| maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ |  104.21.38.205 | 200 OK | 5.9 kB |
URL User Request GET HTTP/2maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ IP104.21.38.205:443
CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeHTML document, ASCII text, with very long lines (12416) Hash14fd0831387e891e81e0452aa0b27fdd 04bceb0308c7e472e4ff702e3daa0b26213bd29c eb06bc7e18d82b48c268ded52d061e10eb95a87d901e2444d320509239d2d5e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: text/html
last-modified: Wed, 24 Apr 2024 13:12:33 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5yTlEaoPzjVNvG7BiatB3K8ngEsWcqeaL%2FYr53qBeELIh4rjnCkdYJ8VTQQ%2BAoDTapLn0kb8Rzh%2BoNOq0wvcpMIWrv6VSe%2FoDIITi7%2B%2FAGThT3gScUou8ulfCUbiv6d4gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d3ef1756bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maukaiptek.com/_next/static/chunks/pages/_app-300835a4e9aacf9c.js | 104.21.38.205 | 200 OK | 12 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/pages/_app-300835a4e9aacf9c.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (39993), with no line terminators Hashf3f209219f0234d519122940ffe82866 201086702881a34037583c151ad307c1f0ea5586 d74e2249aae2b85293388cb3577f6932e60bea804e7a1615a0204b9e4f707d1e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-300835a4e9aacf9c.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-9c39"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ryduDWpb2Zr0MOBO9g3aTOI60dokmnCl0ABX%2FqFfS0aGOu8co0Vk9SVkCRNUJiA%2Fa68TyZ2aO3NFrprmMUjPUj3QkTfXCD8OyzlskUQoHrS3OqOfh4xmTCZ2YQdubwy5hQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5de5d56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js?userId=skpcuhr1ywe9l0oszghockthgiyzv4oj |  139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=skpcuhr1ywe9l0oszghockthgiyzv4oj IP139.45.195.8:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hashf35c5d546c7e5a8c44f6aceb3e53948a 4fbedc09c9fbbc1c8278fbd9c00056e59aa8c3c4 af2a1a464e63c7c266cc706f3a6b40456b15dcb3ffffedf95f6442fb99e13e06
GET /gid.js?userId=skpcuhr1ywe9l0oszghockthgiyzv4oj HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://maukaiptek.com/
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://maukaiptek.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=skpcuhr1ywe9l0oszghockthgiyzv4oj; expires=Thu, 24 Apr 2025 13:40:07 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| maukaiptek.com/_next/static/VQVlAmm3RyRtHopEWly_Q/_ssgManifest.js | 104.21.38.205 | 200 OK | 105 B |
URL GET HTTP/3maukaiptek.com/_next/static/VQVlAmm3RyRtHopEWly_Q/_ssgManifest.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeASCII text, with no line terminators Hashd78f02cd11637a888af548f5e270c3af 9c90b573305ec9d6d2e7e74837c641a863d991b4 2357fd3fc3972384c0c7a714da244191da43a7bf5d91fd865a30d2deb0b6b517
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/VQVlAmm3RyRtHopEWly_Q/_ssgManifest.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-b6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OkOYwWfYZQePaY7mKo01BndO5Jcejzh3v2UTlGXyh5QOZiFpEV8QW3VE%2BD8iOnDwek6266dgj1K9DXbQxJPigeQloioN%2BR82enL%2BrkuoBCJjMJzCOGanUz7Qu0jNH0RDFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5de7756a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/rain/confetti-1.webp | 104.21.38.205 | 200 OK | 12 kB |
URL GET HTTP/3maukaiptek.com/img/rain/confetti-1.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image Hasheb224b5a86e8c9f478bd6f2a8c3c53ac 0bdc5a91bb1c87fe55b023ee6cef886edb64967e e910f36c92776b4e4a415316307a6cbb4d4f039bb8d66dd094c7b90d76f6fa1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/confetti-1.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 11774
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-2dfe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ef5ek2waRpz92IaGXeteSYU4Eg1UZDKTVN0K3YM33oImhWX1eOeGrBImAD3zo1SApQXcvhOKZAGKUGBGnerNVMB5D20viePbyTyRKoisE24B%2FumTno0Vj4CQn%2Bwwj0s2wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8498556a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/framework-3281cb961088a9a3.js | 104.21.38.205 | 200 OK | 14 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/framework-3281cb961088a9a3.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (26042), with no line terminators Hash499fb17b15c09c2d76681f27dde9a031 5564d317c33112db56918ec372d392caabec70f2 9350c53e2fe847ec629962106d01d6af28a0d9c69feb57e7609b3c096935cdb2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-3281cb961088a9a3.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-65ba"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pE0B6vdfrdioH%2B8kqAjaErrjCi65zikdVfzubdfTHxfTJFYSbxB2Fh4dXEZu26j5Pe4BYke17PH1d6Xfb164QnqEMcJ%2BXTiIWHuCgRwSIseH7mRButlbv5MzEWSaB5%2Bo6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5ce5856a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL POST HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://maukaiptek.com/
Content-Type: application/json
Content-Length: 442
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 530c837306c7b9548fd8483c828ad255
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://maukaiptek.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| maukaiptek.com/_next/static/chunks/7903-dd238946c7924507.js | 104.21.38.205 | 200 OK | 20 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/7903-dd238946c7924507.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (31896), with no line terminators Hashb5dd343db67bd22544d11da18268f5c3 069b5b221dd75af58d93192460778b3d07835e74 6347f1d4083f7a0a2ac3d8b12aae8832d9ea6914aa6e137d16a4d41869d14ea5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7903-dd238946c7924507.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-7c98"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mC2NWvuXCrwgsT%2Fx5EDm9fXuVqBSwjIZeo%2FAAUOMOZePDRWgeipfA2eHeNne2vNo746NnjAJ4E8gdKri%2F6In80BXW%2F9aX9GQW1qJukBDbfC%2Bd9e9C31ELDwQ3%2BGKrrEo5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5de6256a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/2090-5c4f654224750f4b.js | 104.21.38.205 | 200 OK | 30 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/2090-5c4f654224750f4b.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (10772), with no line terminators Hash48a7086ede3da4d57eaa11bf2ba435dd a58e6ce70f2675ce2fdcaff04a63d33c4bc0744d 59750f2431678c96646d026ec016eeeb91df7913acfe972f7e9a3110b302dc3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2090-5c4f654224750f4b.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-2a14"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TG83%2B8D9DRO%2Fw8IiiabCCsHvbsavL84Yl800GPiuJ3FYYFHWNnlrVWLLKRQ5kYCwByHL%2Bthy%2FEDAgVLluXXcAqHurUtWaDmCYnv4kDOj3rxXlEo1XLxLNi2dc6m9kiKNvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5de6656a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/track?dry=true&request_var=6550734527990&oaid=skpcuhr1ywe9l0oszghockthgiyzv4oj&os_version=&var=7307864&var_3=%7Bvar_3%7D&var_4=&variable2=806926887432761350&ymid=6550734527990&z=7307864&offer_id=9560&ab2=1615111%2F | 104.21.38.205 | 204 No Content | 0 B |
URL GET HTTP/3maukaiptek.com/track?dry=true&request_var=6550734527990&oaid=skpcuhr1ywe9l0oszghockthgiyzv4oj&os_version=&var=7307864&var_3=%7Bvar_3%7D&var_4=&variable2=806926887432761350&ymid=6550734527990&z=7307864&offer_id=9560&ab2=1615111%2F IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /track?dry=true&request_var=6550734527990&oaid=skpcuhr1ywe9l0oszghockthgiyzv4oj&os_version=&var=7307864&var_3=%7Bvar_3%7D&var_4=&variable2=806926887432761350&ymid=6550734527990&z=7307864&offer_id=9560&ab2=1615111%2F HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
DNT: 1
Connection: keep-alive
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/json
access-control-allow-origin: https://maukaiptek.com/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2FfCHWDcAnWraaFV4M1MDaJK%2Fhe%2F%2FkFwOPQLGCmHeuLsUPKaUE8i42qvMShZw99uB7P2Wgg44mt9KtudvSBbJORv7BS%2FzI%2Byd0CppHti5lheWhMZUDDXznMmR74r3qFqZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d93a7756a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/comments/sweeps-survey-people/person-4.webp | 104.21.38.205 | 200 OK | 990 B |
URL GET HTTP/3maukaiptek.com/img/comments/sweeps-survey-people/person-4.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash9cf9f3e3dfcc55a5f78f17c480d5ffe5 7872be6ec84ca8daddc39b212ecc2d245552ebaa 89b38177077f06270b54b6dd9a7297face39abebf76639d1b469bbd3a91b7fcd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/sweeps-survey-people/person-4.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 990
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-3de"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HYFqLGrbWbcnOcPrtyuViF5YrqaIni3gGnbyL5r%2Bf1QP%2Fiiplj0Pl%2FyZ%2FnF0T%2FacaJOSEWC2BGAXsbJl%2BFvCjaba%2B6suJEm9bcMo%2FQ2Wg2YgLxDxhBSNCG7UkhONUUlWdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d9ab7b56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/comments/sweeps-survey-people/person-3.webp | 104.21.38.205 | 200 OK | 728 B |
URL GET HTTP/3maukaiptek.com/img/comments/sweeps-survey-people/person-3.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash80c63634194b448e1c0aa5832eb85a94 d1900c7be9833911e1cf2c603311ec212e0a447b 7cc4cb8814d21c22c3f0178afaaa301310306a65f19d4ca1b7e23a6082a0e6e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/sweeps-survey-people/person-3.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 728
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-2d8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K6%2BUXoeKYieSediUv5UkfPs7rhT5bxmsI1EhZL34Ju7jZRzopvR5BU608EdYJaNqZIrXN2uoM0asLLwneZUqWW9swlkoBzpVpSKNvL%2BPhDXORaNhKsMNWXDo9gDg4lA6Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d9bb8656a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/comments/sweeps-survey-people/person-5.webp | 104.21.38.205 | 200 OK | 742 B |
URL GET HTTP/3maukaiptek.com/img/comments/sweeps-survey-people/person-5.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash2a23aa8a589d7ec7d2d30754ff8a7ed4 942f6fc43ede51d60573d48e3cb490150a1291df c9296d51a2505a85dbe2847f1a590a42834fa8bd960b00bcf16d1b1b962b4ae4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/sweeps-survey-people/person-5.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 742
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-2e6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1k3VloSArF9yi3Yo0350gEGAIKWEKeIs%2BPpzmhifn80WCTbOZQlghUZ%2BLU%2BUe8%2FyGmuF0BRjBGwiu1HPGz5xUVJ3OqchOv2R2CO%2FaXUIwnPT3TobsXZORyaLUClZqwja3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d9bb8856a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/comments/sweeps-survey-people/person-1.webp | 104.21.38.205 | 200 OK | 1.1 kB |
URL GET HTTP/3maukaiptek.com/img/comments/sweeps-survey-people/person-1.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x52, Scaling: [none]x[none], YUV color, decoders should clamp Hash792978b4a5e044dce5d47a39a5ef32ed 827a5d26e4b5b4cbb1428cbd066f3d9e6a3ac8c8 1e6e6dc5be6aa9e51bd939ee48a0db3e73195d715ec9ef9e30981f814eb48db0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/sweeps-survey-people/person-1.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 1054
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-41e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jY8%2F8PylbCP%2BQkQtLn8DzlEojTNux%2B9JLzHJlnt6%2BeVmicIeLgLUzrdBdn2tJcyEQu%2BOlNlLKm3f4s1NCNugZ35kXruMv%2FrAtz%2BoLE%2BQYXHT7%2FoaAlTHR1H2le6rK4oRbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d9bb8d56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/comments/sweeps-survey-people/person-2.webp | 104.21.38.205 | 200 OK | 678 B |
URL GET HTTP/3maukaiptek.com/img/comments/sweeps-survey-people/person-2.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashe38aa53ccd2b8d2fc89faf36cf59a759 d8295b30aa567173cad0b46b05ed94f94d5f23c4 b96dd1cc2373f53c64d434257448ef6cdae85e35fdc246b1a357a290822bd23a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/sweeps-survey-people/person-2.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 678
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-2a6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BhXQD7ex%2FpS1D1C0SHZchxjLXLZJ%2BBZhYM1UlV8uNNSAxIg0WYp%2FG9h7zOk9FkyPyswnqZ6SNRyA9PMsjuJ0f8itcMKm7sYeP0MpqFVoQgGvQ5Ph8b6vVxqA2xAsa58oIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d9cb9b56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://maukaiptek.com/
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://maukaiptek.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| ofklefkian.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectofklefkian.com Fingerprint04:A9:FE:8D:C9:B9:EE:6F:3A:C4:29:EA:19:AD:C3:1D:7D:3E:14:02 ValiditySun, 14 Apr 2024 05:38:05 GMT - Sat, 13 Jul 2024 05:38:04 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: ofklefkian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 485
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: c087f256f6a0ca1edafc887a33031dc0
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://maukaiptek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ofklefkian.com/zone?&pub=0&zone_id=6954461&is_mobile=false&domain=maukaiptek.com&var=7307864&ymid=6550734527990&var_3=%257Bvar_3%257D&var_4=&dsig=&tg=1&sw=3.1.502&trace_id=6a2372f8-c9e9-417d-8d59-a8cb8e2f44e0&action=prerequest | 139.45.197.251 | 200 OK | 0 B |
URL POST HTTP/2ofklefkian.com/zone?&pub=0&zone_id=6954461&is_mobile=false&domain=maukaiptek.com&var=7307864&ymid=6550734527990&var_3=%257Bvar_3%257D&var_4=&dsig=&tg=1&sw=3.1.502&trace_id=6a2372f8-c9e9-417d-8d59-a8cb8e2f44e0&action=prerequest IP139.45.197.251:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectofklefkian.com Fingerprint04:A9:FE:8D:C9:B9:EE:6F:3A:C4:29:EA:19:AD:C3:1D:7D:3E:14:02 ValiditySun, 14 Apr 2024 05:38:05 GMT - Sat, 13 Jul 2024 05:38:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=6954461&is_mobile=false&domain=maukaiptek.com&var=7307864&ymid=6550734527990&var_3=%257Bvar_3%257D&var_4=&dsig=&tg=1&sw=3.1.502&trace_id=6a2372f8-c9e9-417d-8d59-a8cb8e2f44e0&action=prerequest HTTP/1.1
Host: ofklefkian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-length: 0
x-trace-id: d89eb53e4bd6f5fa25699fa89fe0ba9b
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://maukaiptek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ofklefkian.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectofklefkian.com Fingerprint04:A9:FE:8D:C9:B9:EE:6F:3A:C4:29:EA:19:AD:C3:1D:7D:3E:14:02 ValiditySun, 14 Apr 2024 05:38:05 GMT - Sat, 13 Jul 2024 05:38:04 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: ofklefkian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 487
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: f96775a22521d98337a27b98c249525a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://maukaiptek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ofklefkian.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectofklefkian.com Fingerprint04:A9:FE:8D:C9:B9:EE:6F:3A:C4:29:EA:19:AD:C3:1D:7D:3E:14:02 ValiditySun, 14 Apr 2024 05:38:05 GMT - Sat, 13 Jul 2024 05:38:04 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: ofklefkian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 488
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 75df84458269050ec2a14ffd68c7e990
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://maukaiptek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashf09e35c70a83ac81e817ba2aa4cd06b1 03eed45f4abce8ebd587794a0cfbae8f6aacdbe8 9cfe2868cdd68aaf68287e5ecedc9d61bfe2b62d4f3fccfa27645245ec51de76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://maukaiptek.com/
Content-Type: application/json
Content-Length: 2240
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://maukaiptek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=62abffae-f9ac-4f61-898f-b96057713d32 |  37.48.68.71 | 200 OK | 12 B |
URL POST HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=62abffae-f9ac-4f61-898f-b96057713d32 IP37.48.68.71:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerSectigo Limited Subjectdatatechonert.com Fingerprint3F:E1:50:2C:9F:FC:F9:37:03:E3:B6:34:00:06:89:69:01:E7:C3:27 ValiditySun, 10 Dec 2023 00:00:00 GMT - Mon, 23 Dec 2024 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=62abffae-f9ac-4f61-898f-b96057713d32 HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1540
Origin: https://maukaiptek.com
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 24 Apr 2024 13:40:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://maukaiptek.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| maukaiptek.com/favicon.ico | 104.21.38.205 | 204 No Content | 0 B |
URL GET HTTP/3maukaiptek.com/favicon.ico IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 13:40:07 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jkh8JI9g4H8Vy2dQcy0PMj77vDqGIa3o5cZqrUqd8Jd6S7XtKxiKOtxRcKzFCJrwbcXvs0h7e6MSLDI4fFlxo5oqw3ki0lAd0q0TJoHkhcdXDlO89xPyZCh966jlZy4vTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879680dc8eed56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/sw/universal.js?var=7307864&var_3=%257Bvar_3%257D&ymid=6550734527990&ab2=1615111%252F&ab2_ttl=5184000&zoneId=6954461 | 104.21.38.205 | 200 OK | 892 B |
URL GET HTTP/3maukaiptek.com/sw/universal.js?var=7307864&var_3=%257Bvar_3%257D&ymid=6550734527990&ab2=1615111%252F&ab2_ttl=5184000&zoneId=6954461 IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
Hash10b28f14a4642eb75e65f9babba5b2e5 83063f314d4e3f6568f4494abc796cdcbd87e3b4 0571c36e64ce7b589721a47fba1a604ca982a0b2a3694440db526d05dfb4e5a9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sw/universal.js?var=7307864&var_3=%257Bvar_3%257D&ymid=6550734527990&ab2=1615111%252F&ab2_ttl=5184000&zoneId=6954461 HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-5b5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbVh3rZkLunV%2F9sKeY7PMYPU6BX0U2utNa7dfRE4qXIK6FeWtJDt2QEtoM5d%2BlKZQeLGBOoRO4Xs%2Fy3vxFXYAsOIyHvYbQNw9KY1IMVadXVmclTzB5tJWJ3D9zgvHY0YsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680dabccd56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/css/8e5adb4d98720b73.css | 104.21.38.205 | 200 OK | 165 B |
URL GET HTTP/3maukaiptek.com/_next/static/css/8e5adb4d98720b73.css IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeASCII text, with no line terminators Hash62803807bd9ba560e871ec658ee31b20 cd86f1d9276902bda10152ec9f67d9f594f3d284 330a1b25e7fd702dc79100337369c4756cd9baf2ba31cc3abe981bef868b3cc6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/8e5adb4d98720b73.css HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-a5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VkXUKDSO5mXOIWroxurbU5wxokWFTXHJCVxf53nSRyiHOfrs36fWTO%2FtdXoygfRsvIM7%2BmN8cJDu9%2FE3F7XCYhUgH2gDeGKrl%2F%2BC8MAqlwxypYXDno6LVuNCFG446pfX7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5ce4a56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/2610.1baf2de4c8779a0e.js | 104.21.38.205 | 200 OK | 13 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/2610.1baf2de4c8779a0e.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (13124), with no line terminators Hash285f6dd54ac88cdc30a796895c98adb3 f4ff40359e70d2a28b3ba2773e180ac93ce29a37 6dff74775e02f0f3618dcd683ce01b570ed044fca2a250051e6f7e6bb0cc2974
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2610.1baf2de4c8779a0e.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-3344"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YdtPK99fz1DeN2r2NmNXynMd5uC3VVnOB%2BK%2Bt6e8ECXJOQpB9%2FJ6rZtmUm8O%2BlYGAQBKQthSStqVuVM%2F6TGZZXuoaztseZCjSS8yU7%2F6%2Bv%2BlINd99tomd7DCESE0yWDMPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8092656a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-eaddf0428a16426c.js | 104.21.38.205 | 200 OK | 662 B |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-eaddf0428a16426c.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (666), with no line terminators Hash49f9c13e383477050c867416e60b3222 eeb57b5af30601d21511ff1eb94001b86d0c6465 1430b1cd7eaade1b7ba5b3a245f9221c0f6067efd03fc812821d0762b5d10ad4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-eaddf0428a16426c.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-296"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RQCmgYZKMrBWY8%2Bj1LcAmmzVQRxOF%2BI13pZ5WPaFL6JhJhBjrIQ33dST6gMvHFWuLCcyoDWBokXsJ89qkqY4XdMfOtedymgs7inSmHmtMCKv1rQspkzl2MlStdJ7jXLicg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5de6f56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/rain/confetti-2.webp | 104.21.38.205 | 200 OK | 4.3 kB |
URL GET HTTP/3maukaiptek.com/img/rain/confetti-2.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image Hash483d298f3477d9b9a9ed85e2997eb888 52e1956082c558621f102ba813e7bdcee3fcb31d 24763cff62c7e5d6aa028e7bc528010333a062aef7c5682c2dfdc7bfbcece822
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/confetti-2.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 4258
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-10a2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QAPX7%2BrstjfHaBDgGM8WLUCoEyJQ3ZHNhC9GO5wq3WI8CHX%2F3eZ848jJAAyJZ15muJe62qFgmKV2WfFrN28%2F%2F5vOb27ID77YbKO7SwwbTrgNwLo1BDxdy2NJ94OTB%2FMXxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8598756a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/media/samsung.e1136d83.png | 104.21.38.205 | 200 OK | 26 kB |
URL GET HTTP/3maukaiptek.com/_next/static/media/samsung.e1136d83.png IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typePNG image data, 377 x 252, 8-bit colormap, non-interlaced Hash297e3bb468ef97853cac688662e88428 a30e82bccd29b0847bfbf500a1c14635fc787b48 53e55954994c1839d52e1a3fc8d00db8d5d3fb05b7fcab6ddd4f4d1add9e3e5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/samsung.e1136d83.png HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/png
content-length: 26386
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-6712"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lfJouFIm7G7Y55Pk50AyQqMJZZmHmHBSSruBHwiy2Df2Y4KyBb70Ym42kIQogXrvYLcdWDVMQ%2FR4prvA1YrrjyhzjZDyQd0w%2B7oh%2FX1xWk9vwkn41EEykwWhixKDE5tb%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8599556a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/5265.a0cd2d83305b8b57.js | 104.21.38.205 | 200 OK | 1.9 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/5265.a0cd2d83305b8b57.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (1960), with no line terminators Hasha1cb5aa301efeb0c21caaa3ee89df706 f2283b97c8a7e9b0c10f078b9de9dd58220b01f8 c3d55de415db912dfde266cf7854a9fb25781f5641b577c2aa4957e130195b7c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5265.a0cd2d83305b8b57.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6628e367-76b"
last-modified: Wed, 24 Apr 2024 10:48:07 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1AG2BF56ohMmbBqaxLDyXdPDC4ASxEBEqY7Bk3p6spwjrazOybe%2BqX%2B0wOC4BvtPGv2YoYeBGeGS%2BUi7Wte7mTlKFoWOrGc1AABTtZGjM6O838saZYdEr5f3UedDv8Yciw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8092956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/1754.9cd5cec6a6099ad4.js | 104.21.38.205 | 200 OK | 12 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/1754.9cd5cec6a6099ad4.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (12011), with no line terminators Hash97a720cc805d2afba1d18c848124b92e 600abde3f10a7008dcf63a06a38ddcee64d57824 67f19c84ea29e05d552357bf00c539946706d764dbe36d184af3b711ebd663b2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1754.9cd5cec6a6099ad4.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-2eeb"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F%2BMfML8yD%2B8w0LiuPfYTW%2BV99%2FBKMXxP4JnJxJnMrr1SEM6yyfjSSyjTxsxmTzqWDELQW9Bm9JcfNS8WFpyjK3TVmeo5T1Ey0Ca0%2BiU%2BBEn33e8ynNxy6IrX7BmPBEnhuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d93a8556a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/rotate?zz=5866173%3B5866182%3B5866192%3B5866197%3B5866204&var=7307864&ymid=6550734527990&ab2r=1615111%2F&var_3=%7Bvar_3%7D&var_4=&os_version=&uid=skpcuhr1ywe9l0oszghockthgiyzv4oj | 104.21.38.205 | 200 OK | 4.3 kB |
URL GET HTTP/3maukaiptek.com/rotate?zz=5866173%3B5866182%3B5866192%3B5866197%3B5866204&var=7307864&ymid=6550734527990&ab2r=1615111%2F&var_3=%7Bvar_3%7D&var_4=&os_version=&uid=skpcuhr1ywe9l0oszghockthgiyzv4oj IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4322), with no line terminators Hash60c6c4ea7bb6e5d17e73e58d852c2587 0a9c53d2f76c273fd0c5b9198d78f90c09ce170b 6434204408f61d6ef18ce8a6f0948fff56a1fdc760040f348fe093fc3c629f6f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rotate?zz=5866173%3B5866182%3B5866192%3B5866197%3B5866204&var=7307864&ymid=6550734527990&ab2r=1615111%2F&var_3=%7Bvar_3%7D&var_4=&os_version=&uid=skpcuhr1ywe9l0oszghockthgiyzv4oj HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
DNT: 1
Connection: keep-alive
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-trace-id: 1bebe56f36fdc43f19196e165cc5949c
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
timing-allow-origin: *
access-control-allow-origin: https://maukaiptek.com/
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; expires=Thu, 24 Apr 2025 13:40:07 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ttGVP0Z9jTRX1cU6y%2Fw4mtQjfpF9Dvg9E7WA9eWh7siM5NVbn%2BwlBx8s%2FUYm3VP6%2BBJA%2BOjT06d%2F%2BT84J86RYZggiZi3hi7EHd3UgRAp9elJx8G6P0mbQT7c%2BJ05dF%2BhrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d93a7b56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/3978.f48a53d50c258a97.js | 104.21.38.205 | 200 OK | 3.0 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/3978.f48a53d50c258a97.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (3033), with no line terminators Hash74bc667253313da76d87a4a986be1be8 9fa4f4b0ef93eb4d387552e257796321d197540f 1c06c61294617665f38c1276deec5d74330236351921feeef0061359cdf139c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3978.f48a53d50c258a97.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-b8b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YqfnEcBNpCTZrJnGptD51FiemaEYqwvg5HPt2vB%2FIpRJ6CplBaORfAQs1Z7o8nb%2BRSn1k6xPBUzc1e%2BlW%2FphGoKBbKNEgRY4X1FiHUGj2vuvd9%2FQLtgQ9NvXk%2FU5bTk6eQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7485056a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/6223.36a8be3b6724c1ee.js | 104.21.38.205 | 200 OK | 3.8 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/6223.36a8be3b6724c1ee.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (3870), with no line terminators Hash1d892f4ab084b8290d79dcf9ec65b79a 17b0c18b7201dd8eb4bbd3db5be2f1d784000948 77e68c0c19f773bcf939398361c922509f29268cea7afe93f3f7050183115e14
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6223.36a8be3b6724c1ee.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-eee"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zTbCQOOXbplqAaOi4hJJL%2FPDIKL5IxaC8fhIASd0WtN2KKovZH5mhza5dXUs0WTyKoUqZGo0E%2FoJGe%2B60hTURabS4Ll7jdTszMrpXmGVF%2FahOIimIWUwEEPqojLuAHxaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7486556a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/6889.d02be8d2b6238fc0.js | 104.21.38.205 | 200 OK | 2.1 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/6889.d02be8d2b6238fc0.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (2181), with no line terminators Hash1ef4fda0b0d38699af3ec312a151f3b6 651601db48312bc0413d67f5813d6271ea22c3fb 9e0d56d78ac7118f2aec00411cd1ff4c1714c99905293711083a0cb987d5d085
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6889.d02be8d2b6238fc0.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-863"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DfxEMDWcLkjaT5XFtbjqE9ro6ujrBpBjfPsJN7YhWKK7T014eT35XZACc5KThPm1G0Qd4ewhtNGJHv52fTFszCeJ7duQU0gf4e3ftGgiXcDV98FCSV9yUm0pvWCPrUNF3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8091b56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdntechone.com/stattag.js | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/2cdntechone.com/stattag.js IP188.114.97.1:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerGoogle Trust Services LLC Subjectcdntechone.com Fingerprint3D:20:D4:11:5D:06:B3:63:9C:08:BF:D9:D9:16:22:D5:DC:3B:9A:CB ValidityMon, 22 Apr 2024 03:33:58 GMT - Sun, 21 Jul 2024 03:33:57 GMT
File typeJavaScript source, ASCII text, with very long lines (18452) Hashbec2755dff94190fec0365b0db53807b f98c36e7e9e06325d03fe39c3b98879062fc2704 ccb15ff22ece6946136f1501ab3ae74155399187c8e85beb10399d56bb8e149a
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 07 Feb 2024 12:51:04 GMT
etag: W/"65c37cb8-4a9e"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5050
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WnD%2FovnrJVLPsqusHWS%2BgnSAV%2FCXXMlUSg3wyAxv9HT6GO4LL55c4wIhEupXP9kAOlww3vCWt794r%2BfBAgBqGrnU98nCrqqRIYf9hCvJg4w6nX%2B8h1hCg%2BBwzYduMzp8SA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879680d88a2b568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maukaiptek.com/_next/static/chunks/1155-bfe64ad100e940a0.js | 104.21.38.205 | 200 OK | 65 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/1155-bfe64ad100e940a0.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65221), with no line terminators Hash5f4500e306a4be1822b5aff8a4c6efe1 3935b212ffee10e8e0d4587bcc4f48ddc3e1b82c 8df090279564252c73ff6555c0bd188b44682e221d11206b64ee605b0df13249
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1155-bfe64ad100e940a0.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-fec5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cJKkofN5n9zT6DHVSzt6XnLlH%2BlosjQwiI3r%2BGJrdVZ%2FSr5IOTnNHOeHL98Hc57iVLIQtloIo4lnvvOd3A50btuQ%2FqqMEqpYrzglBIMDdN%2B80vdDPdgsL%2Bjo58SBhQ4pwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5de6956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/8904.6fbc0cfd51623cbf.js | 104.21.38.205 | 200 OK | 925 B |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/8904.6fbc0cfd51623cbf.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (939), with no line terminators Hashe370c58940efd9305daf2c9601a7da0d ac6f3895617e4817d7bf86b7c637a231b13a12b7 acba948084ac297d876a066617c1a4c6d9f5a664d43514af605a4c6d1fe37315
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8904.6fbc0cfd51623cbf.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-39d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fs9sIwuLlXZqKbe7GKXjp0zfFvQ23DmiAujD2LOO8AIqaD7TgYfcwUw5Suzpkw7wUigN632G9aTLhXoJxV6tiWElABhDmDamVBaKPZL42UyRwS4od%2FEsFFCfroPAjxovwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7485556a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/5927.10a9d67f6732d4d8.js | 104.21.38.205 | 200 OK | 18 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/5927.10a9d67f6732d4d8.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (18514), with no line terminators Hasha430ce709a2b2e9b144810c17115f6c7 b0d435157a5614b2d58efdc0f2b5d94bfbfb5c2b d2461dafb3c86b97148ce5a6fe69d9f050cfe2aba4ba5fa311ebc3349504a7e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5927.10a9d67f6732d4d8.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-4852"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2FKbaQONzr1uDhy3byfkZWl6WOxQBN63Sxyvb1QNOwxPsoaENyQ96vMaAn8htSCNfTi9OSdfLv5eiaWrRCS7wCE8xK1WkIb1%2BSflMiV9QNEYKGXbJuE1w8wlppW15aD8vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7f91a56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/86.1605512c42332a2f.js | 104.21.38.205 | 200 OK | 2.8 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/86.1605512c42332a2f.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (2908), with no line terminators Hashf7cb4f746f2cabc625d1ab452426c2e5 32f7f8a18c1d477a41291637019374bd4d722df9 6e3c489f8505040ae3a765d615dd63b8e385d2baeecd0ba58a2da9bf079b1a9a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/86.1605512c42332a2f.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-b1e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k3R83egKuReLIaLmfoWcvY1R8Xn829JI%2B32jnrNa1OBvYaH4oZ1QLUcF9GPdbiSfsMEJ2wMS7ffaynLYHOrpwo%2FMVn0b8%2BojWIPZdckvBD9sf%2BcTAtFPPiOVb9ukbwIllA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7484b56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/img/rain/confetti-3.webp | 104.21.38.205 | 200 OK | 7.4 kB |
URL GET HTTP/3maukaiptek.com/img/rain/confetti-3.webp IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeRIFF (little-endian) data, Web/P image Hash6ffe537f32b7be06a870808ee94dadc5 598b8776ac199d0d8737969255c81da7c2cf16f2 e0ddaa01c812e3cdc7963b53edf9a53867a1930a7a566edeb872a0f36da94f7b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/confetti-3.webp HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: image/webp
content-length: 7428
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: "6629053f-1d04"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JWIIndCBpgKN6oRyahTRsrEoP%2BL58085hqdp%2F5f3%2FJ5AAgeFeRbah%2BqhNYqnnUp2EQYe7GdtAK0g%2BBEhdPw1OjmdbHoN%2F1Ngk%2F3BQEAS9CgSfSjiCquFr%2B8Ijn4z2kkyDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8598d56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/2734.6269ca0cf725ea17.js | 104.21.38.205 | 200 OK | 4.1 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/2734.6269ca0cf725ea17.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (4219), with no line terminators Hash98132c6c771aec065d3ab61e5c8c0f53 56484dafed6218ea17ef047fc8cd4c5a342c1890 ae09486720d6d4764b5126f0e26414962ee83eeebdc05db588bb7d86855e8b23
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2734.6269ca0cf725ea17.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-1033"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ldl94oZl3MIF0GovYtE17FxiuXou0ctStl32qrIJ9ETaiudv2m%2BTtxRFivHGAbqG2EyKnkmn9zRCYIwiyuSodPV6w7Je55p%2BuZTqCeAwA%2Byu9bYA2Hvc4D8BMdfdxSYYPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7383456a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/3091.c21155d8b2396207.js | 104.21.38.205 | 200 OK | 2.4 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/3091.c21155d8b2396207.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (2429), with no line terminators Hash3b91a1044dbf61b756a3730050ebd45f 9336d892614e8c5ab834d493c1cc7c0aa8aacf1a 586c6e521c5ec066a20ba11265175c9c75446d1ae33fc954f14c7d4cd3be2a62
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3091.c21155d8b2396207.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-94d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YFPZp140D1fVmIwFqEbBTuyB0FDfxgKfw6SKy1di7qdkFQYe3E0nBr02CucdG7jIjMgnuwipIWjyX7%2Fn4T6NG314kXAD1fKxDh1x0AfZ1SZjFwK0GFo35hF5M40pbuvmFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7486f56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/9787.32846937d0160cf7.js | 104.21.38.205 | 200 OK | 1.8 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/9787.32846937d0160cf7.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (1771), with no line terminators Hashd269bc24ab428864c8a5d9fd90d791ae ff1943ecbdb21dd40483e22778b0826bce974cde 086e81568c991bb4f9d7f9bcb854f1f2bf66b7397b1eef5b0753889ccb86cb30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9787.32846937d0160cf7.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-6e1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FK74YtLoVKHoBR1%2FWTsIQowPVJqsNyB%2FcnANidcZKzFt2u0k%2B1T01tyIj1q7Ssew9pkHXWWxjxLe1Q8AyvZSwDziTQ8pAC75YfwHjmlCJPM%2BUs0c2XIVol7VqIrCzc0AgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7688e56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/5918.95c14100ab7c7546.js | 104.21.38.205 | 200 OK | 30 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/5918.95c14100ab7c7546.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (29964), with no line terminators Hashf93e0a825385df2e98203d34ba627888 4438e84a04857c8a08f863c146b19632d2525bbb 746319fb4782601cf3aea0cb46295ded98ab62838bcfafcb9f7f478bc128eb1b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5918.95c14100ab7c7546.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-750c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zB788crvqWe8%2FLWgCfJs97Bo8MZep39iiVVdRhytSbO7y3K5DQUx6J2B%2BT%2Fc079n83zS1peaxDGc71sn4NSlGD%2BWJtzWFhyRo3KUteRM5VE90nVIkoWUFailsXdewfGuaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5ce4e56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/main-beb6af9e60a8e042.js | 104.21.38.205 | 200 OK | 109 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/main-beb6af9e60a8e042.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size109 kB (108887 bytes) Hash44ec1451f689d71d5f33a10d4aa44658 0f7e72050b7bf72366d9463a16038ae94e232f46 1708144463d376da261c16eab17b1d2fe5c49351847f43a46c6ae4b347fd9304
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-beb6af9e60a8e042.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-1a957"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vr5tq9gnL883JuS5%2FvZTj%2F3SzQdO2sHUHIAb%2FzQWSjaHSZKHLSVvjIbHKb2ubTX80L9nNhKD1toDZk6OnwN9Vx8Rmh3f8j2BGlAo27cPwojsT8%2BdIyeFjerffac3N%2BzaTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5ce5b56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ | 104.21.38.205 | 301 Moved Permanently | 15 kB |
URL User Request GET HTTP/2maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ IP104.21.38.205:443
CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: text/html
location: http://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xWLHZKXRvEqNNXPNSfAFrJnmtR3yRXqCtZUj%2F0Tnq2osmy4T9w6Sste65iSPTaTCCTNSrjhBVtFQMHFdYtaM8mzI8c%2BkZne4cCtDsWto5zzmedNvVLQcy820I9ctXDPcBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d34e7256bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maukaiptek.com/_next/static/VQVlAmm3RyRtHopEWly_Q/_buildManifest.js | 104.21.38.205 | 200 OK | 1.6 kB |
URL GET HTTP/3maukaiptek.com/_next/static/VQVlAmm3RyRtHopEWly_Q/_buildManifest.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeASCII text, with very long lines (1697), with no line terminators Hash0f5fec2d70cc118723b695eab676265e 7df669afe981303bad166c1c1255849b93d18da4 131e2169d60f0f664139a4573c8ffa7462f4f31e3cd3497016c78449a9666433
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/VQVlAmm3RyRtHopEWly_Q/_buildManifest.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-645"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ixN869o41jv72CWzMYPGqbt%2FthfwUzQ%2Blvf%2F5NgbftfDHmnhXqkPRnlSLEt6puCyuemiKVfPnpPoBWchAAgy7yPZKmeYfPdr5AbSZwbm2zDiWhtG2KiG9mk%2FNnLk80w43A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5de7256a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/4750.f1466ea182f22c62.js | 104.21.38.205 | 200 OK | 1.1 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/4750.f1466ea182f22c62.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (1110), with no line terminators Hash05f7f9652787aceb130bb1f23583917d 6c0828acb0960aef04c314c8bb3c68a7cad8a7f8 de7b6e0f182df862f212cfcd26793bd76dc6aafa154c03a05981056a107a6cef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4750.f1466ea182f22c62.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-440"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E80x9YM0X6gRPcAwNjKVu3RtognqaiVpfs31Fw5kZx1m8MWmKsEoDhRVVaxQnJbBt52RxHv8%2BRSCzdtk4KNrBBVjlPYKBPx1ylov039cgIiUYBeWowhqjesIuvHCVpQjng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7587d56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/9274.e6ea72f853ed9d5d.js | 104.21.38.205 | 200 OK | 3.9 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/9274.e6ea72f853ed9d5d.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (3994), with no line terminators Hasha1773b9b9ea0b39d21bc872d404687fc e0fc2ced9564124fe6cf7f3dfe4955a14cddb0d0 60a5b53400c110f45da4327f923012a5be39540d6e9411e6ee121b45406f22c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9274.e6ea72f853ed9d5d.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-f12"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vNh3llDPwP1WcTnbDAvknN%2BaTMUp82xvtid6zFkIa3ac0WkhiZbykGwJlWqzqqnTNq1A%2Fy2tVD9tZ8ud2H5IbzFyr6%2ByctdaQQ4aQu14IZO3NyHpSZjli1nUkyKpU3IsPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d8092856a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/9812.af233e768e30854e.js | 104.21.38.205 | 200 OK | 948 B |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/9812.af233e768e30854e.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (962), with no line terminators Hash345bc690fd8d7bbf91fca14feed6687e 13d8b1ac802b8e98a714c6934d20e62efb7deb83 446a4289340dce7f0d68407cd110d48a734c7d81e7d0b44c0d8f0bc5e1d48aa3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9812.af233e768e30854e.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-3b4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PRzW%2BvrOGO%2BMLGVKzicPAJiP1oEipIKnOU0SgEsvODnhbVJJqtcPey7fVvM%2FJDKDrDDNLYQSzpJvBwHR6ObIjbuDD6vpEtx3%2BNdzaTbKXVbVjiNYnfpr3ked5NcbYb%2F8Ig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7587f56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/css/0bc0cde260d08b97.css | 104.21.38.205 | 200 OK | 1.8 kB |
URL GET HTTP/3maukaiptek.com/_next/static/css/0bc0cde260d08b97.css IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeASCII text, with very long lines (1843), with no line terminators Hash64b2b4fa42c7d558d735e2cd28ecf88a 03d6da6e55b1201b51689590520da495a9233d67 2fdb3ce9ccba8355040e5ba3dfb2283194acba81858943b5d88f70030dbb71ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-733"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RPtsQy%2Bq0azcX4wdtHmDGdun%2BOuS11vjQyD5TxDjueg0yAFSOmr7EAjyaHups3oN97ZPSveb9dXtEQSZonKbxUd2Rh4ZNcK68m8OGpOYmEHXE8ZuMuXDBo3H21o6cBbJlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5ce4956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/8550-084f8ef56ea2a7ad.js | 104.21.38.205 | 200 OK | 12 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/8550-084f8ef56ea2a7ad.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (12179), with no line terminators Hash99cedc315297bcdade48598c3f97d7d8 06bddf8f8305971fe0ac51163727a23e8181c296 8f3a92324a0f5a22aabddc3c838582e0110d1b7ba67b04f48682f9deff8f3e30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8550-084f8ef56ea2a7ad.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-2f93"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KVYrD7k3p6Jrh2QEWU%2FsSiLRde1M0geYfxgICzMOmWbuN7dF8jKONptQjYcVPbE3%2F2SqZrXiJ31DFM6mSfC9y6aH3ZgN27nwmPwWjBFu0hfSnngQeCxXlsakUa%2BWIDprLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5ce4c56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/webpack-57d4eaea9c29e543.js | 104.21.38.205 | 200 OK | 6.1 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/webpack-57d4eaea9c29e543.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (6330), with no line terminators Hashce2d7f3bb6527a73bdcf4509639200fe afcc27a20cc5862367c93da14bd6635f1ff256b8 f222bd64c7fb8dfc6f0acec149111a95f2f715250bc8f463398dc9e5c16358c1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-57d4eaea9c29e543.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:06 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-17d2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GT4IwuT22kyXsZRLlgrGmgZvJJvwd3JMI0A3WL0jeZJAHnlhzcbHTauudDsvXhJdkvW7LllkE1CgjRW09WrAeU1bn9UcwErxSOJ1i4TxYCbuyeoluY0iyg1paxTJL%2B0WNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d5ce5756a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/_next/static/chunks/5356.cd117ab77e87aa94.js | 104.21.38.205 | 200 OK | 1.3 kB |
URL GET HTTP/3maukaiptek.com/_next/static/chunks/5356.cd117ab77e87aa94.js IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (1340), with no line terminators Hash928a78a6ff2acfdfc2b133e09c23a898 80992f60be4eeaa5e9ee31c4912fc8fd15806007 af03ac8ae373bd61c0ac2106d2837e74bf0f3c2d02682c018909684f3e6af5bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5356.cd117ab77e87aa94.js HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:12:31 GMT
vary: Accept-Encoding
etag: W/"6629053f-512"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FR2Vx2AM6utlKmrPT4OLK7EXwkyY0zdPLS6QdpEe418IMps3xxh1zdpmOU73xFF8bu4Tpuw7w%2Fp2gmgRFtfMh68lrFcIv2INTWdpj8O4SPIghepg1oODIYLJ1%2BBIRhMK2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d7587956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maukaiptek.com/pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=7307864&ymid=6550734527990&b=20792422&campaignid=8058435&click_id=806926887432761350&ab2r=1615111%2F&rhd=1&var_3=%7Bvar_3%7D&oaid=skpcuhr1ywe9l0oszghockthgiyzv4oj&os_version=&btz=UTC&bto=0&z=6954461&cdn=1&domain=ofklefkian.com&ab2=1615111%2F&ab2_ttl=5184000 | 104.21.38.205 | 200 OK | 37 kB |
URL GET HTTP/3maukaiptek.com/pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=7307864&ymid=6550734527990&b=20792422&campaignid=8058435&click_id=806926887432761350&ab2r=1615111%2F&rhd=1&var_3=%7Bvar_3%7D&oaid=skpcuhr1ywe9l0oszghockthgiyzv4oj&os_version=&btz=UTC&bto=0&z=6954461&cdn=1&domain=ofklefkian.com&ab2=1615111%2F&ab2_ttl=5184000 IP104.21.38.205:443
Requested byhttps://maukaiptek.com/sweeps-survey/16/9560/?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/ CertificateIssuerLet's Encrypt Subjectmaukaiptek.com FingerprintE6:B3:DB:68:FA:AE:7F:A6:35:60:6F:0B:E6:F9:CE:8E:20:5C:C0:2C ValidityMon, 15 Apr 2024 07:06:10 GMT - Sun, 14 Jul 2024 07:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (36570), with no line terminators Hash9c707551764e528035154fcfc935d4da 8687a3418b6f0ded1dd3559be0c7ff8f6ed11e58 41f14ec09c4d467a2ff3351d0a9ff57dbbe0011995fd37afa97b3cbb5e40b0c2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=7307864&ymid=6550734527990&b=20792422&campaignid=8058435&click_id=806926887432761350&ab2r=1615111%2F&rhd=1&var_3=%7Bvar_3%7D&oaid=skpcuhr1ywe9l0oszghockthgiyzv4oj&os_version=&btz=UTC&bto=0&z=6954461&cdn=1&domain=ofklefkian.com&ab2=1615111%2F&ab2_ttl=5184000 HTTP/1.1
Host: maukaiptek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://maukaiptek.com/sweeps-survey/16/9560?geo=KE&z=7307864&s=806926887432761350&b=20792422&campaignid=8058435&var=6550734527990&ymid=806926887432761350&var_3={var_3}&design_id=2&abtest=1615111/
Cookie: OAID=skpcuhr1ywe9l0oszghockthgiyzv4oj; syncedCookie=true; oaidts=1713966007
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:40:07 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 08:29:25 GMT
vary: Accept-Encoding
etag: W/"6628c2e5-8eda"
access-control-allow-credentials: true
cache-control: max-age=1800
pragma: no-cache
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LCOFXAvRF3rELTmIPbzWqpBM11ntrPj0oZiMy5PTzyF6bOoVtAH9lX5sdlL%2BWQpRMD5SHbwe%2FJQ7P%2FkoYoPYGv9zGcQh20QF1et3qHYv75LpwRLapao5zCo10Ytk1Pi7zA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879680d96af956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
172.67.138.83