haltcandle.com/t9hiwrkd?key=d928d7c4e235fa6eb6c04ecc0f7abe92
192.243.61.227 1.3 kB URL haltcandle.com/t9hiwrkd?key=d928d7c4e235fa6eb6c04ecc0f7abe92
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (408)
Hash 66448f9f86a4530ee8614cf50df20df2
dc456ef49cd0ddc099a364bea08cc857fa2ab47a
f9671bbf9b12c8cd25a55e9211a832f6a120a61dec3b7c1af3569dae30096775
GET /t9hiwrkd?key=d928d7c4e235fa6eb6c04ecc0f7abe92 HTTP/1.1
Host: haltcandle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 26 Oct 2023 04:14:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=15107318; expires=Fri, 27 Oct 2023 04:14:30 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.ciDTqMiP3ROes4RaO6dYvGUflakFDF8LM8yxpk2qVrY; expires=Thu, 26 Oct 2023 04:15:30 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 30043e9f9213c3acc0e2947871dd4069
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
haltcandle.com/api/users?token=L3Q5aGl3cmtkP2tleT1kOTI4ZDdjNGUyMzVmYTZlYjZjMDRlY2MwZjdhYmU5MiZwc3Q9MTY5ODI5MzczMCZybXRjPXQmc2h1PTVjZjMxMDU3NDA2MTY3MDRlODk0ZmVlNGZkMjVjNjA2ZmZjOGUxOGMyMDhhNTkzNGQ3NDRkYmQ1NzdhM2UyYmM4OWZjYWRkZWZmODE1NWJkYjQwN2Q2MGExZDVjMGEwNDk0NGMyY2U2ZmIyZjlhNjM3YTJlMDEyZTc2MWE0YTgxNGI0YjM3NDhhZGQwMDlkNmFhNmZmMmIyYjE0NTYzOThmNzNjN2UyNTBkMTQ2ZDQwYTNlNmFlOWI3ZmY4OTg%3D&uuid=&pii=&in=false
192.243.59.12 0 B URL haltcandle.com/api/users?token=L3Q5aGl3cmtkP2tleT1kOTI4ZDdjNGUyMzVmYTZlYjZjMDRlY2MwZjdhYmU5MiZwc3Q9MTY5ODI5MzczMCZybXRjPXQmc2h1PTVjZjMxMDU3NDA2MTY3MDRlODk0ZmVlNGZkMjVjNjA2ZmZjOGUxOGMyMDhhNTkzNGQ3NDRkYmQ1NzdhM2UyYmM4OWZjYWRkZWZmODE1NWJkYjQwN2Q2MGExZDVjMGEwNDk0NGMyY2U2ZmIyZjlhNjM3YTJlMDEyZTc2MWE0YTgxNGI0YjM3NDhhZGQwMDlkNmFhNmZmMmIyYjE0NTYzOThmNzNjN2UyNTBkMTQ2ZDQwYTNlNmFlOWI3ZmY4OTg%3D&uuid=&pii=&in=false
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users?token=L3Q5aGl3cmtkP2tleT1kOTI4ZDdjNGUyMzVmYTZlYjZjMDRlY2MwZjdhYmU5MiZwc3Q9MTY5ODI5MzczMCZybXRjPXQmc2h1PTVjZjMxMDU3NDA2MTY3MDRlODk0ZmVlNGZkMjVjNjA2ZmZjOGUxOGMyMDhhNTkzNGQ3NDRkYmQ1NzdhM2UyYmM4OWZjYWRkZWZmODE1NWJkYjQwN2Q2MGExZDVjMGEwNDk0NGMyY2U2ZmIyZjlhNjM3YTJlMDEyZTc2MWE0YTgxNGI0YjM3NDhhZGQwMDlkNmFhNmZmMmIyYjE0NTYzOThmNzNjN2UyNTBkMTQ2ZDQwYTNlNmFlOWI3ZmY4OTg%3D&uuid=&pii=&in=false HTTP/1.1
Host: haltcandle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://haltcandle.com/t9hiwrkd?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=15107318
Cookie: u_pl=15107318; ain=eyJhbGciOiJIUzI1NiJ9.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.ciDTqMiP3ROes4RaO6dYvGUflakFDF8LM8yxpk2qVrY; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Thu, 26 Oct 2023 04:14:31 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://violationphysics.click/c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2daa2210e9843e5d6a2fdf33944c23b5&COST_CPA=0.100000&PLACEMENT_ID=15107318&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A109.0%29%20Gecko%2F20100101%20Firefox%2F111.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625
Set-Cookie: iprc109d36663b365fccd39be4a123bc6036=4641329; expires=Fri, 27 Oct 2023 04:14:31 GMT
pdhtkv=true; expires=Fri, 27 Oct 2023 04:14:31 GMT
uncs=1; expires=Fri, 27 Oct 2023 04:14:31 GMT
pdhtkv28=true; expires=Fri, 27 Oct 2023 04:14:31 GMT
uncs28=1; expires=Fri, 27 Oct 2023 04:14:31 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6bc480cfc1f311d074267529600f3dc0
Strict-Transport-Security: max-age=0; includeSubdomains
violationphysics.click/c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2daa2210e9843e5d6a2fdf33944c23b5&COST_CPA=0.100000&PLACEMENT_ID=15107318&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A109.0%29%20Gecko%2F20100101%20Firefox%2F111.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625
192.64.81.118 0 B URL violationphysics.click/c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2daa2210e9843e5d6a2fdf33944c23b5&COST_CPA=0.100000&PLACEMENT_ID=15107318&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A109.0%29%20Gecko%2F20100101%20Firefox%2F111.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625
IP 192.64.81.118:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2daa2210e9843e5d6a2fdf33944c23b5&COST_CPA=0.100000&PLACEMENT_ID=15107318&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A109.0%29%20Gecko%2F20100101%20Firefox%2F111.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625 HTTP/1.1
Host: violationphysics.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haltcandle.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Thu, 26 Oct 2023 04:14:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=h9hebzscsy; expires=Fri, 27-Oct-2023 04:14:32 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=h9hebzscsy-h9hebzscsy-hq1m-0-q5a4bl-ftxofe-ft8pdz-07ba97; expires=Fri, 27-Oct-2023 04:14:32 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://vvfal.rigelbetelgeuse.top/?pl=zKByXHsQK0ydGD7DogbGyA&click_id=7139ah9hebzscsyf6c&sub_id=15107318
Strict-Transport-Security: max-age=31536000
vvfal.rigelbetelgeuse.top/?pl=zKByXHsQK0ydGD7DogbGyA&click_id=7139ah9hebzscsyf6c&sub_id=15107318
104.21.22.161 0 B URL vvfal.rigelbetelgeuse.top/?pl=zKByXHsQK0ydGD7DogbGyA&click_id=7139ah9hebzscsyf6c&sub_id=15107318
IP 104.21.22.161:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=zKByXHsQK0ydGD7DogbGyA&click_id=7139ah9hebzscsyf6c&sub_id=15107318 HTTP/1.1
Host: vvfal.rigelbetelgeuse.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haltcandle.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 26 Oct 2023 04:14:32 GMT
content-length: 0
location: https://vvfal.magmaartisan.top/allow-button/?pl=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&hash=JxhX6hqMFc4Mcp94emgqGA&exp=1698293972
set-cookie: zKByXHsQK0ydGD7DogbGyA=2; max-age=345600; path=/; samesite=lax
__pl=bfb6f5b1-c07b-4254-943e-8280f3284243; expires=Sun, 26 Oct 2025 04:14:32 GMT; path=/; samesite=lax
__cap=1; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PJJ75T0G0rDCfmd0XHBA3sCCecWolR3txJqgKPjmTKWaiDlHy8bBXo1C9%2BEkz2%2FNZuVa0PwhbppeYy1uRj9E4sDBErGPSmAopRDJUA4WswRURbiOffE2gP%2FNs3joq7kxZQFXDo993JqkIH0D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81bfdf7d3dbb56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/t2wcaVACpFQ
142.250.74.131 472 B URL ocsp.pki.goog/s/gts1p5/t2wcaVACpFQ
IP 142.250.74.131:0
Hash e8f7eee2c79cc2030f3d3d84430eae58
aad7ff6a903d2cf113a4566114a367e4182df929
96b1159e1a8c6663ed3978f7a311508d01c9558076b8862d0a4567846639d97d
POST /s/gts1p5/t2wcaVACpFQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 04:14:32 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/t2wcaVACpFQ
142.250.74.131 472 B URL ocsp.pki.goog/s/gts1p5/t2wcaVACpFQ
IP 142.250.74.131:0
Hash e8f7eee2c79cc2030f3d3d84430eae58
aad7ff6a903d2cf113a4566114a367e4182df929
96b1159e1a8c6663ed3978f7a311508d01c9558076b8862d0a4567846639d97d
POST /s/gts1p5/t2wcaVACpFQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 04:14:32 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vvfal.magmaartisan.top/allow-button/assets/trls.js
172.67.218.118 1.6 kB URL vvfal.magmaartisan.top/allow-button/assets/trls.js
IP 172.67.218.118:0
File type Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Hash d4a23c4124d49f909abaef62a8bf47a5
e7b26553db1400d07f1b12137053ebe7b066972f
3efcd61ce47244f47b15c9f5d5749f79b2ddd57e51ebf995267ab02d4dcf2180
GET /allow-button/assets/trls.js HTTP/1.1
Host: vvfal.magmaartisan.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.magmaartisan.top/allow-button/?pl=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&hash=JxhX6hqMFc4Mcp94emgqGA&exp=1698293972
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 04:14:32 GMT
content-type: application/javascript
last-modified: Wed, 28 Jun 2023 10:38:50 GMT
etag: W/"649c0dba-1e6a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 62
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQkWSxbyaIpiJ8GBYjrspuki2SnI%2FgVtJM7VqmNFZKR6NCu4Eogyixn2y6xvvp88kzNAYkTWSQHAaphNMUoaY6wa3J6vktjnF2ptWicU2gtGke9qcRiIVSVcqAMl6%2BsSsEp7QrlHfPQ0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81bfdf7fead1b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash cf24af84f2ef501aec7ab5241cd90cd6
4e1c1e7c028c195d9658f7ce45713f8530315aee
c59a67efbe5d50a13fbcd53e087c886f9bf0f6be5df8ce7c504089442b7433df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 04:14:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vvfal.magmaartisan.top/shared-js/assets/static-pl.js
172.67.218.118 8.1 kB URL vvfal.magmaartisan.top/shared-js/assets/static-pl.js
IP 172.67.218.118:0
File type ASCII text, with CRLF line terminators
Hash 0eb67b3f8ad843ac2a8bc2c055216e6b
ac24b0abe03ffd2f82600ae8b9dd4c6146069af3
93972bbc62d530dd23e06c5174b3e9ed4fb5719279ecef774d0a7eacf1040a18
GET /shared-js/assets/static-pl.js HTTP/1.1
Host: vvfal.magmaartisan.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.magmaartisan.top/allow-button/?pl=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&hash=JxhX6hqMFc4Mcp94emgqGA&exp=1698293972
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 04:14:32 GMT
content-type: application/javascript
last-modified: Wed, 28 Jun 2023 10:38:50 GMT
etag: W/"649c0dba-bf3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 296
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1RQXjPnlb43U6oV6nRwVP2Crlek3PJPi7yH490sGxsY773zZiRd4yqHjEqUEbd2z26kzVGytGrmHnSAV4sGYDzTUe%2Fc3QYWN19JqXfBcynJspHFXDAgRMYB%2FoIjbALfNdxfSB0Dgws%2Bx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81bfdf7fead3b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash cf24af84f2ef501aec7ab5241cd90cd6
4e1c1e7c028c195d9658f7ce45713f8530315aee
c59a67efbe5d50a13fbcd53e087c886f9bf0f6be5df8ce7c504089442b7433df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 04:14:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnstatic.magmaartisan.top/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&appspot=&d=https%3A%2F%2Fcdnstatic.magmaartisan.top
172.67.218.118 20 kB URL cdnstatic.magmaartisan.top/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&appspot=&d=https%3A%2F%2Fcdnstatic.magmaartisan.top
IP 172.67.218.118:0
File type Unicode text, UTF-8 text, with very long lines (24254), with no line terminators
Hash 08337a95c7c518547270b7dddd883c93
961fb6f7651551d32c6501e159afc361ed9e4844
ea1ad6faccf2662c617fcace866551925cf5730f68987735aa9fe9ce39c044b7
GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&appspot=&d=https%3A%2F%2Fcdnstatic.magmaartisan.top HTTP/1.1
Host: cdnstatic.magmaartisan.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.magmaartisan.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 04:14:33 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: BYPASS
set-cookie: __psu=9c99e7d1-7728-4bed-a721-bf4c8350f919; expires=Sun, 26 Oct 2025 04:14:33 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rw8ggb1QFRBnVV7oJV%2BivSuBQ3grb41RTMjsL1ptT1DlZ1kHVWWiHtlxy0OWYSD9Brl2yQqpkugT6Gf25OJuu4T9m%2Bs9lSzMr6yO1f%2FeywWuaFFaoMK%2BR%2ButLNHl28z3Oj9Qy0EG%2FqD2hVk5vw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81bfdf806b0ab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
a.magmaartisan.top/favicon.ico
172.67.218.118 0 B URL a.magmaartisan.top/favicon.ico
IP 172.67.218.118:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: a.magmaartisan.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magmaartisan.top/allow-button/?pl=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&hash=JxhX6hqMFc4Mcp94emgqGA&exp=1698293972
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Thu, 26 Oct 2023 04:14:33 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 629
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ORYfI1xaCGdAJpvtlUB8WPhcFtgahj9mT4APLqJpQLah5aDE2RZ0uBWJb%2BMMfpFcr70E%2BgbUnHJsRXbJsD6S%2FA3WRYs8ysFhXsIWRovlfpcFZ9cYD0p2Wvga7QNrzi1Ku74889U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81bfdf840c66b521-OSL
alt-svc: h3=":443"; ma=86400
a.magmaartisan.top/allow-button/assets/style.css
172.67.218.118 16 kB URL a.magmaartisan.top/allow-button/assets/style.css
IP 172.67.218.118:0
File type ASCII text, with CRLF line terminators
Hash 30d80b4eb5d929d058548bf104eadf4a
a73cd37a03442a044821fd15d89f70e565f43c9d
e992932bc74e41cb59108c3700c7bd98f941c475ac2a19d2c0b48964551901f2
GET /allow-button/assets/style.css HTTP/1.1
Host: a.magmaartisan.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magmaartisan.top/allow-button/?pl=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&hash=JxhX6hqMFc4Mcp94emgqGA&exp=1698293972
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 04:14:33 GMT
content-type: text/css
last-modified: Wed, 28 Jun 2023 10:38:50 GMT
etag: W/"649c0dba-253"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4460
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pu5srjgTNJDMBXzGKzWbrbRHYp5dHOmrspPgJ1y2PK%2FBEYer%2F%2BOH6ZOyYfGLDpnJ%2BwsUy%2FID%2FZXNtTp485pYiya4CeUbTULsswK0WrJNf5sljV7KXDXEz7kFU%2Fq%2FnXRpbMnRa0A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81bfdf837c3db521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
142.250.74.35 11 kB URL www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (40976)
Hash a498cb0f91ef52cc08969e1737b34638
c0e12b338ca7adea31b105546fde021edecbfc3c
a8d6389e6811b9fea7ff683cb31a57a6e0b29781407d7f5d45994aae1b5725b7
GET /firebasejs/8.4.1/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magmaartisan.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Oct 2023 17:30:23 GMT
expires: Sat, 19 Oct 2024 17:30:23 GMT
cache-control: public, max-age=31536000
age: 470650
last-modified: Tue, 13 Apr 2021 06:56:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
best-fortunes.life/?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c
185.155.186.32200 OK 34 kB URL User Request GET HTTP/1.1 best-fortunes.life/?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c
IP 185.155.186.32:443
ASN #203639 Tekka Digital SA
Certificate IssuerLet's Encrypt
Subjectbest-fortunes.life
FingerprintFD:F8:66:F6:FE:94:2B:B3:5C:5F:01:D4:ED:BB:17:2B:A0:97:8F:D6
ValidityTue, 10 Oct 2023 11:46:47 GMT - Mon, 08 Jan 2024 11:46:46 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (17519), with CRLF line terminators
Hash 4e0c02f6494ae7a76ce03c87037eebb6
fab5a2e5982c3d2f942642e0e1a713ff8f03a60c
db7bbf984d635121e48949d3be7747a9b6668c723abbb0e14729c906d1a0a18b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c HTTP/1.1
Host: best-fortunes.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magmaartisan.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: text/html
Content-Length: 34261
Connection: keep-alive
set-cookie: sid=t9~11b5brujhqabwzxeqgmsitgy; path=/
sid=t9~11b5brujhqabwzxeqgmsitgy; path=/
p1=https://minemegowe.live/wmaimdjc/; path=/
s1=xx4ji6jgagqd6kp8; path=/
cache-control: private, no-transform
best-fortunes.life/favicon.ico
185.155.186.32 0 B URL best-fortunes.life/favicon.ico
IP 185.155.186.32:0
ASN #203639 Tekka Digital SA
Certificate IssuerLet's Encrypt
Subjectbest-fortunes.life
FingerprintFD:F8:66:F6:FE:94:2B:B3:5C:5F:01:D4:ED:BB:17:2B:A0:97:8F:D6
ValidityTue, 10 Oct 2023 11:46:47 GMT - Mon, 08 Jan 2024 11:46:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: best-fortunes.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://best-fortunes.life/?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c
Cookie: sid=t9~11b5brujhqabwzxeqgmsitgy; p1=https://minemegowe.live/wmaimdjc/; s1=xx4ji6jgagqd6kp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 26 Oct 2023 04:14:34 GMT
Connection: keep-alive
Cache-Control: no-transform
2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
185.155.184.152200 OK 21 kB URL User Request GET HTTP/1.1 2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (841), with CRLF line terminators
Hash 8c126a96aaf762da49b83e63de8baed4
ac571b29f65482f004e77e83f091b000a7a7b920
966b422ad46d6a495edfb65637eaac49092a1f459100aa943a9097629b40c1ed
GET /wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://best-fortunes.life/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: text/html
Content-Length: 21361
Connection: keep-alive
cache-control: private
2614.minemegowe.live/media/mainstream/all/ab/2008_2.css
185.155.184.152200 OK 8.0 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/2008_2.css
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type assembler source, ASCII text
Hash 3a3692009050605115ce92e15cdc4f8a
80f2be7713fc6b704492a24646632ac5b86d610d
24af2f8d21f9612e2b3012382c362743db495fa91370d0f87d22b077caf484af
GET /media/mainstream/all/ab/2008_2.css HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: text/css
Content-Length: 7969
Connection: keep-alive
ETag: "3a3692009050605115ce92e15cdc4f8a"
Last-Modified: Wed, 20 Sep 2023 15:23:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918C98B069354C
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#284024580/gid:0/gname:root/mode:33188/mtime:1661094568#999105000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T15:09:28.999105Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
151.101.193.229200 OK 24 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
IP 151.101.193.229:443
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (65297)
Hash a454220fc07088bf1fdd19313b6bfd50
265a733cb7fbc481fd2510a659a85ad55c93c895
7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c
GET /npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.3.1
x-jsd-version-type: version
etag: W/"1332b-JlpzPLf7xIH9JRCmWaha1VyTyJU"
content-encoding: br
accept-ranges: bytes
date: Thu, 26 Oct 2023 04:14:34 GMT
age: 10976457
x-served-by: cache-fra-eddf8230062-FRA, cache-bma1670-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23541
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash a7e6dc84285a2e7d15aa8afde0751d4b
5392c576e5f3980abcb99892c53a37585cecd57b
9107b66eafd000a5042343b6179e579c317a8deb6aba714b351a0f138eb7167c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 04:14:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2614.minemegowe.live/media/mainstream/all/ab/2008.css
185.155.184.152200 OK 22 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/2008.css
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type ASCII text, with CRLF line terminators
Hash a008e2dbe07922242a5f012ccd7da015
1b0718855d0c5ca6e25d4553e312c8652df334a7
903a8f67a7fa0613988fa1ab30073aac45e856b60c7b1eace94a95b70db41e42
GET /media/mainstream/all/ab/2008.css HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: text/css
Content-Length: 21546
Connection: keep-alive
ETag: "a008e2dbe07922242a5f012ccd7da015"
Last-Modified: Wed, 20 Sep 2023 15:23:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918C98B79B784B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#284024580/gid:0/gname:root/mode:33188/mtime:1661084880#124572000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T12:28:00.124572Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/2008_1.js
185.155.184.152200 OK 15 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/2008_1.js
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type ASCII text, with very long lines (927), with CRLF line terminators
Hash 70a301508a891eb3c9f0e7d43cbd2072
37b7e329763c1285514bac3d77808a1a3389b6da
e86620b8e47101a2701a71369c8f40d6ac250beeea5a86b69fd407035b57b549
GET /media/mainstream/all/ab/2008_1.js HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: application/javascript
Content-Length: 14759
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "70a301508a891eb3c9f0e7d43cbd2072"
Last-Modified: Mon, 03 Apr 2023 12:30:19 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 17918C993B254D9A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679402415#668622988/gid:0/gname:root/mode:33188/mtime:1661082594#618119000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T11:49:54.618119Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
lkfkwklxx.dpm-soest.de/
172.67.130.223 31 kB IP 172.67.130.223:0
File type gzip compressed data, max compression\012- data
Hash 903bc7a7e510f87aa5d0201eb59a0832
ac9aa4dd94cde1bcba9037e94087138b127e41fc
41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
GET / HTTP/1.1
Host: lkfkwklxx.dpm-soest.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 26 Oct 2023 04:14:30 GMT
content-type: text/html; charset=UTF-8
location: https://haltcandle.com/t9hiwrkd?key=d928d7c4e235fa6eb6c04ecc0f7abe92
x-powered-by: PHP/5.4.16
set-cookie: PHPSESSID=opbmqdg2n143s43e5mk4dj1m82; path=/
_subid=1sisi1aspmc12; expires=Fri, 27-Oct-2023 04:14:30 GMT; path=/; domain=.lkfkwklxx.dpm-soest.de
9fb19=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE2MFwiOjE2OTgyOTM2NzB9LFwiY2FtcGFpZ25zXCI6e1wiMTNcIjoxNjk4MjkzNjcwfSxcInRpbWVcIjoxNjk4MjkzNjcwfSJ9.Uq6f-tkTYVAGYEkTmiT4VOjJXFp_HfCZ7YqgE23ns-k; expires=Fri, 27-Oct-2023 04:14:30 GMT; path=/; domain=.lkfkwklxx.dpm-soest.de
_token=uuid_1sisi1aspmc12_1sisi1aspmc126539e7a64900d4.47816372; expires=Fri, 27-Oct-2023 04:14:30 GMT; path=/; domain=.lkfkwklxx.dpm-soest.de
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fW4wNB3OxpTvi64sVC9cWTSpMZInJwDAHOdgzRFMc%2Beq94H6%2Ba%2FZxWbKUgkW20neWiOGVteGVhal1ebskoL6y4z95YQ2bNxS8vBcKa0VShk%2BPc6DTyRAnIXxuvWI8u3HZCYOjAH29L96"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81bfdf6b2b9c56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
2614.minemegowe.live/media/mainstream/flag-icon/css/flag-icon.css
185.155.184.152200 OK 40 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/flag-icon/css/flag-icon.css
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type ASCII text, with CRLF line terminators
Hash b7a46a018dcd21a4828bae0b04ddcc6c
1d8418d6cc45e5c29e1aab008c18ea633e7730c4
299595fd56aa6a2fcfac34fcf780d33b61785ad96f19485e65a33ead8fd69cbc
GET /media/mainstream/flag-icon/css/flag-icon.css HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: text/css
Content-Length: 39806
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "b7a46a018dcd21a4828bae0b04ddcc6c"
Last-Modified: Mon, 03 Apr 2023 12:31:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 17918C98B039B57B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679349395#391505820/gid:0/gname:root/mode:33279/mtime:1655387459#318598233/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:59.318598233Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
vvfal.magmaartisan.top/allow-button/assets/style.css
172.67.218.118 6.8 kB URL vvfal.magmaartisan.top/allow-button/assets/style.css
IP 172.67.218.118:0
File type ASCII text, with CRLF line terminators
Hash 30d80b4eb5d929d058548bf104eadf4a
a73cd37a03442a044821fd15d89f70e565f43c9d
e992932bc74e41cb59108c3700c7bd98f941c475ac2a19d2c0b48964551901f2
GET /allow-button/assets/style.css HTTP/1.1
Host: vvfal.magmaartisan.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.magmaartisan.top/allow-button/?pl=zKByXHsQK0ydGD7DogbGyA&sm=allow-button&click_id=7139ah9hebzscsyf6c&sub_id=15107318&hash=JxhX6hqMFc4Mcp94emgqGA&exp=1698293972
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 04:14:32 GMT
content-type: text/css
last-modified: Wed, 28 Jun 2023 10:38:50 GMT
etag: W/"649c0dba-253"
cache-control: max-age=14400
cf-cache-status: HIT
age: 62
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dcd5zQu3Bch740k48tBREdmsUJ98XqYMKLhdz4jC9A2OacYkyi66M7U7Piv7o3DkOO8tDaNvvRgY0ZhRk5f7E7masMBxWNhoXXa5I8%2F57Nfpne2ASfMFOFcb%2BVZ7HdxN1a2WlXzEC5vi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81bfdf7fead2b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
2614.minemegowe.live/media/mainstream/all/ab/2008_3.js
185.155.184.152200 OK 7.5 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/2008_3.js
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
Hash f235f98748487db96795fd73ed48a46d
4cf6f3d733184af759d2f6d2251321df778accdd
5ee7e3f6c675569417eabed4df39057a60e056b0a5eb5abbecf0c1979780d684
GET /media/mainstream/all/ab/2008_3.js HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: application/javascript
Content-Length: 7481
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f235f98748487db96795fd73ed48a46d"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17918CD8A59EACFD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676810017#673891798/gid:0/gname:root/mode:33188/mtime:1661082623#6152000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T11:50:23.006152Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/sound.js
185.155.184.152200 OK 5.0 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/sound.js
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type ASCII text, with very long lines (5014), with no line terminators
Hash 1f1fed792da20aa1e75213d3f1839a0d
b5744653854dc322effae7e83ba3b99f8818dffc
32cde492155502743e1b7c5ec41ba974216be8c331db01e5cd933726443241df
GET /media/mainstream/sound.js HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: application/javascript
Content-Length: 5014
Connection: keep-alive
ETag: "1f1fed792da20aa1e75213d3f1839a0d"
Last-Modified: Wed, 20 Sep 2023 15:25:15 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918C98C5230180
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#348024780/gid:0/gname:root/mode:33279/mtime:1655387452#846583343/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:52.846583343Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash a7e6dc84285a2e7d15aa8afde0751d4b
5392c576e5f3980abcb99892c53a37585cecd57b
9107b66eafd000a5042343b6179e579c317a8deb6aba714b351a0f138eb7167c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 04:14:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2614.minemegowe.live/media/mainstream/all/ab/no/2.js
185.155.184.152200 OK 416 B URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/no/2.js
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 9075531370b86e49402928b23fc26c0e
b88fc53cd5ef41285a5c1be4b1aecc1a54a7ce0e
31e764b82e550f1e27b814ac8047f8832da32e4a3d7045043f8de1e312112ca3
GET /media/mainstream/all/ab/no/2.js HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: application/javascript
Content-Length: 416
Connection: keep-alive
ETag: "9075531370b86e49402928b23fc26c0e"
Last-Modified: Wed, 20 Sep 2023 15:23:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918D18F9EEBB8C
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#276024555/gid:0/gname:root/mode:33279/mtime:1653412332#133070000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:12.13307Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/u.js
185.155.184.152200 OK 25 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/u.js
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type ASCII text, with very long lines (25177), with no line terminators
Hash e44aa4ca20702394c8ca04144c3e9e74
b3734a4cde021bb14d2d296c0ae5dfa8112376f6
e075018e9a06d85a147b1f0d79e8e777da51019b4f306076f8fbba751d42d566
GET /media/mainstream/u.js HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: application/javascript
Content-Length: 25177
Connection: keep-alive
ETag: "e44aa4ca20702394c8ca04144c3e9e74"
Last-Modified: Wed, 20 Sep 2023 15:25:23 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918C9923170C2F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#604025581/gid:0/gname:root/mode:33188/mtime:1657924117#384361000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-15T22:28:37.384361Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/fr2.jpg
185.155.184.152200 OK 2.8 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/fr2.jpg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 9b63ccbd631923743813e838190cecbf
5c6dd930c81346616e9c641ff41b6f18344c7e76
4ca9130a03f6874bab37d2d52fd4546e3de34ccccbd83aa5b9cb6ed0f923d8b3
GET /media/mainstream/all/ab/fr2.jpg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/jpeg
Content-Length: 2815
Connection: keep-alive
ETag: "9b63ccbd631923743813e838190cecbf"
Last-Modified: Wed, 20 Sep 2023 15:23:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918CD9299180BA
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#272024543/gid:0/gname:root/mode:33279/mtime:1653412324#505053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.505053Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/box_open.png
185.155.184.152200 OK 2.7 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/box_open.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 258 x 185, 8-bit colormap, non-interlaced\012- data
Hash 99264bee31a1abde5d0035468e53bbfb
d1f25383b68c3769eb3bdb36783e85c112078054
8da9180789c861b8d0d67d2bca168dfcc6de98f6999ab47400c38397d122157f
GET /media/mainstream/all/ab/box_open.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/png
Content-Length: 2685
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "99264bee31a1abde5d0035468e53bbfb"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17918CD91D7A60BC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412322#933050000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:02.93305Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/box_closed.png
185.155.184.152200 OK 5.8 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/box_closed.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 258 x 184, 8-bit colormap, non-interlaced\012- data
Hash 890d869db1b3d28af588be81685214f2
5375bd0c2c75a6e40168f5561eb4eca993d14505
ea2521add13deb769fb7abee364670a567e7a3dc7b3b4474b5f80510dc593212
GET /media/mainstream/all/ab/box_closed.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/png
Content-Length: 5836
Connection: keep-alive
ETag: "890d869db1b3d28af588be81685214f2"
Last-Modified: Wed, 20 Sep 2023 15:23:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918D0798B3F48D
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#272024543/gid:0/gname:root/mode:33279/mtime:1653412322#873050000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:02.87305Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/x1.png
185.155.184.152200 OK 593 B URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/x1.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 258 x 184, 8-bit colormap, non-interlaced\012- data
Hash ee850988ed56cd6f2498cae7993a8753
965f9091ca3e7f21f5b8115347227aedc93c586e
0303153a716bc5000d737521c0f6eb517700a1856b8e22ba8c088ec8f06ed8ba
GET /media/mainstream/all/ab/x1.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
ETag: "ee850988ed56cd6f2498cae7993a8753"
Last-Modified: Wed, 20 Sep 2023 15:23:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918C9B1BE6CDDD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#276024555/gid:0/gname:root/mode:33279/mtime:1653412336#881081000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:16.881081Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/fr5.jpg
185.155.184.152200 OK 3.0 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/fr5.jpg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 7f103bc91a8084cd154189b5ebb2cf86
375e58c42a8c409bbf111847a1f6798ba6c0d5f5
346139aaec984853288672896d297ded47ac7ee1cb77ca43b63e130952cdd946
GET /media/mainstream/all/ab/fr5.jpg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/jpeg
Content-Length: 3043
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "7f103bc91a8084cd154189b5ebb2cf86"
Last-Modified: Mon, 03 Apr 2023 12:30:19 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 17918CD933398147
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679349274#687314584/gid:0/gname:root/mode:33279/mtime:1653412324#705054000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.705054Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/fr4.jpg
185.155.184.152200 OK 4.3 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/fr4.jpg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash f96150cbbb80ac607b3f264141a7faef
9ed21cb4e5c552f29bc23db55684c945e7582071
f013c5f2d9aedd8072d4bf01749c7dfcbacb80a43d06aa579403adfd8fd21fd3
GET /media/mainstream/all/ab/fr4.jpg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/jpeg
Content-Length: 4307
Connection: keep-alive
ETag: "f96150cbbb80ac607b3f264141a7faef"
Last-Modified: Wed, 20 Sep 2023 15:23:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918CD92A4536C0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#272024543/gid:0/gname:root/mode:33279/mtime:1653412324#641054000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.641054Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/fr1.jpg
185.155.184.152200 OK 2.9 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/fr1.jpg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 4c88ebf87b0cc26121497de03db7f64a
a1256a5cfcd62223172eb3633659caddff6cf005
28db5edb0fe5e61f42eb8a0d10250a317f3ac840e074ffa761cb953c330f2cf6
GET /media/mainstream/all/ab/fr1.jpg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/jpeg
Content-Length: 2939
Connection: keep-alive
ETag: "4c88ebf87b0cc26121497de03db7f64a"
Last-Modified: Wed, 20 Sep 2023 15:23:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918CD91225E93D
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#272024543/gid:0/gname:root/mode:33279/mtime:1653412324#385053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.385053Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/fr11.jpg
185.155.184.152200 OK 3.2 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/fr11.jpg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 752f51c4c387c0ca7f4337acdeec15d6
7f9777f95aececfce6fa930181269cce30a4a059
227cec10c842ba3865d12ed22363f87ca5135b3ac2c72e5ab1a3169c4a2d569c
GET /media/mainstream/all/ab/fr11.jpg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/jpeg
Content-Length: 3157
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "752f51c4c387c0ca7f4337acdeec15d6"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17918CD93F5A5368
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#445053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.445053Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/like.png
185.155.184.152200 OK 357 B URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/like.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 15 x 14, 8-bit colormap, non-interlaced\012- data
Hash 17586a0aeb3f7b2aa7fb15a9251fbcd4
6adffad1183c93bc0dc114c89c77365734ec0dd6
8bf8dc3a4b6f7e4fa2a6fa74495c212f37a301311980cbc758050993ed9c07e1
GET /media/mainstream/all/ab/like.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/png
Content-Length: 357
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "17586a0aeb3f7b2aa7fb15a9251fbcd4"
Last-Modified: Mon, 03 Apr 2023 12:30:19 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 17918CD92849E11B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679349274#691314590/gid:0/gname:root/mode:33279/mtime:1653412329#505064000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:09.505064Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/fr6.jpg
185.155.184.152200 OK 2.8 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/fr6.jpg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash f17d127dfcaa6f94929eedd080276df0
ec801473523b8eb44e123b5634081d2b57715ba6
0108e4d428f408f819f174ae8a5923b4010e80a14fc9872b018c12781e114403
GET /media/mainstream/all/ab/fr6.jpg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/jpeg
Content-Length: 2814
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f17d127dfcaa6f94929eedd080276df0"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17918D11E02A1BFC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#765054000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.765054Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/l.png
185.155.184.152200 OK 9.2 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/l.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 768 x 293, 8-bit colormap, non-interlaced\012- data
Hash a0560779cf67aeb9a0c19f68f3582024
ff8d079fbbbad6b70be4d83c760a4a61bc51ff33
b585ee5fc0af431c584664f82e390e5a65bbbc6f201fe495d7c289ea618f5d5e
GET /media/mainstream/all/ab/l.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/png
Content-Length: 9224
Connection: keep-alive
ETag: "a0560779cf67aeb9a0c19f68f3582024"
Last-Modified: Wed, 20 Sep 2023 15:23:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918C99BA5AA486
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#284024580/gid:0/gname:root/mode:33188/mtime:1675688264#107993000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-02-06T12:57:44.107993Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/fr3.jpg
185.155.184.152200 OK 3.6 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/fr3.jpg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash c74a5befd416e24626972e88ed65526d
4e8c25553248600cf23c3d6bcec488d986a129f8
53bb570f4465306a78670ecbea911ba0362251d2dc825d9ea0cb5d1c70f413ac
GET /media/mainstream/all/ab/fr3.jpg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/jpeg
Content-Length: 3601
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "c74a5befd416e24626972e88ed65526d"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17918CD92C3A6AE8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#581053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.581053Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/muti_iphone14pro.png
185.155.184.152200 OK 39 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/muti_iphone14pro.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 500 x 375, 8-bit colormap, non-interlaced\012- data
Hash 42735146d56c0e4289363b6286186f9d
8d9cfa2d7653ac990e7b4df29550e8f3fbb0ff6d
b96b3a8a526eeadaf754a2b9239fe520179c9ee48cdf07da8b6b2d136066681b
GET /media/mainstream/all/ab/muti_iphone14pro.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: image/png
Content-Length: 38744
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "42735146d56c0e4289363b6286186f9d"
Last-Modified: Mon, 20 Feb 2023 09:33:02 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17918D06E662BE19
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676849985#960972255/gid:0/gname:root/mode:33188/mtime:1663542090#630579000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-09-18T23:01:30.630579Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/box-iphone14pro.png
185.155.184.152200 OK 4.5 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/box-iphone14pro.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 258 x 185, 8-bit colormap, non-interlaced\012- data
Hash e26ab4191e2b939c553ea223042be270
1ef6e06777ad700e46a5d5995573b8ad09d339c8
7cc901bcb50159c267c3ecd4995bb69dbd47939ca52c81ab28f527651200e472
GET /media/mainstream/all/ab/box-iphone14pro.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:35 GMT
Content-Type: image/png
Content-Length: 4457
Connection: keep-alive
ETag: "e26ab4191e2b939c553ea223042be270"
Last-Modified: Wed, 20 Sep 2023 15:23:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918C9B2D3A41E1
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#284024580/gid:0/gname:root/mode:33188/mtime:1667333084#863076000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-11-01T20:04:44.863076Z
Expires: Fri, 25 Oct 2024 04:14:35 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/top_red.png
185.155.184.152200 OK 4.6 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/top_red.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 258 x 184, 8-bit colormap, non-interlaced\012- data
Hash a660370feb6a1543c3c872a52f7bcfa7
b9478ed6228e8fb34a393013d474cde8dc400848
9d1eed749548dad4b80b2d7ce32052143bd38773685029d7b60cee82a31840b7
GET /media/mainstream/all/ab/top_red.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:35 GMT
Content-Type: image/png
Content-Length: 4560
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "a660370feb6a1543c3c872a52f7bcfa7"
Last-Modified: Mon, 03 Apr 2023 12:30:20 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 17918C9ABA57E132
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679349274#695314597/gid:0/gname:root/mode:33279/mtime:1653412335#773078000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:15.773078Z
Expires: Fri, 25 Oct 2024 04:14:35 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/all/ab/iphone14pro.png
185.155.184.152200 OK 37 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/all/ab/iphone14pro.png
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type PNG image data, 440 x 514, 8-bit colormap, non-interlaced\012- data
Hash 2f6bfed27c86fb5b0cf0796e73089fb0
be5c1a83cb372816542e8f92e75fddcc12872d42
601790639edd8b031101566f42f5ca7bb57d1fd090aff2783f7a5f5a1ceb0084
GET /media/mainstream/all/ab/iphone14pro.png HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:35 GMT
Content-Type: image/png
Content-Length: 37189
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2f6bfed27c86fb5b0cf0796e73089fb0"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17918D0709CF366C
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676809630#973322822/gid:0/gname:root/mode:33188/mtime:1663242360#392676000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-09-15T11:46:00.392676Z
Expires: Fri, 25 Oct 2024 04:14:35 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash cf24af84f2ef501aec7ab5241cd90cd6
4e1c1e7c028c195d9658f7ce45713f8530315aee
c59a67efbe5d50a13fbcd53e087c886f9bf0f6be5df8ce7c504089442b7433df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 04:14:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2
142.250.74.3200 OK 9.1 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2
IP 142.250.74.3:443
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 9132, version 1.0\012- data
Hash 358d3070946a90b4960cd111154fdc12
a0ba0bf47a7f905f9aa1a3ce15a39cdac62466ee
54c64f3c66372027154f01fc9f24b4e25fdfe405b70d1994c79abbc2576ff775
GET /s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://2614.minemegowe.live
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9132
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Oct 2023 01:21:23 GMT
expires: Sun, 20 Oct 2024 01:21:23 GMT
cache-control: public, max-age=31536000
age: 442392
last-modified: Tue, 23 Jul 2019 19:30:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2614.minemegowe.live/media/mainstream/alert.mp3
185.155.184.152200 OK 8.8 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/alert.mp3
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /media/mainstream/alert.mp3 HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Cookie: cookie1=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:35 GMT
Content-Type: audio/mpeg
Content-Length: 8802
Connection: keep-alive
ETag: "6d2d3da2ea28ace816fa4a138829dc18"
Last-Modified: Wed, 20 Sep 2023 15:23:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918CD9801EE4FA
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#348024780/gid:0/gname:root/mode:33279/mtime:1655387452#802583242/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:52.802583242Z
Expires: Fri, 25 Oct 2024 04:14:35 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/favicon.ico
185.155.184.152204 No Content 0 B URL GET HTTP/1.1 2614.minemegowe.live/favicon.ico
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Cookie: cookie1=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: openresty
Date: Thu, 26 Oct 2023 04:14:35 GMT
Connection: keep-alive
2614.minemegowe.live/media/mainstream/flag-icon/flags/1x1/no.svg
185.155.184.152200 OK 331 B URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/flag-icon/flags/1x1/no.svg
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash d748f0d9f64c0ca1a40a0f6ec6bbb746
a76adb95e9ea9a737c72e4640b8d49b9e28cbb38
bdfbd626e4e76d0dc506e10be7dd429e4c4da684986cbd45e5398f1e9e1f28cc
GET /media/mainstream/flag-icon/flags/1x1/no.svg HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/media/mainstream/flag-icon/css/flag-icon.css
Cookie: cookie1=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:35 GMT
Content-Type: image/svg+xml
Content-Length: 331
Connection: keep-alive
ETag: "d748f0d9f64c0ca1a40a0f6ec6bbb746"
Last-Modified: Wed, 20 Sep 2023 15:24:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918D1923492B0F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134508#296021489/gid:0/gname:root/mode:33279/mtime:1655387477#774640726/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:51:17.774640726Z
Expires: Fri, 25 Oct 2024 04:14:35 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
2614.minemegowe.live/media/mainstream/icon.js
185.155.184.152200 OK 6.6 kB URL GET HTTP/1.1 2614.minemegowe.live/media/mainstream/icon.js
IP 185.155.184.152:443
ASN #6898 SERVER.swiss Sagl
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectminemegowe.live
Fingerprint52:F2:7E:ED:66:EB:F1:CB:82:09:56:E7:B3:EE:0F:9F:77:18:60:29
ValidityWed, 25 Oct 2023 19:50:36 GMT - Tue, 23 Jan 2024 19:50:35 GMT
File type ASCII text, with very long lines (6570), with no line terminators
Hash a8e36248f01478844f0c4db185e945a0
d822225c2e21cd5fd7910f825da1e646b21dc078
9195437b3d4ffd3d3652df03d4de4ff03c454386ec19a1777da588a2f83827c2
GET /media/mainstream/icon.js HTTP/1.1
Host: 2614.minemegowe.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 26 Oct 2023 04:14:34 GMT
Content-Type: application/javascript
Content-Length: 6570
Connection: keep-alive
ETag: "a8e36248f01478844f0c4db185e945a0"
Last-Modified: Wed, 20 Sep 2023 15:24:17 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17918CD8AB53084D
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134509#220024380/gid:0/gname:root/mode:33279/mtime:1655387452#842583333/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:52.842583333Z
Expires: Fri, 25 Oct 2024 04:14:34 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
142.250.74.42200 OK 90 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP 142.250.74.42:443
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:23:2B:8B:2D:09:6C:BB:06:7A:35:80:95:BB:F8:03:41:C8:99:2C
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Oct 2023 10:57:55 GMT
expires: Tue, 22 Oct 2024 10:57:55 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 234999
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jsontdsexit2.com/ExtService.svc/getextparams
136.243.216.235200 OK 535 B URL GET HTTP/2 jsontdsexit2.com/ExtService.svc/getextparams
IP 136.243.216.235:443
ASN #24940 Hetzner Online GmbH
Requested by https://2614.minemegowe.live/wmaimdjc/article2614.doc?u=wydw0kv&o=qpgp4h4&t=15107318&cid=7139ah9hebzscsyf6c&f=1&sid=t9~11b5brujhqabwzxeqgmsitgy&fp=FvP3OeTWw1srTQro28N8Gg%3D%3D
Certificate IssuerLet's Encrypt
Subjectjsontdsexit2.com
FingerprintFB:58:BF:8B:39:B9:7C:7C:B6:D3:3F:78:F4:91:D1:A0:08:4D:AB:50
ValidityThu, 21 Sep 2023 09:46:23 GMT - Wed, 20 Dec 2023 09:46:22 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (626), with no line terminators
Hash 9b69d953721186e3b4aef94ae0f06573
f8518d29cdd7e44ff4795ed9e17bb3d492284db9
2d5bc0411de26154bbf28bd94c0508c46e504195699206d539256e05d1b92e03
GET /ExtService.svc/getextparams HTTP/1.1
Host: jsontdsexit2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://2614.minemegowe.live
DNT: 1
Connection: keep-alive
Referer: https://2614.minemegowe.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 04:14:35 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2