| anonzip.com/1QSd/KoboldKare.zip |  135.181.248.190 | 200 OK | 4.6 kB |
URL User Request GET HTTP/1.1anonzip.com/1QSd/KoboldKare.zip IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash4bffe63e688e8bac378d304b30fe1e64 f89d325b3d5b823b98c3143512c5bd8142c2cf04 5a5692aad955844f1e6ced315d4daddf8f28262275c1519d52610658b55e96a8
GET /1QSd/KoboldKare.zip HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4; expires=Sun, 05-May-2024 21:50:04 GMT; Max-Age=86400; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, no-cache, private
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Encoding: gzip
|
|
| anonzip.com/themes/spirit/assets/frontend/css/bootstrap.min.css | 135.181.248.190 | 200 OK | 77 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/bootstrap.min.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with very long lines (65319), with CRLF line terminators Hash9b67b9ffbfcbe226a8c413fa740fd91c 7837bd0c312897e46311aaf472947f3e23d75df2 2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 76922
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-12c7a"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/stack-interface.css | 135.181.248.190 | 200 OK | 3.2 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/stack-interface.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash4541b29b6040bc31b760f98e914fd1d7 0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba 6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 3160
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-c58"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/jquery.steps.css | 135.181.248.190 | 200 OK | 6.0 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/jquery.steps.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Hash25cfe48e07622a00154b677afcbaeb47 23e3ae1bd04ad1d00d25d30e39815104ceeae52f 709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 6019
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1783"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/socicon.css | 135.181.248.190 | 200 OK | 9.8 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/socicon.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Hash910a42ce112991b31b30a735f1006a5f 6c8b4769270f1c86bb1c7a6b54325465395ba614 010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 9838
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-266e"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/lightbox.min.css | 135.181.248.190 | 200 OK | 3.9 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/lightbox.min.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Hash30265c8089a8f3e871d0873ef6a5b944 2804a2fe5a6a956626ce6a46adf6b1a0676ee13d f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 3889
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-f31"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/flickity.css | 135.181.248.190 | 200 OK | 2.5 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/flickity.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Hash244d315064064270eabbbb7ac9f6c700 21ad53d3efbb40154293190173ee0c497ed7651c ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 2521
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-9d9"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/cookiealert.css | 135.181.248.190 | 200 OK | 12 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/cookiealert.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with very long lines (11486), with CRLF line terminators Hash3d2946aeae3cc8f43e2acf82ea029bd4 c25a0bd445ff9e6034d34e8f388f5565515a2783 705d9fc8952ac3bf3d9300e3d9ea6753284cdd920c34be0213ec8bc862df7a28
GET /themes/spirit/assets/frontend/css/cookiealert.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 12369
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-3051"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/custom.css | 135.181.248.190 | 200 OK | 8.9 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/custom.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeassembler source, ASCII text, with CRLF line terminators Hash65417cde74809cb9b9e66d0ab4adc448 9729ccac013729aed790fdc25d71d858f50a137b c8dee41785c1f45859a70f3bb9a65b3cba83d866dd46ca0096d07067fec9d280
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 8936
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-22e8"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/theme.css | 135.181.248.190 | 200 OK | 206 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/theme.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeassembler source, ASCII text, with CRLF line terminators Size206 kB (206456 bytes) Hashe13b70f9d6654b3656aec5b1bd5ae02a 903010ac4b9034f6839847a20ecd0f5a728b2b96 8a10549eed29cff62aa0098311b5c1c37601577a11de64f72095aacb90715c8a
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 206456
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-32678"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js | 135.181.248.190 | 200 OK | 87 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators Hash5b5a269bd363e0886c17d855c2aab241 042dd055cd289215835a58507c9531f808e1648a 1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 86713
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-152b9"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/theme/charcoal.css | 135.181.248.190 | 200 OK | 206 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/theme/charcoal.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeassembler source, ASCII text, with CRLF line terminators Size206 kB (206493 bytes) Hash08f6281c909985fb24a5e3ad2be6753a 3a2f1161f8aea5fab0f54b64f43f293d9f1316c3 dbe98b73866341078c596a42b87af67c03a79cf591d02467842939ce0848a55d
GET /themes/spirit/assets/frontend/css/theme/charcoal.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 206493
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-3269d"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/font-awesome.min.css | 135.181.248.190 | 200 OK | 59 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/font-awesome.min.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with very long lines (58929), with CRLF line terminators Hash879812fc22af75aa3ae7b5666ca4f4b8 df27469a952b7ee36cc03db471c6198f577186a8 c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 59119
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-e6ef"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/jquery.dataTables.min.js | 135.181.248.190 | 200 OK | 70 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/jquery.dataTables.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (768), with CRLF line terminators Hash6fda19caa29287e6f584f0557fdeb6d4 40f58160090cd1f022704ee1352b343adb9e73b9 8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 69754
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1107a"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/flickity.min.js | 135.181.248.190 | 200 OK | 54 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/flickity.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators Hash8c1e666176ac7bdce67d58b45823ffac 75947e4316427ce0c5e33300aeb4dc4d7d54dd09 c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 53873
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-d271"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/typed.min.js | 135.181.248.190 | 200 OK | 3.9 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/typed.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3949), with no line terminators Hash2f6185a8a32a50b2b3e04849f44359d4 0e5501588c5c0d1c9462f34b0d56c21abff5bfef 914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 3949
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-f6d"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/datepicker.js | 135.181.248.190 | 200 OK | 21 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/datepicker.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators Hash8cfe207a6a21c7495cfb751c761217a6 35d686a6c4ecc9946c35444ce93e110cb0e1611c 804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 20975
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-51ef"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/granim.min.js | 135.181.248.190 | 200 OK | 11 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/granim.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators Hash714368d20c70f8c91b0a596e128dac07 563954ec3a896fc129d014f01836245829f6d01d e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 10635
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-298b"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/jquery.steps.min.js | 135.181.248.190 | 200 OK | 14 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/jquery.steps.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators Hash0eef6fe46d14f860d5666d2c7b13a564 7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe 95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 13862
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-3626"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/countdown.min.js | 135.181.248.190 | 200 OK | 5.4 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/countdown.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators Hash76a923d3d69255c45cd24bf9b100244f eb3c96f9901692f1a03500ea632963a16afdb985 8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 5360
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-14f0"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/smooth-scroll.min.js | 135.181.248.190 | 200 OK | 6.0 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/smooth-scroll.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators Hashc9e3a210d83398f301b3a7049c259676 8e227bb40fe120841829a7fef0ffeb091d179a91 aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 6028
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-178c"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/iconsmind.css | 135.181.248.190 | 200 OK | 103 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/iconsmind.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Size103 kB (102727 bytes) Hashc9b1c618a7b12bd7ecf6034164b29164 f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99 fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: text/css
Content-Length: 102727
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-19147"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/scripts.js | 135.181.248.190 | 200 OK | 115 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/scripts.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (914), with CRLF line terminators Size115 kB (114862 bytes) Hashce260d2170faf98639ab8e0e3758f1e2 32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 114862
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1c0ae"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/cookiealert.js | 135.181.248.190 | 200 OK | 1.8 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/cookiealert.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash81279e22c8ece9e1d0536a402484daa3 911797507fb12d4f451d5900e32db96ad697c401 5c6237178e88ab7f1c6e26c9e99547e58782450b8f2a182129448ff4d99e89ab
GET /themes/spirit/assets/frontend/js/cookiealert.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/javascript
Content-Length: 1836
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-72c"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/images/logo/logo-whitebg.png | 135.181.248.190 | 200 OK | 6.2 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/images/logo/logo-whitebg.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 588 x 94, 8-bit colormap, non-interlaced Hash6c1e20bb65960360a6d1782e017c9314 d864c40dbd565e934fddeea36938456d6a26982c fafe927a322a36285028582aa429b7c47877cad76d2783d2b6ba3155e66bf9c6
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: image/png
Content-Length: 6221
Last-Modified: Sun, 04 Feb 2024 12:00:04 GMT
Connection: keep-alive
ETag: "65bf7c44-184d"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/images/logo/logo.png | 135.181.248.190 | 200 OK | 6.2 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/images/logo/logo.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 588 x 94, 8-bit colormap, non-interlaced Hashecb7f5dbe1eee9fcc3d5839f7d2bb2fb 59c65d814622d7ea901cd367b4114cea05fdf1b9 d53d70c5ee49ccc36c86eca632815e1eb254786c4041b228196bb8c0cb635b20
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: image/png
Content-Length: 6204
Last-Modified: Sun, 04 Feb 2024 11:52:58 GMT
Connection: keep-alive
ETag: "65bf7a9a-183c"
Accept-Ranges: bytes
|
|
| www.googletagmanager.com/gtag/js?id=G-GWR0PX9LQC |  142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-GWR0PX9LQC IP142.250.74.168:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (101607 bytes) Hashb4e2d49d25d1340086c96cfd73470ae7 c3904ae4fcd7aa0a5b2a71b46ea78d4a56320dba a8bdb65d9c6099d045ea148d3df3167da51802dfbc7a0ed5ae1bff742783f34e
GET /gtag/js?id=G-GWR0PX9LQC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 21:50:05 GMT
expires: Sat, 04 May 2024 21:50:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101607
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| anonzip.com/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 | 135.181.248.190 | 200 OK | 4.3 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 4292, version 1.0 Hashae072782b361d2afdbf43db08d3cfb73 f3db2e65b53d97491672f8631e21d6d05905cc88 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/themes/spirit/assets/frontend/css/stack-interface.css
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/octet-stream
Content-Length: 4292
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-10c4"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 | 135.181.248.190 | 200 OK | 80 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/themes/spirit/assets/frontend/css/font-awesome.min.css
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:05 GMT
Content-Type: application/octet-stream
Content-Length: 80148
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-13914"
Accept-Ranges: bytes
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 242105
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 242105
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.106 | 200 OK | 20 kB |
URL GET HTTP/2fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash6a2c165181d681dccfa9a90950474429 9823369bdbdc920a89e7fd50d99d52f193ccbeca ad3127159167d9367b8c1c7b10de8f62aadf94077d336151da8ef9c219ae598a
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 21:50:05 GMT
date: Sat, 04 May 2024 21:50:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 242105
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 242105
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 242105
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16516, version 1.0 Hash02ea59496b25ec14db0cd442451bf9f7 4266d37e1db030954b04cd1cf3ec06591d75fcab dc0387c80ff53df47ca7ec19db75224fdb90a230f6cb06605563590b9791bf95
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16516
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:16:47 GMT
expires: Fri, 02 May 2025 19:16:47 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:02:21 GMT
content-type: font/woff2
age: 181999
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| anonzip.com/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png | 135.181.248.190 | 200 OK | 5.0 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hasha9a8c24cea41bed7ef78ed1d12d48291 cd86d71e15b97ab602e0e39bb6e9bbaf6779f4d7 3b379c83d1c0b117cec88debed9390723daffc2fb99cf51cc2175c47169d190e
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4; _ga_GWR0PX9LQC=GS1.1.1714859406.1.0.1714859406.0.0.0; _ga=GA1.1.60588354.1714859406
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:06 GMT
Content-Type: image/png
Content-Length: 5016
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1398"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png | 135.181.248.190 | 200 OK | 447 B |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hashf3d5da06fe8d5a2425d5d229285e5eea 01032b864f3c74bbf44771e2ba41eeb2251fad90 d11d596429d3543bfb07191a87a67a8c22e198113c6f3a109158a5a85bf82f26
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/1QSd/KoboldKare.zip
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4; _ga_GWR0PX9LQC=GS1.1.1714859406.1.0.1714859406.0.0.0; _ga=GA1.1.60588354.1714859406
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:06 GMT
Content-Type: image/png
Content-Length: 447
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1bf"
Accept-Ranges: bytes
|
|
| alwingulla.com/88/tag.min.js |  188.114.97.1 | 200 OK | 25 kB |
URL GET HTTP/2alwingulla.com/88/tag.min.js IP188.114.97.1:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subjectalwingulla.com FingerprintB6:A3:BD:4F:5E:0D:58:50:07:9D:17:E0:30:97:67:97:9E:23:1A:1C ValidityTue, 12 Mar 2024 16:48:22 GMT - Mon, 10 Jun 2024 16:48:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65494) Hashd8fe6d8977be78f78ee48c068b8c8686 e9c96bfc9bcd374f528f73c0441c2358d6d1d135 43423a879e310562ceed423aa563f4fac45713e6f59b0517d897e2c96a42993b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /88/tag.min.js HTTP/1.1
Host: alwingulla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:50:05 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 65b8c3cbc8623c596934e33f2d2c966e
cache-control: max-age=86400
last-modified: Fri, 03 May 2024 05:52:08 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Sun, 05 May 2024 16:52:23 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 17862
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWqaQOSHKDqgPAH3QUrZ2ecvHjZFc4QwMQKRCUn819HmeF7dcJKzJTKbKERfg%2FTJYCYj6GOrczEWe7qOlyelWur8WN3pAhyClFXywehbmmj6w5RxWwlZ22pC18Xj%2B6dUfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebb453afe3b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/tag.min.js?z=7406592 |  139.45.197.250 | 200 OK | 7.1 kB |
URL GET HTTP/2moonoafy.net/pfe/current/tag.min.js?z=7406592 IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typegzip compressed data, max speed, from Unix Hash3f2dc6d6832a9d384db85e987d1f16c8 1bea33d38719f75abbe08247648d81321bc20051 8625e016d128f8b432b694c859f026fd8101d1ad06a3bcb444f886f6d5b76e19
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/tag.min.js?z=7406592 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:53 GMT
etag: W/"662a3515-3914"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| anonzip.com/sw.js | 135.181.248.190 | 200 OK | 5.2 kB |
IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (5235) Hashf3da3a180b9fcc93796c2e0064f80439 d3155e90b8bb0ccd2db019fa66beebf3f28d9116 2cfd12766505422ce33dad30985158e425f686a6a4e18d8a44e67b7c1af9451f
GET /sw.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/1QSd/KoboldKare.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=sv9acln3sa5ep1dbeuha9p8sb4; _ga_GWR0PX9LQC=GS1.1.1714859406.1.0.1714859406.0.0.0; _ga=GA1.1.60588354.1714859406; prefetchAd_7406588=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 May 2024 21:50:06 GMT
Content-Type: application/javascript
Content-Length: 5236
Last-Modified: Sun, 28 Apr 2024 12:25:27 GMT
Connection: keep-alive
ETag: "662e4037-1474"
Accept-Ranges: bytes
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Content-Type: application/json
Content-Length: 378
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: b692986fa37b2ae82ba3048abd8d7ace
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Content-Type: application/json
Content-Length: 755
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 82e9db3b61ad119f9e4a806736dfaab7
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| cameesse.net/9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080529ddd2f4995f3531481a84829b0 | 139.45.197.242 | 200 OK | 0 B |
URL POST HTTP/2cameesse.net/9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080529ddd2f4995f3531481a84829b0 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080529ddd2f4995f3531481a84829b0 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hash8cf7534cb2d9aa0bde7e0e5583c9f26a eeeaf906d65228fad3451fc0a41ee8427d36c92a 3d0ceda302daf40e214ba16bed5542a1b2a7359483ce74eafafcb8963b188722
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Content-Type: application/json
Content-Length: 515
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=7fbeea0c-ee6e-421a-b76e-740728a2a71d | 139.45.195.254 | 200 OK | 12 B |
URL POST HTTP/1.1fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=7fbeea0c-ee6e-421a-b76e-740728a2a71d IP139.45.195.254:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerSectigo Limited Subjectfleraprt.com Fingerprint32:DB:C5:24:21:ED:1D:C3:40:C3:46:9F:CF:EE:98:4D:72:29:4C:3C ValidityTue, 09 Jan 2024 00:00:00 GMT - Mon, 13 Jan 2025 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=7fbeea0c-ee6e-421a-b76e-740728a2a71d HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1749
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sat, 04 May 2024 21:50:06 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://anonzip.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Content-Type: application/json
Content-Length: 387
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 317a5fa9283cf9f2b79956b92eb6e32f
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=1404277796&z=7406590&b=20554763&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=JwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg==&ruid=fa47b6d6-3b02-43f9-b5b0-50389524df26&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=72 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2cameesse.net/11?rnd=1404277796&z=7406590&b=20554763&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=JwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg==&ruid=fa47b6d6-3b02-43f9-b5b0-50389524df26&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=72 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=1404277796&z=7406590&b=20554763&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=JwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg==&ruid=fa47b6d6-3b02-43f9-b5b0-50389524df26&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=72 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080529ddd2f4995f3531481a84829b0; oaidts=1714859406
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: fd9ea7ee8320024d48b539d4cf1a6386
access-control-expose-headers: X-Sc
set-cookie: OAID=0080529ddd2f4995f3531481a84829b0; expires=Sun, 04 May 2025 21:50:06 GMT; secure; SameSite=None
oaidts=1714859406; expires=Sun, 04 May 2025 21:50:06 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| aistekso.net/500/7406591?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 0 B |
URL OPTIONS HTTP/2aistekso.net/500/7406591?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7406591?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| veepteero.com/?rb=5pH9TSFmFlfKt6NKhhyZZgye69N0Avri6caqXGg344aS82Eep0rdxH_o9Vea6lzXr9wY4kNrngNYn6azwW9GZIRzEMxkuPFfDYpk0V1je0XkyOD7NHQGUZl4JlwvokonrpvrWUIiYw2USseHs7pPyFHeXURZz_09b4GGEgwWtBjpn4Sy1E3wpzeH2oawn55o7U3gRDA_9ROyxP5gYE63myBFDhN8sVC5mDHSFpnOO4vUxivQ7Kic3AQ_uyWiyWk_KOmJUg%3D%3D&request_ab2=0&zoneid=7406588&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=aa4b68c2-773e-4362-ba38-b0735d56283a&wasm=1&userId=0080529ddd2f4995f3531481a84829b0&m=link | 139.45.197.242 | 200 OK | 1.9 kB |
URL GET HTTP/2veepteero.com/?rb=5pH9TSFmFlfKt6NKhhyZZgye69N0Avri6caqXGg344aS82Eep0rdxH_o9Vea6lzXr9wY4kNrngNYn6azwW9GZIRzEMxkuPFfDYpk0V1je0XkyOD7NHQGUZl4JlwvokonrpvrWUIiYw2USseHs7pPyFHeXURZz_09b4GGEgwWtBjpn4Sy1E3wpzeH2oawn55o7U3gRDA_9ROyxP5gYE63myBFDhN8sVC5mDHSFpnOO4vUxivQ7Kic3AQ_uyWiyWk_KOmJUg%3D%3D&request_ab2=0&zoneid=7406588&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=aa4b68c2-773e-4362-ba38-b0735d56283a&wasm=1&userId=0080529ddd2f4995f3531481a84829b0&m=link IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectveepteero.com Fingerprint13:68:56:48:EC:67:A6:93:BE:E0:36:BC:FA:04:75:6D:6E:D2:C1:91 ValiditySat, 23 Mar 2024 05:18:36 GMT - Fri, 21 Jun 2024 05:18:35 GMT
Hashf4267b97748adbe927455f6f8299d603 526b862f7342a30b7aab7f59695e98330eaaad3c db40a591c5f4e085ec259460312486e5dacef984770a3171d057df26bb8f8976
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=5pH9TSFmFlfKt6NKhhyZZgye69N0Avri6caqXGg344aS82Eep0rdxH_o9Vea6lzXr9wY4kNrngNYn6azwW9GZIRzEMxkuPFfDYpk0V1je0XkyOD7NHQGUZl4JlwvokonrpvrWUIiYw2USseHs7pPyFHeXURZz_09b4GGEgwWtBjpn4Sy1E3wpzeH2oawn55o7U3gRDA_9ROyxP5gYE63myBFDhN8sVC5mDHSFpnOO4vUxivQ7Kic3AQ_uyWiyWk_KOmJUg%3D%3D&request_ab2=0&zoneid=7406588&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=aa4b68c2-773e-4362-ba38-b0735d56283a&wasm=1&userId=0080529ddd2f4995f3531481a84829b0&m=link HTTP/1.1
Host: veepteero.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json
x-trace-id: c24f96d78b277161588c0eb5452e4010
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080529ddd2f4995f3531481a84829b0; expires=Sun, 04 May 2025 21:50:06 GMT; path=/; secure; SameSite=None
oaidts=1714859406; expires=Sun, 04 May 2025 21:50:06 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 11 May 2024 21:50:06 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg | 172.67.22.216 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP172.67.22.216:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:50:07 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Sun, 05 May 2024 20:13:21 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 5806
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebb45e4b0156b5-OSL
X-Firefox-Spdy: h2
|
|
| interbuzznews.com/contents/s/bf/d7/2e/f40596a5c0a0afe0b2e8054b51/0113074669598.jpeg | 139.45.197.154 | 200 OK | 22 kB |
URL GET HTTP/2interbuzznews.com/contents/s/bf/d7/2e/f40596a5c0a0afe0b2e8054b51/0113074669598.jpeg IP139.45.197.154:443
Requested byhttps://interbuzznews.com/?l=FjRUkS19wUvwzxr&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D774591035%26z%3D7406590%26b%3D20554763%26c%3D8014413%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D2265%2526key%253Dae7c6e37acb2af365375447fdcbca2a0%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DJwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg%3D%3D%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3Dfa47b6d6-3b02-43f9-b5b0-50389524df26%26ng%3D0%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonzip.com%252F1QSd%252FKoboldKare.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 CertificateIssuerLet's Encrypt Subjectinterbuzznews.com Fingerprint68:C3:B4:C2:C5:45:68:EC:5F:B6:2A:10:57:7A:F8:2B:94:11:B7:F0 ValidityThu, 29 Feb 2024 05:14:58 GMT - Wed, 29 May 2024 05:14:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 256x256, components 3 Hashbfd72ef40596a5c0a0afe0b2e8054b51 9518ad2600d190604424224565eecf22b2af3c10 613615ef6e488dfacadb4b3c9c97687cb562befe5b120b4e766d593a496672a5
GET /contents/s/bf/d7/2e/f40596a5c0a0afe0b2e8054b51/0113074669598.jpeg HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/?l=FjRUkS19wUvwzxr&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D774591035%26z%3D7406590%26b%3D20554763%26c%3D8014413%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D2265%2526key%253Dae7c6e37acb2af365375447fdcbca2a0%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DJwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg%3D%3D%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3Dfa47b6d6-3b02-43f9-b5b0-50389524df26%26ng%3D0%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonzip.com%252F1QSd%252FKoboldKare.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:07 GMT
content-type: image/jpeg
content-length: 22120
last-modified: Tue, 28 Jun 2022 07:37:52 GMT
vary: Accept-Encoding
etag: "62baafd0-5668"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| interbuzznews.com/contents/s/f3/8b/e0/b625632c35fc2301ef77e261c4/0771829532841.jpeg | 139.45.197.154 | 200 OK | 55 kB |
URL GET HTTP/2interbuzznews.com/contents/s/f3/8b/e0/b625632c35fc2301ef77e261c4/0771829532841.jpeg IP139.45.197.154:443
Requested byhttps://interbuzznews.com/?l=FjRUkS19wUvwzxr&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D774591035%26z%3D7406590%26b%3D20554763%26c%3D8014413%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D2265%2526key%253Dae7c6e37acb2af365375447fdcbca2a0%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DJwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg%3D%3D%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3Dfa47b6d6-3b02-43f9-b5b0-50389524df26%26ng%3D0%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonzip.com%252F1QSd%252FKoboldKare.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 CertificateIssuerLet's Encrypt Subjectinterbuzznews.com Fingerprint68:C3:B4:C2:C5:45:68:EC:5F:B6:2A:10:57:7A:F8:2B:94:11:B7:F0 ValidityThu, 29 Feb 2024 05:14:58 GMT - Wed, 29 May 2024 05:14:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 492x328, components 3 Hashf38be0b625632c35fc2301ef77e261c4 41b93bf3cc7e30bb6283688a4b6336448cae8249 a98789c1832dc0616972f2cac4dc0f44001bea5020bab4087b457125ef758c60
GET /contents/s/f3/8b/e0/b625632c35fc2301ef77e261c4/0771829532841.jpeg HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/?l=FjRUkS19wUvwzxr&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D774591035%26z%3D7406590%26b%3D20554763%26c%3D8014413%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D2265%2526key%253Dae7c6e37acb2af365375447fdcbca2a0%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DJwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg%3D%3D%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3Dfa47b6d6-3b02-43f9-b5b0-50389524df26%26ng%3D0%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonzip.com%252F1QSd%252FKoboldKare.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:07 GMT
content-type: image/jpeg
content-length: 54692
last-modified: Fri, 24 Jun 2022 08:16:52 GMT
vary: Accept-Encoding
etag: "62b572f4-d5a4"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| interbuzznews.com/?l=FjRUkS19wUvwzxr&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D774591035%26z%3D7406590%26b%3D20554763%26c%3D8014413%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D2265%2526key%253Dae7c6e37acb2af365375447fdcbca2a0%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DJwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg%3D%3D%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3Dfa47b6d6-3b02-43f9-b5b0-50389524df26%26ng%3D0%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonzip.com%252F1QSd%252FKoboldKare.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 | 139.45.197.154 | 200 OK | 2.6 kB |
URL GET HTTP/2interbuzznews.com/?l=FjRUkS19wUvwzxr&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D774591035%26z%3D7406590%26b%3D20554763%26c%3D8014413%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D2265%2526key%253Dae7c6e37acb2af365375447fdcbca2a0%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DJwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg%3D%3D%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3Dfa47b6d6-3b02-43f9-b5b0-50389524df26%26ng%3D0%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonzip.com%252F1QSd%252FKoboldKare.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 IP139.45.197.154:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectinterbuzznews.com Fingerprint68:C3:B4:C2:C5:45:68:EC:5F:B6:2A:10:57:7A:F8:2B:94:11:B7:F0 ValidityThu, 29 Feb 2024 05:14:58 GMT - Wed, 29 May 2024 05:14:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1472) Hash8afb7972860ce335151b3b9fd33512f9 31fff9fcbef22ca6d50d78b10cc7e1f1268145fc 5f3d29f09a331e0c7c584b5eec850de3d9952538afea76d0270a39ada4eda730
GET /?l=FjRUkS19wUvwzxr&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D774591035%26z%3D7406590%26b%3D20554763%26c%3D8014413%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D2265%2526key%253Dae7c6e37acb2af365375447fdcbca2a0%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DJwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg%3D%3D%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3Dfa47b6d6-3b02-43f9-b5b0-50389524df26%26ng%3D0%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonzip.com%252F1QSd%252FKoboldKare.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
set-cookie: reverse=4Ql_zxpMHx2ACvQ3sosKH2gkBGxeH51SwjlGcVkHeW0; expires=Sat, 04-May-2024 22:50:07 GMT; Max-Age=3600; path=/
OAID=27c54bfa142e82d470115879e5296139; expires=Wed, 06-Sep-2079 19:40:14 GMT; Max-Age=1746395407; path=/
oaidts=1714859407; expires=Wed, 06-Sep-2079 19:40:14 GMT; Max-Age=1746395407; path=/
syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/BAzI7LWaj99gy4qGbtusJzCzN4PMg7g4nxDgkFp6OcZxqrfnhughY0Zq1bIlLTFgeYIuTSke4wvYSQqx9B4ih54WARau0fi99DHbZjsKk9NLiDQhb6ixkKECO3n_qGIfbUex83ADeZ_svGk_Fl7coC3U4-LgiTWCI5j42Fws2A8odeidQwINPp5RzR-3Qqh9raApn21xCLSbT5cQl-dOkl5ywE90pOeKKEPoGlbhWlRrWX3UImlOxNPAJCgwEmq6FkPxPhfIbE2MYEOq5fKOtKlb9pZqe0QX_PGLTch-SJ4Q14R4_DLLxpIJ5p47NiueDSsDk0jqa51jdKN_GUjaHFFEoYs0Dghqc_8LNDAPvKSO6UF65J-NEYkIfJkGBtz223lMNEzsYW1kkVjb1sBmKzEbsVFwQFnycXdu7exlldSBzs1wIOC6BSrhuISRXkJERECElFMFfdn0NJcOyHV-jwC2eaJs5hS0cp6_kuBomG5NXGCn2-jtV90cQrTQ_LkQ7D1IyaSe8TMONCagxzHfWRZX75Xk9rj0JXwIz3KHYwyBH9sA8x1WAV2H6n74veRSjs2HqbN2Y16DdUOcXL25w8HNdz_aPpLTgPcnpiMMR0aHdWY_p--XbLKj0PmvsqVtdSjGgyDCK45yzBV8E7aU1H6Lq5xXquSDi7WljX-MlWeuZYBHGLmJ0-4TwpBaIDyi9Win-leUqP8RsYVVVxj9LtzckuJOKO_oukXS1CJfeTY5AW9Ju5nR7yJABXKnUZAyiFZTFnQ1djlTZUxKy_SqJ8Nyxmo_J6isVSzzQkAfRswjp9CnuSlPRpTjnIw=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/BAzI7LWaj99gy4qGbtusJzCzN4PMg7g4nxDgkFp6OcZxqrfnhughY0Zq1bIlLTFgeYIuTSke4wvYSQqx9B4ih54WARau0fi99DHbZjsKk9NLiDQhb6ixkKECO3n_qGIfbUex83ADeZ_svGk_Fl7coC3U4-LgiTWCI5j42Fws2A8odeidQwINPp5RzR-3Qqh9raApn21xCLSbT5cQl-dOkl5ywE90pOeKKEPoGlbhWlRrWX3UImlOxNPAJCgwEmq6FkPxPhfIbE2MYEOq5fKOtKlb9pZqe0QX_PGLTch-SJ4Q14R4_DLLxpIJ5p47NiueDSsDk0jqa51jdKN_GUjaHFFEoYs0Dghqc_8LNDAPvKSO6UF65J-NEYkIfJkGBtz223lMNEzsYW1kkVjb1sBmKzEbsVFwQFnycXdu7exlldSBzs1wIOC6BSrhuISRXkJERECElFMFfdn0NJcOyHV-jwC2eaJs5hS0cp6_kuBomG5NXGCn2-jtV90cQrTQ_LkQ7D1IyaSe8TMONCagxzHfWRZX75Xk9rj0JXwIz3KHYwyBH9sA8x1WAV2H6n74veRSjs2HqbN2Y16DdUOcXL25w8HNdz_aPpLTgPcnpiMMR0aHdWY_p--XbLKj0PmvsqVtdSjGgyDCK45yzBV8E7aU1H6Lq5xXquSDi7WljX-MlWeuZYBHGLmJ0-4TwpBaIDyi9Win-leUqP8RsYVVVxj9LtzckuJOKO_oukXS1CJfeTY5AW9Ju5nR7yJABXKnUZAyiFZTFnQ1djlTZUxKy_SqJ8Nyxmo_J6isVSzzQkAfRswjp9CnuSlPRpTjnIw=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/BAzI7LWaj99gy4qGbtusJzCzN4PMg7g4nxDgkFp6OcZxqrfnhughY0Zq1bIlLTFgeYIuTSke4wvYSQqx9B4ih54WARau0fi99DHbZjsKk9NLiDQhb6ixkKECO3n_qGIfbUex83ADeZ_svGk_Fl7coC3U4-LgiTWCI5j42Fws2A8odeidQwINPp5RzR-3Qqh9raApn21xCLSbT5cQl-dOkl5ywE90pOeKKEPoGlbhWlRrWX3UImlOxNPAJCgwEmq6FkPxPhfIbE2MYEOq5fKOtKlb9pZqe0QX_PGLTch-SJ4Q14R4_DLLxpIJ5p47NiueDSsDk0jqa51jdKN_GUjaHFFEoYs0Dghqc_8LNDAPvKSO6UF65J-NEYkIfJkGBtz223lMNEzsYW1kkVjb1sBmKzEbsVFwQFnycXdu7exlldSBzs1wIOC6BSrhuISRXkJERECElFMFfdn0NJcOyHV-jwC2eaJs5hS0cp6_kuBomG5NXGCn2-jtV90cQrTQ_LkQ7D1IyaSe8TMONCagxzHfWRZX75Xk9rj0JXwIz3KHYwyBH9sA8x1WAV2H6n74veRSjs2HqbN2Y16DdUOcXL25w8HNdz_aPpLTgPcnpiMMR0aHdWY_p--XbLKj0PmvsqVtdSjGgyDCK45yzBV8E7aU1H6Lq5xXquSDi7WljX-MlWeuZYBHGLmJ0-4TwpBaIDyi9Win-leUqP8RsYVVVxj9LtzckuJOKO_oukXS1CJfeTY5AW9Ju5nR7yJABXKnUZAyiFZTFnQ1djlTZUxKy_SqJ8Nyxmo_J6isVSzzQkAfRswjp9CnuSlPRpTjnIw=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080529ddd2f4995f3531481a84829b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:11 GMT
content-type: image/gif
content-length: 43
x-trace-id: d287401ddbb7ef4b8540a1534545acbb
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=19845928&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL OPTIONS HTTP/2gishejuy.com/500/7406589?excludes=19845928&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7406589?excludes=19845928&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:11 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg | 172.67.22.216 | 200 OK | 19 kB |
URL GET HTTP/2offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg IP172.67.22.216:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash71581bf2ce9a00138faf7dd80fe3e12e 56479135ed64bf23e1037067c0c87047eb8a414c 5d9f95c8c06343cc189b38268296615ed8816d8154b4b782ad0d62bedd23525e
GET /www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 21:50:11 GMT
content-type: image/jpeg
content-length: 19381
cache-control: max-age=86400
cf-bgj: h2pri
etag: "65674405-4bb5"
expires: Sun, 05 May 2024 17:11:35 GMT
last-modified: Wed, 29 Nov 2023 14:00:37 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 16713
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebb47c8c4d56b5-OSL
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg | 172.67.22.216 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP172.67.22.216:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 21:50:12 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Sun, 05 May 2024 20:13:21 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 5811
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebb47d7d1156b5-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:55:00 GMT
expires: Fri, 02 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 244512
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a | 139.45.197.242 | 200 OK | 146 kB |
URL GET HTTP/2cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typegzip compressed data, max speed, from Unix Size146 kB (146325 bytes) Hash3b9fd1daa3ca24d2374f578fdf1ffc41 2e8e661fae407d55be949c368f1b2c18be26ae53 dcb6089931db3112317204f63019c3fe78fc494e2cf8e74f756e9498763a981b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /27/7552beb94fc0bdff7bbb33cad3d1ab0a HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=040052d14d9a48e8fbdee88934e3a600; oaidts=1714859406
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: f02ef0f9c2f86272fc1209a3c599e5b2
cache-control: max-age:290304000, public
last-modified: Tue, 09 Apr 2024 03:16:58 GMT
expires: Tue, 09 May 2084 03:16:58 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/hTeiVqfY9POVF1g4lpe_swMnTNWRom7A2SnbLQJ8mZS4rtUW59Lk8oAhAyfre-TeqwT-IxSrmtrJw2f7TUlWavM689Aq98YaA5HjkTS8_9JmLuAHMWVORcLRWxQIo_6qc49TFWPmzoWB56ThyYVzoFB3otIjFa7-KSFKMNADs_mQYW2h7l3NXGesfTpPXJ6wsm5JscqqNY9gqVJ03c3vqScbgRKffYZ1fyLHxSF2SYRJfSD19GRDSZK1Ick9HdyYvouvUt1nVbrcnpcGW1GAiTy9KEWWDcqiC9djCXgulLHU3PkfpGxnBM8NfJdZciZFiRIMPZRkHQMhdwX-4G0KcfJlfEcT2tiDTS9PglaD-EgQ4S7rPfJdPl_9V7B6hsBKjafM6lCs0BKDr0O_OplUrSJcis-b6fTQDBf-u3JfJWLOJxdPRKagmq8s_KmliXd9ZkIAh7tskNzDIODRfxrR7LqKCIey8Y-Iw1MM-sHlae5MghvbMOo8aE9TUhHyeq8Af1TX3WPeEtzhopWwP0qQ-Yh4oJDenX1wjkN2IowxN3Q1MhXyk7Xi2LZBZdwnErd4rRXiuh3Hvp3DIg6N09kRur403B5xXj0qIFt-QPTy-DJGCc5kMwkTW1gsr6su-0CVlTZNMX01tPaiFGMQHgCmFcONqS7nn6jnj-mbwcWbTFjF2B589yxria7es9wtt0p5zP-WdUJ9NxA1JDOozy11Uyp5XP2G8qXEjCcVqmxcflGsOkEhqcUQE45jUQcyeZz_688VZbmonPT7v014gb90nuwjoWRYi4Oa4bzC3YLZTpbdqIVc7lmnga2rDL0=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/hTeiVqfY9POVF1g4lpe_swMnTNWRom7A2SnbLQJ8mZS4rtUW59Lk8oAhAyfre-TeqwT-IxSrmtrJw2f7TUlWavM689Aq98YaA5HjkTS8_9JmLuAHMWVORcLRWxQIo_6qc49TFWPmzoWB56ThyYVzoFB3otIjFa7-KSFKMNADs_mQYW2h7l3NXGesfTpPXJ6wsm5JscqqNY9gqVJ03c3vqScbgRKffYZ1fyLHxSF2SYRJfSD19GRDSZK1Ick9HdyYvouvUt1nVbrcnpcGW1GAiTy9KEWWDcqiC9djCXgulLHU3PkfpGxnBM8NfJdZciZFiRIMPZRkHQMhdwX-4G0KcfJlfEcT2tiDTS9PglaD-EgQ4S7rPfJdPl_9V7B6hsBKjafM6lCs0BKDr0O_OplUrSJcis-b6fTQDBf-u3JfJWLOJxdPRKagmq8s_KmliXd9ZkIAh7tskNzDIODRfxrR7LqKCIey8Y-Iw1MM-sHlae5MghvbMOo8aE9TUhHyeq8Af1TX3WPeEtzhopWwP0qQ-Yh4oJDenX1wjkN2IowxN3Q1MhXyk7Xi2LZBZdwnErd4rRXiuh3Hvp3DIg6N09kRur403B5xXj0qIFt-QPTy-DJGCc5kMwkTW1gsr6su-0CVlTZNMX01tPaiFGMQHgCmFcONqS7nn6jnj-mbwcWbTFjF2B589yxria7es9wtt0p5zP-WdUJ9NxA1JDOozy11Uyp5XP2G8qXEjCcVqmxcflGsOkEhqcUQE45jUQcyeZz_688VZbmonPT7v014gb90nuwjoWRYi4Oa4bzC3YLZTpbdqIVc7lmnga2rDL0=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/hTeiVqfY9POVF1g4lpe_swMnTNWRom7A2SnbLQJ8mZS4rtUW59Lk8oAhAyfre-TeqwT-IxSrmtrJw2f7TUlWavM689Aq98YaA5HjkTS8_9JmLuAHMWVORcLRWxQIo_6qc49TFWPmzoWB56ThyYVzoFB3otIjFa7-KSFKMNADs_mQYW2h7l3NXGesfTpPXJ6wsm5JscqqNY9gqVJ03c3vqScbgRKffYZ1fyLHxSF2SYRJfSD19GRDSZK1Ick9HdyYvouvUt1nVbrcnpcGW1GAiTy9KEWWDcqiC9djCXgulLHU3PkfpGxnBM8NfJdZciZFiRIMPZRkHQMhdwX-4G0KcfJlfEcT2tiDTS9PglaD-EgQ4S7rPfJdPl_9V7B6hsBKjafM6lCs0BKDr0O_OplUrSJcis-b6fTQDBf-u3JfJWLOJxdPRKagmq8s_KmliXd9ZkIAh7tskNzDIODRfxrR7LqKCIey8Y-Iw1MM-sHlae5MghvbMOo8aE9TUhHyeq8Af1TX3WPeEtzhopWwP0qQ-Yh4oJDenX1wjkN2IowxN3Q1MhXyk7Xi2LZBZdwnErd4rRXiuh3Hvp3DIg6N09kRur403B5xXj0qIFt-QPTy-DJGCc5kMwkTW1gsr6su-0CVlTZNMX01tPaiFGMQHgCmFcONqS7nn6jnj-mbwcWbTFjF2B589yxria7es9wtt0p5zP-WdUJ9NxA1JDOozy11Uyp5XP2G8qXEjCcVqmxcflGsOkEhqcUQE45jUQcyeZz_688VZbmonPT7v014gb90nuwjoWRYi4Oa4bzC3YLZTpbdqIVc7lmnga2rDL0=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080529ddd2f4995f3531481a84829b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:14 GMT
content-type: image/gif
content-length: 43
x-trace-id: 3177f15b29ac2174c2e25bee80905370
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=19845928&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 7.7 kB |
URL OPTIONS HTTP/2gishejuy.com/500/7406589?excludes=19845928&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typegzip compressed data, max speed, from Unix Hash4743dd04fdf716e59f12ef8fd0f11710 054d95ef8eea7ea84fef3d4739a88edd21f2976c cc4c6d1ea5992b2519ab8fd86dc0f10fc2c7abeb76fe8e927516e6597e57b922
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7406589?excludes=19845928&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080529ddd2f4995f3531481a84829b0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:11 GMT
content-type: application/javascript
x-trace-id: 9d5ec2568da7a3a737ea2d55f60c2cb7
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://anonzip.com
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=0080529ddd2f4995f3531481a84829b0; expires=Sun, 04 May 2025 21:50:11 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=1404277796&z=7406590&b=20554763&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=JwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg==&ruid=fa47b6d6-3b02-43f9-b5b0-50389524df26&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2cameesse.net/11?rnd=1404277796&z=7406590&b=20554763&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=JwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg==&ruid=fa47b6d6-3b02-43f9-b5b0-50389524df26&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=1404277796&z=7406590&b=20554763&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=JwrQ9B7QejxvwT2TjU6Me5FhbBXf3iRSLEZ6s-eKqbL2OsjSZrb37rTmobfvxFcmDR8qPdB7Lv6IQJbMD05RIAyG30jnvuok93YaWHHM_rDhcbNHqnIkKy-VxmB63DnyfTnpYnbdXSWguVNc-sXKdl5LSKYYPD9ybpVFNkcOfScusZcOOnBug9EH4UAfg4cFMVVW9VeZr7ptWIELrQ05c94yUjTLcJZjFF_K_pCw0LFHQuxN-TaglpwUz-BSZa4FomNxVWaZN6ZfH7MPOtNciSCdtq_WSgUnrgwKXVZoGhYRxpldseh6kz63aDHSb_8EcqLQebUSsJuyeiOHX-EdOA62Vf5jIJiC29Lpnawgcqyv7dkwep18xETG3OTDn0R5MkH4ELuHjgryc6RJg4Lbqj-ak6deZQ01MeLQd_aYJZSW5AuFfXiVcZuAr2w8pplryB84iuP8WGTw2gQYTx_L1ZlYjQ5XTdVtJIxi_hJKXX3aX9uAfr9idwA30FiXua1UQslBRXSipnOA25qrEeQATG37C0TwkRY_CLR9UzKxrRzXx4aAtIwU1Wzc7uZ3Yta2PxPj6uHUZtUjZjsY_fUMbiCH2cVgzaif2eyojzmBGUZLNA0_Ti6hDPeKz3lmnufZiK4lliRtC3e9lzO4vHjDFErTxwreS5Ws37WBBg==&ruid=fa47b6d6-3b02-43f9-b5b0-50389524df26&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080529ddd2f4995f3531481a84829b0; oaidts=1714859406
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:26 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: f2e25fea2da4692f569a5d96d8b0d1f2
access-control-expose-headers: X-Sc
set-cookie: OAID=0080529ddd2f4995f3531481a84829b0; expires=Sun, 04 May 2025 21:50:26 GMT; secure; SameSite=None
oaidts=1714859406; expires=Sun, 04 May 2025 21:50:26 GMT; secure; SameSite=None
oaidvc=1; expires=Sun, 04 May 2025 21:50:26 GMT; secure; SameSite=None
CNT=1_v1_C6Q5AQEAAACHTQAA; expires=Sat, 04 May 2024 22:50:26 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?userId=0080529ddd2f4995f3531481a84829b0 | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=0080529ddd2f4995f3531481a84829b0 IP139.45.195.8:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash28a02146f1d68ee921bee5e80d7dd02c 7f87d3596a35093e22bfdd9242a43527d37c9944 4fee0b9ab86308f6a1a253c4701a053a3e1d9c920f0d82e3fc3159333d0707b9
GET /gid.js?userId=0080529ddd2f4995f3531481a84829b0 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080529ddd2f4995f3531481a84829b0; expires=Sun, 04 May 2025 21:50:06 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| aistekso.net/401/7406591 | 139.45.197.244 | 200 OK | 91 kB |
IP139.45.197.244:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash2721e2e159dfae867627b6e9912de535 7310f6448f285e5376c2163f8de896c265bacca2 cc7253e299a9da7f35096be679f43f7875c420ecee84a82e749085504644051c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /401/7406591 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/javascript
x-trace-id: c6cc03fe98cb6d18ec10f098c6f65faa
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=030052b3d5834acbea0474eb01a4e73d; expires=Sun, 04 May 2025 21:50:06 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cameesse.net/1?z=7406590 | 139.45.197.242 | 200 OK | 43 kB |
IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typeJavaScript source, ASCII text, with very long lines (42427) Hash8de7f93eda77a6ca78658ea1b989863a 328730f321f391677750cebcbceba35a47f2fe10 e4756a4cce722f563ecc3881a8131de48a354a21c0a12889f4e09f8ea5a4e821
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=7406590 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: b295d142c41631beca63f216f68cdbca
access-control-expose-headers: X-Sc
x-sc: CD2Tx0BZHWGgHVxbix__v9zo16JTbHatljTxoe5471kvyBTCGk2oHx5HxEv2RR-I5QDXX6qGc6nQq4kSBjjYzJZvE80=
set-cookie: scm=1; expires=Sun, 04 May 2025 21:50:06 GMT; secure; SameSite=None
OAID=040052d14d9a48e8fbdee88934e3a600; expires=Sun, 04 May 2025 21:50:06 GMT; secure; SameSite=None
oaidts=1714859406; expires=Sun, 04 May 2025 21:50:06 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js |  104.21.11.245 | 200 OK | 19 kB |
IP104.21.11.245:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subjecttzegilo.com Fingerprint28:2E:D0:DF:04:78:60:5A:D2:5B:1F:EA:59:80:9C:2F:89:C1:9D:D1 ValiditySat, 30 Mar 2024 15:54:48 GMT - Fri, 28 Jun 2024 15:54:47 GMT
File typeJavaScript source, ASCII text, with very long lines (18486) Hash70ebd404c2e1e7bad13998538b56887c 86e57af8ba3cfc2c004da3311835f6b54ba6d848 d71ea61938136a384e4c53c5a7a3c36e68fcc70a68bae691e270987d5d2eb11f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/javascript
last-modified: Wed, 07 Feb 2024 12:51:13 GMT
etag: W/"65c37cc1-4ac0"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5840
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Du4NMOCwT8m6bhKpUnZBQ40aWvtNvEscBk2ZCw9WRqwnYBC%2BnCNwnItFk0tgFdVbrr5RAjREV%2B2G7VTeB3WkMM112KgqURXeUXCVLBRdtEFJ9RGud0CvoWnCdyY7pg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebb45b3efbb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gishejuy.com/400/7406589 | 139.45.197.242 | 200 OK | 84 kB |
IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash150975fe5fc79a8a32c71fb358636f81 4e483a4968d9f03c109cb04acc0da3c82fd0bc44 ef4a170aa326d65c6ba4f8a7c3de51ae91ad7fd18d676c3e9c9f631ebfa9dbc8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /400/7406589 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/javascript
x-trace-id: e2fff4547929b7ae5be49ed282b16275
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=0300521abc204892ea1a14293a06f966; expires=Sun, 04 May 2025 21:50:06 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| veepteero.com/88/61794 | 139.45.197.242 | 200 OK | 3.1 kB |
IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectveepteero.com Fingerprint13:68:56:48:EC:67:A6:93:BE:E0:36:BC:FA:04:75:6D:6E:D2:C1:91 ValiditySat, 23 Mar 2024 05:18:36 GMT - Fri, 21 Jun 2024 05:18:35 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3367), with no line terminators Hashc959f596cb2b22af3920c5fe6f931e4a cedceac6886e74c57122896dfc6eb9515796c0ba 1e5f1a4c7be752c35bd5e598fc5f4e643301b098a1df38cf82958ed4038f7c92
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /88/61794 HTTP/1.1
Host: veepteero.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| aistekso.net/impression/AisYQAE6oESmRHXGCSNCU9B1ulgHuJM80bTePI8TPcrY_ZhGLZy8lYA1EDkURARkHUvc2EWXSV5jHzbxgNErS-wfIS0kHiM1UgG45Fktejy2d35KutpjVRgDalV0Xk5i8Qy5hf8n5X3otOFlNz2rXI8bBtATC-FmTYGkB5D6POFrmu_jxnqaDVBOQEJX0D6PTX-i3ZDBVJBbkujrZmWufUZc91SHviG4DL3_umWVOX6w-z1GxG35_8Q3aoOFSt2jxpJdkxPl_grwp-vqaOMOIiXMAoHLxKDiAyg6ydbUufckIbS41-GvZjoYeePnvi6d5RWhHDYXsyN8nNB0KAYnj7nOkIbSi2yLySc_m6w_jva4Lab5DIIOP6p9lN3IdajMloY3JknpAU6x5LGMKbCZz6pP2yLGJoaQS5W3hQNsN7kC-GxqU1-fGMcS5_KPxftRnpJNdE5J09wOvwbQRqCrBFkynK5YqqdXL2Yo6FojflpcnQKwV7ThDG1MCmAmG2_v_0NbHoAmfEUxICMQqDkkpyu-0s9YMSgiXmgFoda1GAPYSPIpXNH2kB1QLCX1GV8zSqQUpEhxT0LOxz2XumXvSqfOgFOyP-ya_sTSrllzlqKsjo_lIqVXz0G2YoXd66ZMWE-PZN0UcJGgLOOuHedQ-U7pI-gcFYIBXrcotnhYLYM9VhdwaUvCJeojOww_nJ2JJZzR22fK7YHKRU3eCScEGnbGrSzNkD_Hryl0LZnXask6MgsA2WJjRBnVJYE5BV2i6xVOxNFoa-tBpbJ4XNkNoPOQKt81dDqEfJ3tmCNEQcLpNwqbaV-6nhLso0Q=?_z=7406591&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 43 B |
URL GET HTTP/2aistekso.net/impression/AisYQAE6oESmRHXGCSNCU9B1ulgHuJM80bTePI8TPcrY_ZhGLZy8lYA1EDkURARkHUvc2EWXSV5jHzbxgNErS-wfIS0kHiM1UgG45Fktejy2d35KutpjVRgDalV0Xk5i8Qy5hf8n5X3otOFlNz2rXI8bBtATC-FmTYGkB5D6POFrmu_jxnqaDVBOQEJX0D6PTX-i3ZDBVJBbkujrZmWufUZc91SHviG4DL3_umWVOX6w-z1GxG35_8Q3aoOFSt2jxpJdkxPl_grwp-vqaOMOIiXMAoHLxKDiAyg6ydbUufckIbS41-GvZjoYeePnvi6d5RWhHDYXsyN8nNB0KAYnj7nOkIbSi2yLySc_m6w_jva4Lab5DIIOP6p9lN3IdajMloY3JknpAU6x5LGMKbCZz6pP2yLGJoaQS5W3hQNsN7kC-GxqU1-fGMcS5_KPxftRnpJNdE5J09wOvwbQRqCrBFkynK5YqqdXL2Yo6FojflpcnQKwV7ThDG1MCmAmG2_v_0NbHoAmfEUxICMQqDkkpyu-0s9YMSgiXmgFoda1GAPYSPIpXNH2kB1QLCX1GV8zSqQUpEhxT0LOxz2XumXvSqfOgFOyP-ya_sTSrllzlqKsjo_lIqVXz0G2YoXd66ZMWE-PZN0UcJGgLOOuHedQ-U7pI-gcFYIBXrcotnhYLYM9VhdwaUvCJeojOww_nJ2JJZzR22fK7YHKRU3eCScEGnbGrSzNkD_Hryl0LZnXask6MgsA2WJjRBnVJYE5BV2i6xVOxNFoa-tBpbJ4XNkNoPOQKt81dDqEfJ3tmCNEQcLpNwqbaV-6nhLso0Q=?_z=7406591&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/AisYQAE6oESmRHXGCSNCU9B1ulgHuJM80bTePI8TPcrY_ZhGLZy8lYA1EDkURARkHUvc2EWXSV5jHzbxgNErS-wfIS0kHiM1UgG45Fktejy2d35KutpjVRgDalV0Xk5i8Qy5hf8n5X3otOFlNz2rXI8bBtATC-FmTYGkB5D6POFrmu_jxnqaDVBOQEJX0D6PTX-i3ZDBVJBbkujrZmWufUZc91SHviG4DL3_umWVOX6w-z1GxG35_8Q3aoOFSt2jxpJdkxPl_grwp-vqaOMOIiXMAoHLxKDiAyg6ydbUufckIbS41-GvZjoYeePnvi6d5RWhHDYXsyN8nNB0KAYnj7nOkIbSi2yLySc_m6w_jva4Lab5DIIOP6p9lN3IdajMloY3JknpAU6x5LGMKbCZz6pP2yLGJoaQS5W3hQNsN7kC-GxqU1-fGMcS5_KPxftRnpJNdE5J09wOvwbQRqCrBFkynK5YqqdXL2Yo6FojflpcnQKwV7ThDG1MCmAmG2_v_0NbHoAmfEUxICMQqDkkpyu-0s9YMSgiXmgFoda1GAPYSPIpXNH2kB1QLCX1GV8zSqQUpEhxT0LOxz2XumXvSqfOgFOyP-ya_sTSrllzlqKsjo_lIqVXz0G2YoXd66ZMWE-PZN0UcJGgLOOuHedQ-U7pI-gcFYIBXrcotnhYLYM9VhdwaUvCJeojOww_nJ2JJZzR22fK7YHKRU3eCScEGnbGrSzNkD_Hryl0LZnXask6MgsA2WJjRBnVJYE5BV2i6xVOxNFoa-tBpbJ4XNkNoPOQKt81dDqEfJ3tmCNEQcLpNwqbaV-6nhLso0Q=?_z=7406591&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080529ddd2f4995f3531481a84829b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:11 GMT
content-type: image/gif
content-length: 43
x-trace-id: 1862afe9d35d001c7680ad326a8eae8b
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19280, version 1.0 Hash386fb59be54b2d819064af98e57cc226 9e2d14d736be97ec84bfca3513558450cd6e3249 b4855cc8ec721cbaf27f3c907345e101b1524858221c14faa79df34cb2f84991
GET /s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:32:40 GMT
expires: Sat, 03 May 2025 02:32:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:02:23 GMT
content-type: font/woff2
age: 155845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/universal.min.js?v=3.1.504 | 139.45.197.250 | 200 OK | 90 kB |
URL GET HTTP/2moonoafy.net/pfe/current/universal.min.js?v=3.1.504 IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4caad44ecc6a13eba45b63ed7cf9e387 e67dfe90bebd5447495d8fe962d03e55f6d13071 66f95b5eb4bf3dc3a13643e3e6776b18a2b15e0b881328e2ee012c73e679ad00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/universal.min.js?v=3.1.504 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:52 GMT
etag: W/"662a3514-15efa"
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| moonoafy.net/zone?pub=0&zone_id=7406592&is_mobile=false&domain=anonzip.com&var=&ymid=&var_3=&tg=0&sw=3.1.504 | 139.45.197.250 | 200 OK | 880 B |
URL GET HTTP/2moonoafy.net/zone?pub=0&zone_id=7406592&is_mobile=false&domain=anonzip.com&var=&ymid=&var_3=&tg=0&sw=3.1.504 IP139.45.197.250:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (977), with no line terminators Hash7db549bd97c2cf19c1a7b302563a42e4 9f3ff7d955b0ff41824a7094761659688b20088e 5bd403e962c03e25fe7f98492e5a381c5df1a49c1921132aeb92dcc2368b5697
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /zone?pub=0&zone_id=7406592&is_mobile=false&domain=anonzip.com&var=&ymid=&var_3=&tg=0&sw=3.1.504 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: aac77ac7c9f0517f4b2bf8a725f21029
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL OPTIONS HTTP/2gishejuy.com/500/7406589?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7406589?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:06 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 1.7 kB |
URL GET HTTP/2gishejuy.com/500/7406589?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1759), with no line terminators Hash8a07bbf5245d58d2cc9f9ce590d92db6 34f6e7228e63281f73260873796af9fc1275e53a 20d2ae0377b96d193503dda19e745bac4fd485c2f56e18585d7747a31ca85a6d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7406589?excludes=&oaid=0080529ddd2f4995f3531481a84829b0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F1QSd%2FKoboldKare.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0300521abc204892ea1a14293a06f966
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 21:50:07 GMT
content-type: application/javascript
x-trace-id: ab99c992425da41a13b5c8887b9ed300
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://anonzip.com
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=0080529ddd2f4995f3531481a84829b0; expires=Sun, 04 May 2025 21:50:06 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i | 142.250.74.106 | 200 OK | 37 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i IP142.250.74.106:443
Requested byhttps://anonzip.com/1QSd/KoboldKare.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (1572) Hashc2b8ea09ec90a66034e1b61bc1f8e5d4 9558953728cacfc3433ba6281c1b4a58fbbc9d51 1c593f4a688585b14c31e71fc64bfaa81d768984cdf182bca40ba8c524582685
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 21:50:05 GMT
date: Sat, 04 May 2024 21:50:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|