firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 07 Sep 2022 15:04:41 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: v1udhhjQ7lWIuho3NDsfjio9uDTFP9Oong9e-wW8b6D9fYh30G_3tQ==
Age: 2967
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9408
Expires: Wed, 07 Sep 2022 18:30:56 GMT
Date: Wed, 07 Sep 2022 15:54:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Sep 2022 03:46:34 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: apr0G1xYLfmUVr1BAYC_WEeiAVRu7Ohdy5A8K4ysJq3JQL3-OytbGQ==
age: 43654
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
66.29.141.3301 Moved Permanently 707 B URL HTTP/1.1 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/ HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 07 Sep 2022 15:54:08 GMT
server: LiteSpeed
location: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
x-turbo-charged-by: LiteSpeed
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Sep 2022 15:54:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 07 Sep 2022 15:38:18 GMT
Cache-Control: max-age=3600
Expires: Wed, 07 Sep 2022 16:04:04 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bnNGVzi3w05nqs8nw4y0UEkR0eOgY83yMBsvnr-xQY0X-OvYAxaKZg==
Age: 950
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a81b0f5b5d11bf95fc176833b2f6e808
5b194aa5a8bf3a6b0d117ccfd0f487f6db0587b5
8f6ae83f2b85db7174bbbc6553e2921617b5c8a401315e76082682949a0bd9cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5859
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 15:54:09 GMT
Last-Modified: Wed, 07 Sep 2022 14:16:30 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 11d95f285e447209de4d97727c22306d
5ea30377f8101f989b3e4dc466533f55d6b1ca10
fbab5e00625433cf93d397a7438df4a8d55cca143bca3f396d44b2f5b60d7802
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Sep 2022 15:54:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 11:45:46 GMT
Expires: Tue, 13 Sep 2022 11:45:45 GMT
Etag: "5ea30377f8101f989b3e4dc466533f55d6b1ca10"
Cache-Control: max-age=502895,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74709f0c4f5bb509-OSL
push.services.mozilla.com/
34.208.34.131101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.208.34.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pJ7c7mBJdJYblmxxy+pI6w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sdR8a55shV8eTa6X2GdhFgTKN3k=
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
66.29.141.3200 OK 7.7 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (504)
Hash 64b1f3da355ed5390f3dc92f76590e99
674789411b90e452a74abb290c67529e27fb1f0d
588d7b62fe36de013649bc0a53365b854330ad873ba6c02c19012293410f1575
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/ HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 07 Sep 2022 15:52:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7653
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bootstrap.css
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bootstrap.css
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bootstrap.css HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/jquery.js
66.29.141.3200 OK 29 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/jquery.js
IP 66.29.141.3:0
File type ASCII text, with very long lines (32180)
Hash a566d9733a1bcbf6e396c851718818ba
0a27eb4778c2bf30a7e2f4439a30e9060f4d1d41
9b21a6ad61c8758754231431042c03cdeb97e0cd227e4d6223aa8ac1b9c0fc34
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/jquery.js HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 28815
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/main.css
66.29.141.3200 OK 2.4 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/main.css
IP 66.29.141.3:0
File type ASCII text, with CRLF line terminators
Hash e2315b6501071e2f90f213c40a9e9202
bc37481bb0012aae7d2a50557e0184b2a76c3a96
e290e27d39b3b6f214c205677d17e4cb422f1e67d61da58a4c93cb9bfaf6c31b
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/main.css HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2433
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/font-awesome.css
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/font-awesome.css
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/font-awesome.css HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styless.css
66.29.141.3200 OK 5.9 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styless.css
IP 66.29.141.3:0
File type ASCII text, with very long lines (27303)
Hash 7f91c596474be2ddbf15257459ba8740
83ec6a757f917013c91cb74dedda311764c324a0
c3331deb1b613d0994eb7841bb8019df2f81bbf6a0f51da9d5881f36cd5409f8
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styless.css HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5878
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styles.css
66.29.141.3200 OK 22 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styles.css
IP 66.29.141.3:0
File type ASCII text, with very long lines (65326)
Hash 2e6f2d8fb6632f52009c5575cf076459
3ff84c205878e84a29eda6cb919f8845268bdbb1
0f1ca689ce2beb7ed44f0f497b6b7f4c417fd1e0db90fc7a91b05e9a3a18f154
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styles.css HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21653
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/style.css
66.29.141.3200 OK 2.4 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/style.css
IP 66.29.141.3:0
Hash 9e232940a73cebf34a356401faaec46d
2b3a6c0dfa8f64a236503f20ea917fa4882ef7d0
054c3e5e4b1c0ee6cdd5b4367633ca1a2ba8928d63da47126cc067e1b3301e43
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/style.css HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2414
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10210
Expires: Wed, 07 Sep 2022 18:44:20 GMT
Date: Wed, 07 Sep 2022 15:54:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10210
Expires: Wed, 07 Sep 2022 18:44:20 GMT
Date: Wed, 07 Sep 2022 15:54:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10210
Expires: Wed, 07 Sep 2022 18:44:20 GMT
Date: Wed, 07 Sep 2022 15:54:10 GMT
Connection: keep-alive
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/minimize.jpg
66.29.141.3200 OK 2.2 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/minimize.jpg
IP 66.29.141.3:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x39, components 3\012- data
Hash 1ba392dce74f8987dca48bf65d817c8f
db0b8444c46125105b52f272bd422a7f52da1f72
a05245b6f7fd752af4a7b0131bbdfdf3eaee6c5a25a81cb498e0f0759189473c
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/minimize.jpg HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/jpeg
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 2247
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/pc.png
66.29.141.3200 OK 4.9 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/pc.png
IP 66.29.141.3:0
File type PNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash cc5132b56ba46b03dd998aa1fe220106
403e007a0b17d76a9945fa5ec46a9d01733b3040
598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/pc.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 4949
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70c964498818242b742575cfa1769b67
cde85fbe83c9e29618edf4e05002bd623e3ab965
bdb0e76fe216f742789ba5a77645c640fe0c7f207707181e618fa31d4cf58605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8462
x-amzn-requestid: d75d69c1-87be-47e2-8684-3c9a25edee2f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDqYpFL-IAMFukQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317bdd0-1c6d025672cc490734bb54e4;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:38:24 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yzw88Z7aubNEll7UXkvaIWbftL95Y0UDTMnOEh_uhKqWgNycBA9Adw==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:41:22 GMT
age: 65568
etag: "cde85fbe83c9e29618edf4e05002bd623e3ab965"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/virus-images.jpg
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/virus-images.jpg
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/virus-images.jpg HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/modernizr.js
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/modernizr.js
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/modernizr.js HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/main.js
66.29.141.3200 OK 322 B URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/main.js
IP 66.29.141.3:0
File type ASCII text, with CRLF line terminators
Hash 32b1622581881044897c38023b9af1d3
ee41f6e7676005d56a473cb86600ea79dd815e7e
3e3678731b2ef7657ceeb25d8a0526749a39a97e65b3d0397f52c8fbce5f4945
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/main.js HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 322
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1462b0c8fff091f29c7c5145031c08aa
55154c3878e9650f463805c3829f03a1603f14c1
62f913a6498b21da33451e7cf0e37c5fdef565324bcd35d93cb536527394a3d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11778
x-amzn-requestid: 2956f23c-8907-48de-b82a-73da9ae1d75e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDqYVHnLoAMFo5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317bdce-5d76bbe82dc2823407fe67f3;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:38:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6tTqfG7yRrMw0cMwiQFlu9XuRzxlK7uzTXL-cAMFmrrDrKL9Rd3zqA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:41:20 GMT
age: 65570
etag: "55154c3878e9650f463805c3829f03a1603f14c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/light.js
66.29.141.3200 OK 203 B URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/light.js
IP 66.29.141.3:0
File type ASCII text, with CRLF line terminators
Hash f63fdc6d65a698b7c7a39987603b0383
3808a685a9f3f82ae374e9c738c1a1bee99aef51
9507defb264ec60280efc61492071ca9d8a580b8f844282e82687bfb1a83ce7a
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/light.js HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 203
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/microsoft.png
66.29.141.3200 OK 1.0 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/microsoft.png
IP 66.29.141.3:0
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/microsoft.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 1045
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/que.png
66.29.141.3200 OK 349 B URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/que.png
IP 66.29.141.3:0
File type PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Hash 7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/que.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 349
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bell.png
66.29.141.3200 OK 1.1 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bell.png
IP 66.29.141.3:0
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash a3555871399f1f67bfacaf437974b03a
b6337de87cd7a75a73cd804774651d14c83fe76a
2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bell.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 1108
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 79f4356c488498012cc7fc03be21e3df
dd9cd9b711d7112efa85eff8a798346dbd7d5f5f
ebd84bf1db6b39b92be1020c7ea5c32eaa23dfb347ec83941d5bc56e80855ebc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12661
x-amzn-requestid: 71ef9e09-ccf1-4930-865d-665ece4bf3a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3hXnFnXIAMFqKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312e296-627daf7c7ad3e23a60b183cd;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 05:13:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: xwunW741LulZXvM0har5nqrcCiyYoUwvhCWiPsEvs5P2VKSe476_Cw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 22:38:56 GMT
etag: "dd9cd9b711d7112efa85eff8a798346dbd7d5f5f"
content-type: image/jpeg
age: 62114
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f29d8aaae2d67c27c58001e7553dea7
5200b601017ce86614783b76fd2a775c1c48d4e9
6b55c4d692cf584e0319b07251d9845749fe8954062dab66e003dd2706451504
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4805
x-amzn-requestid: 6db42fa4-5a04-4368-b5cb-ea8f70d83ead
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XmxSRFp7oAMFb3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c2f41-1df42bd2265554de5f47932e;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 03:15:13 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KQ1yb69_uETJJlEIcwsR165zqZuiklGuj3Nn-tyta0e_q8BGqs3cXg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:51:24 GMT
age: 64966
etag: "5200b601017ce86614783b76fd2a775c1c48d4e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f922505178de0cea92eedcfda85a9f67
50f1459de01174e594e03e7df4dfaa8eb1798672
981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 05:10:03 GMT
age: 38647
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fc5baf3-df02-4e98-9312-7ed0ef0b8638.jpeg
34.120.237.76200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fc5baf3-df02-4e98-9312-7ed0ef0b8638.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 932f4d99fb1927aae3010e00472b38c3
b95ee99dafca1695d6b86763fce0ceb058f40ef3
da9dbade65f50c1f9ca10956dc863759dd1e0cdf7e28721c79831c288d3ae24e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fc5baf3-df02-4e98-9312-7ed0ef0b8638.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3604
x-amzn-requestid: 31a6c427-a073-4c25-88b1-6ba40a48c359
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDrvyGg6oAMFhDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317bffe-36dd49416c62f3811167173d;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:47:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: hNtG651fpAOKjZluawZlbXYFfBUojeSyqB9UMRsAg1Ooxc95mudq7A==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:51:27 GMT
etag: "b95ee99dafca1695d6b86763fce0ceb058f40ef3"
content-type: image/jpeg
age: 64963
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/def.png
66.29.141.3200 OK 3.8 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/def.png
IP 66.29.141.3:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 77a2ffc5545f87551d74781201de9b3b
c9c3798afd2ae95aa3bba3c428335d49c8255b06
316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/def.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 3834
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/before.js
66.29.141.3200 OK 157 B URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/before.js
IP 66.29.141.3:0
File type ASCII text, with CRLF line terminators
Hash 8074d5ff73102eb4d235bbbc55871ebc
051859c0937ed05222cac7ef6f2d1d42b7558033
a09343533571dc9ef4eb3655df5ffa0a69d9ed3e56d5b4f497c9fec67bced570
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/before.js HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 157
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/fullscreen.js
66.29.141.3200 OK 245 B URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/fullscreen.js
IP 66.29.141.3:0
File type ASCII text, with CRLF line terminators
Hash 62f519fe72808a3ec681392b7ff47417
2ee16112e35feb9d6d48ae0f4e66187514dec811
43703d37b8fe2769cb2e12db7aa281dbcca175124d05ff4b0cc3d152534698a4
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/fullscreen.js HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 245
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/setting.png
66.29.141.3200 OK 364 B URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/setting.png
IP 66.29.141.3:0
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/setting.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 364
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/virus-scan.png
66.29.141.3200 OK 26 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/virus-scan.png
IP 66.29.141.3:0
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c497dfff84bd8c5af9254c9d6278ce1
667e72e7ba6f00a54629e28133317022d4b59af6
b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/virus-scan.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 25871
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bootstrap.js
66.29.141.3200 OK 21 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bootstrap.js
IP 66.29.141.3:0
File type ASCII text, with very long lines (65299)
Hash 009dd225ed7ae2ba21f253ead07035d5
d9b98452938fd3d0a872acc44b53c5f64070c504
9557c5317484c6f630e21d9a36bd0bdf18adb5a25ccfdfc82dbdd6877e30a60f
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/bootstrap.js HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20975
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/cross.png
66.29.141.3200 OK 44 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/cross.png
IP 66.29.141.3:0
File type PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced\012- data
Hash 4487a588bf2a07e3d1936d705c5ceefd
db193b3e2ab9fbee6eae99ced2366b1ef5f16971
3821ef20f5904fdb993e34d87ff8fb9c5786a382efb0eeee8b4f00c91428b701
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/cross.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 44098
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/fonts/fontawesome-webfont.woff2?v=4.5.0
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/fonts/fontawesome-webfont.woff2?v=4.5.0
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styless.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/ttt.mp3
66.29.141.3206 Partial Content 67 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/ttt.mp3
IP 66.29.141.3:0
File type MPEG ADTS, layer III, v2, 32 kbps, 24 kHz, Monaural\012- data
Hash ad5428b017c64cbe52273d858444ade8
09d8a7e086792360c88e08fb79e0faa679d5df9d
e8b56c0c56b71c361913ea8e350cc9923a85fb26e52d37528b378a3c57541880
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/ttt.mp3 HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
content-type: audio/mpeg
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
content-range: bytes 0-67103/67104
content-length: 67104
date: Wed, 07 Sep 2022 15:54:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/wa0lDErtm0s.mp3
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/wa0lDErtm0s.mp3
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/wa0lDErtm0s.mp3 HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/1662566043972
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/fonts/fontawesome-webfont.woff?v=4.5.0
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/fonts/fontawesome-webfont.woff?v=4.5.0
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /fonts/fontawesome-webfont.woff?v=4.5.0 HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styless.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:11 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/background.png
66.29.141.3200 OK 838 kB URL HTTP/2 ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/background.png
IP 66.29.141.3:0
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 838 kB (838375 bytes)
Hash 400502ee2726928f1b2314404b53dafa
bda6258ea064b64735ec156340f95ce97fac2df8
ee94f46aecf6fbed409cc7575ec3beca259bc1d8863401fe9325959426e0d270
GET /DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/images/background.png HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 14 Sep 2022 15:54:09 GMT
content-type: image/png
last-modified: Mon, 11 Jul 2022 20:26:20 GMT
accept-ranges: bytes
content-length: 838375
date: Wed, 07 Sep 2022 15:54:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/favicon.ico
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/favicon.ico
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /favicon.ico HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:11 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ekoyebanakaka.homes/fonts/fontawesome-webfont.ttf?v=4.5.0
66.29.141.3404 Not Found 1.2 kB URL HTTP/2 ekoyebanakaka.homes/fonts/fontawesome-webfont.ttf?v=4.5.0
IP 66.29.141.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /fonts/fontawesome-webfont.ttf?v=4.5.0 HTTP/1.1
Host: ekoyebanakaka.homes
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ekoyebanakaka.homes/DDFRGTYHHCMPLXCMP22344TTUHGJJFNMKBJGHYU/styless.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Wed, 07 Sep 2022 15:54:11 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2