Report - heedetiquettedope.com/i0n2rxs4qr?adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&dev=r&erugl=23&key=71fa5bfe54556fc0b2bec396f95216c7&kw=["ver","la","temporada","13","capitulo","20","de","la","serie","ley","y","orden","unidad","de","v%C3%ADctimas","especiales","online","gratis","hd","veronline","sh"]&psid=www.veronline.sh,www.veronline.sh&refer=https://www.veronline.sh/series-online/ley-y-orden-unidad-de-vaictimas-especiales-temporada-13-capitulo-20-137388.html&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=-6&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1&v=24.5.6485

Report Overview

Submitted URL
heedetiquettedope.com/i0n2rxs4qr?adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&dev=r&erugl=23&key=71fa5bfe54556fc0b2bec396f95216c7&kw=["ver","la","temporada","13","capitulo","20","de","la","serie","ley","y","orden","unidad","de","v%C3%ADctimas","especiales","online","gratis","hd","veronline","sh"]&psid=www.veronline.sh,www.veronline.sh&refer=https://www.veronline.sh/series-online/ley-y-orden-unidad-de-vaictimas-especiales-temporada-13-capitulo-20-137388.html&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=-6&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1&v=24.5.6485
IP
172.240.108.84
ASN
#7979 SERVERS-COM
Submitted
2024-05-08 02:49:11
Access
public
Website Title
Lust Goddes
Final URL
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
heedetiquettedope.com	unknown	unknown	No data	No data	5.9 kB	5.3 kB	172.240.108.68
animeplaynow.com	unknown	2022-11-29	2022-11-30	2024-04-30	11 kB	825 kB	104.21.19.67
holdhostel.space	unknown	2024-02-21	2024-02-21	2024-05-07	552 B	2.8 kB	104.21.76.98
ln.gamesrevenue.com	117740	2014-05-30	2017-01-29	2024-05-02	403 B	16 kB	5.161.79.44

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	heedetiquettedope.com	Sinkholed
2024-05-08	medium	heedetiquettedope.com	Sinkholed
2024-05-08	medium	heedetiquettedope.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/libs/jquery.min.js	87 kB	2023-03-07	2024-05-19
Pretty URL animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/libs/jquery.min.js IP 104.21.19.67 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-19 21:30:43 Times Seen114958 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	ln.gamesrevenue.com/px1.js	15 kB	2023-12-23	2024-05-19
Pretty URL ln.gamesrevenue.com/px1.js IP 5.161.79.44 ASN #213230 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-23 09:34:48 Last Seen2024-05-19 21:30:43 Times Seen1281 Hash b01fc426cbc4f33a52a28ee9ca2e2050 577332c8c5f62167ad432c5d20b3ca285e75c91e d40fc3bebe2dc3c28f08f2f4f5a6059425ccc5541ada3f0945f7539e90374441 Loading...

	animeplaynow.com/awpx_click.js?v=005	1.5 kB	2023-03-26	2024-05-19
Pretty URL animeplaynow.com/awpx_click.js?v=005 IP 104.21.19.67 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 01:11:56 Last Seen2024-05-19 21:30:43 Times Seen1329 Hash 7aeb87811ad3a82fde3e2783544819ee d1d9174cbcbb1abdccee6841f170ba21f899925b 7fff603702e9bea03cf47ba47947bb7f8655eb7fcb1c8f7091e9a38d8f5d949c Loading...

	animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/scripts/script.js	345 B	2023-03-10	2024-05-18
Pretty URL animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/scripts/script.js IP 104.21.19.67 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 03:27:17 Last Seen2024-05-18 22:59:43 Times Seen111 Hash 684e2cf86a68f9c93c2e1e0c8f28cbcf 8728d81c5e3d811f6d1e373184fab88bb009c6fc a68eafa9db1c0ef2ffc528cf6258f35b34f504afaec13f84009ed9e750691966 Loading...

HTTP Transactions (22)

URL IP Response Size

heedetiquettedope.com/i0n2rxs4qr?adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&dev=r&erugl=23&key=71fa5bfe54556fc0b2bec396f95216c7&kw=[%22ver%22,%22la%22,%22temporada%22,%2213%22,%22capitulo%22,%2220%22,%22de%22,%22la%22,%22serie%22,%22ley%22,%22y%22,%22orden%22,%22unidad%22,%22de%22,%22v%C3%ADctimas%22,%22especiales%22,%22online%22,%22gratis%22,%22hd%22,%22veronline%22,%22sh%22]&psid=www.veronline.sh,www.veronline.sh&refer=https://www.veronline.sh/series-online/ley-y-orden-unidad-de-vaictimas-especiales-temporada-13-capitulo-20-137388.html&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=-6&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1&v=24.5.6485

172.240.108.68

1.9 kB

URL
heedetiquettedope.com/i0n2rxs4qr?adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&dev=r&erugl=23&key=71fa5bfe54556fc0b2bec396f95216c7&kw=[%22ver%22,%22la%22,%22temporada%22,%2213%22,%22capitulo%22,%2220%22,%22de%22,%22la%22,%22serie%22,%22ley%22,%22y%22,%22orden%22,%22unidad%22,%22de%22,%22v%C3%ADctimas%22,%22especiales%22,%22online%22,%22gratis%22,%22hd%22,%22veronline%22,%22sh%22]&psid=www.veronline.sh,www.veronline.sh&refer=https://www.veronline.sh/series-online/ley-y-orden-unidad-de-vaictimas-especiales-temporada-13-capitulo-20-137388.html&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=-6&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1&v=24.5.6485
IP
172.240.108.68:0
ASN
#7979 SERVERS-COM

File type
HTML document, ASCII text, with very long lines (1247)
Size
1.9 kB (1862 bytes)
Hash
faa02b90ee77f95b561b7cc85bfb334d
aa8316eb4b5949f0a9e634000ba85357bd1a1e4a
8b10cb724fda1c119ea8c6d92670e356d0180ef104cd2cadee2d98dcc9a0adc2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /i0n2rxs4qr?adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&adb=n&dev=r&erugl=23&key=71fa5bfe54556fc0b2bec396f95216c7&kw=[%22ver%22,%22la%22,%22temporada%22,%2213%22,%22capitulo%22,%2220%22,%22de%22,%22la%22,%22serie%22,%22ley%22,%22y%22,%22orden%22,%22unidad%22,%22de%22,%22v%C3%ADctimas%22,%22especiales%22,%22online%22,%22gratis%22,%22hd%22,%22veronline%22,%22sh%22]&psid=www.veronline.sh,www.veronline.sh&refer=https://www.veronline.sh/series-online/ley-y-orden-unidad-de-vaictimas-especiales-temporada-13-capitulo-20-137388.html&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=-6&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1&v=24.5.6485 HTTP/1.1
Host: heedetiquettedope.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 02:48:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=22555727; expires=Thu, 09 May 2024 02:48:43 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.l9K15cdx7PzpOM78R-VNPAqkEkopuNuc39DOVrYkKQk; expires=Wed, 08 May 2024 02:49:43 GMT
uid_id2=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1; expires=Wed, 15 May 2024 02:48:43 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 36e56daf01180e3c990e8df94f09669f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

heedetiquettedope.com/api/users?token=L2kwbjJyeHM0cXI_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&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c%3A1%3A1&pii=&in=false

172.240.108.68

302 Found

0 B

URL User Request GET HTTP/1.1
heedetiquettedope.com/api/users?token=L2kwbjJyeHM0cXI_YWRiPW4mZGV2PXImZXJ1Z2w9MjMma2V5PTcxZmE1YmZlNTQ1NTZmYzBiMmJlYzM5NmY5NTIxNmM3Jmt3PSU1QiUyMnZlciUyMiUyQyUyMmxhJTIyJTJDJTIydGVtcG9yYWRhJTIyJTJDJTIyMTMlMjIlMkMlMjJjYXBpdHVsbyUyMiUyQyUyMjIwJTIyJTJDJTIyZGUlMjIlMkMlMjJsYSUyMiUyQyUyMnNlcmllJTIyJTJDJTIybGV5JTIyJTJDJTIyeSUyMiUyQyUyMm9yZGVuJTIyJTJDJTIydW5pZGFkJTIyJTJDJTIyZGUlMjIlMkMlMjJ2JUMzJUFEY3RpbWFzJTIyJTJDJTIyZXNwZWNpYWxlcyUyMiUyQyUyMm9ubGluZSUyMiUyQyUyMmdyYXRpcyUyMiUyQyUyMmhkJTIyJTJDJTIydmVyb25saW5lJTIyJTJDJTIyc2glMjIlNUQmcHNpZD13d3cudmVyb25saW5lLnNoJTJDd3d3LnZlcm9ubGluZS5zaCZwc3Q9MTcxNTEzNjU4MyZyZWZlcj1odHRwcyUzQSUyRiUyRnd3dy52ZXJvbmxpbmUuc2glMkZzZXJpZXMtb25saW5lJTJGbGV5LXktb3JkZW4tdW5pZGFkLWRlLXZhaWN0aW1hcy1lc3BlY2lhbGVzLXRlbXBvcmFkYS0xMy1jYXBpdHVsby0yMC0xMzczODguaHRtbCZyZXM9MTQuMzEmcm10Yz10JnNjckhlaWdodD0xMDgwJnNjcldpZHRoPTE5MjAmc2hpcD0mc2h1PTU2NjhlNzg4ZmI5ZTc4NGQzNDY5OGVhM2FjMDdiMjA3OThiNzlmMzNhZTQ2MGI3Yjk5MzE4NzEzMjEwNTBjMTkxOTBkZjg1MmFhY2Q2MTE0ZTk3ZGZiMTRjZGJkZmE4MjdmZWQ0NzkzYzM2NGU0NTYwMzM5NzI1NTY0NzVhZTc2NGYyZDZhODhlMTZhMGMzMWJlYWI1MjFkMTcwZDY3Y2ExMDAyNDU5ZjJiMjA1ZTdjMGM2MTQyYzNhM2QzMDVlNTEyJnN1YjM9aW52b2tlX2xheWVyJnR6PS02JnV1aWQ9YjU1NWY5Y2UtYWIzNy00YjE0LWI2YjktNzUxZDNkMDRhOTJjJTNBMSUzQTEmdj0yNC41LjY0ODU&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c%3A1%3A1&pii=&in=false
IP
172.240.108.68:443
ASN
#7979 SERVERS-COM

Certificate
IssuerLet's Encrypt
Subjectheedetiquettedope.com
FingerprintFD:28:F8:EC:3C:D1:10:60:E5:F2:27:F7:3F:9A:2D:F9:EC:23:52:D8
ValidityMon, 06 May 2024 08:02:44 GMT - Sun, 04 Aug 2024 08:02:43 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=L2kwbjJyeHM0cXI_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&uuid=b555f9ce-ab37-4b14-b6b9-751d3d04a92c%3A1%3A1&pii=&in=false HTTP/1.1
Host: heedetiquettedope.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heedetiquettedope.com/api/users?token=L2kwbjJyeHM0cXI_a2V5PTBmMjJjMWZkNjA5ZjEzY2I3OTQ3YzhjYWJmZTFhOTBkJnN1Ym1ldHJpYz0yMjU1NTcyNw
Cookie: u_pl=22555727; ain=eyJhbGciOiJIUzI1NiJ9.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.l9K15cdx7PzpOM78R-VNPAqkEkopuNuc39DOVrYkKQk; uid_id2=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Wed, 08 May 2024 02:48:43 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://holdhostel.space/?660db1accda89&ag_custom_domain=22555727
Set-Cookie: uid_id2=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1; expires=Wed, 15 May 2024 02:48:43 GMT
iprc10752991c50c3a8a59851ec8ef235c3b=5190494; expires=Thu, 09 May 2024 02:48:43 GMT
pdhtkv=true; expires=Thu, 09 May 2024 02:48:43 GMT
uncs=1; expires=Thu, 09 May 2024 02:48:43 GMT
pdhtkv28=true; expires=Thu, 09 May 2024 02:48:43 GMT
uncs28=1; expires=Thu, 09 May 2024 02:48:43 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9285892564a747de2f35bf5cf45daae0
Strict-Transport-Security: max-age=0; includeSubdomains

heedetiquettedope.com/favicon.ico

192.243.61.227

0 B

URL
heedetiquettedope.com/favicon.ico
IP
192.243.61.227:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: heedetiquettedope.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heedetiquettedope.com/api/users?token=L2kwbjJyeHM0cXI_a2V5PTBmMjJjMWZkNjA5ZjEzY2I3OTQ3YzhjYWJmZTFhOTBkJnN1Ym1ldHJpYz0yMjU1NTcyNw
Cookie: u_pl=22555727; ain=eyJhbGciOiJIUzI1NiJ9.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.l9K15cdx7PzpOM78R-VNPAqkEkopuNuc39DOVrYkKQk; uid_id2=b555f9ce-ab37-4b14-b6b9-751d3d04a92c:1:1; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 02:48:43 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 42a7c2d60586ad597c75f2aca30c275e
Strict-Transport-Security: max-age=0; includeSubdomains

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/logo.png

104.21.19.67

200 OK

55 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/logo.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 1920 x 193, 8-bit colormap, non-interlaced
Size
55 kB (54897 bytes)
Hash
08f3cf65291b927ac97fe0dd27c80a25
02643754685e384ae2e2abf608f91b28e9d38e25
521aea8556f745232dde59618079d496c3a25371f5b416b0bbe1a0fc34a08ee0

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/logo.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 54897
last-modified: Tue, 09 Apr 2024 10:30:01 GMT
etag: "661518a9-d671"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8QQBiCNH%2FZbvdeVZQ0G34lvZpqDmXn8ZhoE5zPDkB1s1IF05J2GrribCE9oAEaiTAPDnDxwjyMQIcbwrvbAP4Q%2FL%2BTZxdTigiDnzM1hAx9Vl%2BqjziVF7%2BEcMJMt81AcZTj5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9bf7128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/notice.png

104.21.19.67

200 OK

14 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/notice.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 1304 x 86, 8-bit colormap, non-interlaced
Size
14 kB (14482 bytes)
Hash
af6f25837488ebc8e813f506c61cdae9
0d9a62f624d0d7b202ac5e958fb97e6fa7ed5f99
5c231778f450fa38de502f4b1ba3bb8fbee95fb1d7f4e6e790043820621a1a50

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/notice.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 14482
last-modified: Tue, 09 Apr 2024 10:30:01 GMT
etag: "661518a9-3892"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bvVA08DEgJxdnRSIy5vKrncGqK1j0KI55u9VbnEOZKY52V5QknKxdklyIdydNGfr33qyhUgLcCZnqUWbl3VdoKyg%2F9qneFEIfLt0GNF%2BoZgjYiLuT4vyQi8tCr4edoGExNAG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9c17128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/1.png

104.21.19.67

200 OK

67 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/1.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 312 x 470, 8-bit colormap, non-interlaced
Size
67 kB (67434 bytes)
Hash
0307926bb10466b1635eda2c6019c38f
292fbb5ca62cafe7d52644fa0625d72133fdef3f
fceae0d5502d63d8a328eaf331b4dbb3b4faa695a2eb6bcb8d76c3e914f08bdf

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/1.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 67434
last-modified: Tue, 09 Apr 2024 10:29:59 GMT
etag: "661518a7-1076a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Ivf4C%2BeIogm98gggNZzv6kgYVBe1WVteSXJx5rl344XtP77aCRDyCx3z0uzs9NihyM8i%2BzsAxs%2BaOTEQozC1GL9ilLEKWjcY%2Fr0zTKdgc77IH5PZzhkeQLNXMYDKByoItLX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9c37128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/1a.png

104.21.19.67

200 OK

61 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/1a.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 311 x 470, 8-bit colormap, non-interlaced
Size
61 kB (61193 bytes)
Hash
b922ff2883986e97547e3a7bc3a11711
6bc6bcbcfe93f77b5c5acea8335c4c58afc2549e
e41e8b9f432a607aeb91ee2bbdeb74ec4a3dbe757397dfc510d9197bba151248

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/1a.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 61193
last-modified: Tue, 09 Apr 2024 10:29:59 GMT
etag: "661518a7-ef09"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EqRHMk8HcAOHHZpimqu3TKw1bnfupXYyz7YWqdQHCDEBKX9lxUgp24Zd3naYWCy23%2Fox%2B8SofR3AhCUsNqH66mm6bDxUgvbREJ8LXyGimFqSN358TO0EtCTud3pFobwwoZmf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9c57128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/2a.png

104.21.19.67

200 OK

58 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/2a.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 312 x 488, 8-bit colormap, non-interlaced
Size
58 kB (58090 bytes)
Hash
5b039d0728d0fd2e0e75ae5cf567708b
91f85b4b1374c177194d06471070d258ccdad8da
42e04754638df9e535fcd267a67f43d488dec5b2138cb3dfb690398e86a066bd

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/2a.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 58090
last-modified: Tue, 09 Apr 2024 10:29:59 GMT
etag: "661518a7-e2ea"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JqSqhVhLHn3kZg1S31DDMQDcsTnqMScwsztPLC4SHT2MjZ9DuiJm90Byr0BtzNwd%2F30pqDdSV8LvNvdXHEK5cyxbHoRRaZaLkoQac7ICvsA%2FPQdPJI2%2B%2BxAT9slRzfucC5qo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ece9c77128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/3.png

104.21.19.67

200 OK

71 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/3.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 312 x 478, 8-bit colormap, non-interlaced
Size
71 kB (70749 bytes)
Hash
7dd036589412280a1fdd3799c7695e6b
8b22795ba98727ceda2a2204276daa42cad2ad96
2bc73b1a3ed7484cd58644e507e9ab8929c8e895f20714c2b0e002b9d52628da

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/3.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 70749
last-modified: Tue, 09 Apr 2024 10:30:00 GMT
etag: "661518a8-1145d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vh4y3XOF0FdxE499aP27EgQvGPCPjNICjGvin8mcliZdzxxmKiKzbvLUyoKgyqQxkqy6xxvQF%2FBoPcNbiJ8eDEBxeDPCUiDbEKA0pq4la2xdQK8cx452Q7ktbIZTyhD3pPyi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ece9c87128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/3a.png

104.21.19.67

200 OK

65 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/3a.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 312 x 478, 8-bit colormap, non-interlaced
Size
65 kB (64862 bytes)
Hash
1207fd65ced9b042439c586a0fad3949
f00c24b3ffe6cd65ea509cc0faf28d5950913f61
81bf5480caa75ab64e7dc688b1fac244d29948b408823d8afda23dbf9d226177

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/3a.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 64862
last-modified: Tue, 09 Apr 2024 10:30:00 GMT
etag: "661518a8-fd5e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dPkrRJTiGnLxQ8FUeqRL5BJAlFTYyC8Ae6UhB363tlL9ROKUoxLIyDYoX8Dn02W%2FMkf5tMPXDNtiVo5K08u6QzpnvIEc%2BracAQhbCpeMO%2FroZuKC2B75gAWWFI7v6w2nsgsw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ece9c97128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/4a.png

104.21.19.67

200 OK

64 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/4a.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 312 x 475, 8-bit colormap, non-interlaced
Size
64 kB (63627 bytes)
Hash
51e91430164f9d2f67555e7c6f0dcb74
e3432e5e0951b051917fa2b65d3fc20c4d4fdbde
f9e2b592a28f97e9e0f8e1c2999b7e4dca637f6dd3643cee9f5658af9db33a9b

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/4a.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 63627
last-modified: Tue, 09 Apr 2024 10:30:00 GMT
etag: "661518a8-f88b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3h4DWkvPW5J6qwSQeclapLdlDyu2A%2BAFqOS%2FNfs%2FRFZ6jEM0TvTHpl2k5GhRfYEj1bPQ4MiGAcD%2FCuOvfWAMVLCHe21vWJsfYQZIbOFriY8zArvItXj13vpAhMTC9%2B2W4pZe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecf9d27128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/4.png

104.21.19.67

200 OK

68 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/4.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 312 x 475, 8-bit colormap, non-interlaced
Size
68 kB (68110 bytes)
Hash
ca467dcc334aa7436eec4e2b94cbf410
f19d1b396ffd39ba16c535302b25bdf6246710ce
9668c0ba76c528ff6bdb9f61ed1b1137e771d38a6ff6b448267e069d042da4f1

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/4.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 68110
last-modified: Tue, 09 Apr 2024 10:30:00 GMT
etag: "661518a8-10a0e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxigWmU3bRT5Far38%2Bc%2B0X3pQucOcAu6Js9k0G7OKcQWdhsF1I2rFIV22dNd0n7vLD3Bh8tlzT0%2BNrW7LYnwJryTjfkp4ieKXmCJlvNEPK4wtOp4bFIDMdAqa2sQSRtbbdkl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ece9ca7128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/2.png

104.21.19.67

200 OK

62 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/2.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 312 x 488, 8-bit colormap, non-interlaced
Size
62 kB (62147 bytes)
Hash
5f0c7a8f672b539645c5b23d2de7ed7f
c7baee316e820fa0b2c734ac8ffe41af055acb49
2e01779d0d1d777107fd28f004a127040513bb7998ec34fb71cf18f33bad8e35

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/2.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/png
content-length: 62147
last-modified: Tue, 09 Apr 2024 10:29:59 GMT
etag: "661518a7-f2c3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1yLuheYHve%2BAQPj4smg0WN0kxJcGCp4da%2F1LNUR7x%2FXYzVitj4GKi5jUpMMLO5Kfegs%2BIMThgJ2cmLteLPgUxlAc089r%2FjLG%2BPVuRk2pm51uN%2BVERrAN2ILLS8POOB0drdtx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9c67128-OSL
alt-svc: h3=":443"; ma=86400

holdhostel.space/?660db1accda89&ag_custom_domain=22555727

104.21.76.98

302 Found

1.7 kB

URL User Request GET HTTP/2
holdhostel.space/?660db1accda89&ag_custom_domain=22555727
IP
104.21.76.98:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectholdhostel.space
Fingerprint30:62:41:BC:7C:17:FC:EE:0D:5B:5B:39:AE:06:1C:8A:08:6D:67:D6
ValiditySat, 20 Apr 2024 18:12:17 GMT - Fri, 19 Jul 2024 18:12:16 GMT

File type
data
Size
1.7 kB (1749 bytes)
Hash
e0d2099c53dd0ae718b82df5d69b8f47
d4cbf67965dde7ab44039430692d87c2970b0fd1
d58927749d10665e8432395899a61ba59c7286f19204114f374513b66f1fda7a

HTTP Headers

GET /?660db1accda89&ag_custom_domain=22555727 HTTP/1.1
Host: holdhostel.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heedetiquettedope.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 08 May 2024 02:48:43 GMT
content-type: text/html
location: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
set-cookie: c_5c22f2b5ad78126c97860f58c4cb0359=1; Expires=Thu, 09-May-24 02:48:43 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
z_2b2f1687240f43a33d8c766932c1b8a5=1; Expires=Thu, 09-May-24 02:48:43 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b2TV90M4hkF8HnqXMI6TE9bpxg92v3kvFXe8lsUGwk%2FHhu7PZ3hqGMg7N%2Fu5LBM277V33UPlaaTjvS9f38ay5DUpKGv78NY7MZ%2FiLwoewgmnnRTZWBvFp%2F7SxFYzG1I4MZRf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880621ea0cba56a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/scripts/script.js

104.21.19.67

200 OK

5.8 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/scripts/script.js
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
JavaScript source, ASCII text, with very long lines (345), with no line terminators
Size
5.8 kB (5815 bytes)
Hash
684e2cf86a68f9c93c2e1e0c8f28cbcf
8728d81c5e3d811f6d1e373184fab88bb009c6fc
a68eafa9db1c0ef2ffc528cf6258f35b34f504afaec13f84009ed9e750691966

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/scripts/script.js HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 10:30:03 GMT
etag: W/"661518ab-159"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o%2BSS3hhV3ot93g1FSQE4B%2FI7i01XpOr002Xg6g5P5IMGYEXC3jIT%2F5xmop7ZU0XdZT3ouI2RL%2FQplmhFl2GIAzDFpdSztslGNuUSriIbsP7ceQxzw8XD67qMZ0W6rzOVwVTc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ed09d37128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

animeplaynow.com/awpx_click.js?v=005

104.21.19.67

200 OK

5.6 kB

URL GET HTTP/3
animeplaynow.com/awpx_click.js?v=005
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
ASCII text
Size
5.6 kB (5598 bytes)
Hash
7aeb87811ad3a82fde3e2783544819ee
d1d9174cbcbb1abdccee6841f170ba21f899925b
7fff603702e9bea03cf47ba47947bb7f8655eb7fcb1c8f7091e9a38d8f5d949c

HTTP Headers

GET /awpx_click.js?v=005 HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 09:50:55 GMT
etag: W/"6409abff-5d2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6392
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wSQx%2B6xpX3ZSbT2V8Y2FzQG0bFCsj5B2o4kJVPBZXAPhRxNvuCcFcJuoqfkyBi8YG6GDzTNZC38u2iiCzBPkRof0HvROdv%2BouyalNVq4fSIcB9cOMv1qSLTSxyq0FdYBc80p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9be7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/bg.jpg

104.21.19.67

200 OK

124 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/bg.jpg
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Size
124 kB (124256 bytes)
Hash
0a8269274cefa6ffb750dfb568f15bea
6c7679c57493b32a7dd04600c8a9fb5f1e107c2c
a11858d22f4b66f5ae71ecfda359e78149d703f3aa45d5458b8e7cfa8179b14d

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/bg.jpg HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: image/jpeg
content-length: 124256
last-modified: Tue, 09 Apr 2024 10:30:01 GMT
etag: "661518a9-1e560"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mGuPre9y58EH%2BGziGprLSRijQYS5S7Fk3pIzlIw%2FoI6Nm0hY6dSzqiORUBWcwG5fTVKK%2FU0ZPJc8ri4UF6fhJA0VAhybzzOW9E95wYyhxfDmiAbE0w8Ifj5yq%2FUA2cEGtzFT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621efaad77128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/fav.png

104.21.19.67

200 OK

1.4 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/image/fav.png
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
1.4 kB (1425 bytes)
Hash
10c5dd857fd3653492ef5eeaa86cd48b
193484a907a40d7b145af2136ef83bef593d2f21
a689201508b9dc7b2cc3049c7d89947f96a19790411506ecd6eb1875374fe329

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/image/fav.png HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:45 GMT
content-type: image/png
content-length: 1425
last-modified: Tue, 09 Apr 2024 10:30:01 GMT
etag: "661518a9-591"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LD0ge18qQAa%2FFw%2BOWi75MVb21TjIaPDA2IdtYL6CogEF%2FbGEJDIqkxDhxnadnJ2EI3L%2FHx8fC4GybdRv9yHINl89p6TfWkzWeR%2BXRiw25DKRwIQ7dKftCKWi5i%2BBhcWjAGnX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621f05b0a7128-OSL
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/css/main.css

104.21.19.67

200 OK

1.8 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/css/main.css
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
ASCII text, with very long lines (1922), with no line terminators
Size
1.8 kB (1812 bytes)
Hash
4c8230ee856a7d1f40069717a5116e8a
8774f276d38d723f355da6b263466e942038c268
0395d4919c462a3b78edb9bad53aa9e5a391d9b49f15919392d4a78b549b3165

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/css/main.css HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 10:29:57 GMT
etag: W/"661518a5-714"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2WplTEs5wO9GJ9vRGv1ZL5cLBxo6g6BQhUOFFZipSNTj5VO7m1VgzC08LlmAFtspGC1Awv1yYtPz5SGioL%2BrQK51HKBvQRBF%2FWMhptG3D9iLXsgt3kddbvsYpKYfo7njgh%2Fc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9b87128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/libs/jquery.min.js

104.21.19.67

200 OK

87 kB

URL GET HTTP/3
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/libs/jquery.min.js
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
87 kB (86927 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/libs/jquery.min.js HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 10:30:03 GMT
etag: W/"661518ab-1538f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HWfum3efEs18ECulJcT7R%2FjOpTO%2BEiPljG5QyL04QkmWLXLzgDkeT2QRVhKPSdGNSx41xM14TTNU04KJ43%2BhQylft2KVuXb%2BIPWmCWQWinVLAy0kDciVBTnLuM%2FcICbnaJ6%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880621ecd9bc7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079

104.21.19.67

200 OK

1.8 kB

URL User Request GET HTTP/2
animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
IP
104.21.19.67:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectanimeplaynow.com
Fingerprint52:29:26:C8:42:AC:A1:04:3B:02:6C:31:EB:F5:8D:14:2A:88:74:BD
ValiditySun, 17 Mar 2024 01:39:57 GMT - Sat, 15 Jun 2024 01:39:56 GMT

File type
HTML document, ASCII text, with very long lines (1977), with no line terminators
Size
1.8 kB (1820 bytes)
Hash
8553025e69e4f63983f16a02d86bb07d
9783b99b90ddf470dda5e3005f39a3c9a459fd91
be07e3aaa4b899216f958eec497f8be36bb4c9a163ad352746f5faef46624dbd

HTTP Headers

GET /lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079 HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heedetiquettedope.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 02:48:44 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xY4DMnrCf87f2w%2FhgmrVEAVngVbL2WV4T4xB9gHXeq6SplCbhIC%2Ff8Z28puwkbD1ju0NQVQDJ9v3QGUMI5jkBYITmk%2BuF3YkMiHy2t5VHLV3BT16PK0sRod334KZHeSm%2BbeC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880621ea8ca35695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ln.gamesrevenue.com/px1.js

5.161.79.44

200 OK

15 kB

URL GET HTTP/2
ln.gamesrevenue.com/px1.js
IP
5.161.79.44:443
ASN
#213230 Hetzner Online GmbH

Requested by
https://animeplaynow.com/lg/lg_0424/land_lg_100424_na_en/?utm_campaign=pu_lg_terra_ww_na&utm_medium=click&utm_source=pu&utm_content=22555727&bnid=land_lg_100424_na_en&land=land_lg_100424_na_en&noadult=1&crID=2503206&zID=100079
Certificate
IssuerLet's Encrypt
Subject*.gamesrevenue.com
FingerprintB2:A3:99:AD:22:46:FC:93:41:E9:59:40:F5:09:B0:23:B7:5B:FA:67
ValidityWed, 13 Mar 2024 09:55:06 GMT - Tue, 11 Jun 2024 09:55:05 GMT

File type
ASCII text, with very long lines (15239)
Size
15 kB (15240 bytes)
Hash
b01fc426cbc4f33a52a28ee9ca2e2050
577332c8c5f62167ad432c5d20b3ca285e75c91e
d40fc3bebe2dc3c28f08f2f4f5a6059425ccc5541ada3f0945f7539e90374441

HTTP Headers

GET /px1.js HTTP/1.1
Host: ln.gamesrevenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://animeplaynow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 02:48:44 GMT
content-type: application/javascript
last-modified: Fri, 22 Dec 2023 10:12:56 GMT
etag: W/"65856128-3b88"
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (22)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers