6972), with no line terminators
Size
6.8 kB (6800 bytes)
Hash
2a5c3dadcc70eba7ba6823d98862d5ee
c2411fc90f028e2b4a59e1362b50bdf663b2caf4
6d7126e79dc62d95fbfb39ce961cb63929d9a4eccf53bba685361559853e62ad

HTTP Headers

GET /6a34193f4/d9e5c/tooltip.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eMAh7ZWVEMZ8eZwuaUl9X37AL4Sy0g%2FOuAJ2k%2Fx0yoFfF2P8aYdqsplCsp84hSvtjBa5vVsUAijW1el5MmaUCQ2Fw0Rfi3WXHZh60G8gFh5o5OD7W2Jqw2V0T4%2FdRT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0214c5eb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/openid.css

188.114.96.1

200 OK

45 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/openid.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (45296)
Size
45 kB (45424 bytes)
Hash
0e7cef2401f0b3699324127b91850349
c00110d25297e065663280b4887dfd5bd38979c2
fbf16eeb6cdbe45d72893acfdbbec739e2a98b5429a540882a5ba3a403ac7323

HTTP Headers

GET /6a34193f4/d9e5c/openid.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NI3J7EJpPf3HZDTHl%2BHBeBQCTcI4eJ2lgA5DbiqSDJrkk3nvPU5HdC4z0Vv0X0FOkUrWhVrcKEBJoLB8vRR%2BEn92OYP%2FAuOMANh8hTOcNCiVFmjVYLxIz0JXi1T7jUs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c56b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/jquery-1.11.1.min.js

188.114.96.1

200 OK

96 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/jquery-1.11.1.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (32086)
Size
96 kB (95786 bytes)
Hash
8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441

HTTP Headers

GET /6a34193f4/d9e5c/jquery-1.11.1.min.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=emH6DXXcofCO580aY1yVhUhR03x%2BjLQyVtoLJrMP8O2sfXq5VX1jz%2BM5tj0OE4zWgCQ%2BOQNkwJiuxRRS5kW1bYFYtZDT9iiNrAr99jpjENAC7aGLj033zXIxOkX53eU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0214c5cb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/modalv2.js

188.114.96.1

200 OK

2.3 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/modalv2.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (2313), with no line terminators
Size
2.3 kB (2277 bytes)
Hash
1c2dcc97c1465ded3a6be4eded3b4228
3ec9899862624f82f931a6216d20cbcf7f30b10a
887bc8c26a49c9fac1de0f4f012ec9efcf85efa6bf93f7b4eacb40567380dcb5

HTTP Headers

GET /6a34193f4/d9e5c/modalv2.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sWR0k8rzxXyn2SwKoJss3NWM6ADSh1ntaTRsUdsO94CZ2FZzX2GJjxeuMy%2Bi6frFBDghgFR3EV%2BfoHG%2B18oi%2FBpEodks36sNwjkMr6C80u5t0dRfENVjL8CQjJumOYQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0215c66b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/login.css

188.114.96.1

200 OK

16 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/login.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
assembler source, ASCII text
Size
16 kB (16207 bytes)
Hash
5285069197ac6c737ea65eddfe8e250a
bcf1d5e0b5525fadbcb20bcd8bb694a1b674ab51
cec461f0c67664ec2ebc58cb445c4c3f6afb9342e4bd57439fb6dfb26114962f

HTTP Headers

GET /6a34193f4/d9e5c/login.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jVfDh9lMJoNfPYB836h0rC8hmYVHy8QAFDk001qjOJh156k3TaJqWJxGP5fKCZDS5gW%2FGM9f8klVU3Krz8xsMYPHFtYEr5gmsqnbLZe5RYCIectAQQ4fB8hOfJcumJM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c55b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/logins.js

188.114.96.1

200 OK

48 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/logins.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (47555), with no line terminators
Size
48 kB (47555 bytes)
Hash
db22f73dbecda66f75e197eb67ceac6d
896c1ac1bc690577267d582bb66206f1de08dedc
e1a5c4c834e53551df9f37d51ff1fa022b70f63f46fa538e6d992578f64dbaaf

HTTP Headers

GET /6a34193f4/d9e5c/logins.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZcjxP59aZuxjvRGl9eC8ien2dx7y%2FEZ8vqaHNmfFzRDx54VhPZxXxMvZXpVVY65rxAj%2BMp9UXcVngDhug2tleAUikLU4skGnN3GPIfOyF1kA4rFOe%2FUx2xFVs%2FYl7Gg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0215c63b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/shared_global.js

188.114.96.1

200 OK

82 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/shared_global.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
82 kB (82218 bytes)
Hash
22c8e27ac70b862f51cfb0e5cd31ae20
c0ce8f8d38588e6aaeca76657c908de514e4161d
e05acf32055c1a5fff640835a6fd67ff14a02d00e5b636672f3f49f98429f5cf

HTTP Headers

GET /6a34193f4/d9e5c/shared_global.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ve39EaRtGXKDo6dky7xhZohcLlR2NFr7K2%2BEfxEZiHLq9RSo41Oyc3iZ0SDzIQLwd5mTp74rSKkIHKZRAFPq8cTfkmwXLzPObmkYVniJBaHoR7ENw7dQn%2BrJJAmYpaQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0215c60b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/tool.js

188.114.96.1

200 OK

278 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/tool.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
278 kB (277754 bytes)
Hash
77bca2c1b497d76bc29047688a70079d
10543e5f9b2063583a16fc1978c75f1f1fb67b02
47a3d6182786a8eb03749bfcd9f0ca6f72017758643b9b9a1e5d1a650c571dfe

HTTP Headers

GET /6a34193f4/d9e5c/tool.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yonVV9osZnbI%2BZSd%2B05pgcqxe8V94QKaiohWkv%2FfEldyNZVMoxrF6j2lRXN5GbDlvRvJHmFmAc9Yw17Slm9ykl7AFLWLPrFVDXSTJNTvq%2Fw5tCZVnbpBQ88cjx6dw7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0214c5bb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

csmoneseliskln.buzz/favicon.ico

172.67.137.43

404 Not Found

315 B

URL GET HTTP/3
csmoneseliskln.buzz/favicon.ico
IP
172.67.137.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://csmoneseliskln.buzz/auth.php
Certificate
IssuerLet's Encrypt
Subjectcsmoneseliskln.buzz
Fingerprint49:B9:AD:2D:C2:25:83:A7:9E:00:5F:5F:FB:0C:E8:7A:3E:F9:8F:37
ValidityWed, 03 May 2023 23:44:02 GMT - Tue, 01 Aug 2023 23:44:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: csmoneseliskln.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: csmoneseliskln.buzz
Connection: keep-alive
Referer: https://csmoneseliskln.buzz/auth.php
Cookie: __ddg1_=xFNzyUAYjYxuMjtLmlk2; PHPSESSID=61eba31f2c27152726a3de6244cc5005
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
ddg-cache-status: MISS
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hX90Ahut5K35ff5D3920Bapdkc4R8bK%2Fzsgz7E5ivY0ZSxsKdktH%2F0bqVjRGJxJ223dtj4Wx9yqs0lFeEv7CMkWhYCUoH18D46jUe2nBhd7dlhsH7n%2FzGy8H2%2Br7%2FHFLSwMOebxF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c25f01f6b00b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/_combined.js

188.114.96.1

200 OK

71 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/_combined.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
HTML document, ASCII text, with very long lines (65536), with no line terminators
Size
71 kB (71404 bytes)
Hash
7e3b42157a1f7ffe7f487daccac0790a
479bae9d5e559c6896e09f0cbefb91517ed535f7
886cf3523cea9de24f91bc8bbe89efff4a0dbc107759aa86bc6923e9c6b8be58

HTTP Headers

GET /6a34193f4/d9e5c/_combined.js HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/javascript
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XCtR7jl8p37NRelTXyIY95acGXMec1TbWb%2FFBQVLMu8GRlXP4EA6oZQmR6g3giG5Ron0WPF6lS3wEgw%2FDpvSDMcXxG%2F3OSzCPgXnMZJxOglvaCYEBUSYNgCgmfEYAAA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0214c59b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/home.css

188.114.96.1

200 OK

13 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/home.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text
Size
13 kB (13373 bytes)
Hash
52c9f2cac5be2a45c10bbedad538bedd
524496dc8d349e76760d1c74ecd6ae1b8c155773
e86af7991338d0929414e77d6c353de438ce5e37d580a25495004f97f39b177a

HTTP Headers

GET /6a34193f4/d9e5c/home.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=89v930PjPa%2Fw5F6XtuCvbUqHfkWR2ShhZOTRUkTwewR4l9rRnTe%2BnPpW9MkGbRndqCTGnBjVBViFujAv5h5J4e9DjFwPwsPL%2BHyUHl2euesOQovzHViUfRZQGzUOb3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0213c54b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

66jdgwet.top/6a34193f4/d9e5c/header.css

188.114.96.1

200 OK

12 kB

URL GET HTTP/3
66jdgwet.top/6a34193f4/d9e5c/header.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://66jdgwet.top/8788e04f8
Certificate
IssuerGoogle Trust Services LLC
Subject66jdgwet.top
Fingerprint61:0D:C0:28:F2:64:9C:9B:4A:C6:9B:E9:1C:7F:09:58:49:72:38:FF
ValidityThu, 04 May 2023 00:08:53 GMT - Wed, 02 Aug 2023 00:08:52 GMT

File type
ASCII text, with very long lines (629)
Size
12 kB (11958 bytes)
Hash
72ec7ea2cdac8d3cefa63cd7d49fcfc6
fa27f26b41715f8ba352f7edf83048c248732def
f19bafd902d92d0eca912ad4dbe183366fd19e0adb22da04c424a2faf7ff6a10

HTTP Headers

GET /6a34193f4/d9e5c/header.css HTTP/1.1
Host: 66jdgwet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 66jdgwet.top
Connection: keep-alive
Referer: https://66jdgwet.top/8788e04f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 May 2023 03:36:14 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 04 May 2023 20:58:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KjUA1NCaNLCXNPHOaMmV1NXdRNisIKQoRhi2NMLreKTPH4h2KODxg4dm7SqJQO%2BsKe4pbFiyqjhXeRM4UppcmHVollvqIUBis9irQWspqHD9ozX5dENOG0OFELxBZtk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c25f0214c5ab51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (30)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash