Report - goo.su/27m7zP8

Report Overview

Submitted URL
goo.su/27m7zP8
IP
172.67.139.105
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 12:36:22
Access
public
Website Title
Bestsellers
Final URL
meds-safe-24.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
apisales24.com	unknown	2018-12-09	2019-05-28	2024-04-18	927 B	7.4 kB	188.114.96.1
meds-safe-24.com	unknown	2024-03-28	2024-03-28	2024-03-28	24 kB	948 kB	188.114.96.1
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-23	413 B	125 kB	151.101.194.137
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.6 kB	147 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	941 B	26 kB	142.250.74.106
goo.su	377451	2019-06-14	2017-05-12	2024-04-18	468 B	8.8 kB	104.21.38.221

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	goo.su	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	meds-safe-24.com/js/7fc89c9-52e6069.js	491 kB	2024-04-24	2024-04-26
Pretty URL meds-safe-24.com/js/7fc89c9-52e6069.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 14:36:26 Last Seen2024-04-26 23:43:22 Times Seen4 Hash 178bccfae4d0477499e2292a1b05e8f7 52e60692dcefdd68ba0e192646d80c7fdff19564 a409eb7f42e8d307afe3cc9b1652dfcc67082d3444cefbd31f8421d396e75b41 Loading...

	code.jquery.com/ui/1.12.1/jquery-ui.js	521 kB	2023-03-07	2024-05-05
Pretty URL code.jquery.com/ui/1.12.1/jquery-ui.js IP 151.101.194.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:28 Last Seen2024-05-05 18:51:42 Times Seen6043 Hash ab5284de5e3d221e53647fd348e5644b 75c20acdc6cbc6334fe2b918ab7afeec007f969e 4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d Loading...

	apisales24.com/bundles/api/js/events.js	16 kB	2023-03-07	2024-04-26
Pretty URL apisales24.com/bundles/api/js/events.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:41:35 Last Seen2024-04-26 23:43:22 Times Seen834 Hash 65d96ae18d1af5e1cccde5c5c014ede2 ba0526a272c33da8b2941962171918b0fc7ca44f a4113071941beeb7ecbf97cd369842f01fe3599f6520112f010d734b7daf4e2c Loading...

	meds-safe-24.com/	183 B	2024-04-24	2024-04-24
Pretty URL meds-safe-24.com/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 14:36:26 Last Seen2024-04-24 14:36:26 Times Seen1 Hash 18a10b4356c11ff9147227c356b17547 b1e25f7c71852fe6b4a337c49ed856bd156b7646 cece88d548023567b16b2c34833e88ee82ad180bce6354b06813b2d5997f8d8c Loading...

HTTP Transactions (56)

URL IP Response Size

meds-safe-24.com/bundles/shop/12/img/us_white.png

188.114.96.1

200 OK

1.9 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/us_white.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 153 x 13, 8-bit colormap, non-interlaced
Size
1.9 kB (1942 bytes)
Hash
43fb5e2d59f96654841ee3740d43ce13
bf4a72728d8d53eba7dbac328970b52df92e9973
f49c185c28e484d749f88c9eba5663832089970c1a97e5083c2dd744c92c63a8

HTTP Headers

GET /bundles/shop/12/img/us_white.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1942
last-modified: Mon, 21 Aug 2023 13:19:06 GMT
etag: "64e3644a-796"
expires: Thu, 23 May 2024 04:59:00 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y8AatxqFTWtPmsF1assH1ulLIjfI4Ev%2Fu0ejjVaIra%2Bo7IunP4wPcvJedIT3TVCdxHW0U0DvxP536DKI4tYWjlQFfy6M4%2BFii2Mu%2F%2BoTkpyFWpZA8EgxH8SFTn1THUIkH5Sn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba6656c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/phone_white.png

188.114.96.1

200 OK

2.0 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/phone_white.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 162 x 13, 8-bit colormap, non-interlaced
Size
2.0 kB (2022 bytes)
Hash
6e260c975812b37eab4668d2be03f382
291c9402b6fc3d6050143cd7de9a0378be569440
a00e6b85111fdc50c2a71c18f62ac66bc341b23a23dc4ca4fc539a91259cfb79

HTTP Headers

GET /bundles/shop/12/img/phone_white.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 2022
last-modified: Mon, 21 Aug 2023 13:19:06 GMT
etag: "64e3644a-7e6"
expires: Tue, 21 May 2024 03:27:49 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292087
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tPGWeZCn3nLgsZij4odJ%2FwhycbPT%2FBN8T%2Fyp2y3R8kZxh9GP1WHHj5bhCo94iuX8LaMiqrd1%2FxNCxK3ea%2B%2F%2B7fyXUCi8LiXV0OeC%2FgFx5s4ETRkR7t83dYcJi0zGvV8e9YTv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba6956c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/en.png

188.114.96.1

200 OK

1.4 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/en.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
1.4 kB (1448 bytes)
Hash
2f3997149a25cde64ea0b1ec24ec1146
e830f98d0162f09ebb736c467dc5dd46a6bba62a
3e49dbb482d81f759274fa80121a71ff316ef032c5f379087806b250317ff21c

HTTP Headers

GET /bundles/shop/12/img/en.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1448
last-modified: Tue, 21 Jun 2022 17:29:16 GMT
etag: "62b1ffec-5a8"
expires: Thu, 23 May 2024 04:59:00 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A7yJ2EPJBXCN10LJ1GvGRqq%2FbF2sjLBK4Ly38CTKUkheUzdS59JSx4%2BKoh4CmExDBGgCdD%2B%2Bb9R%2F4B6LxT1%2FBGio9QaZB2kQ9keperDX0SQCfjJBRMpsqNtGjuHGptxQoymD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba6b56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/de.png

188.114.96.1

200 OK

1.0 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/de.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1032 bytes)
Hash
7498b6e79483c309c058a5ef0bd85dd1
2bff3dd7e786cc410cb5e2a0c90ba3a9d1a8a546
bc21548d846d47112c4bf1ff3666c6f79d0449bdc2b50a02c17a27f592074e66

HTTP Headers

GET /bundles/shop/12/img/de.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1032
last-modified: Tue, 21 Jun 2022 17:24:43 GMT
etag: "62b1fedb-408"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cEqEo5e83327j8OqQ4xPqD%2BQDctwqF%2FtMeXQrERxfFYUiNRdSi8egyzju4WlRoybFXnQOHT96wnPmF0%2Fbf0SVNBj6Mn5YfmIHdxsTJtx8pduOQ%2BI%2FoDsC46%2BOMQwu0it84M2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba7a56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/fr.png

188.114.96.1

200 OK

1.0 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/fr.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1020 bytes)
Hash
a5f6f96036d5c94523229b9b3454ddb2
8de4fadd0464cb395a37ef3ced6af5ca565164ed
25698034fa9287ee901b97c0c7019e8015aeb850dfc8c25dc614178ca5af14d0

HTTP Headers

GET /bundles/shop/12/img/fr.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1020
last-modified: Tue, 21 Jun 2022 17:24:50 GMT
etag: "62b1fee2-3fc"
expires: Tue, 21 May 2024 03:27:52 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292084
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=snl0pHu2Jasjif%2FL0r4qwVOZfikKT3VJjJ7FljmFXTJNJUGW8q9LPu6iUH93XPZdXrSwrW9G0sKRaFd48dt%2B2PdOZnzs%2F3WfvZzZ37IXA9jib1bhtmKmMb3pp6v8kBsRScQr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba8156c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/sw.png

188.114.96.1

200 OK

1.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/sw.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1226 bytes)
Hash
d1e96673c62ae75dd7894416f193964c
a15c4b009ad97f6e7b16efb4f617f0a6734ce56e
22b2eb27417302e2d0b7e8637c452bda01176b465174f739d9e4234efffb0280

HTTP Headers

GET /bundles/shop/12/img/sw.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1226
last-modified: Tue, 21 Jun 2022 17:24:52 GMT
etag: "62b1fee4-4ca"
expires: Tue, 21 May 2024 03:27:51 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292085
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y400QShpCwi3kM%2BksU0kB70gXaSGBviI0dMSF5tsN2jDOrpfdggYQxsv1eJ55F2jpjLlCpVM9YTFz4wUwovqc8M%2BzkBWNl4KWaYgsi0zqyJ3ZwLH15J3lL0C46vPRYPiyfSn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba7e56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/it.png

188.114.96.1

200 OK

1.0 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/it.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1024 bytes)
Hash
83db4f2cd558f9c90f92973259609782
c1b4de27d975bebf5326c0f3526d14000594abbd
8b471973aa958f961a442430d6f2a320129ea36b1d280414f94613e9e1cd6c87

HTTP Headers

GET /bundles/shop/12/img/it.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1024
last-modified: Tue, 21 Jun 2022 17:24:51 GMT
etag: "62b1fee3-400"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TRGsy6w5G4jcz8f2gaaNY3f9fvQa1fyJpcydyGGD8jceZsACL3T%2FZYslkOZHu7OcBRVNfNjYpcwAnUl9vgPhxuu%2FIVXkWJ4nNATct1KtPQW3iguyqDgzTI7AHlxBQ%2FEg8Rf1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba7b56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/es.png

188.114.96.1

200 OK

1.3 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/es.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
1.3 kB (1341 bytes)
Hash
ea16f72276818c4d9d9a5891019bf7f8
629ac56fc84c3403bcb9a3aa3c10c34e1588171f
33ed20671ed36e594076c8b55a67c94b832f88cc28c7fc4e852358187871354c

HTTP Headers

GET /bundles/shop/12/img/es.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1341
last-modified: Tue, 21 Jun 2022 17:24:49 GMT
etag: "62b1fee1-53d"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qdCTRDBWp3pzdWnCtOYYeisEX3SyFOMw8X%2B5vnq84FW5BUg1t2m%2BxA3Z%2BOh0x46K2G8uFYN1OwP1xNfT9CKBHKUEVEozint7spzlWZ%2FA4QgTGIbg8a0uGf1Fyhptp76WAHGh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ba8056c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/logo.png

188.114.96.1

200 OK

4.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/logo.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 208 x 60, 8-bit/color RGB, non-interlaced
Size
4.2 kB (4154 bytes)
Hash
9782b60fe82d0c853f8a10be139d9db8
d4d440fe0078f4a69ab24c2ddf32d3375d720437
f7e6ccfcab7cadb8409192a53a70144eeef41670fd2e6a123bff129eb20e6c4b

HTTP Headers

GET /bundles/shop/12/img/logo.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 4154
last-modified: Tue, 21 Jun 2022 14:43:15 GMT
etag: "62b1d903-103a"
expires: Tue, 21 May 2024 03:27:52 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292084
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V66NTpIzahzHiam5D4YVmZvdmbwfhv1Y7o3l%2FtOBlYKNMJTx6oeCvw4AIJV31PKX%2B3BGwy0pjNV58sSZm%2Bn%2BJ%2BUzQ7qdhUPcswrBPRaG1BpqFGwu8SsbvOUHe4TjOJHAHwPX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca8656c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Generic_Cialis.png

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Generic_Cialis.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
11 kB (11398 bytes)
Hash
36c1ca1e20806f38d342d674e6328934
91af4e4be3b89223854800e2c9c5255ff7606451
72040e8a5044fb3542b5bb948715a973560b3334bbfdb915604aaf3dbcbcf8a2

HTTP Headers

GET /content_images/Generic_Cialis.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 11398
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-2c86"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ry%2BQlOQzLpool2qYzlI1kjMn20wUAT3W%2BLAI4vesauS1i6NV6j40LmN2HmX2B%2FTk84i%2FYYfo4jtiFMI4Bc6Pw8MVHG6bppyHD%2FfikXgV8C6rEeoTAIiOM%2FE%2Bg6QYw%2BeqaIcb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca8756c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Generic-Viagra.png

188.114.96.1

200 OK

13 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Generic-Viagra.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
13 kB (12657 bytes)
Hash
22822869a0faaa34bce70a1b8a3da363
a4c2f81cda4b09491f85a207d86f1917e23d7f4f
b8ecf50281074143026d357aee8f209fe9b2a1df484eb1b0303475e3d2098a34

HTTP Headers

GET /content_images/Generic-Viagra.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 12657
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-3171"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZySLxH17qJzyayGh6Dc7xLE60H1as8R%2FaUuxbkVq02xKsye%2FzYQsEuymeYvtqzxoI6gmenSdVPPPiA%2B42HDrCN5oPMGzVdHDG5dKtwsekoRJ79dobZGURr29CsUbYzRUlcB9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca9156c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/star0.gif

188.114.96.1

200 OK

856 B

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/star0.gif
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
GIF image data, version 89a, 120 x 22
Size
856 B (856 bytes)
Hash
c1ba09e46facee41eece5f87eff68c4f
10603bf3418770b4a40afa76f0f6b5358a4cbd6f
5c645eb42469d59f7bcd771fb80dbc2af1d26ae64aee097831ff04517b09468f

HTTP Headers

GET /bundles/shop/12/img/star0.gif HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/gif
content-length: 856
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-358"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4hdko%2F8xml0yiQ5YDgwM2DRQt0CC%2B5RRLAyXxAu9qnhw8HtVz5keZlOPEPYdx%2FrAODV%2Bed3VshO0lyEJ4P9QrE6K8uc54PIw5eTZqb7%2FNM19zK8nAWHnIqcc4fZnK8l8tFxX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca8f56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Generic_Levitra.png

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Generic_Levitra.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
11 kB (10810 bytes)
Hash
bdb2fe7ad4c436b04d0113380e061be8
31bf3167d26305b6c9aad689a5fd97604241d753
93053cd0c3160b9921efd6bd9a9090b48ff73f554f66f024316492273048d7eb

HTTP Headers

GET /content_images/Generic_Levitra.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 10810
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-2a3a"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fY2gnGJVhUJ%2Bkkr8N%2FuqkWaLstHQMyrx2oVz7257aCMfk0TFvH5UEOGI2RlXb7hdYcdurMVlRx9rhdxoIIJCdER54NrqFTHr139ZHlOLFaoT21dqDYbGcc22190dulN66exk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca9256c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Stromectol.png

188.114.96.1

200 OK

17 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Stromectol.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
17 kB (16610 bytes)
Hash
c54f0b75de27059e2108cc94c5d98555
6ccff8104f11238a4b0a4e30c9c5c385c312d745
046530dc24ba011fa2ab3d66c4e0f0674065626441521ce0b15603dbd9a576e7

HTTP Headers

GET /content_images/Stromectol.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 16610
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-40e2"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WR4%2FaWAab7f0urrD2vi4VXDPBRNXs5rc3eXcBbJUOtoda74JvgoQYavEbeNrca5xXexbB0%2FolHKtVBjwCZeSG12yVWf1LyviY3lanmBEmDuJ60Yzdhq4J3JCr79HUwDBnd%2FS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca9456c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Generic_Priligy.png

188.114.96.1

200 OK

7.2 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Generic_Priligy.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
7.2 kB (7181 bytes)
Hash
61658a77c67df06a87af0e07263389b3
1621cbc29a9a4a032f3af684fd0f32272f7d7779
ea50017f1962cc74c717c9d8d5cd85e33337267c36882245bc7185dc0326a6d2

HTTP Headers

GET /content_images/Generic_Priligy.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 7181
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-1c0d"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FaJNC%2BT6xgtK7vwkvfUkajpk%2FyAMBKf8RBD6piwBigJg5SABn18culUX5sdWYVWzBL4OnEaywlJ5PB9zakZ38%2BYYTpElhKmNsr1AhP0ec4kHVMflNihLXIgfM%2BohNuCzqdPj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca9656c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Generic_Cialis_Soft.png

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Generic_Cialis_Soft.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
11 kB (10632 bytes)
Hash
75ffce131eaf09c7e5685bc57c09d109
8b4a47c7220377e2dd890e32c709b94b78854548
0c549dc48952f6d7ff6515d8902a67af22fb11057b789147e1d9e8e08835b50f

HTTP Headers

GET /content_images/Generic_Cialis_Soft.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 10632
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-2988"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2FvoNkHCBwINHoKBWQeRhywqa96mn8%2Fq9cGDHkC4nEjBMXfZJvg6eHs5lkXguicWKxqGWyMeDuvOFn3rZJA7d4FWHkh6CCPr03SWq9gLAylAVp05ee9xuU3a8XTM715TLMxh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca9e56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Azipro-250mg.png

188.114.96.1

200 OK

16 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Azipro-250mg.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
16 kB (16157 bytes)
Hash
1ee49bcf68e0c3663c70ee8816fcdad4
d69bce5e6e447bcd01b1fa34f044d3695a590ed7
eea26bc45db669546e0633e1fb3f775f181ced114f6208ff68caa2e7e6c9b024

HTTP Headers

GET /content_images/Azipro-250mg.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 16157
last-modified: Tue, 05 Oct 2021 13:54:46 GMT
etag: "615c5926-3f1d"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zUOfuFWP5WOPLxegI3M1truvqOKYCRObYD0%2FQRP4%2FkuuJilaMdUlfLJvOsnkpQzgO1YDAqQXaxGKm8lY149kP4ck4WSVjKbHHNE2iQUY%2BRqkJRu4yP0bgk40E0gM%2F4cZPRUx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8caa256c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Generic_Viagra_Super_Active.png

188.114.96.1

200 OK

6.6 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Generic_Viagra_Super_Active.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
6.6 kB (6641 bytes)
Hash
e99dd1eae6b38305861a71a87fda57c1
626ce78a9b4faf75ddccc9159cbae22d0ce016b8
69a7bea82b3605f37005ed6c52f601ebd49a61efbbd259e5e7c6b9d65bb1d47f

HTTP Headers

GET /content_images/Generic_Viagra_Super_Active.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 6641
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-19f1"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UHCnDezs3JoR7BoIsbna55ImRNtF%2BXNqXaROEptRy3xecCgAlCRtLfivshIdr9Mi0gaxHaq23jW4mmvjjs14mwp7anNEAjBuM8jT3hrc9qmNdkfuiR7dE%2BwwRlNGiw%2Bcf746"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8caa456c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/bg-logos-inner3.jpg

188.114.96.1

200 OK

5.1 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bg-logos-inner3.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 116x48, components 3
Size
5.1 kB (5096 bytes)
Hash
72d95ec98340ad93e96771b4f7cf0fb1
3291871bc3a36fa84fe1f79eed000bef0d027e06
35e91a7d3fc79f29f71f4bd12ad3f81f787256e9564e1f6d881031c5b0c358b1

HTTP Headers

GET /bundles/shop/12/img/bg-logos-inner3.jpg HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/jpeg
content-length: 5096
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-13e8"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2BX9xICYNaqOyfI5gJv0uwB7Mh2y46sEg9MqdguwZvTm4ROPFG1tI3ll9mVTo2izbM67YbhRdBJVSmhWXXyfX7MxlfKMiswLSodIsMth%2BVdFkaxHM48KnmRfax76ebLQwHmp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8caab56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/is-1.png

188.114.96.1

200 OK

6.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/is-1.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
6.2 kB (6183 bytes)
Hash
2774e824a6728bc9b8f45a33543e0c0a
12113a510d83485b89e604ca5f1e8a351f864928
0fe89f2cbe751a86223f5580757c08de534ed84b07bfc1723ff60059683f3b3d

HTTP Headers

GET /bundles/shop/12/img/is-1.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 6183
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-1827"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vu%2FTZmwY6JhyLOiYgWt07qbHl4to2OZyj2I0LG4nPTw3sKJ6yl9ktEZ5p9rflhucb5qCRqdfZZARvff%2Bwf5bcvOME2RNSpy4VRBIeWNlIq4ZjgTeF7042V2Uzb%2Bbc%2Bxde3bi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8caad56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/is-2.png

188.114.96.1

200 OK

6.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/is-2.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 96 x 48, 8-bit/color RGB, non-interlaced
Size
6.2 kB (6202 bytes)
Hash
36562be5a2de0fa0662a91c578134e88
d3c187e4acbda10e1d946827be14abfe8c2ef23a
0d3a2e64cf4a00d1af0c3d6ca342e0a8ab97cec13df792626fddcf25694ee2b2

HTTP Headers

GET /bundles/shop/12/img/is-2.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 6202
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-183a"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fJX2pKFkUJ7MlRwu2068PBT8l9dC29iflyecZO05%2FKAPuh2IYvwHJI14l7qU7HaAAB%2BRhVFopLYyTH2Hp%2B42joq6S9VRzkBvr3bHaP8ag5wcCepDq7qPNAgd1sdRPvWH78o7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8caaf56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/is-3.png

188.114.96.1

200 OK

4.5 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/is-3.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 79 x 48, 8-bit/color RGB, non-interlaced
Size
4.5 kB (4540 bytes)
Hash
4cfd8148e4f4293ac3cafe8ecbc8edba
ab95450e2d73bd3ce35102f47f651f715bab51ca
23f31f20ae3337efc0f3caf0d710eafd39082619fa5a4d920e0e36f11b618f6f

HTTP Headers

GET /bundles/shop/12/img/is-3.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 4540
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-11bc"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SmCDDMiRjMT28aOnA%2Bpti3t%2Bz9lWQFrIDo5LzLpWIKTw8aYrnmMER8vd7ea3OyIV1mt2Zx3V%2By0Ffa0CnshmzGq2O1TUd%2BovAxAYNiD1Pp6J76WRq82hcnjWs9pzjL9OYpha"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8cab256c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/logo-white.png

188.114.96.1

200 OK

4.6 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/logo-white.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 170 x 80, 8-bit/color RGBA, non-interlaced
Size
4.6 kB (4632 bytes)
Hash
8261c9a267e783c79df06d96d026d133
ea93de2fd391b2ccb2a37dcbf02e2e9e36a4db87
d46ac13f28df8b424776c9668d8dcbc87d840ef209c2a41b0aaf4d014f48f750

HTTP Headers

GET /bundles/shop/12/img/logo-white.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 4632
last-modified: Tue, 21 Jun 2022 17:39:17 GMT
etag: "62b20245-1218"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SyUblgbrb97QOr2QsOKjJQcdFefzq5uGi454hw6Y5WActEiXQSiZbDONX8fiCcgmc3NesnJLCY8kfcZPlGgQiXkrYc9%2B1bVvLsplwL9d1L7wvFiupxXeioVr2Y6E7UGGxlcU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8dac356c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/pay-01.png

188.114.96.1

200 OK

2.4 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/pay-01.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 48 x 30, 8-bit/color RGBA, non-interlaced
Size
2.4 kB (2442 bytes)
Hash
08d7eda6e7dfcaaf813b933969cfa6a4
bec0d7bf10ef5c621077780854aa1af290c089fe
a9e5fa3bd15ef5cdb92ae2e13363ac5b0fb3d3adb83dcad4f303b8c041410756

HTTP Headers

GET /bundles/shop/12/img/pay-01.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 2442
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-98a"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PWOM5ATaJbJT6gl7DaZwDnPH9XFJK7d8HZal25OU30P2i%2FfzAau1bBTObWegOHCMgIigKxWzxwEEpafkhvSJzNymEu8ybwA96slCz2ExnNgWWJmoOOxWpjPY1hlEp6CCA9as"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8dac756c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/phone_blue.png

188.114.96.1

200 OK

2.0 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/phone_blue.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 162 x 13, 8-bit colormap, non-interlaced
Size
2.0 kB (2022 bytes)
Hash
0272eb52f18e11ab22737594f89c812d
6153397202008b479b6d2a2d4ded069139ee45c6
940216abcedd3068531d7bf88e314dbcbb495a10a13c2eb027022dc5213b41c6

HTTP Headers

GET /bundles/shop/12/img/phone_blue.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 2022
last-modified: Mon, 21 Aug 2023 13:19:06 GMT
etag: "64e3644a-7e6"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=48kKcJWJJ4kxFPtzwJhNEdSGXBD3EJ0DIVaALT7zpKYpj1JpuSS0ZYG0dhR5tMMZrBZnVfcMj1wIOqrTk33Nqlg7HRS3LiIqiUdVzLM6AcKhy5dCLyqSbJubfQRWEsvJp1Jx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8dac656c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/us_blue.png

188.114.96.1

200 OK

1.9 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/us_blue.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 153 x 13, 8-bit colormap, non-interlaced
Size
1.9 kB (1942 bytes)
Hash
aa6d7ddd13f134bd201cf0c3570eb1c2
1857742762efe552eb799615d7960cd8c63952ad
5d31d3ef3b9c7119fb92f1f18838c716f0355ea75baf2b53cd91fd481d30a319

HTTP Headers

GET /bundles/shop/12/img/us_blue.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 1942
last-modified: Mon, 21 Aug 2023 13:19:06 GMT
etag: "64e3644a-796"
expires: Tue, 21 May 2024 03:28:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292075
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0P%2Fvb1zeT38E7shvnv%2Fy1EjVRGsA2WDuNQiUjFCPisb1d%2BTpMY8Jv%2FH2Segwr%2FF0KBib%2Bb8tDnEN9k0bZS1w%2BhPgUj55LJOM4nkqLH95u2pzCaYMARO4ONfI0KMCkq685ghI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8dac456c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/bg-logos-inner1.jpg

188.114.96.1

200 OK

3.5 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bg-logos-inner1.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 106x48, components 3
Size
3.5 kB (3521 bytes)
Hash
e72dfd346a0136b7eb5c492b122b5815
eab3fb6e458d43b36b3f5bdad750352356ad3512
196efd041097ec89b9d930bd2abc551ff11742bcb54369ee1d108bd685c5a381

HTTP Headers

GET /bundles/shop/12/img/bg-logos-inner1.jpg HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/jpeg
content-length: 3521
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-dc1"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IPVgb%2BrNpp0KIEUEgEbNG5C2FfL3IHMK4dokP7NwczgoyCmmyrZvR4V6bGTWH%2FTIVuCh65APK4N%2FK2xiHkvDso0%2FiJU9BT7kmP5yKNp7ycuVEvH8Phi5Gf8bKd6iJxveZ6iS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8caa556c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/pay-02.png

188.114.96.1

200 OK

3.3 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/pay-02.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 48 x 30, 8-bit/color RGBA, non-interlaced
Size
3.3 kB (3323 bytes)
Hash
823dab96cfd16ff886cbc3fd97203e9e
d172338bac1e23a1fda257c55cb81ba3395ab359
9d5a464256330a60d89ec7d342a47aedeb3522d8bcd4415c6b66367919843cce

HTTP Headers

GET /bundles/shop/12/img/pay-02.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 3323
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-cfb"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFBaiPe97lP1Dr4Z69rK36%2FWJQlCH3nc%2BOAn5MsQ%2F5S1TyBpsETJx4c943ubnSp6vllVV7g84kQnfg0MDmkrtOmLmJc%2BgBTTxVauaPCfvhP7InVG5hyeF5AF5WzAzOLICYSx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8eacf56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/is-4.png

188.114.96.1

200 OK

7.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/is-4.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 68 x 48, 8-bit/color RGBA, non-interlaced
Size
7.2 kB (7170 bytes)
Hash
3902eb79ccaf92bf7746cd73284f2127
90ae3c4ee8e3046651908e76bcf7c241d3ee41f2
21625ec7a79048415fe2dddbd0a0f0c0f3b0cc3011ffabdfa2362884b62b3abf

HTTP Headers

GET /bundles/shop/12/img/is-4.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: image/png
content-length: 7170
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-1c02"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vUYpd4vRM%2FcAQ1IYqMygrTUIPULjCS4ovzjKCe2g0%2FzMAS4UpCQyGG4%2FC9NqIdUXzfyqfZjgLr6GNofhkjzN8Zz9%2FjB6ZmyyzkW975MKfLK15w3FglxGSEjdCOgu0kJ5b8uw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8dac256c5-OSL
alt-svc: h3=":443"; ma=86400

code.jquery.com/ui/1.12.1/jquery-ui.js

151.101.194.137

200 OK

124 kB

URL GET HTTP/2
code.jquery.com/ui/1.12.1/jquery-ui.js
IP
151.101.194.137:443
ASN
#54113 FASTLY

Requested by
https://meds-safe-24.com/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1002)
Size
124 kB (124434 bytes)
Hash
ab5284de5e3d221e53647fd348e5644b
75c20acdc6cbc6334fe2b918ab7afeec007f969e
4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d

HTTP Headers

GET /ui/1.12.1/jquery-ui.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-7f20a"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 24 Apr 2024 12:35:57 GMT
age: 19161553
x-served-by: cache-lga21932-LGA, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 322, 187999
x-timer: S1713962157.002004,VS0,VE0
vary: Accept-Encoding
content-length: 124434
X-Firefox-Spdy: h2

meds-safe-24.com/bundles/shop/12/img/bg-logos-inner2.jpg

188.114.96.1

200 OK

8.8 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bg-logos-inner2.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 224x48, components 3
Size
8.8 kB (8771 bytes)
Hash
011696efa210830b62b577c25af247fa
e17710dddd64dc14003e8979fe2a838f446e03da
9aa70f7984e5612311a53940c636752c97b267323d0db8d22f4c53c4192f02da

HTTP Headers

GET /bundles/shop/12/img/bg-logos-inner2.jpg HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/jpeg
content-length: 8771
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-2243"
expires: Fri, 24 May 2024 12:35:57 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gRTCMk%2F1TZCwqRc8cuobWKicyLgV%2FnkAycgZBzqVP5NrJOnARL6L0YGKFgVpKnXyJ1aFOk2vQLP%2BR9l5sBVHnJlx1POwZYBnK0TZNOLRXkH%2BgDF3pQkJtaWLC9TWYQt4hnvW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8caa956c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/content_images/Kamagra.png

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
meds-safe-24.com/content_images/Kamagra.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Size
11 kB (11017 bytes)
Hash
d746f6ad6410e7d2c6dd5c2232c54037
c91277ec74f3b96c7e88c1075f93cbc60138b2bc
0438fd5316f53d68604577e6dc3076190877d5ddc8d606401d3e3d1c127f533d

HTTP Headers

GET /content_images/Kamagra.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 11017
last-modified: Tue, 05 Oct 2021 13:54:48 GMT
etag: "615c5928-2b09"
expires: Fri, 24 May 2024 12:35:57 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QPqIA8Q%2FtgJmwQPtQKfsrtwFwrrQcPWXYUI3kraYB0xVTeWlTwU2G1pAPKsK8V6M2vdgxSuEY9bARuoEZs01kG6HSsew2FdsRm6MN7%2F02v4KSgoT50BuuXaMNlYF0BKRxAVX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8ca9556c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/ico-phone-header.png

188.114.96.1

200 OK

1.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/ico-phone-header.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1201 bytes)
Hash
9bdd52d1c6ba2ed47b11b06bd235900c
bfa5045aeb4118c70694c4022da86e4026db7921
bb6f9320dae14142b047084630b2e3bd526a3b4c664263e37ead73266f9bad03

HTTP Headers

GET /bundles/shop/12/img/ico-phone-header.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 1201
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-4b1"
expires: Tue, 21 May 2024 03:28:03 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292074
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DgehNIKt16PLQXXSdbwGtEbr2%2B1ks6LdEQM2D2lPFwI%2F%2FVMbgILIqIscBJRq1jgH47z%2B6Rgno05EqeY5jqyugZjWP3nr9fCqE6JdvHFwIhZYtiruPMXUcEXaL5hdqfARMecU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db1d9056c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/bt-header-trigger.png

188.114.96.1

200 OK

1.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bt-header-trigger.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 32 x 27, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1164 bytes)
Hash
e22e77fc2be9982752813a36ec28bb76
25d707125e61615670a9deaf8c07b8c872d43fc6
6e3e9ea5870c2748d1c687585d6580b5568ee7e953120ff517c88d26426b85dd

HTTP Headers

GET /bundles/shop/12/img/bt-header-trigger.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 1164
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-48c"
expires: Tue, 21 May 2024 03:28:03 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292074
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O2guhLUhYoO%2FoT11otKfQ94yxIh%2Fwx4dwkKkdz6tnH3zx0aNNqDnf6MuUExPUxNJMigbYgPma2348kQ2FGiBn8hPgrx%2B9uiyPiZYGSJWhJqGufbJw2T%2FoUr5ZjBOUcYa3ETP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db2d9b56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/bt-search.png

188.114.96.1

200 OK

1.3 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bt-search.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 18 x 17, 8-bit/color RGBA, non-interlaced
Size
1.3 kB (1297 bytes)
Hash
876584079bc951517b5017ce803edaa8
3187650f0b8fb0c146af8395045226d98af5a2c8
0e2193fff84ab7cec4f47297b8aaf18a5ff45d48a814c0d6e290475c2a171a43

HTTP Headers

GET /bundles/shop/12/img/bt-search.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 1297
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-511"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t6ElgEPOSuQkjxN9liPB%2Bycj1%2FG8jauXVzmRvtUWRiDuVyfVgulknnEIZaKboc0wRh38On0GL%2FwMC3CJb6echL1Q8%2BAh3t3fV%2FASqlQj%2FJ7nhcmpncTCiBy5NHZjokBQDo17"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db1d9556c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/bg-banner.jpg

188.114.96.1

200 OK

151 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bg-banner.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x634, components 3
Size
151 kB (151304 bytes)
Hash
82caeccfa37e462bac076dbeee0ff171
b1f78f49bede07e62625c345d16de1f74b124b2c
020571719cb13e7da0ed594a19c9781baafd6a73540095ad28004afadd960786

HTTP Headers

GET /bundles/shop/12/img/bg-banner.jpg HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/jpeg
content-length: 151304
last-modified: Tue, 21 Jun 2022 15:09:31 GMT
etag: "62b1df2b-24f08"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Oezx%2FAesKuESfQbDnnygBXnR4PJhhJ%2Bvwu9xGcBRCSOKk2685d2wD4g7oDyij8i40ENEdnFkCamPP5ylmvp5LrD2Tp1UU7gs2YCWz0YUC7EA3nqFMBaC%2FUGW%2F6iN7eYxv3u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db2d9c56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/ship.png

188.114.96.1

200 OK

756 B

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/ship.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 48 x 36, 8-bit/color RGBA, non-interlaced
Size
756 B (756 bytes)
Hash
66649fcdd812b7e1abe1eeefb9440f74
3b9a1061594a55d278432c246a5cbf75c2784ea2
716fc159bee3c6ac8dc3fa30b41487ff7f8b30768204fb828de37d107269b8cb

HTTP Headers

GET /bundles/shop/12/img/ship.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 756
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-2f4"
expires: Tue, 21 May 2024 03:28:04 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TVqRyf2p%2FFvTaa0lXTq6QJJUUmv8b7qK7gDCdP%2BdTWrl3Vv%2F%2B6hcHCsvN1oTn2%2B1CheHorYLIoPK7hKLQRQQbGdZPG2GTBJsr%2BgzQLqYGl8%2FCgUAyxPUcAIL32vjxZxBGcre"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db3dbf56c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/bt-lSide-trigger.png

188.114.96.1

200 OK

1.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bt-lSide-trigger.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 32 x 27, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1173 bytes)
Hash
ef444a3aa9daa5860ca2c1ae2da52265
42e5bc7620e48f8b978356ab7b5caa0713cb61ca
c5d20caadb6f4558cbfc2d8fb68e6a54dba1fac12e86b52a4de4a2bc555608f0

HTTP Headers

GET /bundles/shop/12/img/bt-lSide-trigger.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 1173
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-495"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dJBlKHwbQs76RotT5mC4ukOYYQJGqQJKeFt5gPTGo78Cw6Pjoq3PVytNkTvXMXjZUSQ%2BdUjJ0U5PMN39G6xzyQJSFHR7kzYISx9Z97diFPvyrIHuPEtjEjlP8qn4R0EGY%2Fxa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db3dc456c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/ico-phone-footer.png

188.114.96.1

200 OK

1.2 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/ico-phone-footer.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1241 bytes)
Hash
923ff69527d189014876d3052e04c50e
da8956450d1399f6f804fd243241d779906389e2
cdfc9a6489fc3a1012ef534abbf489a4030e7a3f9a17a14006f28a8dab197108

HTTP Headers

GET /bundles/shop/12/img/ico-phone-footer.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 1241
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-4d9"
expires: Thu, 23 May 2024 04:59:01 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ur2qeYOM8C%2FQTTREdeHW0seXGh53%2B2COW8HyNcRIjz%2FdsbBxRl6oNyz8wGBqcDH6HdcoxKQISMqtj6Hr9hSQUC2tsNYcHFuf4rNwEBnNs%2BZnz34warVN3F3fuoROnJ%2FLUS2R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db3dc556c5-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://meds-safe-24.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://meds-safe-24.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 554457
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://meds-safe-24.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://meds-safe-24.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 554457
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://meds-safe-24.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://meds-safe-24.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 554457
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:300,400,400i,600,700

142.250.74.106

200 OK

2.4 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:300,400,400i,600,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://meds-safe-24.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
2.4 kB (2422 bytes)
Hash
88d856beed317c3d7b1477ac16ecf1cc
6e04574511a3c46fb93108c609a561450075ef73
0049fe7834ad13cb457c9b9478c5afae2bd7b378e9a061870e7cc09ec69a24e2

HTTP Headers

GET /css?family=Open+Sans:300,400,400i,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 12:35:56 GMT
date: Wed, 24 Apr 2024 12:35:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

meds-safe-24.com/css/313b584-2632a3e.css

188.114.96.1

200 OK

22 kB

URL GET HTTP/3
meds-safe-24.com/css/313b584-2632a3e.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
ASCII text, with very long lines (531), with CRLF, LF line terminators
Size
22 kB (21800 bytes)
Hash
c06bc268c8c2bcd1eecda60ddaff2d7e
8667be3e512bb6801ce28adb180f4e8b1a52aee3
29cf6858baa3fc57f4c76c9c197f691aeaf64d3445473ac3658254ab184d993f

HTTP Headers

GET /css/313b584-2632a3e.css HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: text/css
last-modified: Thu, 28 Mar 2024 19:43:52 GMT
etag: W/"6605c878-ac80"
expires: Thu, 23 May 2024 04:59:00 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113816
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OUsSS5sPIpeaD4A9XDXXQtF%2F16yxpAhGAeuZKDMF6WN7iWV%2F7Om7kKJmdxSHv93OmBLqT1gb4kTqoGNN4ehn5aJWrHjieWhlBr5J8iPtFoyQkdnp1W4YUH91oDwCtu%2BG3At4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8aa6256c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

goo.su/27m7zP8

104.21.38.221

301 Moved Permanently

7.3 kB

URL User Request GET HTTP/2
goo.su/27m7zP8
IP
104.21.38.221:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgoo.su
FingerprintDE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60
ValidityMon, 01 Apr 2024 06:02:27 GMT - Sun, 30 Jun 2024 06:02:26 GMT

File type
data
Size
7.3 kB (7316 bytes)
Hash
e374174e37c446bc7f75ab6dd10876e3
5611a91c2ccb13efc8c6e0fba57add531e5ad415
16aafa6c57883333f71ee7d7c322c5b632a9e3b7b19838bdf110249b99ccae33

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /27m7zP8 HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 12:35:55 GMT
content-type: text/html; charset=UTF-8
location: https://meds-safe-24.com/
x-powered-by: PHP/8.2.13
set-cookie: XSRF-TOKEN=eyJpdiI6ImFadC9sWHBCbks5SlUwN2xUWEtzVVE9PSIsInZhbHVlIjoiL1BEZThqUWlCSE1QZU84RE1oQzdTZ054aUk1Y1k4MStQamZianA5M0JpYUpxdG1PaDI4enlFR3VWanl1YXZobjJKM1F5TktuR3NCYlpJTkxxK0kvTWJxVzJUOVVqWG5NUjBJMXlyUzFqK1RTUGNTUWZ5UlVMcnJKNGlhVTFOUjAiLCJtYWMiOiJkY2M4OTlhNDZkMDg4M2M5YjlhMWQ2Yjc3ZTA0OWQ1ZTkxOTBjMjQ1ZjM5NTMwYjE3YzAwNThjODBiNDkyYThkIiwidGFnIjoiIn0%3D; expires=Thu, 25 Apr 2024 07:15:55 GMT; Max-Age=67200; path=/; secure; samesite=lax
goosu_session=eyJpdiI6Im5YckxUcWVVQXhkbWdLWU9CZnRCTVE9PSIsInZhbHVlIjoiejlVM05mMG8xcytTL24xWDJwMFFTYkI4YWZ1SVlwTTJnVzE5UkIxbTN1Rm9BMXFxV1VSdzRDcThkeE9MVFBNb1FjM1RVaEhzZ1ZYQ0p4R1U3QTYvNmpOQTVOQWV5TUlrWjNFUUp5VjBTYy9wM2p5UVo3RGFaeVA1UG9tR0Irb3UiLCJtYWMiOiJjYWU5ODkyY2QyYzcyZmNiMDNmYTZhM2RkZjliN2Y0YzFlMzFmZmQ4ODE1YmUxODA4ZTUzZjkwNTZiZTZiMTE1IiwidGFnIjoiIn0%3D; expires=Thu, 25 Apr 2024 07:15:55 GMT; Max-Age=67200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9YYapaqrsi8zjDV%2FGoTbUOmb%2FPdkXR%2FqpLCAIXiQun8KZFcbxnm8QO3KtiodHFgNGEcdPbhBba7KLsb6CPNWEq9gcR4ujprU7g7hYRefI7D42oY7pmwYfU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879622d268deb4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

meds-safe-24.com/bundles/shop/12/img/disc.png

188.114.96.1

200 OK

792 B

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/disc.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 48 x 36, 8-bit/color RGBA, non-interlaced
Size
792 B (792 bytes)
Hash
8b36b0b4f5d7907707b9a9b692531cd0
2ed4b3401a5e60fc114ced3380c07b4c410aac24
c2dabc225234807b34a31db54da8eb4ba1a13c7ecc1b2a85016d89b9e41a6127

HTTP Headers

GET /bundles/shop/12/img/disc.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 792
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-318"
expires: Fri, 24 May 2024 12:35:57 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hCt9Xp361JBloTyFN%2B499z%2BtgQca5p%2BM1rJf1BBxPB3TonbLFSS48zb3GDA%2F%2FZRbbn6HChkvJlJa4GUsMKXDQUM37%2FEjVm%2BEzm0mUO9t9K3jJZtuTEjRdxpZ2dgMvgynkIWz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db2d9e56c5-OSL
alt-svc: h3=":443"; ma=86400

apisales24.com/bundles/api/js/events.js

188.114.96.1

200 OK

5.9 kB

URL GET HTTP/2
apisales24.com/bundles/api/js/events.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectapisales24.com
Fingerprint09:63:97:A5:D8:23:DC:F2:55:AE:88:3B:4F:F0:02:9B:B5:48:AC:72
ValidityFri, 29 Mar 2024 13:35:05 GMT - Thu, 27 Jun 2024 13:35:04 GMT

File type
JavaScript source, ASCII text, with very long lines (5652)
Size
5.9 kB (5898 bytes)
Hash
65d96ae18d1af5e1cccde5c5c014ede2
ba0526a272c33da8b2941962171918b0fc7ca44f
a4113071941beeb7ecbf97cd369842f01fe3599f6520112f010d734b7daf4e2c

HTTP Headers

GET /bundles/api/js/events.js HTTP/1.1
Host: apisales24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: application/javascript
last-modified: Wed, 13 Sep 2023 17:38:41 GMT
etag: W/"6501f3a1-3c76"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ot9RpViHTjuxcs9xjP6jFLMnT2BCvtpZCqnwRbWXFew862qYtBNRJ5km%2BkTwwdxyZZRJDo4KTYRhilpxk6UNoPxFmTdg9PVukn4yqt3tpyIfwJ1po2Amb%2FqgLkpT0L7qYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d93be57129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

meds-safe-24.com/bundles/shop/12/img/bg-caption.png

188.114.96.1

200 OK

929 B

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/bg-caption.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced
Size
929 B (929 bytes)
Hash
f48bc45f44ec38ea91ff1517045fe628
89e7295740543002c6a865caf1c86fbc3f71af31
68d26bee52aabe0146818aa086b0fdea002e3939c1e8d07420e2074c50fc7e85

HTTP Headers

GET /bundles/shop/12/img/bg-caption.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 929
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-3a1"
expires: Fri, 24 May 2024 12:35:57 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lciJ8HFtNsdX%2BOd4BACSpuqvrbWn18%2Fqw3EHOkFYCnGAaIo8qE2TQgCZiNC13AMmTe%2FlJwfeE6GTCrA4Bso8Fzpb4G1EaBWQiV5iKIuTt7b%2BDAfcGK6f%2F93moVV8IPV2eVR3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db3dc356c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/img/q.png

188.114.96.1

200 OK

747 B

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/q.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 48 x 36, 8-bit/color RGBA, non-interlaced
Size
747 B (747 bytes)
Hash
0ced057d4f60d55baec619b54e6acb88
19ff78c77e6906d24f997edb3c5d33c354c6994b
98872a2d3aad916663929150d535f93a2ca5a2726b0f9f1d6aed24abb5a7351a

HTTP Headers

GET /bundles/shop/12/img/q.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 747
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-2eb"
expires: Fri, 24 May 2024 12:35:57 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PGb2H9lqaKtdtdkS28xzyCp8%2Be3CJy0JnnhozqEq8akKZoNBnIIXQ9Hb90gGZVY31tbCo3vBIurOfQzl%2FskrZp9hchOWTPJo7V9tjYJ%2B6vj8rlyp4DluuDzQRyEt77UCNvBN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db3dc256c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/css/font/157c6cc36dd65b1b2adc9e7f3329c761.woff2

188.114.96.1

200 OK

16 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/css/font/157c6cc36dd65b1b2adc9e7f3329c761.woff2
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16408, version 1.0
Size
16 kB (16408 bytes)
Hash
3e59377010049f01c38713f877f37edc
ee9b9cbaf59f01d252148e5680a30ce4337fb721
f7e32b37349df0e3cae7060140ecfa9b88d512796fc127f9f5becee6204cf3e1

HTTP Headers

GET /bundles/shop/12/css/font/157c6cc36dd65b1b2adc9e7f3329c761.woff2 HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/css/313b584-2632a3e.css
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: font/woff2
content-length: 16408
last-modified: Fri, 15 Apr 2022 18:20:58 GMT
etag: "6259b78a-4018"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2dwhePUSzn5NFmg%2FvmV8kS1br2Dv6sWX6weJiT16kRXSde%2F3IO%2F1T5wb4rpEdMXDOZ2s38GH6ZkfR%2BYdf6Mtjek%2ByZKplFLQmEbK%2FkRbAgA8pFubjST%2FMWTsQHtf%2Bc%2B9SWvd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db6df656c5-OSL
alt-svc: h3=":443"; ma=86400

apisales24.com/track

188.114.96.1

200 OK

13 B

URL POST HTTP/3
apisales24.com/track
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectapisales24.com
Fingerprint09:63:97:A5:D8:23:DC:F2:55:AE:88:3B:4F:F0:02:9B:B5:48:AC:72
ValidityFri, 29 Mar 2024 13:35:05 GMT - Thu, 27 Jun 2024 13:35:04 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
13 B (13 bytes)
Hash
3d9d0c0685bcbc5f1e3a7832501f4f6f
f62580f5cbeffc30c19a50fdf912dc3dcb00dd4e
a37cf3b9dcc8d7182a7f2fbe854f29316e8fdf400422951e23ed172fe8387a02

HTTP Headers

POST /track HTTP/1.1
Host: apisales24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 456
Origin: https://meds-safe-24.com
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: application/json
x-powered-by: PHP/7.1.33
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-methods: POST, GET, PUT, DELETE, PATCH, OPTIONS
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIsUtihUifJLVC76g3gbzBAhQhqb9%2F6cYslE08d7xE0sH8Kt%2BfYxR7tqDe%2Bglu78JMBXW8KeidYQkqRj9xvTJRJ%2FZ0tDTFiX%2FFjxlEfQ4e6hSKmnF2xDBC80%2Br4lyz5q8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879622dbead156ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic

142.250.74.106

200 OK

22 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://meds-safe-24.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
22 kB (21949 bytes)
Hash
51deacaadc5ae7f8abd9a78a09639169
8ec2e454d79751a7a008654722726277405d8a37
29f06a8a49d4989ed4e65f0031e01ef2aaeb7220cfd4861f7033e4186c002820

HTTP Headers

GET /css?family=Roboto:300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 12:35:56 GMT
date: Wed, 24 Apr 2024 12:35:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

meds-safe-24.com/bundles/shop/12/img/sat.png

188.114.96.1

200 OK

810 B

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/img/sat.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
PNG image data, 48 x 36, 8-bit/color RGBA, non-interlaced
Size
810 B (810 bytes)
Hash
1e57574bb5b15cd7c02ecaf69e5d1b37
80c4c33a6b65ac74b952133433067cbe35a8a535
d3ff679a5291712cc598bdc61bbbaef1cdcaf4aa2904599a82d7fc8f2547a6f2

HTTP Headers

GET /bundles/shop/12/img/sat.png HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/png
content-length: 810
last-modified: Fri, 15 Apr 2022 18:23:01 GMT
etag: "6259b805-32a"
expires: Fri, 24 May 2024 12:35:57 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pGdJARZusetzEmB9nLHqMFxbsIa5HSwC4iQD5zy5DDLxL8sK49Ngh3BCIK9ft3ryKifekppJolLcng6PFNPIY%2FANBAvPN%2FAqf3ga%2Bgb%2BT%2BWwJd%2FLtwTo6XcuWBMlOYr9csEt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622db2da656c5-OSL
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/

188.114.96.1

200 OK

32 kB

URL User Request GET HTTP/2
meds-safe-24.com/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
HTML document, ASCII text, with very long lines (581)
Size
32 kB (32456 bytes)
Hash
31c82e92561a44362d2fa2aa4f64f5ff
6c0c85d4532aa343eeb8f9924ea2da5407496cc3
fa38a2a825d6fc2cb6c9713a9da6357902cf839d774b9ec386d26aa8d3b6cf24

HTTP Headers

GET / HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
set-cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01; expires=Mon, 24-Apr-2034 22:11:56 GMT; Max-Age=315567360; path=/; HttpOnly
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qG83gFpNXcS2oYgt%2FwkApgp68ODSdMRZAgwu%2F0daPfvU0xB3cUC9O5XZrEjFR7vESHlq%2Bxy4SDuO%2FfBWrkGI018yleM%2F5aGDTSA6c3XxNaWpbRASgyXw2vDvvS9IAs8G3k%2Bw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879622d39ac7b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

meds-safe-24.com/js/7fc89c9-52e6069.js

188.114.96.1

200 OK

491 kB

URL GET HTTP/3
meds-safe-24.com/js/7fc89c9-52e6069.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type

Size
491 kB (490907 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/7fc89c9-52e6069.js HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:56 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 28 Mar 2024 19:43:52 GMT
etag: W/"6605c878-77d9b"
expires: Tue, 21 May 2024 03:27:47 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 292089
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fDn8AC2xlY7Zy8mdCEUsxkGDEDeRlJPRHHnijoDtxTIaSm7rK4vN6ZRy2eF4cvE%2B739MbkwoHZuIH8GndwJ3phlKpMeHwZRWOh5kqf4NnmzO3GbPKlGG0M7LHo2VcYHY6xOT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622d8aa6356c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

meds-safe-24.com/bundles/shop/12/favicon.ico

188.114.96.1

200 OK

15 kB

URL GET HTTP/3
meds-safe-24.com/bundles/shop/12/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meds-safe-24.com/
Certificate
IssuerLet's Encrypt
Subjectmeds-safe-24.com
FingerprintC2:DF:FE:D4:29:F3:53:77:A7:69:D7:94:F6:2F:B5:D1:54:67:E0:FA
ValidityThu, 28 Mar 2024 08:25:15 GMT - Wed, 26 Jun 2024 08:25:14 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15406 bytes)
Hash
1b281b1f1619aa8ff8f316f7fe938e0d
74209b05b5870899e89988e8e7bb9f01b34a4c7e
6c7f1e24f22b5930918105f17142594ce8e22e17dfaa5156de0c6efefd4f3632

HTTP Headers

GET /bundles/shop/12/favicon.ico HTTP/1.1
Host: meds-safe-24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meds-safe-24.com/
Cookie: PHPSESSID=a6fb68198a02eab16d658a7bfd4b3f01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 12:35:57 GMT
content-type: image/x-icon
last-modified: Fri, 15 Apr 2022 18:20:27 GMT
etag: W/"6259b76b-3c2e"
expires: Thu, 23 May 2024 04:59:02 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 113815
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3HlkMg4kkgm6BuT0zCwl3mjYF7FtLFp2DP9va%2FkTpsoYzSL4rzG4jzwkDTQyjml15b7R9A5yUmfMi27EV5xW7M6JqO2H22WX08t1wivveK%2FRVcQsB75BE3CeYKScqup4CsKq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879622dde91856c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (56)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size