Report - lekuluent.et/tv/93166?sNumber=2

Report Overview

Visited public
2025-04-19 19:22:27
Tags
URL
lekuluent.et/tv/93166?sNumber=2
Finishing URL
lekuluent.et/tv/93166?sNumber=2
IP / ASN
213.55.96.153
#24757 Ethiopian Telecommunication Corporation
Title
The Capture - Lekuluent

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
image.tmdb.org	17757	2009-09-15	2021-01-09	2025-04-16	6.9 kB	1.4 MB	138.199.36.9
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-04-16	945 B	5.2 kB	142.250.74.10
gekeebsirs.com	unknown	2024-08-13	2024-08-13	2025-04-17	410 B	103 kB	188.114.96.1
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-04-16	550 B	19 kB	142.250.74.35
api.themoviedb.org	34794	2008-09-15	2019-12-15	2025-04-17	2.5 kB	20 kB	54.240.174.110
lekuluent.et	unknown	unknown	2024-08-14	2024-10-22	3.6 kB	1.3 MB	213.55.96.153
groobsusso.net	unknown	2025-04-19	2025-04-19	2025-04-19	559 B	807 B	139.45.197.105
www.googletagmanager.com	75	2011-11-11	2012-10-04	2025-04-16	433 B	387 kB	142.250.74.136

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-19	medium	gekeebsirs.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	www.google-analytics.com/analytics.js	ScriptElement	4.7 kB	2023-04-11	2025-05-14
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-05-14 03:26 Times Seen341823 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	www.googletagmanager.com/gtag/js?id=G-WZV74BCL86	ScriptElement	386 kB	2025-04-19	2025-04-19
Pretty URL www.googletagmanager.com/gtag/js?id=G-WZV74BCL86 IP 142.250.74.136 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-19 19:22 Last Seen2025-04-19 19:22 Times Seen1 Hash d34256f65bbbcce472a305831340b664 facfe06e63bb3e8b9df41825598c7e5297b40c07 0bedb1f2f3dbae63abec27a7b1e5fc2e7739190af9cc4bfcbe2afd46a9f75b62 Loading...

	lekuluent.et/tv/sandbox%20eval%20code		147 B	2023-04-11	2025-05-14
Pretty URL lekuluent.et/tv/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-05-14 03:26 Times Seen342636 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	lekuluent.et/tv/93166?sNumber=2	ScriptElement	129 B	2025-04-19	2025-04-19
Pretty URL lekuluent.et/tv/93166?sNumber=2 IP 213.55.96.153 ASN #24757 Ethiopian Telecommunication Corporation Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-19 19:22 Last Seen2025-04-19 19:22 Times Seen1 Hash 9642d49e5cc8e301217cad8c160d9f33 60e95eb0bd71aa1e4d276b71256596b35debcdf7 bba45845b6cc2736c5cc4aeb17575d22acc3ebee90bf4d03f5ac4801f2076011 Loading...

HTTP Transactions (33)

URL IP Response Size

image.tmdb.org/t/p/w500/uU7CrpWkD7W04HBpuK4CSbtSKRi.jpg

138.199.36.9

200 OK

75 kB

URL GET
image.tmdb.org/t/p/w500/uU7CrpWkD7W04HBpuK4CSbtSKRi.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x735, Scaling: [none]x[none], YUV color, decoders should clamp
Size
75 kB (75332 bytes)
Hash
1023ee67295c7f56a30a3d62ac47b05a
6074f779e9c677d7f35e803ae1d72368f82f1171
e7a49580a63a3f93f01c0214cff8e405ce982af0480cefbbbd0bb14611a0392c

HTTP Headers

GET /t/p/w500/uU7CrpWkD7W04HBpuK4CSbtSKRi.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 75332
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Thu, 03 Apr 2025 22:58:05 GMT
perma-cache: MISS
x-bo-server: LA-289
x-downloadsize: 89629
x-bo-origindownloadtime: 565
x-bo-compressionratio: 15.95%
x-bo-processingtime: 24
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/03/2025 22:58:05
cdn-edgestorageid: 722
cdn-requestid: 50acd086a5713235d206530569055534
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=DM+Sans:wght@500&family=Libre+Franklin:wght@200&display=swap

142.250.74.10

200 OK

2.9 kB

URL GET
fonts.googleapis.com/css2?family=DM+Sans:wght@500&family=Libre+Franklin:wght@200&display=swap
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67
ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT

File type
ASCII text
Size
2.9 kB (2941 bytes)
Hash
3b4ba88df96d8739c9953924538bf814
65a15f5e2280b73c747935dcb9647f9e47afbc96
503243fd199a6c580f790b7eb250608c720a7a9cdefe4bb42aa69cc2d5ccf5bc

HTTP Headers

GET /css2?family=DM+Sans:wght@500&family=Libre+Franklin:wght@200&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Apr 2025 19:22:09 GMT
date: Sat, 19 Apr 2025 19:22:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gekeebsirs.com/tag.min.js

188.114.96.1

200 OK

103 kB

URL GET
gekeebsirs.com/tag.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerGoogle Trust Services
Subjectgekeebsirs.com
Fingerprint62:05:E4:1A:BD:00:57:39:23:18:02:9C:EA:74:80:18:AC:42:4D:88
ValiditySun, 06 Apr 2025 12:54:11 GMT - Sat, 05 Jul 2025 13:51:54 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
103 kB (102573 bytes)
Hash
26ff67d4958191a1ab1ada518f0dda8b
797e5a0532dda0872b15aae88336a85a482f83a9
61e64e0a3f6957353a2d724914aa6ba8695fc8cf45940d4eaf7a676113b82358

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tag.min.js HTTP/1.1
Host: gekeebsirs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:10 GMT
content-type: application/javascript
server: cloudflare
x-trace-id: 7e8a4cf5357e45303c1bb2398448f3ef
cache-control: public, max-age=3600, s-maxage=1800
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 1598
last-modified: Sat, 19 Apr 2025 18:55:32 GMT
cf-ray: 932ec4e7588c56aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/gabarito/v7/QGYwz_0dZAGKJJ4t3FFkc3Q8AkNP9Pj248KEEQgs.woff2

142.250.74.35

200 OK

18 kB

URL GET
fonts.gstatic.com/s/gabarito/v7/QGYwz_0dZAGKJJ4t3FFkc3Q8AkNP9Pj248KEEQgs.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80
ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18264, version 1.0
Size
18 kB (18264 bytes)
Hash
4112555fb1a8f816be3cc92b4e94a1da
544a40035f1f3965888426fb6a761c2c38006d22
239afc0bff15fbca3095591c08180427c55b35cb0833c450a35c4d41fc077a3e

HTTP Headers

GET /s/gabarito/v7/QGYwz_0dZAGKJJ4t3FFkc3Q8AkNP9Pj248KEEQgs.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lekuluent.et
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18264
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Apr 2025 02:55:48 GMT
expires: Sat, 18 Apr 2026 02:55:48 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 26 Jun 2024 16:19:34 GMT
content-type: font/woff2
age: 145583
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

api.themoviedb.org/3/tv/93166/credits?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-U

54.240.174.110

200 OK

2.8 kB

URL GET
api.themoviedb.org/3/tv/93166/credits?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-U
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
JSON text data
Size
2.8 kB (2757 bytes)
Hash
dfe7fef05358b9628c41285d2e3447dc
5bff29f9e25327207f24d82831d79c0929d8e226
bccd0b393a8df6b353a0964354da6085ac93657b31b2534badd395d3fe252df8

HTTP Headers

GET /3/tv/93166/credits?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-U HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lekuluent.et/
Origin: https://lekuluent.et
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=utf-8
date: Sat, 19 Apr 2025 19:22:11 GMT
server: openresty
cache-control: public, max-age=5600
x-memc: HIT
x-memc-key: b25af955f82d7171c5676a9ea7a9085a
x-memc-age: 22606
x-memc-expires: 5600
etag: W/"bccd0b393a8df6b353a0964354da6085"
content-encoding: gzip
vary: Accept-Encoding,accept-encoding
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qaNvpF9e2uu0hhLGRS_MF8NZ_t5ytb6RyE-nUIJ5jvYtaLGRbD2cfA==
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original//fHveeGXgEfTZ9slB5OvHDG4LAPw.jpg

138.199.36.9

200 OK

111 kB

URL GET
image.tmdb.org/t/p/original//fHveeGXgEfTZ9slB5OvHDG4LAPw.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 803x1205, Scaling: [none]x[none], YUV color, decoders should clamp
Size
111 kB (111252 bytes)
Hash
271a0a386d8a73309cf9c4c1e6b82acd
96c578a76660b85b8452eaef87dbb3e18efebd6f
b9ccf84348dc2e2845c83b1eae46b01ee3519cd10119f51102165aaf13e18d96

HTTP Headers

GET /t/p/original//fHveeGXgEfTZ9slB5OvHDG4LAPw.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 111252
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 14:52:52 GMT
perma-cache: MISS
x-bo-server: LA-292
x-downloadsize: 172360
x-bo-origindownloadtime: 271
x-bo-compressionratio: 35.45%
x-bo-processingtime: 76
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 14:52:52
cdn-edgestorageid: 1049
cdn-requestid: 246ceb7b0ad4af7cec2fcebfdb3e0b92
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/4lbclFySvugI51fwsyxBTOm4DqK.jpg

138.199.36.9

200 OK

33 kB

URL GET
image.tmdb.org/t/p/w500/4lbclFySvugI51fwsyxBTOm4DqK.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
33 kB (32854 bytes)
Hash
a97c565ca4b9c1878894ec4c72792068
c7aecfdb41d7e443f2f57dd95ddfec3f145b8332
3ce0c361eda3d569f7f7f7a4d72971e56245c4136bf22c8b5a29ba64d9fc4140

HTTP Headers

GET /t/p/w500/4lbclFySvugI51fwsyxBTOm4DqK.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 32854
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 01:31:18 GMT
perma-cache: MISS
x-bo-server: LA-293
x-downloadsize: 54862
x-bo-origindownloadtime: 696
x-bo-compressionratio: 40.12%
x-bo-processingtime: 22
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 01:31:18
cdn-edgestorageid: 752
cdn-requestid: 48ea67a7a20c02ab01618bdf9596a3c0
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/wjdpAclyKGhg8tjgvOPN9bwluZs.jpg

138.199.36.9

200 OK

37 kB

URL GET
image.tmdb.org/t/p/w500/wjdpAclyKGhg8tjgvOPN9bwluZs.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
37 kB (36676 bytes)
Hash
56703ff3b5a9001663782420fdba5520
4bd7b36f3aef2f06d3f7cf25ca1acdf0b274c196
198a5bd73b1899751ecd7c1761acbb18ccb7678fa64b28e8792c2345812c1d7b

HTTP Headers

GET /t/p/w500/wjdpAclyKGhg8tjgvOPN9bwluZs.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 36676
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 07:47:25 GMT
perma-cache: MISS
x-bo-server: LA-294
x-downloadsize: 51104
x-bo-origindownloadtime: 266
x-bo-compressionratio: 28.23%
x-bo-processingtime: 18
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 07:47:25
cdn-edgestorageid: 1055
cdn-requestid: e0f69470a90b3a7457febb12163c082e
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

lekuluent.et/tv/93166?sNumber=2

213.55.96.153

200 OK

2.2 kB

URL User Request GET
lekuluent.et/tv/93166?sNumber=2
IP
213.55.96.153:443
ASN
#24757 Ethiopian Telecommunication Corporation

Certificate
IssuerLet's Encrypt
Subjectlekuluent.et
FingerprintC4:C6:63:5B:90:24:BE:75:32:82:05:5D:99:FC:92:C8:B4:8F:02:87
ValidityThu, 10 Apr 2025 17:06:52 GMT - Wed, 09 Jul 2025 17:06:51 GMT

File type
HTML document, ASCII text, with very long lines (2240), with no line terminators
Size
2.2 kB (2240 bytes)
Hash
7f2023fd5a2ccb7afa316df55cca745f
16d40d51cce013e16996ce6d9d72696c3b4280b9
b58e1025473895ec6cbf024e0cef56b3903c23de8561b18f2417bb195c6477aa

HTTP Headers

GET /tv/93166?sNumber=2 HTTP/1.1
Host: lekuluent.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 19:22:06 GMT
content-type: text/html
last-modified: Sat, 05 Apr 2025 21:58:20 GMT
etag: W/"8c0-6320f19dbd700"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/pJbUYGnDNSeUvcNAT6qdMELxmsX.jpg

138.199.36.9

200 OK

22 kB

URL GET
image.tmdb.org/t/p/w500/pJbUYGnDNSeUvcNAT6qdMELxmsX.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x707, Scaling: [none]x[none], YUV color, decoders should clamp
Size
22 kB (22152 bytes)
Hash
afb7bcf272ac0517f5be8988fd00b581
c04bcb8ead4b2bd841668f3a82d67f3ab7b36292
ac6da17b7ab0410641530768d5c8b6760ffee332e1929eb890d6ccbdfc882301

HTTP Headers

GET /t/p/w500/pJbUYGnDNSeUvcNAT6qdMELxmsX.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 22152
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 03:36:32 GMT
perma-cache: MISS
x-bo-server: LA-291
x-downloadsize: 31865
x-bo-origindownloadtime: 14355
x-bo-compressionratio: 30.48%
x-bo-processingtime: 18
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 03:36:46
cdn-edgestorageid: 874
cdn-requestid: a1fa3ac302c49c354061b4d414a2f1d6
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

lekuluent.et/static/media/logo.9a4089bb8f18dd33c8b3.png

0.0.0.0

0 B

URL GET
lekuluent.et/static/media/logo.9a4089bb8f18dd33c8b3.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectlekuluent.et
FingerprintC4:C6:63:5B:90:24:BE:75:32:82:05:5D:99:FC:92:C8:B4:8F:02:87
ValidityThu, 10 Apr 2025 17:06:52 GMT - Wed, 09 Jul 2025 17:06:51 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/media/logo.9a4089bb8f18dd33c8b3.png HTTP/1.1
Host: lekuluent.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/tv/93166?sNumber=2
Cookie: _ga_WZV74BCL86=GS1.1.1745090528.1.0.1745090528.0.0.0; _ga=GA1.1.752891663.1745090528
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

image.tmdb.org/t/p/original//wAsTf5JOBASeJdrRC5I5vlRxNXx.jpg

138.199.36.9

200 OK

208 kB

URL GET
image.tmdb.org/t/p/original//wAsTf5JOBASeJdrRC5I5vlRxNXx.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 1317x1975, Scaling: [none]x[none], YUV color, decoders should clamp
Size
208 kB (208242 bytes)
Hash
1a83c95fe7702f5f83325c6e4dcf0059
289ee9cbffdbeb4ec5bf12bde7397257889f6693
440a52060b0021dc262aa38fb0277860f1c8997fc4ff75589862b3b332b96c4a

HTTP Headers

GET /t/p/original//wAsTf5JOBASeJdrRC5I5vlRxNXx.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 208242
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67f2457a-32d72"
last-modified: Sun, 06 Apr 2025 09:12:26 GMT
cdn-storageserver: NY-753
cdn-requestpullsuccess: True
cdn-fileserver: 858
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/17/2025 20:50:11
cdn-edgestorageid: 1076
cdn-requestid: 01a6571883aacc5c9d23b5dfa5e688a5
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/zjtiYwOflB9ToOYiCTFxsDPB4H1.jpg

138.199.36.9

200 OK

45 kB

URL GET
image.tmdb.org/t/p/w500/zjtiYwOflB9ToOYiCTFxsDPB4H1.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
45 kB (44552 bytes)
Hash
e17c856dacc8a87b6b6e0cc959738300
b2faedaf7ef873c065c063bde15085290cda8d13
d6200689d259e189a365bb15cb2c0dc43d65576014e118f5ab97068128c8bce3

HTTP Headers

GET /t/p/w500/zjtiYwOflB9ToOYiCTFxsDPB4H1.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 44552
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 05:44:38 GMT
perma-cache: MISS
x-bo-server: LA-295
x-downloadsize: 53538
x-bo-origindownloadtime: 338
x-bo-compressionratio: 16.78%
x-bo-processingtime: 26
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 05:44:19
cdn-edgestorageid: 722
cdn-requestid: 295270b9d9ce8ceacb08f82825bdf648
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original//xMU7tSgdPMF53bdNMUhUMQOVIj3.jpg

138.199.36.9

200 OK

25 kB

URL GET
image.tmdb.org/t/p/original//xMU7tSgdPMF53bdNMUhUMQOVIj3.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 360x540, Scaling: [none]x[none], YUV color, decoders should clamp
Size
25 kB (25228 bytes)
Hash
320d35a1988f037839b7c9a08dc65293
855e64ae3e489b9433dfbd3a350a79bfc85cc5e8
9918f8e97b7266c1f7f6155f21e90c97dc4587b64258ec88b51884fcf59f8ec9

HTTP Headers

GET /t/p/original//xMU7tSgdPMF53bdNMUhUMQOVIj3.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 25228
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67fc7a11-628c"
last-modified: Mon, 14 Apr 2025 02:59:29 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/17/2025 20:31:20
cdn-edgestorageid: 865
cdn-requestid: 70b5858900923f0e038b8e2a33066d93
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

api.themoviedb.org/3/tv/93166?api_key=0c43ea3d59eb841f28252be73f56fb09

54.240.174.110

200 OK

3.3 kB

URL GET
api.themoviedb.org/3/tv/93166?api_key=0c43ea3d59eb841f28252be73f56fb09
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
JSON text data
Size
3.3 kB (3266 bytes)
Hash
2a3547ed6ddd8bb1e7520100274e0112
bb00f07c6416feab050dc710ca1208999874f80e
a96cbbcd160099a8267524f4085716c481437aeb99a61c585fd018c8a0b7504d

HTTP Headers

GET /3/tv/93166?api_key=0c43ea3d59eb841f28252be73f56fb09 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lekuluent.et/
Origin: https://lekuluent.et
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=utf-8
date: Sat, 19 Apr 2025 19:22:11 GMT
server: openresty
cache-control: public, max-age=5505
x-memc: HIT
x-memc-key: 9ff9a7fabd0723682d99444a579f1c1c
x-memc-age: 21244
x-memc-expires: 5505
etag: W/"a96cbbcd160099a8267524f4085716c4"
content-encoding: gzip
vary: Accept-Encoding,accept-encoding
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: SlcnoOYtHmk3Tmbf8N7Yc4ct5amRtA7hYyNzZk8fNtantWedNH3gig==
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

api.themoviedb.org/3/tv/93166/videos?api_key=0c43ea3d59eb841f28252be73f56fb09

54.240.174.110

200 OK

497 B

URL GET
api.themoviedb.org/3/tv/93166/videos?api_key=0c43ea3d59eb841f28252be73f56fb09
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
JSON text data
Size
497 B (497 bytes)
Hash
26dd4f02f2a63fe03b75888fc05f7563
9b5c300513d952c0ff9408dda7bb1691ab7feda3
b49aead2bae2252a182fff2099fc3b9fb6fb85995f54c3d9d020d7aee8303e00

HTTP Headers

GET /3/tv/93166/videos?api_key=0c43ea3d59eb841f28252be73f56fb09 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lekuluent.et/
Origin: https://lekuluent.et
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=utf-8
date: Sat, 19 Apr 2025 19:22:11 GMT
server: openresty
cache-control: public, max-age=20670
x-memc: HIT
x-memc-key: 53abd5414e61cff7dd4f81c18facb994
x-memc-age: 1086
x-memc-expires: 20670
etag: W/"b49aead2bae2252a182fff2099fc3b9f"
content-encoding: gzip
vary: Accept-Encoding,accept-encoding
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: UM-6pgUfCLcgEz0Ehg3iaApngkvMVTFrygWgdH-yfStu8V9lZT7cfg==
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

lekuluent.et/tv/favicon.png

213.55.96.153

200 OK

2.2 kB

URL GET
lekuluent.et/tv/favicon.png
IP
213.55.96.153:443
ASN
#24757 Ethiopian Telecommunication Corporation

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectlekuluent.et
FingerprintC4:C6:63:5B:90:24:BE:75:32:82:05:5D:99:FC:92:C8:B4:8F:02:87
ValidityThu, 10 Apr 2025 17:06:52 GMT - Wed, 09 Jul 2025 17:06:51 GMT

File type
HTML document, ASCII text, with very long lines (2240), with no line terminators
Size
2.2 kB (2240 bytes)
Hash
7f2023fd5a2ccb7afa316df55cca745f
16d40d51cce013e16996ce6d9d72696c3b4280b9
b58e1025473895ec6cbf024e0cef56b3903c23de8561b18f2417bb195c6477aa

HTTP Headers

GET /tv/favicon.png HTTP/1.1
Host: lekuluent.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/tv/93166?sNumber=2
Cookie: _ga_WZV74BCL86=GS1.1.1745090528.1.0.1745090528.0.0.0; _ga=GA1.1.752891663.1745090528
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 19:22:12 GMT
content-type: text/html
last-modified: Sat, 05 Apr 2025 21:58:20 GMT
etag: W/"8c0-6320f19dbd700"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original/bCuTIRmnd6eBNZ9oBBQ2KAtErid.jpg

138.199.36.9

200 OK

187 kB

URL GET
image.tmdb.org/t/p/original/bCuTIRmnd6eBNZ9oBBQ2KAtErid.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x1500, Scaling: [none]x[none], YUV color, decoders should clamp
Size
187 kB (187088 bytes)
Hash
a1dcca6bc4a952e1465353e47d159a3a
eebef8d9261121260ea93211c0ac54a38f95c15a
a3be270bf4dc518e79cc2382b00b42e5a8f4b004bdfaff4204a22695a0c19c19

HTTP Headers

GET /t/p/original/bCuTIRmnd6eBNZ9oBBQ2KAtErid.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 187088
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 05:50:31 GMT
perma-cache: MISS
x-bo-server: LA-290
x-downloadsize: 269106
x-bo-origindownloadtime: 280
x-bo-compressionratio: 30.48%
x-bo-processingtime: 87
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 05:50:32
cdn-edgestorageid: 1076
cdn-requestid: c0fe40310140821dd3623ea0fdcdec1f
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Gabarito&display=swap

142.250.74.10

200 OK

877 B

URL GET
fonts.googleapis.com/css2?family=Gabarito&display=swap
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67
ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT

File type
ASCII text
Size
877 B (877 bytes)
Hash
2aaa9aa67941e8757974647028da638c
0bf0a707644ead596c093cc92b3faaa5db8ea5a8
6944a12e6fba097239007bef0b13a37954d0ff3504ae7efb9067d945effed890

HTTP Headers

GET /css2?family=Gabarito&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Apr 2025 19:22:09 GMT
date: Sat, 19 Apr 2025 19:22:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

groobsusso.net/5/8081663/?oo=1&js_build=iclick-v1.1126.0&dmn=gekeebsirs.com&tt=2&ix=0

139.45.197.105

204 No Content

0 B

URL POST
groobsusso.net/5/8081663/?oo=1&js_build=iclick-v1.1126.0&dmn=gekeebsirs.com&tt=2&ix=0
IP
139.45.197.105:443
ASN
#9002 RETN Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectgroobsusso.net
FingerprintAA:DB:CA:5B:55:59:01:FC:F7:92:E1:D0:96:A6:A2:09:B9:03:B9:5F
ValiditySat, 19 Apr 2025 01:38:44 GMT - Fri, 18 Jul 2025 01:38:43 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /5/8081663/?oo=1&js_build=iclick-v1.1126.0&dmn=gekeebsirs.com&tt=2&ix=0 HTTP/1.1
Host: groobsusso.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2559
Origin: https://lekuluent.et
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
server: nginx
date: Sat, 19 Apr 2025 19:22:14 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://lekuluent.et
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-WZV74BCL86

142.250.74.136

200 OK

386 kB

URL GET
www.googletagmanager.com/gtag/js?id=G-WZV74BCL86
IP
142.250.74.136:443
ASN
#15169 GOOGLE

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01
ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT

File type
JavaScript source, ASCII text, with very long lines (6129)
Size
386 kB (386282 bytes)
Hash
d34256f65bbbcce472a305831340b664
facfe06e63bb3e8b9df41825598c7e5297b40c07
0bedb1f2f3dbae63abec27a7b1e5fc2e7739190af9cc4bfcbe2afd46a9f75b62

HTTP Headers

GET /gtag/js?id=G-WZV74BCL86 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Apr 2025 19:22:07 GMT
expires: Sat, 19 Apr 2025 19:22:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1055:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1055:0
report-to: {"group":"ascgcycc:1055:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1055:0"}],}
server: Google Tag Manager
content-length: 127092
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

api.themoviedb.org/3/search/multi?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-US&query=&include_adult=false

54.240.174.110

200 OK

57 B

URL GET
api.themoviedb.org/3/search/multi?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-US&query=&include_adult=false
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
JSON text data
Size
57 B (57 bytes)
Hash
c9c5e585a4d81ca208adb93d0d87ee42
fbcee9e4d0563add0cda079dcc86453108f09d98
0e23279b004381f72a34159d5c7dfd1f76289c4056b66ccad6792d8da2e14af2

HTTP Headers

GET /3/search/multi?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-US&query=&include_adult=false HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lekuluent.et/
Origin: https://lekuluent.et
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=utf-8
server: openresty
x-memc: HIT
x-memc-key: f4d36b9552ec2f0d98b4db59ec288ac0
x-memc-age: 8387
x-memc-expires: 17818
content-encoding: gzip
date: Sat, 19 Apr 2025 13:35:51 GMT
cache-control: public, max-age=28114
etag: W/"0e23279b004381f72a34159d5c7dfd1f"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: iUwDBqHGpKthzwh1DI0xeif04sQllUkY4OgTmduqzUiJmo-JJyWJKw==
age: 20780
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

lekuluent.et/tv/favicon.ico

213.55.96.153

200 OK

2.2 kB

URL GET
lekuluent.et/tv/favicon.ico
IP
213.55.96.153:443
ASN
#24757 Ethiopian Telecommunication Corporation

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectlekuluent.et
FingerprintC4:C6:63:5B:90:24:BE:75:32:82:05:5D:99:FC:92:C8:B4:8F:02:87
ValidityThu, 10 Apr 2025 17:06:52 GMT - Wed, 09 Jul 2025 17:06:51 GMT

File type
HTML document, ASCII text, with very long lines (2240), with no line terminators
Size
2.2 kB (2240 bytes)
Hash
7f2023fd5a2ccb7afa316df55cca745f
16d40d51cce013e16996ce6d9d72696c3b4280b9
b58e1025473895ec6cbf024e0cef56b3903c23de8561b18f2417bb195c6477aa

HTTP Headers

GET /tv/favicon.ico HTTP/1.1
Host: lekuluent.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/tv/93166?sNumber=2
Cookie: _ga_WZV74BCL86=GS1.1.1745090528.1.0.1745090528.0.0.0; _ga=GA1.1.752891663.1745090528
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 19:22:12 GMT
content-type: text/html
last-modified: Sat, 05 Apr 2025 21:58:20 GMT
etag: W/"8c0-6320f19dbd700"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original//8oH9Mk6OjdhCpDIfAKNyleqlZ18.jpg

138.199.36.9

200 OK

176 kB

URL GET
image.tmdb.org/t/p/original//8oH9Mk6OjdhCpDIfAKNyleqlZ18.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 1152x1728, Scaling: [none]x[none], YUV color, decoders should clamp
Size
176 kB (176296 bytes)
Hash
c415ab551e616c94105dd7de48227a43
ad407455fd44c756068b07b165d4f31b27445b74
7c1c1ba8238cd7cfd2b95d8aa5642224e7ecb0852890ff8f700817c8eeaf688d

HTTP Headers

GET /t/p/original//8oH9Mk6OjdhCpDIfAKNyleqlZ18.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 176296
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Mon, 14 Apr 2025 17:26:12 GMT
perma-cache: MISS
x-bo-server: LA-296
x-downloadsize: 309303
x-bo-origindownloadtime: 730
x-bo-compressionratio: 43%
x-bo-processingtime: 178
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/14/2025 17:26:13
cdn-edgestorageid: 863
cdn-requestid: 545e9381b0085bbe1ea7039e6ff17da2
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/xcTF1F6YWVrGTqrXatNkJL7ePPN.jpg

138.199.36.9

200 OK

46 kB

URL GET
image.tmdb.org/t/p/w500/xcTF1F6YWVrGTqrXatNkJL7ePPN.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
46 kB (45588 bytes)
Hash
b3995fd660e27a0aa3bbf945308b50e4
5e55271c0a235a6515f2ba09fa8fd4fbe93cf4a8
c13c546cc1d8db5b18a96a3d5953b8fd337e4d0f42c4aca4b8c5bcdd7fc97d7d

HTTP Headers

GET /t/p/w500/xcTF1F6YWVrGTqrXatNkJL7ePPN.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 45588
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 05:31:26 GMT
perma-cache: MISS
x-bo-server: LA-293
x-downloadsize: 64177
x-bo-origindownloadtime: 552
x-bo-compressionratio: 28.97%
x-bo-processingtime: 39
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 05:31:27
cdn-edgestorageid: 756
cdn-requestid: f2df7cd1bf524677596cbdc080f15688
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
X-Firefox-Spdy: h2

lekuluent.et/static/media/logo.9a4089bb8f18dd33c8b3.png

213.55.96.153

200 OK

16 kB

URL GET
lekuluent.et/static/media/logo.9a4089bb8f18dd33c8b3.png
IP
213.55.96.153:443
ASN
#24757 Ethiopian Telecommunication Corporation

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectlekuluent.et
FingerprintC4:C6:63:5B:90:24:BE:75:32:82:05:5D:99:FC:92:C8:B4:8F:02:87
ValidityThu, 10 Apr 2025 17:06:52 GMT - Wed, 09 Jul 2025 17:06:51 GMT

File type
PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced
Size
16 kB (15766 bytes)
Hash
be25cab2cc8c6ac966158b04d83d6359
cbfb421d439f0f1701609a245f3b2ff25e8f43b5
398e15109a8712f20d864b3ebba7f14fb90bba3237eb5e102e810f33273f3171

HTTP Headers

GET /static/media/logo.9a4089bb8f18dd33c8b3.png HTTP/1.1
Host: lekuluent.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/tv/93166?sNumber=2
Cookie: _ga_WZV74BCL86=GS1.1.1745090528.1.0.1745090528.0.0.0; _ga=GA1.1.752891663.1745090528
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 19:22:10 GMT
content-type: image/png
content-length: 15766
last-modified: Sat, 05 Apr 2025 21:58:20 GMT
etag: "67f1a77c-3d96"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

api.themoviedb.org/3/tv/93166/season/2?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-US&append_to_response=videos

54.240.174.110

200 OK

10 kB

URL GET
api.themoviedb.org/3/tv/93166/season/2?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-US&append_to_response=videos
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
JSON text data
Size
10 kB (9999 bytes)
Hash
662be6d75b1ef2004011ee715f584742
242488845c31b3b5fafd12d5806f555533e945ea
a0361076fde48fc5c7b14eeb9f857e16b685f73eb299cfead5f6be8c21e753ac

HTTP Headers

GET /3/tv/93166/season/2?api_key=0c43ea3d59eb841f28252be73f56fb09&language=en-US&append_to_response=videos HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lekuluent.et/
Origin: https://lekuluent.et
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=utf-8
date: Sat, 19 Apr 2025 19:22:11 GMT
server: openresty
cache-control: public, max-age=9592
etag: W/"a0361076fde48fc5c7b14eeb9f857e16"
content-encoding: gzip
vary: Accept-Encoding,accept-encoding
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: elTuEmFXJ6jUQg4Jp2c9xEqeeFYwpro-Leb3vOOWQV6wmNDLsoDkow==
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/vKf5h2xEtmTSp4GcYXPOUWdocQ7.jpg

138.199.36.9

200 OK

41 kB

URL GET
image.tmdb.org/t/p/w500/vKf5h2xEtmTSp4GcYXPOUWdocQ7.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
41 kB (40996 bytes)
Hash
f3611f7cc0df17b534153dd7832e8d3a
6fe964afbd7dfa789654140b81956ad2a991cf94
03e0bde24c39264418d3aece6637ca0201273dde16f65076218be2f4a3f9481b

HTTP Headers

GET /t/p/w500/vKf5h2xEtmTSp4GcYXPOUWdocQ7.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 40996
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 03:58:11 GMT
perma-cache: MISS
x-bo-server: LA-295
x-downloadsize: 45217
x-bo-origindownloadtime: 18677
x-bo-compressionratio: 9.33%
x-bo-processingtime: 17
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 03:58:30
cdn-edgestorageid: 1078
cdn-requestid: 19cbebbf35741115b7bcbc2c0abff718
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/dnpatlJrEPiDSn5fzgzvxtiSnMo.jpg

138.199.36.9

200 OK

55 kB

URL GET
image.tmdb.org/t/p/w500/dnpatlJrEPiDSn5fzgzvxtiSnMo.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
55 kB (54930 bytes)
Hash
30545b3bd6bf28f9f9c69a581c88ccdc
b9e69e06f84dfdf305b23ed61414d289d570fe84
1e0fb1296c823660b5dbcb96d89cb189daf0a048b1d73d9bdcf36464884c9164

HTTP Headers

GET /t/p/w500/dnpatlJrEPiDSn5fzgzvxtiSnMo.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 54930
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 02:49:44 GMT
perma-cache: MISS
x-bo-server: LA-295
x-downloadsize: 75962
x-bo-origindownloadtime: 10594
x-bo-compressionratio: 27.69%
x-bo-processingtime: 23
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 02:49:55
cdn-edgestorageid: 756
cdn-requestid: 6c02d77fe597230e500131556b5120a3
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

lekuluent.et/static/css/main.f9f8da3b.css

213.55.96.153

200 OK

180 kB

URL GET
lekuluent.et/static/css/main.f9f8da3b.css
IP
213.55.96.153:443
ASN
#24757 Ethiopian Telecommunication Corporation

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectlekuluent.et
FingerprintC4:C6:63:5B:90:24:BE:75:32:82:05:5D:99:FC:92:C8:B4:8F:02:87
ValidityThu, 10 Apr 2025 17:06:52 GMT - Wed, 09 Jul 2025 17:06:51 GMT

File type
ASCII text, with very long lines (32100)
Size
180 kB (180502 bytes)
Hash
c6d9adaee4eada31d913813949b29b50
f5e9e4544e2db9a968b869ea53572a9fe4d11a9e
a4b13ca62b385442e57604fe07c0ee2fbb035ed740317fe011baf7462c5db144

HTTP Headers

GET /static/css/main.f9f8da3b.css HTTP/1.1
Host: lekuluent.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/tv/93166?sNumber=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 19:22:07 GMT
content-type: text/css
last-modified: Sat, 05 Apr 2025 21:58:20 GMT
etag: W/"67f1a77c-2c116"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

lekuluent.et/static/js/main.ff317650.js

213.55.96.153

200 OK

1.1 MB

URL GET
lekuluent.et/static/js/main.ff317650.js
IP
213.55.96.153:443
ASN
#24757 Ethiopian Telecommunication Corporation

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectlekuluent.et
FingerprintC4:C6:63:5B:90:24:BE:75:32:82:05:5D:99:FC:92:C8:B4:8F:02:87
ValidityThu, 10 Apr 2025 17:06:52 GMT - Wed, 09 Jul 2025 17:06:51 GMT

File type
JavaScript source, ASCII text, with very long lines (65465)
Size
1.1 MB (1070949 bytes)
Hash
87e24ec9647fb25707f36b9782fd0e85
f45922d19a8f18976cb0897a25d5d68d4ee0fa75
fd0c0927b4b203c66320444aaffe004ed3c64aa252de38aa5b8ccb4b5ef7c3ad

HTTP Headers

GET /static/js/main.ff317650.js HTTP/1.1
Host: lekuluent.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/tv/93166?sNumber=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 19:22:07 GMT
content-type: application/javascript
last-modified: Sat, 05 Apr 2025 21:58:20 GMT
etag: W/"67f1a77c-105765"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original//d7BIswSeHeAdIobNjsWEFG2uj1H.jpg

138.199.36.9

200 OK

244 kB

URL GET
image.tmdb.org/t/p/original//d7BIswSeHeAdIobNjsWEFG2uj1H.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 960x1440, Scaling: [none]x[none], YUV color, decoders should clamp
Size
244 kB (244468 bytes)
Hash
f9d3a46ea158241033ff5937f87195c5
2eba2bc05eec19b2818de30d087fa6036c7eb8df
39c8c21c3f1ae4a2fe2df2b78d43e3c8b4407b2590a4bb00bec7ae51e0e8a2bd

HTTP Headers

GET /t/p/original//d7BIswSeHeAdIobNjsWEFG2uj1H.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:15 GMT
content-type: image/webp
content-length: 244468
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67ee7c8a-3baf4"
last-modified: Thu, 03 Apr 2025 12:18:18 GMT
cdn-storageserver: NY-673
cdn-requestpullsuccess: True
cdn-fileserver: 792
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/19/2025 19:22:15
cdn-edgestorageid: 1077
cdn-requestid: 8046fbe4e72bbac22109da71322b3abe
cdn-cache: MISS
cdn-status: 200
cdn-requesttime: 1
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/6FuKOyJgViZXgMDOq9djFJLWPqX.jpg

138.199.36.9

200 OK

83 kB

URL GET
image.tmdb.org/t/p/w500/6FuKOyJgViZXgMDOq9djFJLWPqX.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://lekuluent.et/tv/93166?sNumber=2
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
83 kB (83038 bytes)
Hash
9dc8c85c5b2021e6115c99e087e63a71
084abae5168cae88311a39f4e61b02072a5d1ec8
6d94e7eb2fb3b7348044fa3f23ec74c93ca0795412f472a28d708f30a1652b7d

HTTP Headers

GET /t/p/w500/6FuKOyJgViZXgMDOq9djFJLWPqX.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lekuluent.et/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:22:14 GMT
content-type: image/webp
content-length: 83038
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 02:49:47 GMT
perma-cache: MISS
x-bo-server: LA-292
x-downloadsize: 103501
x-bo-origindownloadtime: 15893
x-bo-compressionratio: 19.77%
x-bo-processingtime: 74
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 02:50:03
cdn-edgestorageid: 874
cdn-requestid: dd85b308c77877c031d88c8ec0ecfec3
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (33)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP