pkembed.com/c5govhtdznol.html
6.5 kB URL pkembed.com/c5govhtdznol.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2317)
Hash f11be6d3024f0ac4aacbf3700348f014
77e1d7d8feb9adf2eeee244dc80fc6dabcac0834
a20cf1d9a781e0ad7326b3124e9028dc0d88f5cc25b04b1b73ac400395c05964
GET /c5govhtdznol.html HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Expires: Thu, 30 Nov 2023 22:24:55 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6478
Content-Type: text/html; charset=UTF-8
Set-Cookie: lang=1; domain=.pkembed.com; path=/; HttpOnly
LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/css/main.css?v=1
200 OK 11 kB URL GET HTTP/1.1 pkembed.com/css/main.css?v=1
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type assembler source, Unicode text, UTF-8 text
Hash e3011901bd833d77306c307e2e0f9db2
9123475e426c0b24dcaaabd6f5a68fb09c7a4368
43ac3865ac01e3e268b117f477e1761ec9c1675b000ece5a99db12912a506c8b
GET /css/main.css?v=1 HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:32 GMT
ETag: "be23-597638d50ea00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10919
Content-Type: text/css
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/js/jquery.cookie.js
1.5 kB URL pkembed.com/js/jquery.cookie.js
IP
Hash ae0c2c5d8f01f7d35bb698bb618a62f7
63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20
75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc
GET /js/jquery.cookie.js HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:34 GMT
ETag: "10eb-597638d6f6e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1498
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/js/xupload.js?v=3
200 OK 3.5 kB URL GET HTTP/1.1 pkembed.com/js/xupload.js?v=3
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
Hash bd9ca6993c72a80ccf600e7d45832d81
44ba84027e7894fe1931c10c203eaf0cc0f36f41
f2f42bf6bd7d7ef2e610c717db7037be84a34c4085bbc299e498fe3251cd1222
GET /js/xupload.js?v=3 HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:34 GMT
ETag: "2659-597638d6f6e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3504
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/js/modernizr.custom.04022.js
200 OK 3.1 kB URL GET HTTP/1.1 pkembed.com/js/modernizr.custom.04022.js
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type HTML document, ASCII text, with very long lines (6808)
Hash efc8a6825f06a154175a47e2e94a8f39
8fe71148f0b19cf0048696ce803e22eb8bee950e
956a35796f6cdde9e68964fca782f4cbec0da92c81656ef2d13714bdae6adfa6
GET /js/modernizr.custom.04022.js HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:34 GMT
ETag: "1b0d-597638d6f6e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3087
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/player_hola/videojs.hotkeys.min.js
1.7 kB URL pkembed.com/player_hola/videojs.hotkeys.min.js
IP
File type ASCII text, with very long lines (4155)
Hash 49cee074659de6d04bdde7fef517a1e8
7702d3daead39ae0d7c766ae1160b191bd225c1d
688a19b3d27111cbd009ced47470cb943871fed095564ab3660f89d290333ae0
GET /player_hola/videojs.hotkeys.min.js HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:40 GMT
ETag: "10b7-597638dcafc00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1694
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/player_hola/hola_player.js
200 OK 250 kB URL GET HTTP/1.1 pkembed.com/player_hola/hola_player.js
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type ASCII text, with very long lines (31979)
Size 250 kB (250265 bytes)
Hash a3b464f67532db88383492b1bb7543fa
caf9b3ccf0d5292c5c89e0c66afdd6f7fa5de5d1
14e0f11b9f8208af547b11c4ac0496bafaefa9c7d1b5fc2c22dfae0c47aeaab8
GET /player_hola/hola_player.js HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:40 GMT
ETag: "f2395-597638dcafc00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/js/tabber.js
200 OK 1.9 kB IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type ASCII text, with very long lines (538)
Hash f6be5160018c4101fa76b42650b5a1a6
d8d3efdadf32bb4fd6daac619575969b241d2864
c8a84372ece060ed361527a4517edace8aff92d6288323c52c8333500e1ae70a
GET /js/tabber.js HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:34 GMT
ETag: "1803-597638d6f6e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1936
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/js/jquery.min.js
33 kB URL pkembed.com/js/jquery.min.js
IP
File type ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /js/jquery.min.js HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:34 GMT
ETag: "1762a-597638d6f6e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33225
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/player_hola/videojs-chromecast.min.js
4.7 kB URL pkembed.com/player_hola/videojs-chromecast.min.js
IP
File type ASCII text, with very long lines (18355)
Hash 8503ae714cdbf707d6f3dafcf78dbc38
87249878e1537cb5b90f35cf90cb27624725e815
97ea5755f0133dbd54dc8424efe98b429b145efbee6b0cb3408c5c1011c3a01a
GET /player_hola/videojs-chromecast.min.js HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:40 GMT
ETag: "481d-597638dcafc00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4726
Content-Type: application/javascript
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/player_hola/videojs-chromecast.css
200 OK 2.1 kB URL GET HTTP/1.1 pkembed.com/player_hola/videojs-chromecast.css
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5104)
Hash aef61d36955aab6d722bfb2ee3d8d72f
c6e956ab696c9cea1173d40aa23f1abfa31d0c39
672583a26ab16b1ab017d25b9040eb5b5791a784057b41718ccbf5098d84c1b8
GET /player_hola/videojs-chromecast.css HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:40 GMT
ETag: "13f6-597638dcafc00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2063
Content-Type: text/css
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
www.googletagmanager.com/gtag/js?id=UA-152812863-1
200 OK 52 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-152812863-1
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (2213)
Hash eb24fd8ec2e91bbadb791badd9d74ed3
89e101c8c18199e9de5751aaafeb6936e0406e52
b8f7f7071ec8739a12b012e8ee3cec4dc27ab43847856d19a0ecb6657380aac9
GET /gtag/js?id=UA-152812863-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 22:24:56 GMT
expires: Fri, 01 Dec 2023 22:24:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51664
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
200 OK 2.0 kB URL GET HTTP/2 www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1143)
Hash b427175fa1078775eb792756e7b6d1e7
4c55c0233d3d9002b3449c025f97821f8bb8900d
ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f
GET /cv/js/sender/v1/cast_sender.js?loadCastFramework=1 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="cloudview"
report-to: {"group":"cloudview","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cloudview"}]}
content-length: 2007
date: Fri, 01 Dec 2023 22:24:56 GMT
expires: Fri, 01 Dec 2023 22:24:56 GMT
cache-control: private, max-age=3000
last-modified: Tue, 16 Feb 2021 23:57:06 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pkembed.com/images/logo.png
200 OK 7.4 kB URL GET HTTP/1.1 pkembed.com/images/logo.png
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type PNG image data, 220 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash a20db1c86b9988f84ad5ccf5a97aa2bd
52a00f1f26b1a8bc9975209583cd7bad1efb5321
d3f5662bf9dd7d3d1192cba84856d2216e366aa484e064d4c48786e0fb58e18e
GET /images/logo.png HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Sat, 16 Nov 2019 09:58:19 GMT
ETag: "1d07-59773c10644c0"
Accept-Ranges: bytes
Content-Length: 7431
Content-Type: image/png
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
of.gangueturkery.com/rAEpJPaL5hoejOTg/gnAgv
200 OK 20 B URL GET HTTP/1.1 of.gangueturkery.com/rAEpJPaL5hoejOTg/gnAgv
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectof.gangueturkery.com
FingerprintBA:39:5C:11:F4:4F:6E:79:FA:3A:A2:2F:DD:17:B3:E6:CA:CD:AD:29
ValiditySun, 12 Nov 2023 00:22:03 GMT - Sat, 10 Feb 2024 00:22:02 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rAEpJPaL5hoejOTg/gnAgv HTTP/1.1
Host: of.gangueturkery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:24:56 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pkembed.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Sat, 02-Dec-2023 22:24:56 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sat, 02-Dec-2023 22:24:56 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
platform.bidgear.com/ads.php?domainid=6397&sizeid=2&zoneid=6894
981 B URL platform.bidgear.com/ads.php?domainid=6397&sizeid=2&zoneid=6894
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (846), with no line terminators
Hash 49461c1596142d6d64388325924e48a3
df2e0a5b4541167c270bcc5ae4d1dce201a464de
2139906ba760be85ecf6beb63512672a9b0698234c6ba759ad9686e2ceab149e
GET /ads.php?domainid=6397&sizeid=2&zoneid=6894 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:24:56 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QqWouweusUMb%2BOclntQPK%2Fpl%2FIlFBfgIcLwZlgBzQZ7wffIm74po1rsiWfWSdUsrIlpFFQY0XlReEiauob1FS0YN8fNdQkN%2FcmaCQ7b4kq0ASqSSKg24ZCyvycFB7H5RaahugAlx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eebe3e8dfa5689-OSL
content-encoding: br
X-Firefox-Spdy: h2
pkembed.com/images/head_bg.jpg
200 OK 11 kB URL GET HTTP/1.1 pkembed.com/images/head_bg.jpg
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x480, components 3\012- data
Hash 9387483e78000fcacd56190accabac37
90e50cc01d92da5185ff1ba94bb3c4556690246d
3e0ded51afb722f438ca05c61eb1e8083699a5ed154eec92a665eff8a537f300
GET /images/head_bg.jpg HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/css/main.css?v=1
Cookie: lang=1; file_id=61807; aff=5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:32 GMT
ETag: "2b8b-597638d50ea00"
Accept-Ranges: bytes
Content-Length: 11147
Content-Type: image/jpeg
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/images/home.cur
200 OK 4.3 kB URL GET HTTP/1.1 pkembed.com/images/home.cur
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @15x15\012- data
Hash 3f38081dceb7a38d6690abf004639d5c
64ef788f9325ba8be2d1616499da85bf9fe3a02d
73d32ee571b934d7e52498bd60e7b7fdd7026f47f1a68eb8ce9e7b7d6243beac
GET /images/home.cur HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/css/main.css?v=1
Cookie: lang=1; file_id=61807; aff=5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:32 GMT
ETag: "10be-597638d50ea00"
Accept-Ranges: bytes
Content-Length: 4286
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
pkembed.com/images/flags.png
15 kB URL pkembed.com/images/flags.png
IP
File type PNG image data, 1248 x 11, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e7e0406e09ea913dc344ca9974ec94a
084fcf2d8e96661354a7e563f64801dfd13bead7
0787e30d6145bc8b8b92ed329f664bcc3012162ccba9ef943d7ada480afb74e9
GET /images/flags.png HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/css/main.css?v=1
Cookie: lang=1; file_id=61807; aff=5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:32 GMT
ETag: "3b4c-597638d50ea00"
Accept-Ranges: bytes
Content-Length: 15180
Content-Type: image/png
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
trikerboughs.com/gqSCLXOp77r/53911
200 OK 26 B URL GET HTTP/1.1 trikerboughs.com/gqSCLXOp77r/53911
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjecttrikerboughs.com
Fingerprint38:BC:DF:50:25:58:7C:FF:12:87:8F:A2:D1:BA:B5:B4:75:7B:5C:83
ValidityFri, 20 Oct 2023 23:02:37 GMT - Thu, 18 Jan 2024 23:02:36 GMT
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
GET /gqSCLXOp77r/53911 HTTP/1.1
Host: trikerboughs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:24:56 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pkembed.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Sat, 02-Dec-2023 22:24:56 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sat, 02-Dec-2023 22:24:56 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
pkovhv3.vkcdn5.com/i/01/00012/c5govhtdznol.jpg
200 OK 22 kB URL GET HTTP/1.1 pkovhv3.vkcdn5.com/i/01/00012/c5govhtdznol.jpg
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGlobalSign nv-sa
Subject*.vkcdn5.com
Fingerprint01:F2:CB:EE:8C:B4:29:8E:98:5F:46:F1:6E:7B:BC:28:92:67:7A:E9
ValiditySat, 18 Feb 2023 18:21:30 GMT - Thu, 21 Mar 2024 18:21:29 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1196x1197, segment length 16, comment: "Lavc58.55.100", baseline, precision 8, 720x299, components 3\012- data
Hash 27c569481c4e59c5a31a9ddcba074ef7
4baad7baefa4c0dd8a45b2df6df32f49cadbd22d
52874a6fbb89709876c1f803f229c213155d11dc19a1896a36bc051a9b9b896d
GET /i/01/00012/c5govhtdznol.jpg HTTP/1.1
Host: pkovhv3.vkcdn5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:24:56 GMT
Content-Type: image/jpeg
Content-Length: 22375
Last-Modified: Fri, 01 Dec 2023 13:01:36 GMT
Connection: keep-alive
ETag: "6569d930-5767"
Expires: Fri, 15 Dec 2023 22:24:56 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
pl15769545.profitablegatetocontent.com/02/a5/fe/02a5fe71f9003febd18ad77adabff1cd.js
200 OK 17 kB URL GET HTTP/1.1 pl15769545.profitablegatetocontent.com/02/a5/fe/02a5fe71f9003febd18ad77adabff1cd.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectprofitablegatetocontent.com
Fingerprint33:FB:21:6F:EE:B3:75:B9:43:72:5D:F0:9F:E9:79:8E:57:62:75:38
ValidityFri, 27 Oct 2023 06:31:10 GMT - Thu, 25 Jan 2024 06:31:09 GMT
File type ASCII text, with very long lines (53749), with no line terminators
Hash d8f8abed5088c9cf7be2a78ba2b5c10f
0d18d72ff0f29a757f190a5d347e568b318d60cf
e254eee829200b887926f6c06270b6d6986d67e3f6b5ac5c73ea13ef82764b63
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /02/a5/fe/02a5fe71f9003febd18ad77adabff1cd.js HTTP/1.1
Host: pl15769545.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 22:24:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dfb185a5fbfd1db4b3eed9590bc6a9af
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.googletagmanager.com/gtag/js?id=G-9THL6SCR56&l=dataLayer&cx=c
200 OK 86 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-9THL6SCR56&l=dataLayer&cx=c
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash b4142d6fbde264ab60666abf8df66540
d45b3a55a026391eafd1664d6f8304ee290efc70
2d30dc1029f403e43103a7db4e858735c431ee46f4ec24dd230508785a8b88e7
GET /gtag/js?id=G-9THL6SCR56&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 22:24:56 GMT
expires: Fri, 01 Dec 2023 22:24:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86201
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
imp9.bidgear.com/rec?t=1&z=6894&uuid=17e105a89efd4c6fbeb9483be0d0f7f9&p=36&g=NO&token=4a44335432&tbg=1701469496
200 OK 599 B URL GET HTTP/2 imp9.bidgear.com/rec?t=1&z=6894&uuid=17e105a89efd4c6fbeb9483be0d0f7f9&p=36&g=NO&token=4a44335432&tbg=1701469496
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6894&uuid=17e105a89efd4c6fbeb9483be0d0f7f9&p=36&g=NO&token=4a44335432&tbg=1701469496 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:24:57 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zktHFvUWL%2FAJAdrH7ClZp%2B7HVgZUtTxRWGwGxx9NsGXSCUfNvaVp8p%2BJnGVsoAVzI6OAjBpDz8bKtURQb2jr%2BLHwlp%2BFBsfLVvt4FCvdd2F%2Fp%2FbY6J4%2FFVSzDmK%2FmAxjrnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eebe43dac25689-OSL
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 28 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:24:57 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 3db3e4d941b23956636dd4804579b9a4
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 22:24:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAKNj86EHWzlYmNFPj4Qdyu9NA9Tfh7rdq7MMRbcNjRAdWrkL7eAt9Gy%2BckzDN%2BAepSFeEZxJHb%2BK0%2Fq8kEuN4bZGvYEeiZr8XspQyuiBCAufddB6fhO1o8n9GJjfGfxfiduWu0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eebe446c066547-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
boundsinflectioncustom.com/c6/03/d6/c603d6719a1162bfdef68ba94653110b.js
200 OK 15 kB URL GET HTTP/1.1 boundsinflectioncustom.com/c6/03/d6/c603d6719a1162bfdef68ba94653110b.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectboundsinflectioncustom.com
FingerprintA6:53:9B:E3:1B:0A:C8:5C:D1:39:D7:56:14:14:6A:EC:C2:6D:13:6B
ValidityTue, 28 Nov 2023 08:06:28 GMT - Mon, 26 Feb 2024 08:06:27 GMT
File type ASCII text, with very long lines (42772), with no line terminators
Hash fed9cfbe9c57e76d8b0a575bc64912cd
08b866d0cc1c98deaceda241cb77f5ec3b7dd75c
401834304a18c6571a09b22ba1ae4856950c56a6caf16328ae21233a099f0e72
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /c6/03/d6/c603d6719a1162bfdef68ba94653110b.js HTTP/1.1
Host: boundsinflectioncustom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 22:24:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9127998e4244c1f077d3b91570e9b456
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 5b7b378f2f2e1279be0c0f57ceb0cf93
f03e52739a3a7e746036c3b8b7c42015632a931a
a801964dabaa860b97b788b0dd71cc601c6b38279cf522be462c816352ce1265
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 01 Dec 2023 22:24:57 GMT
Last-Modified: Fri, 01 Dec 2023 22:24:05 GMT
Server: ECAcc (amb/6B17)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f2CCT0AN6VZtwTtecxoL1UAUNUnevOMLgXY6Q7du1ND-rfI4482rpA==
Age: 52
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash b7d4bc2b6fab4ec137c7805fdd2e4d70
17d22890af0501b7b306890815982b6fc692bfa1
5029d1d4a81f044750926c4966bf321084a2c45114403c26e8b62d919fa00979
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pkembed.com
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:24:57 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://pkembed.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=26115d89-9a58-460e-bfad-d1a0de6cb512:2:1; expires=Mon, 28 Nov 2033 22:24:57 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
shortlyamusement.com/791f60ab8111269675d860b5a876b8e0/invoke.js
200 OK 11 kB URL GET HTTP/1.1 shortlyamusement.com/791f60ab8111269675d860b5a876b8e0/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subject*.shortlyamusement.com
FingerprintDB:A6:B7:E6:17:6F:6E:1D:0B:0B:03:E2:8E:3C:1B:F2:50:55:91:75
ValidityTue, 10 Oct 2023 07:20:23 GMT - Mon, 08 Jan 2024 07:20:22 GMT
File type exported SGML document, ASCII text, with very long lines (29617), with no line terminators
Hash 06ea8631f3d9b8bcdf483a4d46560441
9c572c9e63afe9c62a2ae4aa6572a1e48c0e0086
46d714dd64eeae54f3432dd16c3a99f7d195eb700edb3065166ee3fb92ad435c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /791f60ab8111269675d860b5a876b8e0/invoke.js HTTP/1.1
Host: shortlyamusement.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 22:24:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 176a9a9bb225aa337220af61b950df31
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
imp9.bidgear.com/rec?t=1&z=6895&uuid=23e9635056de40feb076525fc278e225&p=36&g=NO&token=4a44335432&tbg=1701469496
599 B URL imp9.bidgear.com/rec?t=1&z=6895&uuid=23e9635056de40feb076525fc278e225&p=36&g=NO&token=4a44335432&tbg=1701469496
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6895&uuid=23e9635056de40feb076525fc278e225&p=36&g=NO&token=4a44335432&tbg=1701469496 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:24:57 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OeAute2eskuAbh2cjTuoxAmYtIVfjSavzWQeqXPgmAGuMECm6prWN5HOr6IRWX7KOiwitGumrd2I%2F6p9eiSJu%2B4WH0pZVXKJjXm8ZviH2LZppCrSbKeOPEVfigz36iWN28M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eebe494ff75689-OSL
X-Firefox-Spdy: h2
shortlyamusement.com/ff85992c0d652506a0d772aea0bc982c/invoke.js
200 OK 11 kB URL GET HTTP/1.1 shortlyamusement.com/ff85992c0d652506a0d772aea0bc982c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subject*.shortlyamusement.com
FingerprintDB:A6:B7:E6:17:6F:6E:1D:0B:0B:03:E2:8E:3C:1B:F2:50:55:91:75
ValidityTue, 10 Oct 2023 07:20:23 GMT - Mon, 08 Jan 2024 07:20:22 GMT
File type exported SGML document, ASCII text, with very long lines (29632), with no line terminators
Hash a64b8a292b89abf4d2ca837d89636d5f
f0940d2d72ce36dfec8ae7f86c77f5d35598b54d
187b346c9609d8a9d9b0d1996f086e9f72220c859cc624725ebeb6aea29f55c6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ff85992c0d652506a0d772aea0bc982c/invoke.js HTTP/1.1
Host: shortlyamusement.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 22:24:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 058bb41f531a750d4c89828d79f501e5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pkembed.com/images/user.png
200 OK 273 B URL GET HTTP/1.1 pkembed.com/images/user.png
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type PNG image data, 8 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash b9933c49b535d72fde7ce77e8991f52a
6bbc8ed64f6f1189049717e9558349581e6fd4dc
40523e543b1a7f4dc88cf199c0fcbaf9dbf6a49c36e089580383e71b6920bec5
GET /images/user.png HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/css/main.css?v=1
Cookie: lang=1; file_id=61807; aff=5; ppu_show_on_02a5fe71f9003febd18ad77adabff1cd=1; _ga_9THL6SCR56=GS1.1.1701469502.1.0.1701469502.0.0.0; _ga=GA1.1.689484102.1701469502; ppu_main_02a5fe71f9003febd18ad77adabff1cd=1; ppu_exp_02a5fe71f9003febd18ad77adabff1cd=1701473102267; dom3ic8zudi28v8lr6fgphwffqoz0j6c=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:58 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:34 GMT
ETag: "111-597638d6f6e80"
Accept-Ranges: bytes
Content-Length: 273
Content-Type: image/png
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
fonts.googleapis.com/css?family=Roboto:400,500
200 OK 1.1 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:400,500
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 5603f9c2ca36ad6054cbac9d6a64a6e0
ebf998496cfdc48de4902eea462e0106a85d052e
c6cf3f289ab0609f28a9f3f1241c73ca7abaaf6fa6e122c4846759ac758fea7b
GET /css?family=Roboto:400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 22:24:58 GMT
date: Fri, 01 Dec 2023 22:24:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pkembed.com/images/hr3.gif
200 OK 46 B URL GET HTTP/1.1 pkembed.com/images/hr3.gif
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type GIF image data, version 89a, 3 x 7\012- data
Hash 89ccef984b2f16c79ec010487752faa9
231f34bc5e22f40c642c60275510cd65e39e8951
4d1c3bcfaf5ff52230762efb499ab2ba040d3640e628f346cf9d4fe57a89ca91
GET /images/hr3.gif HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/css/main.css?v=1
Cookie: lang=1; file_id=61807; aff=5; ppu_show_on_02a5fe71f9003febd18ad77adabff1cd=1; _ga_9THL6SCR56=GS1.1.1701469502.1.0.1701469502.0.0.0; _ga=GA1.1.689484102.1701469502; ppu_main_02a5fe71f9003febd18ad77adabff1cd=1; ppu_exp_02a5fe71f9003febd18ad77adabff1cd=1701473102267; dom3ic8zudi28v8lr6fgphwffqoz0j6c=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1; sb_main_c603d6719a1162bfdef68ba94653110b=1; sb_idelay_c603d6719a1162bfdef68ba94653110b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:58 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Fri, 15 Nov 2019 14:38:32 GMT
ETag: "2e-597638d50ea00"
Accept-Ranges: bytes
Content-Length: 46
Content-Type: image/gif
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
6opgsam.vkcdn5.com/i/01/00011/1texdj3nntca_t.jpg
200 OK 3.0 kB URL GET HTTP/1.1 6opgsam.vkcdn5.com/i/01/00011/1texdj3nntca_t.jpg
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGlobalSign nv-sa
Subject*.vkcdn5.com
Fingerprint01:F2:CB:EE:8C:B4:29:8E:98:5F:46:F1:6E:7B:BC:28:92:67:7A:E9
ValiditySat, 18 Feb 2023 18:21:30 GMT - Thu, 21 Mar 2024 18:21:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 205x202, segment length 16, comment: "Lavc58.55.100", baseline, precision 8, 200x112, components 3\012- data
Hash 8815bc1f98b5c34594db01d54445549c
701e8a871f6455e38788470ce3bda5dd79a7ac9f
15cd94d5d76876697b6a596f5c52e0b7f914a6a588c19da78f96decc7dab6f77
GET /i/01/00011/1texdj3nntca_t.jpg HTTP/1.1
Host: 6opgsam.vkcdn5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: image/jpeg
Content-Length: 3039
Last-Modified: Wed, 02 Aug 2023 08:34:34 GMT
Connection: keep-alive
ETag: "64ca151a-bdf"
Expires: Fri, 15 Dec 2023 22:24:58 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
111opm.vkcdn5.com/i/01/00009/waxx672ifger_t.jpg
200 OK 4.4 kB URL GET HTTP/1.1 111opm.vkcdn5.com/i/01/00009/waxx672ifger_t.jpg
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGlobalSign nv-sa
Subject*.vkcdn5.com
Fingerprint01:F2:CB:EE:8C:B4:29:8E:98:5F:46:F1:6E:7B:BC:28:92:67:7A:E9
ValiditySat, 18 Feb 2023 18:21:30 GMT - Thu, 21 Mar 2024 18:21:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 7201x7200, segment length 16, comment: "Lavc58.55.100", baseline, precision 8, 200x112, components 3\012- data
Hash bc927733da968d76502c6c5576a91241
70722b890c6fcb38a99858f8288e733372f15de7
ffb7536e1625c78e19320aa66982c65b8cdac05e9681c43cb1b2865d59457b1f
GET /i/01/00009/waxx672ifger_t.jpg HTTP/1.1
Host: 111opm.vkcdn5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: image/jpeg
Content-Length: 4410
Last-Modified: Mon, 02 Jan 2023 11:49:31 GMT
Connection: keep-alive
ETag: "63b2c4cb-113a"
Expires: Fri, 15 Dec 2023 22:24:58 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
demeanourgrade.com/watch.1511234344173.js?key=ff85992c0d652506a0d772aea0bc982c&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 demeanourgrade.com/watch.1511234344173.js?key=ff85992c0d652506a0d772aea0bc982c&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectdemeanourgrade.com
Fingerprint97:79:AD:04:07:B5:1D:6E:8E:6A:A1:80:DC:F7:25:95:76:09:45:F1
ValidityTue, 28 Nov 2023 08:07:04 GMT - Mon, 26 Feb 2024 08:07:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1511234344173.js?key=ff85992c0d652506a0d772aea0bc982c&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1 HTTP/1.1
Host: demeanourgrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pkembed.com
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://pkembed.com
Access-Control-Allow-Origin: https://pkembed.com
Access-Control-Allow-Credentials: true
Location: https://demeanourgrade.com/watch.1511234344173.js?key=ff85992c0d652506a0d772aea0bc982c&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=56d7c0759b79e664b6c8128284889bd0eb2d84f0784f4cffdb99ac923fb385d793ab51e94cf93bfeb4eed9d548079ad61fac92f09afc8ff76a267b26f1193ab7a2a52d673b80f8fb8e049cd91c8815cc0946c453e3b250af4c7fd5a50d37ea&pst=1701469558&rmtc=t
Set-Cookie: u_pl=17469454; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzQ2OTQ1NCwiayI6ImZmODU5OTJjMGQ2NTI1MDZhMGQ3NzJhZWEwYmM5ODJjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTIxODA5LCJwaWQiOjI0NTY4LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjM3LCJhaWQiOjUsInB0Ijo0LCJwayI6ImQyemFjczE2ciIsImNwa3MiOnsiMjgiOiJkZDhmZDYxNDAyNGFjNGQxMTlkYzc1ZTFiYzNjM2IwYyJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9wa2VtYmVkLmNvbS9jNWdvdmh0ZHpub2wuaHRtbCIsImFyIjpbXX19.RPNcvj6OdNLwIJnLYG8MqvGYTXmS5pf7ItS_LHmNN3k; expires=Fri, 01 Dec 2023 22:25:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9755f29023803a2e5ed902b728fa53fc
Strict-Transport-Security: max-age=0; includeSubdomains
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pkembed.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 07:29:35 GMT
expires: Fri, 29 Nov 2024 07:29:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 140123
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pkembed.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 149244
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
archaicin.com/watch.846504118341.js?key=791f60ab8111269675d860b5a876b8e0&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 archaicin.com/watch.846504118341.js?key=791f60ab8111269675d860b5a876b8e0&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectarchaicin.com
FingerprintCB:13:5A:BD:C5:13:07:1E:02:F1:E3:B3:05:D7:5C:2F:4A:25:2E:67
ValidityTue, 28 Nov 2023 10:53:01 GMT - Mon, 26 Feb 2024 10:53:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.846504118341.js?key=791f60ab8111269675d860b5a876b8e0&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1 HTTP/1.1
Host: archaicin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pkembed.com
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://pkembed.com
Access-Control-Allow-Origin: https://pkembed.com
Access-Control-Allow-Credentials: true
Location: https://archaicin.com/watch.846504118341.js?key=791f60ab8111269675d860b5a876b8e0&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=3efd139f71e5e8cf44e00ee8656f7172be5cb980be919f0997651ffaeeb6c1bd7e50df509f74f64a4d6716633d70ee805c5e5615d5a35d823f13a62b6538ee59bcd5db4a9b6723489adea5dac116a51afc4ed0a4dcfc2ed576defcb47ebc54&pst=1701469558&rmtc=t
Set-Cookie: u_pl=17469453; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.bVfWBQVFVwSGGPJNX3RVHGq2XMbb_B82-jR6uYWZy2A; expires=Fri, 01 Dec 2023 22:25:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 94d68b8a01dda7373c1bec778b7b1c1e
Strict-Transport-Security: max-age=0; includeSubdomains
demeanourgrade.com/dd/8f/d6/dd8fd614024ac4d119dc75e1bc3c3b0c.js
200 OK 23 kB URL GET HTTP/1.1 demeanourgrade.com/dd/8f/d6/dd8fd614024ac4d119dc75e1bc3c3b0c.js
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectdemeanourgrade.com
Fingerprint97:79:AD:04:07:B5:1D:6E:8E:6A:A1:80:DC:F7:25:95:76:09:45:F1
ValidityTue, 28 Nov 2023 08:07:04 GMT - Mon, 26 Feb 2024 08:07:03 GMT
File type ASCII text, with very long lines (59648), with no line terminators
Hash 16f75a7fb3a7fe94987982dddfcd3dc7
44dca8f642c563f50cedd8ccae92d211ff203f5f
f069f4aa5fedd2bf92838b1035c4e199d41645e2ee4c187df3028d591583d8b1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dd/8f/d6/dd8fd614024ac4d119dc75e1bc3c3b0c.js HTTP/1.1
Host: demeanourgrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f985b69ca9f1e8cf4abb43efe24a55a2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
demeanourgrade.com/watch.1511234344173.js?key=ff85992c0d652506a0d772aea0bc982c&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=56d7c0759b79e664b6c8128284889bd0eb2d84f0784f4cffdb99ac923fb385d793ab51e94cf93bfeb4eed9d548079ad61fac92f09afc8ff76a267b26f1193ab7a2a52d673b80f8fb8e049cd91c8815cc0946c453e3b250af4c7fd5a50d37ea&pst=1701469558&rmtc=t
200 OK 2.0 kB URL GET HTTP/1.1 demeanourgrade.com/watch.1511234344173.js?key=ff85992c0d652506a0d772aea0bc982c&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=56d7c0759b79e664b6c8128284889bd0eb2d84f0784f4cffdb99ac923fb385d793ab51e94cf93bfeb4eed9d548079ad61fac92f09afc8ff76a267b26f1193ab7a2a52d673b80f8fb8e049cd91c8815cc0946c453e3b250af4c7fd5a50d37ea&pst=1701469558&rmtc=t
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectdemeanourgrade.com
Fingerprint97:79:AD:04:07:B5:1D:6E:8E:6A:A1:80:DC:F7:25:95:76:09:45:F1
ValidityTue, 28 Nov 2023 08:07:04 GMT - Mon, 26 Feb 2024 08:07:03 GMT
File type HTML document, ASCII text, with very long lines (2446)
Hash fdfde8262eac857b83333365cb252446
d00815767fedc3ef53c617fa4045790e2cf410d8
4b25ad57cf434bfb41b779ab55f97f1f4c16811219bdef1a6d03e24a9ce7c188
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1511234344173.js?key=ff85992c0d652506a0d772aea0bc982c&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=56d7c0759b79e664b6c8128284889bd0eb2d84f0784f4cffdb99ac923fb385d793ab51e94cf93bfeb4eed9d548079ad61fac92f09afc8ff76a267b26f1193ab7a2a52d673b80f8fb8e049cd91c8815cc0946c453e3b250af4c7fd5a50d37ea&pst=1701469558&rmtc=t HTTP/1.1
Host: demeanourgrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pkembed.com
Referer: https://pkembed.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=17469454; ain=eyJhbGciOiJIUzI1NiJ9.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.RPNcvj6OdNLwIJnLYG8MqvGYTXmS5pf7ItS_LHmNN3k
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://pkembed.com
Access-Control-Allow-Origin: https://pkembed.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=26115d89-9a58-460e-bfad-d1a0de6cb512:2:1; expires=Fri, 08 Dec 2023 22:24:58 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
uncs=1; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5ccc79c21e589ab2d43a5ea689248d9a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
archaicin.com/68/a2/b7/68a2b7224a7225b170a88b9ac0e556bd.js
23 kB URL archaicin.com/68/a2/b7/68a2b7224a7225b170a88b9ac0e556bd.js
IP
Certificate IssuerLet's Encrypt
Subjectarchaicin.com
FingerprintCB:13:5A:BD:C5:13:07:1E:02:F1:E3:B3:05:D7:5C:2F:4A:25:2E:67
ValidityTue, 28 Nov 2023 10:53:01 GMT - Mon, 26 Feb 2024 10:53:00 GMT
File type ASCII text, with very long lines (59658), with no line terminators
Hash 3c4186653b55955b928b249e99b76851
5da060c3832edf155b60e9c8b127cccbb72cfae3
3aef67a2bc5259b99d05467991decf48ab1778ee719c1629ce52580d1045d897
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /68/a2/b7/68a2b7224a7225b170a88b9ac0e556bd.js HTTP/1.1
Host: archaicin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 49edc6caab0e513d6a87abeb2f936fc8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
archaicin.com/watch.846504118341.js?key=791f60ab8111269675d860b5a876b8e0&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=3efd139f71e5e8cf44e00ee8656f7172be5cb980be919f0997651ffaeeb6c1bd7e50df509f74f64a4d6716633d70ee805c5e5615d5a35d823f13a62b6538ee59bcd5db4a9b6723489adea5dac116a51afc4ed0a4dcfc2ed576defcb47ebc54&pst=1701469558&rmtc=t
200 OK 2.0 kB URL GET HTTP/1.1 archaicin.com/watch.846504118341.js?key=791f60ab8111269675d860b5a876b8e0&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=3efd139f71e5e8cf44e00ee8656f7172be5cb980be919f0997651ffaeeb6c1bd7e50df509f74f64a4d6716633d70ee805c5e5615d5a35d823f13a62b6538ee59bcd5db4a9b6723489adea5dac116a51afc4ed0a4dcfc2ed576defcb47ebc54&pst=1701469558&rmtc=t
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectarchaicin.com
FingerprintCB:13:5A:BD:C5:13:07:1E:02:F1:E3:B3:05:D7:5C:2F:4A:25:2E:67
ValidityTue, 28 Nov 2023 10:53:01 GMT - Mon, 26 Feb 2024 10:53:00 GMT
File type HTML document, ASCII text, with very long lines (2465)
Hash d6d2da64a1accc7f7df18eea935e0830
d9e342671029268eac42b298dd4269e9e93a83df
1fe274af6ec0dc9a551c11b4c265e1945da1bc27d8a35fa5bebfd1510c8c5475
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.846504118341.js?key=791f60ab8111269675d860b5a876b8e0&kw=%5B%22pkspeed%22%2C%22net%22%5D&refer=https%3A%2F%2Fpkembed.com%2Fc5govhtdznol.html&tz=0&dev=e&res=14.3095&uuid=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1&shu=3efd139f71e5e8cf44e00ee8656f7172be5cb980be919f0997651ffaeeb6c1bd7e50df509f74f64a4d6716633d70ee805c5e5615d5a35d823f13a62b6538ee59bcd5db4a9b6723489adea5dac116a51afc4ed0a4dcfc2ed576defcb47ebc54&pst=1701469558&rmtc=t HTTP/1.1
Host: archaicin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pkembed.com
Referer: https://pkembed.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=17469453; ain=eyJhbGciOiJIUzI1NiJ9.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.bVfWBQVFVwSGGPJNX3RVHGq2XMbb_B82-jR6uYWZy2A
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://pkembed.com
Access-Control-Allow-Origin: https://pkembed.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=26115d89-9a58-460e-bfad-d1a0de6cb512:2:1; expires=Fri, 08 Dec 2023 22:24:58 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
uncs=1; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 02 Dec 2023 22:24:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7860a4b8614c53e8c06daa3f9d2b9767
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
111opm.vkcdn5.com/i/01/00006/srbpak3ix0lm_t.jpg
200 OK 3.0 kB URL GET HTTP/1.1 111opm.vkcdn5.com/i/01/00006/srbpak3ix0lm_t.jpg
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGlobalSign nv-sa
Subject*.vkcdn5.com
Fingerprint01:F2:CB:EE:8C:B4:29:8E:98:5F:46:F1:6E:7B:BC:28:92:67:7A:E9
ValiditySat, 18 Feb 2023 18:21:30 GMT - Thu, 21 Mar 2024 18:21:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.55.100", baseline, precision 8, 200x112, components 3\012- data
Hash 613181db3566fa30ddd54cff6f5a1a3c
8ec4ef4a20d6798763bac475cb999192cf52a86d
d98aecbebdf97d33cb68ce098949561a6ad10de10c13d2519f23a875f2e4d56e
GET /i/01/00006/srbpak3ix0lm_t.jpg HTTP/1.1
Host: 111opm.vkcdn5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: image/jpeg
Content-Length: 3031
Last-Modified: Tue, 22 Feb 2022 19:24:22 GMT
Connection: keep-alive
ETag: "62153866-bd7"
Expires: Fri, 15 Dec 2023 22:24:58 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
cdn.cloudimagesb.com/cti/60/ce/c4/60cec442407f9abe013ac98b00e12cb9/1627915957.png
106 kB URL cdn.cloudimagesb.com/cti/60/ce/c4/60cec442407f9abe013ac98b00e12cb9/1627915957.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Size 106 kB (106115 bytes)
Hash 9281fd8d87dda51e160328a923b9a454
fb36ebbd8cc7c4c4871e5cf947ae64a9f567c039
41544e4c12d24c819661b9609eff83f0f2ed1a6fce359a8cc32cbb77c64118da
GET /cti/60/ce/c4/60cec442407f9abe013ac98b00e12cb9/1627915957.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:24:58 GMT
content-type: image/png
content-length: 106115
server: nginx/1.21.6
last-modified: Mon, 02 Aug 2021 14:52:46 GMT
etag: "610806be-19e83"
expires: Sun, 03 Dec 2023 22:24:58 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/fe/3b/00/fe3b00c58303840cb3ab664e9686952e/1627915911.png
136 kB URL cdn.cloudimagesb.com/cti/fe/3b/00/fe3b00c58303840cb3ab664e9686952e/1627915911.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Size 136 kB (136090 bytes)
Hash 11675ef6f5c8559ec0ade47755155665
20df6be038de603b97f849e07460cd0600b34867
4d361374b3e2e4f8de896a1f1014d500ed0802bf028d2c7bbd606f9e87ba88a4
GET /cti/fe/3b/00/fe3b00c58303840cb3ab664e9686952e/1627915911.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:24:58 GMT
content-type: image/png
content-length: 136090
server: nginx/1.21.6
last-modified: Mon, 02 Aug 2021 14:51:59 GMT
etag: "6108068f-2139a"
expires: Sun, 03 Dec 2023 22:24:58 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
traumatizedenied.com/pixel/purst?dl=0&th=0&sc=0&rs=3338&rd=3338&fd=578&bv=23.11.v.8&tmpl=136
0 B URL traumatizedenied.com/pixel/purst?dl=0&th=0&sc=0&rs=3338&rd=3338&fd=578&bv=23.11.v.8&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=3338&rd=3338&fd=578&bv=23.11.v.8&tmpl=136 HTTP/1.1
Host: traumatizedenied.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 22:24:59 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
awaydefinitecreature.com/pixel/purst?dl=0&th=0&sc=0&rs=3399&rd=3399&fd=785&bv=23.11.v.8&tmpl=136
200 OK 0 B URL GET HTTP/1.1 awaydefinitecreature.com/pixel/purst?dl=0&th=0&sc=0&rs=3399&rd=3399&fd=785&bv=23.11.v.8&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectawaydefinitecreature.com
FingerprintC6:95:70:F7:D6:25:46:2B:9F:7D:35:31:B3:A2:59:37:9A:7C:A5:4D
ValidityTue, 28 Nov 2023 10:43:09 GMT - Mon, 26 Feb 2024 10:43:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=3399&rd=3399&fd=785&bv=23.11.v.8&tmpl=136 HTTP/1.1
Host: awaydefinitecreature.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 22:24:59 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
d24ak3f2b.top/advertisers.js
200 OK 0 B URL GET HTTP/1.1 d24ak3f2b.top/advertisers.js
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectd24ak3f2b.top
Fingerprint76:D5:24:1B:A8:CE:2C:17:B2:A3:BE:F9:7D:7D:66:17:B1:4A:EE:E1
ValiditySun, 12 Nov 2023 06:24:10 GMT - Sat, 10 Feb 2024 06:24:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /advertisers.js HTTP/1.1
Host: d24ak3f2b.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 22:24:59 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
friendshipmale.com/sfp.js
200 OK 28 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 22:24:58 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: de6b83c73df0d03eaebf7a29a27379da
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 22:24:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=apr%2Fjq1NQ1Y0Wxo8yLW8pkiQMJ9aFSTmkYZAHFwPOQ4krrBKy0QL4IhM4vJkOTQaAWdcQDaKI1pIpM%2BmnoKlnN9HT6U9nrDEwfGK8s3iVN23pzzoIeukxr%2FE8FeZ6hLEC3OvTxc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eebe4ea97b7200-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 128 kB URL GET HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2725)
Size 128 kB (128094 bytes)
Hash 865fefbe42a3df73ca64198c337b20e6
cd1304165333f9fc26d2aa716a4c50c8ce99fbae
4a32283aaba0418ac1b0953af32fbe71948d43e7cdc08abeca552a9373809087
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128094
date: Fri, 01 Dec 2023 22:24:59 GMT
expires: Fri, 01 Dec 2023 22:24:59 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pkovhv3.vkcdn5.com/olaxkkjythuiolyobgjkdu3imx3huzthzvwsqbupr4tox2tjjbmk5j3rqbtq/v.mp4
0 B URL GET pkovhv3.vkcdn5.com/olaxkkjythuiolyobgjkdu3imx3huzthzvwsqbupr4tox2tjjbmk5j3rqbtq/v.mp4
IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerGlobalSign nv-sa
Subject*.vkcdn5.com
Fingerprint01:F2:CB:EE:8C:B4:29:8E:98:5F:46:F1:6E:7B:BC:28:92:67:7A:E9
ValiditySat, 18 Feb 2023 18:21:30 GMT - Thu, 21 Mar 2024 18:21:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /olaxkkjythuiolyobgjkdu3imx3huzthzvwsqbupr4tox2tjjbmk5j3rqbtq/v.mp4 HTTP/1.1
Host: pkovhv3.vkcdn5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Server: nginx
Date: Fri, 01 Dec 2023 22:24:58 GMT
Content-Type: video/mp4
Content-Length: 1332938485
Last-Modified: Fri, 01 Dec 2023 13:01:36 GMT
Connection: keep-alive
ETag: "6569d930-4f7306f5"
Content-Range: bytes 0-1332938484/1332938485
pkembed.com/favicon.ico
200 OK 1.0 kB IP
Requested by https://pkembed.com/c5govhtdznol.html
Certificate IssuerLet's Encrypt
Subjectpkembed.com
Fingerprint07:9D:E4:83:87:75:37:03:4E:14:AC:2F:3F:60:7A:A7:C3:83:B6:93
ValidityTue, 07 Nov 2023 18:47:02 GMT - Mon, 05 Feb 2024 18:47:01 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 16x16, components 3\012- data
Hash 624da2cabf38f35c1c4b44da90baecec
f9d4947c39eb830a8c0198d564a4d942767b874a
5c8432b491584e8c3641d2a6e52bdbd0f700bc488ce2ab19c2a0117cdd2bffac
GET /favicon.ico HTTP/1.1
Host: pkembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pkembed.com/c5govhtdznol.html
Cookie: lang=1; file_id=61807; aff=5; ppu_show_on_02a5fe71f9003febd18ad77adabff1cd=1; _ga_9THL6SCR56=GS1.1.1701469502.1.0.1701469502.0.0.0; _ga=GA1.1.689484102.1701469502; ppu_main_02a5fe71f9003febd18ad77adabff1cd=1; ppu_exp_02a5fe71f9003febd18ad77adabff1cd=1701473102267; dom3ic8zudi28v8lr6fgphwffqoz0j6c=26115d89-9a58-460e-bfad-d1a0de6cb512%3A2%3A1; sb_main_c603d6719a1162bfdef68ba94653110b=1; sb_idelay_c603d6719a1162bfdef68ba94653110b=1; pp_main_dd8fd614024ac4d119dc75e1bc3c3b0c=1; pp_idelay_dd8fd614024ac4d119dc75e1bc3c3b0c=1; pp_main_68a2b7224a7225b170a88b9ac0e556bd=1; pp_idelay_68a2b7224a7225b170a88b9ac0e556bd=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:24:59 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Last-Modified: Tue, 19 Apr 2016 23:07:03 GMT
ETag: "3ea-530de890173c0"
Accept-Ranges: bytes
Content-Length: 1002
Content-Type: image/vnd.microsoft.icon
Set-Cookie: LB=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
80.209.253.41
142.250.74.74
146.59.12.18
18.157.203.0
0.0.0.0
0.0.0.0