Report - www.mdk138sos.xyz/

Report Overview

Visited public
2023-12-10 02:27:31
Tags
URL
www.mdk138sos.xyz/
Finishing URL
exmdk138.xyz/
IP / ASN
198.54.114.156
#22612 NAMECHEAP-NET
Title
Attention Required! | Cloudflare

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mdk138sponsor.xyz	unknown	unknown	No data	No data	844 B	1.8 kB	198.54.114.156
mdk138dp.xyz	unknown	unknown	No data	No data	834 B	1.8 kB	198.54.114.156
gomerdeka138.xyz	unknown	unknown	No data	No data	842 B	1.8 kB	198.54.114.156
exmdk138.xyz	unknown	2023-12-02	2023-12-02 14:04:58	2023-12-02 14:04:58	3.1 kB	25 kB	172.67.182.219
www.mdk138sos.xyz	unknown	unknown	No data	No data	764 B	1.9 kB	198.54.114.156
mdk138a.xyz	unknown	unknown	No data	No data	832 B	858 B	68.178.224.133
mdk138b.xyz	unknown	unknown	No data	No data	832 B	862 B	68.178.224.133
mdk138cc.xyz	unknown	unknown	No data	No data	834 B	858 B	68.178.224.133
mdk138g.xyz	unknown	unknown	No data	No data	832 B	1.9 kB	198.54.114.156
gomdk138.xyz	unknown	unknown	No data	No data	834 B	1.8 kB	198.54.114.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-10 02:27:15	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:15	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:15	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:15	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:16	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:16	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:16	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:16	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:17	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:17	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:17	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:17	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:17	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:17	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:18	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:18	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:18	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:18	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:19	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:19	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:20	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:20	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2023-12-10 02:27:20	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2023-12-10 02:27:20	low	68.178.224.133	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	exmdk138.xyz/	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL exmdk138.xyz/ IP 172.67.182.219 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 17:27 Times Seen4656172 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	exmdk138.xyz/	ScriptElement	393 B	2023-04-05	2025-03-02
Pretty URL exmdk138.xyz/ IP 172.67.182.219 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:39 Last Seen2025-03-02 06:13 Times Seen143291 Hash 34ad0a116707d3b794129a6720af92d7 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Loading...

	exmdk138.xyz/	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL exmdk138.xyz/ IP 172.67.182.219 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 17:27 Times Seen4656172 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	exmdk138.xyz/	ScriptElement	1.1 kB	2024-08-20	2024-08-20
Pretty URL exmdk138.xyz/ IP 172.67.182.219 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:13 Last Seen2024-08-20 16:13 Times Seen1 Hash 0634d57d9594e7f6acbf42a8d0f27146 32ac336bb6f3a6c3ecae130ea079624d662598e8 b9f856a81da8860504275dc98f7505cf4275a2bb3236fc90690bd9fa9aaa5969 Loading...

	unknown	ScriptElement	247 B	2024-08-20	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 16:13 Last Seen2024-08-20 16:13 Times Seen1 Hash d7a653cf9238f73f185217d5b9fecba1 a71db54801f0652b86ebf5edb6cd2745f247cab7 5624999981a3551f2d68ca1e15c4dd96b87167b423677fc085589a97ba3cce54 Loading...

	exmdk138.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	7.3 kB	2023-12-10	2023-12-10
Pretty URL exmdk138.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.83.228 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-10 03:20 Last Seen2023-12-10 03:27 Times Seen2 Hash 436f438682b3d4918e3c10591b0a60e5 a4874c81a8ae0c8a29bc6888ec939c2edd7d74c5 e586dd235303685ffd0b5da965ba4953d774a3b46d021100413da26575943a2d Loading...

HTTP Transactions (26)

	URL	IP	Response	Size
	www.mdk138sos.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 www.mdk138sos.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerZeroSSL Subjectmdk138sos.xyz FingerprintD2:93:0A:C1:7E:22:D7:03:EA:B3:C2:E7:90:3D:1C:3A:2E:96:B7:1D ValidityThu, 30 Nov 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: www.mdk138sos.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:06 GMT server: LiteSpeed location: https://mdk138sponsor.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	mdk138sponsor.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 mdk138sponsor.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerZeroSSL Subjectmdk138sponsor.xyz Fingerprint83:84:8B:14:86:B0:17:9B:88:6D:4F:E8:7C:C6:8F:CA:78:5C:9C:58 ValidityFri, 01 Dec 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: mdk138sponsor.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:06 GMT server: LiteSpeed location: https://mdk138dp.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	mdk138dp.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 mdk138dp.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerZeroSSL Subjectmdk138dp.xyz Fingerprint04:5A:17:DC:AB:15:40:C9:C6:1A:7A:35:81:0B:C9:CC:2C:50:48:A8 ValiditySat, 02 Dec 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: mdk138dp.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:07 GMT server: LiteSpeed location: https://mdk138a.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	mdk138a.xyz/	68.178.224.133	301 Moved Permanently	228 B
URL User Request GET HTTP/2 mdk138a.xyz/ IP 68.178.224.133:443 ASN #26496 AS-26496-GO-DADDY-COM-LLC Certificate IssuerZeroSSL Subjectmdk138a.xyz FingerprintA2:DF:40:70:FB:5F:B1:E3:7B:7F:36:C3:F8:EA:91:D7:BE:95:F5:BB ValiditySun, 03 Dec 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text Size 228 B (228 bytes) Hash 64bf92587c741547ca3e12be45a63b90 ab2f2179da13c0d323a32c3c1a9e25d7326c0195 18b62bb667758b435ff3c3ac7ef1402eff721308953c91ad4087d7ca13d2bcff HTTP Headers `GET / HTTP/1.1 Host: mdk138a.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently location: https://mdk138b.xyz/ content-length: 228 content-type: text/html; charset=iso-8859-1 date: Sun, 10 Dec 2023 02:27:08 GMT server: Apache X-Firefox-Spdy: h2`

	www.mdk138sos.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 www.mdk138sos.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerZeroSSL Subjectmdk138sos.xyz FingerprintD2:93:0A:C1:7E:22:D7:03:EA:B3:C2:E7:90:3D:1C:3A:2E:96:B7:1D ValidityThu, 30 Nov 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: www.mdk138sos.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently keep-alive: timeout=5, max=100 content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:08 GMT server: LiteSpeed location: https://mdk138sponsor.xyz/ x-turbo-charged-by: LiteSpeed`

	mdk138sponsor.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 mdk138sponsor.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerZeroSSL Subjectmdk138sponsor.xyz Fingerprint83:84:8B:14:86:B0:17:9B:88:6D:4F:E8:7C:C6:8F:CA:78:5C:9C:58 ValidityFri, 01 Dec 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: mdk138sponsor.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:09 GMT server: LiteSpeed location: https://mdk138dp.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	mdk138b.xyz/	68.178.224.133	301 Moved Permanently	229 B
URL User Request GET HTTP/2 mdk138b.xyz/ IP 68.178.224.133:443 ASN #26496 AS-26496-GO-DADDY-COM-LLC Certificate IssuerZeroSSL Subjectmdk138b.xyz FingerprintDC:83:67:E2:D8:B6:77:7B:B0:EF:FA:D4:F1:1B:70:6A:61:F1:16:D0 ValidityMon, 04 Dec 2023 00:00:00 GMT - Sun, 03 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text Size 229 B (229 bytes) Hash b4e75823d04ac5983fd8b8517b1edcdc 74c446e5b716a542c86af81cdcac4b627ce01ae2 4a88ab8cafddf4cab8d88181a520522931b7c47ee39090be0c01bf776a5b1a92 HTTP Headers `GET / HTTP/1.1 Host: mdk138b.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently location: https://mdk138cc.xyz/ content-length: 229 content-type: text/html; charset=iso-8859-1 date: Sun, 10 Dec 2023 02:27:09 GMT server: Apache X-Firefox-Spdy: h2`

	mdk138dp.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 mdk138dp.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerZeroSSL Subjectmdk138dp.xyz Fingerprint04:5A:17:DC:AB:15:40:C9:C6:1A:7A:35:81:0B:C9:CC:2C:50:48:A8 ValiditySat, 02 Dec 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: mdk138dp.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:09 GMT server: LiteSpeed location: https://mdk138a.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	mdk138cc.xyz/	68.178.224.133	301 Moved Permanently	228 B
URL User Request GET HTTP/2 mdk138cc.xyz/ IP 68.178.224.133:443 ASN #26496 AS-26496-GO-DADDY-COM-LLC Certificate IssuerZeroSSL Subjectmdk138cc.xyz FingerprintDE:3E:18:68:EA:90:FC:A7:19:C1:10:C5:60:8D:C0:5A:65:A8:16:84 ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text Size 228 B (228 bytes) Hash 0847c1d31187dbb1140467aafcb21cce e9b0c6edae537bfcbf97d70947dacb84d6ccd7e1 f73ff5da7562d5d0bec19e1006a0dc6afd92cb2f7f1ceb66633d66ded19dc9fa HTTP Headers `GET / HTTP/1.1 Host: mdk138cc.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently location: https://mdk138g.xyz/ content-length: 228 content-type: text/html; charset=iso-8859-1 date: Sun, 10 Dec 2023 02:27:10 GMT server: Apache X-Firefox-Spdy: h2`

	mdk138a.xyz/	68.178.224.133	301 Moved Permanently	228 B
URL User Request GET HTTP/2 mdk138a.xyz/ IP 68.178.224.133:443 ASN #26496 AS-26496-GO-DADDY-COM-LLC Certificate IssuerZeroSSL Subjectmdk138a.xyz FingerprintA2:DF:40:70:FB:5F:B1:E3:7B:7F:36:C3:F8:EA:91:D7:BE:95:F5:BB ValiditySun, 03 Dec 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text Size 228 B (228 bytes) Hash 64bf92587c741547ca3e12be45a63b90 ab2f2179da13c0d323a32c3c1a9e25d7326c0195 18b62bb667758b435ff3c3ac7ef1402eff721308953c91ad4087d7ca13d2bcff HTTP Headers `GET / HTTP/1.1 Host: mdk138a.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently location: https://mdk138b.xyz/ content-length: 228 content-type: text/html; charset=iso-8859-1 date: Sun, 10 Dec 2023 02:27:10 GMT server: Apache X-Firefox-Spdy: h2`

	mdk138g.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 mdk138g.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerSectigo Limited Subjectmdk138g.xyz Fingerprint8C:03:13:35:F1:79:78:E8:B4:F3:99:06:39:D0:05:D4:06:C9:4A:70 ValidityThu, 07 Dec 2023 00:00:00 GMT - Sun, 15 Sep 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: mdk138g.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:11 GMT server: LiteSpeed location: https://gomerdeka138.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	gomerdeka138.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 gomerdeka138.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerSectigo Limited Subjectgomerdeka138.xyz FingerprintD3:23:1F:70:52:B6:C4:F6:69:DF:C5:F7:63:62:CD:34:5E:A9:95:FB ValidityFri, 08 Dec 2023 00:00:00 GMT - Tue, 17 Sep 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: gomerdeka138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:12 GMT server: LiteSpeed location: https://gomdk138.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	mdk138b.xyz/	68.178.224.133	301 Moved Permanently	229 B
URL User Request GET HTTP/2 mdk138b.xyz/ IP 68.178.224.133:443 ASN #26496 AS-26496-GO-DADDY-COM-LLC Certificate IssuerZeroSSL Subjectmdk138b.xyz FingerprintDC:83:67:E2:D8:B6:77:7B:B0:EF:FA:D4:F1:1B:70:6A:61:F1:16:D0 ValidityMon, 04 Dec 2023 00:00:00 GMT - Sun, 03 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text Size 229 B (229 bytes) Hash b4e75823d04ac5983fd8b8517b1edcdc 74c446e5b716a542c86af81cdcac4b627ce01ae2 4a88ab8cafddf4cab8d88181a520522931b7c47ee39090be0c01bf776a5b1a92 HTTP Headers `GET / HTTP/1.1 Host: mdk138b.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently location: https://mdk138cc.xyz/ content-length: 229 content-type: text/html; charset=iso-8859-1 date: Sun, 10 Dec 2023 02:27:11 GMT server: Apache X-Firefox-Spdy: h2`

	gomdk138.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 gomdk138.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerSectigo Limited Subjectgomdk138.xyz Fingerprint0B:58:08:08:CB:E3:02:38:91:BF:FC:43:0D:11:4B:2C:F8:E7:92:20 ValiditySat, 09 Dec 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: gomdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:12 GMT server: LiteSpeed location: https://exmdk138.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	mdk138cc.xyz/	68.178.224.133	301 Moved Permanently	228 B
URL User Request GET HTTP/2 mdk138cc.xyz/ IP 68.178.224.133:443 ASN #26496 AS-26496-GO-DADDY-COM-LLC Certificate IssuerZeroSSL Subjectmdk138cc.xyz FingerprintDE:3E:18:68:EA:90:FC:A7:19:C1:10:C5:60:8D:C0:5A:65:A8:16:84 ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text Size 228 B (228 bytes) Hash 0847c1d31187dbb1140467aafcb21cce e9b0c6edae537bfcbf97d70947dacb84d6ccd7e1 f73ff5da7562d5d0bec19e1006a0dc6afd92cb2f7f1ceb66633d66ded19dc9fa HTTP Headers `GET / HTTP/1.1 Host: mdk138cc.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently location: https://mdk138g.xyz/ content-length: 228 content-type: text/html; charset=iso-8859-1 date: Sun, 10 Dec 2023 02:27:13 GMT server: Apache X-Firefox-Spdy: h2`

	exmdk138.xyz/	172.67.182.219	403 Forbidden	2.2 kB
URL User Request GET HTTP/1.1 exmdk138.xyz/ IP 172.67.182.219:80 ASN #13335 CLOUDFLARENET File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document text - exported SGML document, ASCII text, with very long lines (1098) Size 2.2 kB (2160 bytes) Hash 065b5084b5de55269ba29a8a24796a8e 5c8498a55b425baa80455385d9221f0826be8f54 42668b58d62e1b8ddde2da6d5721690ef7d1db04ceb6aa0d28ce05d5cc468b04 HTTP Headers `GET / HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Date: Sun, 10 Dec 2023 02:27:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Sun, 10 Dec 2023 02:27:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sPCoZnNNDdz0klXTcrsRxzEP%2Btt%2B0VMnHk6esNF5VFz%2Fw1idY%2FTTKIMv%2FJQFqDI1%2BXvFbvRDlgGOTmZd3iQSQcVshMh97E5K6KmnV66XF9YvXVsiw5Y089QfpQejV30%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 83320c283d55b521-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60

	exmdk138.xyz/cdn-cgi/styles/cf.errors.css	172.67.182.219	200 OK	4.5 kB
URL GET HTTP/1.1 exmdk138.xyz/cdn-cgi/styles/cf.errors.css IP 172.67.182.219:80 ASN #13335 CLOUDFLARENET Requested by http://exmdk138.xyz/ File type ASCII text, with very long lines (24131) Size 4.5 kB (4529 bytes) Hash a1cedc21f16b5a97114857154fab35e9 95e9890a15a4f7f94f7f19d2c297e4b07503c526 1103290e25ebda2712abe344a87facbac00ddaba712729be9fe5feef807bf91b HTTP Headers `GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://exmdk138.xyz/ DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 10 Dec 2023 02:27:13 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 01 Dec 2023 15:04:24 GMT ETag: W/"6569f5f8-5e44" Server: cloudflare CF-RAY: 83320c292da1b521-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Sun, 10 Dec 2023 04:27:13 GMT Cache-Control: max-age=7200, public Content-Encoding: gzip`

	exmdk138.xyz/cdn-cgi/images/browser-bar.png?1376755637	172.67.182.219	200 OK	715 B
URL GET HTTP/1.1 exmdk138.xyz/cdn-cgi/images/browser-bar.png?1376755637 IP 172.67.182.219:80 ASN #13335 CLOUDFLARENET Requested by http://exmdk138.xyz/ File type PNG image data, 960 x 53, 8-bit colormap, non-interlaced - data Size 715 B (715 bytes) Hash 226dcb8f6144bdaafdfbd8f2f354be64 3785cc5b3bf52f8e398177b0ff1020b24aa86b8c 8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db HTTP Headers `GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://exmdk138.xyz/cdn-cgi/styles/cf.errors.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 10 Dec 2023 02:27:13 GMT Content-Type: image/png Content-Length: 715 Connection: keep-alive Last-Modified: Fri, 01 Dec 2023 15:04:24 GMT ETag: "6569f5f8-2cb" Server: cloudflare CF-RAY: 83320c296dbab521-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Sun, 10 Dec 2023 04:27:13 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	exmdk138.xyz/cdn-cgi/images/cf-no-screenshot-error.png	104.21.83.228	200 OK	3.2 kB
URL GET HTTP/1.1 exmdk138.xyz/cdn-cgi/images/cf-no-screenshot-error.png IP 104.21.83.228:80 ASN #13335 CLOUDFLARENET Requested by http://exmdk138.xyz/ File type PNG image data, 178 x 175, 8-bit colormap, non-interlaced - data Size 3.2 kB (3213 bytes) Hash 0d768cbc261841d3affc933b9ac3130e aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7 1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0 HTTP Headers `GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://exmdk138.xyz/cdn-cgi/styles/cf.errors.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 10 Dec 2023 02:27:13 GMT Content-Type: image/png Content-Length: 3213 Connection: keep-alive Last-Modified: Fri, 01 Dec 2023 15:04:24 GMT ETag: "6569f5f8-c8d" Server: cloudflare CF-RAY: 83320c296ad6b529-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Sun, 10 Dec 2023 04:27:13 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	exmdk138.xyz/favicon.ico	104.21.83.228	403 Forbidden	1.7 kB
URL GET HTTP/1.1 exmdk138.xyz/favicon.ico IP 104.21.83.228:80 ASN #13335 CLOUDFLARENET Requested by http://exmdk138.xyz/ File type HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document text - exported SGML document, ASCII text, with very long lines (394) Size 1.7 kB (1740 bytes) Hash 99eefa6673aabcef693cc5f941fd6c72 724b5d91b823a2d94ab550ba6503fac600e7ed13 17ef34404f195ef94849c73097ce00d7c2f8f8fb85382ac7b13d4fac58a48f16 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://exmdk138.xyz/ DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Date: Sun, 10 Dec 2023 02:27:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Sun, 10 Dec 2023 02:27:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZnpaBmBU9yXlxtofFjdSSgAhjMF3ed3BPC7XG3drz6XCHwntzedViNrP0O5VNSpJO3mS3A85EwNgPCR8GiQgN4TUs3V5y5WeO04jhbXq%2FV79ZpfhWrmmqc9Tf9Gs1Ho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 83320c299addb529-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60

	exmdk138.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js	104.21.83.228	302 Found	0 B
URL GET HTTP/2 exmdk138.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.83.228:443 ASN #13335 CLOUDFLARENET Requested by http://exmdk138.xyz/ Certificate IssuerGoogle Trust Services LLC Subjectexmdk138.xyz FingerprintD5:55:AB:A6:65:29:D0:A9:30:53:41:5C:70:06:D9:AE:2D:89:57:24 ValiditySat, 02 Dec 2023 12:01:36 GMT - Fri, 01 Mar 2024 12:01:35 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Moved Temporarily Date: Sun, 10 Dec 2023 02:27:13 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://exmdk138.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=REV7LoqmPtFQbDwPsl8mTnPtUavhZSBq3mFfWnbzY%2FSU%2BdOhxyN2HzsibNE4dXRQR8GkY0kzuJ7TsvdwTB%2BBlFjZyiXueMglfOoxkGnY0jhDUVwU9WvBOcjZ33INJLA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 83320c29aae3b529-OSL alt-svc: h2=":443"; ma=60

	exmdk138.xyz/cdn-cgi/challenge-platform/h/b/jsd/r/83320c283d55b521	104.21.83.228	302 Moved Temporarily	0 B
URL POST HTTP/1.1 exmdk138.xyz/cdn-cgi/challenge-platform/h/b/jsd/r/83320c283d55b521 IP 104.21.83.228:80 ASN #13335 CLOUDFLARENET Requested by http://exmdk138.xyz/ File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `POST /cdn-cgi/challenge-platform/h/b/jsd/r/83320c283d55b521 HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/json Content-Length: 11597 Origin: http://exmdk138.xyz DNT: 1 Connection: keep-alive Referer: http://exmdk138.xyz/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Moved Temporarily Date: Sun, 10 Dec 2023 02:27:13 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://exmdk138.xyz/cdn-cgi/challenge-platform/h/b/jsd/r/83320c283d55b521 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ck3KLxppED3a53vR7CsyBZXfqypHVqZR7t8DCo9oiWKXiOkZLuzpKLzBWw71dKEAt5xzYI%2Fwy0pSRLeiuGqxYIctnhTMNf0fVrbdzDnDreyIoEGq4096PqgiaGryoek%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 83320c2abb2bb529-OSL alt-svc: h2=":443"; ma=60

	mdk138g.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 mdk138g.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerSectigo Limited Subjectmdk138g.xyz Fingerprint8C:03:13:35:F1:79:78:E8:B4:F3:99:06:39:D0:05:D4:06:C9:4A:70 ValidityThu, 07 Dec 2023 00:00:00 GMT - Sun, 15 Sep 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: mdk138g.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:13 GMT server: LiteSpeed location: https://gomerdeka138.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	gomerdeka138.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 gomerdeka138.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerSectigo Limited Subjectgomerdeka138.xyz FingerprintD3:23:1F:70:52:B6:C4:F6:69:DF:C5:F7:63:62:CD:34:5E:A9:95:FB ValidityFri, 08 Dec 2023 00:00:00 GMT - Tue, 17 Sep 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: gomerdeka138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:14 GMT server: LiteSpeed location: https://gomdk138.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	gomdk138.xyz/	198.54.114.156	301 Moved Permanently	707 B
URL User Request GET HTTP/2 gomdk138.xyz/ IP 198.54.114.156:443 ASN #22612 NAMECHEAP-NET Certificate IssuerSectigo Limited Subjectgomdk138.xyz Fingerprint0B:58:08:08:CB:E3:02:38:91:BF:FC:43:0D:11:4B:2C:F8:E7:92:20 ValiditySat, 09 Dec 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT File type HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF, LF line terminators Size 707 B (707 bytes) Hash 1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 HTTP Headers `GET / HTTP/1.1 Host: gomdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-type: text/html content-length: 707 date: Sun, 10 Dec 2023 02:27:15 GMT server: LiteSpeed location: https://exmdk138.xyz/ x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	exmdk138.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js	172.67.182.219	200 OK	7.3 kB
URL GET HTTP/2 exmdk138.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js IP 172.67.182.219:443 ASN #13335 CLOUDFLARENET Requested by http://exmdk138.xyz/ Certificate IssuerGoogle Trust Services LLC Subjectexmdk138.xyz FingerprintD5:55:AB:A6:65:29:D0:A9:30:53:41:5C:70:06:D9:AE:2D:89:57:24 ValiditySat, 02 Dec 2023 12:01:36 GMT - Fri, 01 Mar 2024 12:01:35 GMT File type ASCII text, with very long lines (7315), with no line terminators Size 7.3 kB (7315 bytes) Hash 436f438682b3d4918e3c10591b0a60e5 a4874c81a8ae0c8a29bc6888ec939c2edd7d74c5 e586dd235303685ffd0b5da965ba4953d774a3b46d021100413da26575943a2d HTTP Headers `GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1 Host: exmdk138.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Sun, 10 Dec 2023 02:27:13 GMT content-type: application/javascript; charset=UTF-8 cache-control: max-age=14400, public x-content-type-options: nosniff vary: accept-encoding report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CBiiEZsO4gEiZo988VFoLr9EYg6YRh%2B2CHNvffwgrlbDgX1y%2BW1QVABb51FtrvcmOmJAiTCxqLXDktiF3LBpYjm7MU7sQDBkRPcBf%2F%2FU8BfkniyrWLxd20cT83f9Sq8%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 83320c29ee1256bb-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (26)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN