urlquery - report: syndication.exdynsrv.com/splash.php?cat=&idzone=4734030&type=8&p=tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
e1.o.lencr.org (4)	6159	2021-08-20 07:36:30 UTC	2022-12-08 17:11:00 UTC	23.36.77.32
syndication.exoclick.com (1)	22750	2012-05-21 08:27:02 UTC	2022-12-08 19:45:14 UTC	95.211.229.246
img-getpocket.cdn.mozilla.net (7)	1631	2017-09-01 03:40:57 UTC	2022-12-08 15:50:00 UTC	34.120.237.76
syndication.exdynsrv.com (3)	34243	2016-04-20 18:35:15 UTC	2022-12-08 14:42:33 UTC	95.211.229.247
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2022-12-08 17:20:00 UTC	52.42.148.177
ocsp.sca1b.amazontrust.com (1)	1015	2016-02-14 02:37:56 UTC	2019-03-27 04:05:54 UTC	54.230.245.100
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2022-12-08 17:12:32 UTC	35.241.9.150
animeplaynow.com (3)	0	2022-11-30 12:11:02 UTC	2022-12-07 16:57:20 UTC	104.21.19.67	Unknown ranking
my.rtmark.net (1)	9054	2015-02-04 09:54:57 UTC	2022-12-08 17:42:48 UTC	139.45.195.8
professionalswebcheck.com (1)	0	2022-04-01 22:47:29 UTC	2022-12-08 12:38:48 UTC	52.28.211.11	Unknown ranking
simplewebanalysis.com (1)	0	2022-02-25 04:06:25 UTC	2022-12-08 17:33:26 UTC	52.28.211.11	Unknown ranking
ln.gamesrevenue.com (1)	117740	2017-01-29 20:27:07 UTC	2022-12-07 04:32:56 UTC	5.161.79.44
goplayhere.com (1)	0	2016-01-26 12:17:53 UTC	2022-12-09 03:19:02 UTC	172.67.187.242	Unknown ranking
r3.o.lencr.org (7)	344	2020-12-02 08:52:13 UTC	2022-12-08 17:12:06 UTC	23.36.77.32
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-12-08 17:21:04 UTC	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-12-08 17:14:01 UTC	34.117.237.239
ocsp.digicert.com (3)	86	2012-05-21 07:02:23 UTC	2022-12-08 17:15:52 UTC	93.184.220.29

Scan Date	Severity	Indicator	Comment
2022-12-09	2	simplewebanalysis.com/px.gif?akey=c73209e3a548f31485d4d93c096d1d6c	Malware

Date	UQ / IDS / BL	URL	IP
2023-01-28 03:36:14 +0000	0 - 0 - 4	syndication.exdynsrv.com/splash.php?cat=&idzo (...)	95.211.229.246
2022-12-09 03:43:10 +0000	0 - 0 - 2	syndication.exdynsrv.com/splash.php?cat=&idzo (...)	95.211.229.246
2022-12-09 03:42:57 +0000	0 - 0 - 1	syndication.exdynsrv.com/splash.php?cat=&idzo (...)	95.211.229.246
2022-11-05 19:49:14 +0000	0 - 0 - 3	syndication.optimizesrv.com/d.php?z=6301	95.211.229.246

Date	UQ / IDS / BL	URL	IP
2023-02-03 07:59:08 +0000	0 - 1 - 0	12kbps.xyz/repo/vir/others/windowspolicepro.exe	82.192.82.228
2023-02-03 07:52:25 +0000	0 - 1 - 4	gourmetcheez.com/	178.162.131.129
2023-02-03 07:42:58 +0000	0 - 0 - 1	vtx.azerbrtyacon.com/azeaze.html/b2Q9MXN5ZDYx (...)	81.171.22.5
2023-02-03 06:27:31 +0000	0 - 0 - 2	akuhed.mxp628.com/__dmp__/	85.17.31.122
2023-02-03 06:00:01 +0000	0 - 1 - 0	luckyforbet.com/i/46346	95.211.26.202

Date	UQ / IDS / BL	URL	IP
2023-01-28 03:36:14 +0000	0 - 0 - 4	syndication.exdynsrv.com/splash.php?cat=&idzo (...)	95.211.229.246
2022-12-12 13:24:07 +0000	0 - 0 - 1	syndication.exdynsrv.com/splash.php?cat=&idzo (...)	95.211.229.247
2022-12-09 03:43:10 +0000	0 - 0 - 2	syndication.exdynsrv.com/splash.php?cat=&idzo (...)	95.211.229.246
2022-12-09 03:42:57 +0000	0 - 0 - 1	syndication.exdynsrv.com/splash.php?cat=&idzo (...)	95.211.229.246
2022-09-28 17:35:44 +0000	0 - 0 - 0	syndication.exdynsrv.com	95.211.229.245

Request	Response
GET /splash.php?cat=&idzone=4734030&type=8&p=https://tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY= HTTP/1.1 Host: syndication.exdynsrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: syndication.exdynsrv.com/splash.php?cat=&idzone=4734030 (...) FQDN: syndication.exdynsrv.com IP: 95.211.229.247 HASH: a99c2ce1c69cd8a9156157b42129365a71eda1dd765840dedbf217e26da180dc 95.211.229.247 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 03:42:45 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392aeb5dd0f44.000619202311939815%22%3B%7D; expires=Sun, 08 Dec 2024 03:42:45 GMT; path=; domain=.exdynsrv.com; X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (811) Size: 550 Md5: 3b855e4bcb6e9109d18f869e903989cd Sha1: a986622c42b62dd40e1fbceef8b32fbcab116b4e Sha256: a99c2ce1c69cd8a9156157b42129365a71eda1dd765840dedbf217e26da180dc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8327 Expires: Fri, 09 Dec 2022 06:01:33 GMT Date: Fri, 09 Dec 2022 03:42:46 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f2acd891dc6eb1f09f57a2b086791781 Sha1: 1e2088306501a61edcca1ade62c4d54f23b3b083 Sha256: 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5973 Expires: Fri, 09 Dec 2022 05:22:19 GMT Date: Fri, 09 Dec 2022 03:42:46 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aea93551fa9deb76ae49a3b4019d64fe Sha1: e3b8862057ebe839959228e42246d7b1807fc90c Sha256: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 09 Dec 2022 03:08:17 GMT age: 2069 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: bf0c602d32b3c14606f22a86183b5e3c Sha1: 6eabd8d83475eba731968abe1a05a8bfd272f160 Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA" Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5538 Expires: Fri, 09 Dec 2022 05:15:04 GMT Date: Fri, 09 Dec 2022 03:42:46 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4ee537977be9c03702f8ffe0025bf1fe Sha1: 21637881c4aa34c4add703f8bff4eff573159f45 Sha256: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: ru6AFxMzMekkt+uhLBkpF9/XQPxCiXwsmzk72sjfdM5NxGHuQtO/75kKJKEkicEGb+LpEzVs5fw= x-amz-request-id: JMZTX23YC8GJRTYG content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 09 Dec 2022 02:50:05 GMT age: 3161 last-modified: Wed, 30 Nov 2022 10:06:34 GMT etag: "53341dea33f4f3d9b4966f80589f429a" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 53341dea33f4f3d9b4966f80589f429a Sha1: 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 09 Dec 2022 03:42:46 GMT content-length: 12 vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /favicon.ico HTTP/1.1 Host: syndication.exdynsrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://syndication.exdynsrv.com/splash.php?cat=&idzone=4734030&type=8&p=https://tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY= Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392aeb5dd0f44.000619202311939815%22%3B%7D	URL: syndication.exdynsrv.com/favicon.ico FQDN: syndication.exdynsrv.com IP: 95.211.229.247 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 95.211.229.247 HTTP/1.1 204 No Content Server: nginx Date: Fri, 09 Dec 2022 03:42:46 GMT Connection: keep-alive X-Robots-Tag: noindex, follow --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /splash.php?cat=&idzone=4734030&type=8&p=https://tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0 HTTP/1.1 Host: syndication.exdynsrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://syndication.exdynsrv.com/splash.php?cat=&idzone=4734030&type=8&p=https://tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY= Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392aeb5dd0f44.000619202311939815%22%3B%7D Upgrade-Insecure-Requests: 1	URL: syndication.exdynsrv.com/splash.php?cat=&idzone=4734030 (...) FQDN: syndication.exdynsrv.com IP: 95.211.229.247 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 95.211.229.247 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 03:42:46 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392aeb5dd0f44.000619202311939815%22%3B%7D; expires=Sun, 08 Dec 2024 03:42:46 GMT; path=; domain=.exdynsrv.com; impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxamecmrmabgeimacslbecnxgxaaabssxamgeislsaroornxgxamercxaxlgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxamecmscacgeiccmmlmlcnxgxameomroeegeialbsereanxgxaalrollmegeioslmrxbrnxgxamercxaxlgeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxamercolsxgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameexmllsgeiccmmlleanxgxameexmerxgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamecmrmabgeioslmrxbmnxgxamesrlmlogeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxameoxbrrrgeimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamecabelcgeimcclsxmenxgxamecabelcgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxameexxllrgeimcclsxbcnxgxameomoscbgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamesemoslgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamesemoslgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxaalrlccrxgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxaalesmxrsgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameolxrmmgeimcclselenxgxamecrasabgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxamecrasabgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxameobesbsgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamecrasabgeimmccrlacnxgxamecmrmabgeimrblxeoenxgxamecrasabgeimmccrlaonxgxamecmscacgeimrxccosoncgxamecmselogxcceicloaxxacnxgxamecmselsgxcceixaoossalnsgxamecmselsgxcceimmccrbxenxgxamecbxbacgeimmcorsxonxgxamecmscacgxcceicmarxbbonsgxamecmscacgxcceialbmlesenxgxamecmcmrogxcceimrxmbarenxgxamecmcmrogxcceimxlbmoconcgxamecmrsbogxcceicloaxxaanxgxamecmmsrogxcceimraeelabnsgxamecmmcxsgxcceimrxccosancgxamecmmcsogxcceimxxerreonxgxamecmmcsogxcceiceecmorsnxgxamecmmcsogxcceimeembesonxgxamecmbbmegxcceimxxerrxenxgxamecmlbxegxcceimcssmlrensgxamecmlbxegxcceialbbebsbnxgxamecmlbxegxcceimmossscensgxamecmlbxegxcceimxxerrebnxgxamecbeobxgxcceimxlbalcenogxamecbeobogxcceimeembescnxgxamecbessmgxcceialrexeoonxgxamecbxmbmgxcceimmccrlaenxgxamercolsxgeimcoaxmxoncgxamecbsaregxcceimeembecenxgxamecbsaregxcceimasbmxconxgxamecbmrbsgxcceimxlbmosensgxamecbbmbcgxcceimmooobranogxamecloaaogxcceimeelaclonogxamecloaaogxcceimeelaclanxgxamecloaaogxcceicloaxxabnxgxameclomccgxcceimmcoaalenxgxameclcbsbgxcceimxlbmosanogxamerexxbogxcceimcoaxmxcncgxamereobergxcceimcssmlrcnsgxamereobergxcceimrceboxanxgxamerelarmgxcceimaoobbebnxgxamerelarmgxcceicloaecoanxgxamerelarmgxcceimmooobronogxamerelbregxcceimaabamcanxgxamerelbregxcceimxreaomcnxgxamerxslmbgxcceimmxerbocnxgxamerxslmlgxcceimmosssconsgxameroxoscgxcceimcssmlroncgxameroxoscgxcceimxlbmosonrgxameroxoscgxcceialbbebrenxgxameroxoscgxcceimmcaacrancgxameroxoscgxcceialrexexbnxgxameroxmargxcceimclsaoxbnmgxamerooesbgxcceimxxerrecnxgxamerooeslgxcceimexexabbnxgxamerooecxgxcceicxmecmcanxgxamerooecxgxcceimrbleaxonogxameroarrbgxcceimxlbmoobnogxamerssomrgxcceimxlbalscnxgxamerscassgxcceimmsoxrlenxgxamersreclgxcceimrxccoscnxgxamersrlacgxcceimxeoxsbenxgxamersblamgxcceimxlbmxbbnxgxamersblamgxcceimsacexoonxgxamersblamgxcceimmcorsebnxgxamersblamgxcceimxlbmxlonogxamercxaxlgxcceislmbeslrnxgxamercxaxlgxoaeimmcorsxanogxamercxaxlgxcceimxeoxsacnogxamercxaxlgxcceimaoolcoonxgxamercxmxcgxcceimmccrbebnxgxamercolsxgeimmxcxslenxgxamercolsxgxcceimmsoxrlonxgxamerccesxgxcceimmsxrlabnxgxamerccesxgxcceimaalslbanogxamerccesxgxcceimmsoxrlcnxgxamerccesxgxcceimrbxmxmanxgxamercbeblgxcceimmoabamcnogxamercbeblgxcceimaoobrbcnogxamercbeblgxcceimaooloranxgxamerrsxaagxcceimaoobrbanogxamerrsxaagxcceialbmmbbenxgxamerrsrbcgxcceimmooobrcnxgxamerrsrbcgxcceiaaxcambbnxgxamerrsrbcgxcceimromoslanxgxamerrsrbcgxcceimxlbmoscnxgxamerrsrbcgxcceimxeemleanxgxamerrsrbcgxcceimrcebeaenxgxamerrmsaagxcce; expires=Sat, 10 Dec 2022 03:42:46 GMT; path=/; domain=.exdynsrv.com; c-tag=%7B%22tag-link%22%3A%22v3%7C%7CNOR%7C4734030%7C75408060%7C0%7C%7C517%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C6392aeb5dd0f44.000619202311939815%7C8eb713ec8cdc14035d0efbf4dd15f05c%7C0%7Ctioanime.com%7C1280x1024%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Sat, 10 Dec 2022 03:42:46 GMT; path=/; domain=.exdynsrv.com; Location: https://goplayhere.com/?5defa5d178518&ag_custom_domain=tioanime.com X-Robots-Tag: noindex, follow --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 09 Dec 2022 03:07:59 GMT age: 2087 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 8ed3c868d556318eb23d4dc0592daa2b8ceaec5bedb493b7c59f5959471f11a0 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5981 Cache-Control: 'max-age=158059' Date: Fri, 09 Dec 2022 03:42:46 GMT Last-Modified: Fri, 09 Dec 2022 02:03:05 GMT Server: ECS (amb/6B93) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: 07f4d799f20c86bc36a16a606fbed917 Sha1: e05f5cd071693de228d62d3e54b2626fcb3c9707 Sha256: 8ed3c868d556318eb23d4dc0592daa2b8ceaec5bedb493b7c59f5959471f11a0
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3021 Cache-Control: max-age=108867 Date: Fri, 09 Dec 2022 03:42:46 GMT Etag: "6391a92c-1d7" Expires: Sat, 10 Dec 2022 09:57:13 GMT Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT Server: ECS (ska/F70C) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fd55f4aaaab6ec40bc7dc10252cd819a Sha1: a72523f60be265a391fa9edc43e0a93418ad1fd0 Sha256: bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 8ed3c868d556318eb23d4dc0592daa2b8ceaec5bedb493b7c59f5959471f11a0 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5981 Cache-Control: 'max-age=158059' Date: Fri, 09 Dec 2022 03:42:46 GMT Last-Modified: Fri, 09 Dec 2022 02:03:05 GMT Server: ECS (ska/F70C) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: 07f4d799f20c86bc36a16a606fbed917 Sha1: e05f5cd071693de228d62d3e54b2626fcb3c9707 Sha256: 8ed3c868d556318eb23d4dc0592daa2b8ceaec5bedb493b7c59f5959471f11a0
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 5192a05f27b0bbc1cc16339ce00a213cbf20518322f83a76760ce554fc4a26bb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 344 ETag: "5192A05F27B0BBC1CC16339CE00A213CBF20518322F83A76760CE554FC4A26BB" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13864 Expires: Fri, 09 Dec 2022 07:33:51 GMT Date: Fri, 09 Dec 2022 03:42:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 344 Md5: 5872b7128b0abeb4bc16b9c9a2a7040b Sha1: 9e3e789a138c3b2bd98f31713e60599b2832a0f9 Sha256: 5192a05f27b0bbc1cc16339ce00a213cbf20518322f83a76760ce554fc4a26bb
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: qRg+6V2bcvyPPOI9KgtNxQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.42.148.177 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.42.148.177 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: x0714zWO+XPTwRxxQubz0uQCQmw= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 5192a05f27b0bbc1cc16339ce00a213cbf20518322f83a76760ce554fc4a26bb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 344 ETag: "5192A05F27B0BBC1CC16339CE00A213CBF20518322F83A76760CE554FC4A26BB" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13864 Expires: Fri, 09 Dec 2022 07:33:51 GMT Date: Fri, 09 Dec 2022 03:42:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 344 Md5: 5872b7128b0abeb4bc16b9c9a2a7040b Sha1: 9e3e789a138c3b2bd98f31713e60599b2832a0f9 Sha256: 5192a05f27b0bbc1cc16339ce00a213cbf20518322f83a76760ce554fc4a26bb
GET /awpx_click.js HTTP/1.1 Host: animeplaynow.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://animeplaynow.com/cw/cw_0922/land_cw_140922_2_na_en/?utm_campaign=pu_exo_manga_na&utm_medium=click&utm_source=pu&utm_content=tioanime.com&bnid=land_cw_140922_2_na_en&landing=modest&land=land_cw_140922_2_na_en&crID=2498420&zID=95870 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: animeplaynow.com/awpx_click.js FQDN: animeplaynow.com IP: 104.21.19.67 HASH: 0a8dcfdced369bc8c3760d55a78ef8d68d9e2fbe8dd319ea77d9add25d7c570e 104.21.19.67 HTTP/2 200 OK content-type: application/javascript date: Fri, 09 Dec 2022 03:42:47 GMT last-modified: Mon, 22 Aug 2022 12:49:51 GMT etag: W/"63037b6f-5cb" cache-control: max-age=14400 cf-cache-status: HIT age: 6264 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0VASm3xfi3IWKdWwnupd5NBo6qshADoYBREG8Wa4Hbqv0GWCLNqPym3B68RKcgVSIcDpUhKOfYRyMiQ2fH1a5kJ5zYtcIo6X0kVEprlhOgxW8a2ep5nmI%2Bd3UDC8Nzyu%2FyK6"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 776abb99ebe5b506-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 1098 Md5: 785dd85fc122a176c7a3964795c5375b Sha1: 0cf2d7946a4644c9665ce15973551c8478c4f84f Sha256: 0a8dcfdced369bc8c3760d55a78ef8d68d9e2fbe8dd319ea77d9add25d7c570e
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 74a41cb73844d67c6bb09a04095878441a1b9d59cbce67a7ca0cd7dd64f08354 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 346 ETag: "74A41CB73844D67C6BB09A04095878441A1B9D59CBCE67A7CA0CD7DD64F08354" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8149 Expires: Fri, 09 Dec 2022 05:58:36 GMT Date: Fri, 09 Dec 2022 03:42:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 346 Md5: 60f8362598607aac51bd2e40ae9c0801 Sha1: 4eddc9eefc8c181c23add2a7a44b22376844ab2e Sha256: 74a41cb73844d67c6bb09a04095878441a1b9d59cbce67a7ca0cd7dd64f08354
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4C0D144B20AB8CF7FEC972A66E08ED2B993121E9C4B6C88BBF0F3E7388F2B058" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5122 Expires: Fri, 09 Dec 2022 05:08:09 GMT Date: Fri, 09 Dec 2022 03:42:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: acea7cb44141792f5d84b0c9ab8c57e4 Sha1: 69f1e46739200324bd891063d17c7a7083f313b7 Sha256: 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058
GET /img.gif?f=sync&lr=1&partner=3c31714cb43d8cad76b686191340e198fbf9abb01c60cc8f2696befec37406ed HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://animeplaynow.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: my.rtmark.net/img.gif?f=sync&lr=1&partner=3c31714cb43d8 (...) FQDN: my.rtmark.net IP: 139.45.195.8 HASH: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49 139.45.195.8 HTTP/2 200 OK content-type: image/gif server: nginx date: Fri, 09 Dec 2022 03:42:47 GMT content-length: 43 access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true set-cookie: ID=148ec71e91f644cd8cf480517fdb0810; expires=Sat, 09 Dec 2023 03:42:47 GMT; secure; SameSite=None strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: b4491705564909da7f9eaf749dbbfbb1 Sha1: 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /tag.php?goal=006c56869df4f6cad4a6c2049dd87c17 HTTP/1.1 Host: syndication.exoclick.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://animeplaynow.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: syndication.exoclick.com/tag.php?goal=006c56869df4f6cad (...) FQDN: syndication.exoclick.com IP: 95.211.229.246 HASH: f79aa32cd04043dc2b32a78e71dde2ae77e4c47c054927472852cf8aa4d7d8f0 95.211.229.246 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 03:42:48 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A59059%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 03:42:48 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 162 Md5: 45289159d49f317a7e9b0e967e62139c Sha1: 433fee419e85e4d94961301cdc8ec4c09a182b0b Sha256: f79aa32cd04043dc2b32a78e71dde2ae77e4c47c054927472852cf8aa4d7d8f0
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4081 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 03:42:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4081 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 03:42:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4081 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 03:42:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f14393b6bcc036fa9ed61114944ebb25192adfec72c09807eb7948a88c790d69 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8345 x-amzn-requestid: 4e42c335-cc27-41bc-8d5c-cbe3dcc1f623 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cpwRBF_gIAMFdCA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638d60d3-254d38575d76726a4462c66f;Sampled=0 x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Z2JMjvOva19O3uj7la6UmjCpwleEyo3y2IfRCp4qp5iuob0AYN9Mng== via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 12:37:33 GMT age: 54315 etag: "4792b0893827924e84cc51450012407717da4d2b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8345 Md5: 659b6eb1f1c430e2780758c7787b9a23 Sha1: 4792b0893827924e84cc51450012407717da4d2b Sha256: f14393b6bcc036fa9ed61114944ebb25192adfec72c09807eb7948a88c790d69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7960 x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctEd8HC0oAMFUag= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: kTEbkncBnAJmQE8cdAqvDtejiwaetpRBsVcpLXy1h52lO4iUkzmOGA== via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 16:28:48 GMT age: 40440 etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7960 Md5: eb00a2a503a690cee3e4dd729b5bc9bd Sha1: cfb1e5bcab2148a777889680e6e36b9d7e8917ec Sha256: 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7557 x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctluwGo4oAMFhTg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 12:33:10 GMT age: 54578 etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7557 Md5: 5de5d319f43d9c9c641419d96655541f Sha1: cde4c7fa0145d3645af17e34c83c63c08f76a076 Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7897 x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cwVM_F51IAMFunw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0 x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Dec 2022 03:41:46 GMT age: 62 etag: "7558222788f06623ddae6e883413e38e1146281e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7897 Md5: 8c3214044657f3b876d1f1848bca5684 Sha1: 7558222788f06623ddae6e883413e38e1146281e Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8204 x-amzn-requestid: cf54b5f8-ede8-49d5-aa56-5d9de98e3ab8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cjtKfEiToAMFSXA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638af576-6ddfe35c0b31074d6a07076f;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:30 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: UfqFAlLedF6ZkfbGXhyYDcvu0porNJb6LPaeQ8p4dqWqsFD6iRgWLw== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 15:12:28 GMT age: 45020 etag: "6cee6b1828c709f68b995197ca943a5c393f86fb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8204 Md5: 9cb76c68a8cd472600106cc118067868 Sha1: 6cee6b1828c709f68b995197ca943a5c393f86fb Sha256: 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12748 x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cjuciEptIAMFj9A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 13:49:59 GMT age: 49969 etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12748 Md5: 730ba1a8edb79ba6f83b46d1ba5aed7b Sha1: 55a236fedf6f5f7ca2bb88ae13e20846a50fd36d Sha256: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 74a41cb73844d67c6bb09a04095878441a1b9d59cbce67a7ca0cd7dd64f08354 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 346 ETag: "74A41CB73844D67C6BB09A04095878441A1B9D59CBCE67A7CA0CD7DD64F08354" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8148 Expires: Fri, 09 Dec 2022 05:58:36 GMT Date: Fri, 09 Dec 2022 03:42:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 346 Md5: 60f8362598607aac51bd2e40ae9c0801 Sha1: 4eddc9eefc8c181c23add2a7a44b22376844ab2e Sha256: 74a41cb73844d67c6bb09a04095878441a1b9d59cbce67a7ca0cd7dd64f08354
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 54.230.245.100 HASH: 948585d009f8f8398946c69a91a0de04131aee950e89e535b4f10ab44a82885a 54.230.245.100 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=123286 Date: Fri, 09 Dec 2022 03:42:48 GMT Etag: "6391e720-1d7" Expires: Sat, 10 Dec 2022 13:57:34 GMT Last-Modified: Thu, 08 Dec 2022 13:31:12 GMT Server: ECS (nyb/1D14) X-Cache: Miss from cloudfront Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: u9fZ4nQGR9TQxtC3k3AdUfBKqDJd7OTDjBS2hsYxnoGlFZ0h6dcc8g== Age: 1582 --- Additional Info --- Magic: data Size: 471 Md5: 7c9c260994be6fdf4350a40bb4391067 Sha1: 869680337416c11c54a3ee10c9a6e601c5ec7e11 Sha256: 948585d009f8f8398946c69a91a0de04131aee950e89e535b4f10ab44a82885a
GET /px.gif?akey=c73209e3a548f31485d4d93c096d1d6c HTTP/1.1 Host: simplewebanalysis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://animeplaynow.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: simplewebanalysis.com/px.gif?akey=c73209e3a548f31485d4d (...) FQDN: simplewebanalysis.com IP: 52.28.211.11 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.28.211.11 HTTP/2 307 Temporary Redirect content-type: image/gif date: Fri, 09 Dec 2022 03:42:48 GMT content-length: 0 location: https://professionalswebcheck.com/dbs?uuid=11a8997e-6a39-4129-acdb-cce9357810c0&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsgIjQyMSI6MTY3MDU1NzM2OH0sImFjY2wiOnsgIjIwLDMiOjE2NzA1NTczNjh9fQ.qTouwHfWhFK4kwCJZl_IWGGBOVdEENXoRcQhYckIGXI server: nginx/1.17.6 set-cookie: uid_id2=11a8997e-6a39-4129-acdb-cce9357810c0:2:1; expires=Mon, 06 Dec 2032 03:42:48 GMT; secure; SameSite=None ak=421,1670557368; expires=Thu, 09 Mar 2023 03:42:48 GMT; secure; SameSite=None acl=20,3,1670557368; expires=Thu, 09 Mar 2023 03:42:48 GMT; secure; SameSite=None expires: Fri, 09 Dec 2022 03:42:48 GMT cache-control: max-age=0, : no-cache X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Malware
GET /dbs?uuid=11a8997e-6a39-4129-acdb-cce9357810c0&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsgIjQyMSI6MTY3MDU1NzM2OH0sImFjY2wiOnsgIjIwLDMiOjE2NzA1NTczNjh9fQ.qTouwHfWhFK4kwCJZl_IWGGBOVdEENXoRcQhYckIGXI HTTP/1.1 Host: professionalswebcheck.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://animeplaynow.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: professionalswebcheck.com/dbs?uuid=11a8997e-6a39-4129-a (...) FQDN: professionalswebcheck.com IP: 52.28.211.11 HASH: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c 52.28.211.11 HTTP/2 200 OK content-type: image/gif date: Fri, 09 Dec 2022 03:42:49 GMT content-length: 7 server: nginx/1.17.6 set-cookie: uid_id2=11a8997e-6a39-4129-acdb-cce9357810c0:2:1; expires=Mon, 06 Dec 2032 03:42:49 GMT; secure; SameSite=None ak=421,1670557368; expires=Thu, 09 Mar 2023 03:42:49 GMT; secure; SameSite=None acl=20,3,1670557368; expires=Thu, 09 Mar 2023 03:42:49 GMT; secure; SameSite=None expires: Fri, 09 Dec 2022 03:42:49 GMT cache-control: max-age=0, : no-cache X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 7 Md5: 132d6af1b46048b45cf86cdee7991d31 Sha1: eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7217 x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: csUEDEWpIAMFqUQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0 x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 08:39:07 GMT age: 68628 etag: "2506152cdd1056533116feb9350124356e570e54" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7217 Md5: 955c6ac69b89f6cbd497df53fcb2ae1b Sha1: 2506152cdd1056533116feb9350124356e570e54 Sha256: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe
GET /cw/cw_0922/land_cw_140922_2_na_en/?utm_campaign=pu_exo_manga_na&utm_medium=click&utm_source=pu&utm_content=tioanime.com&bnid=land_cw_140922_2_na_en&landing=modest&land=land_cw_140922_2_na_en&crID=2498420&zID=95870 HTTP/1.1 Host: animeplaynow.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://syndication.exdynsrv.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: animeplaynow.com/cw/cw_0922/land_cw_140922_2_na_en/?utm (...) FQDN: animeplaynow.com IP: 104.21.19.67 104.21.19.67 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Fri, 09 Dec 2022 03:42:47 GMT cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X9P0YvfBRVFmfkkHh6a4E1yx%2B9JgOvGoYlm8x9p2jw%2BNX5di2L1AtVeQdW58m9H%2BUpC3%2F66NBHuU9q63VNcF%2BCb1YiNXDggjJHqXOclC4W%2BM4o7YX80Ion0C%2FI%2F49i9DILs7"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 776abb984afbb506-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /px1.js HTTP/1.1 Host: ln.gamesrevenue.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://animeplaynow.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ln.gamesrevenue.com/px1.js FQDN: ln.gamesrevenue.com IP: 5.161.79.44 5.161.79.44 HTTP/2 200 OK content-type: application/javascript server: nginx date: Fri, 09 Dec 2022 03:42:47 GMT last-modified: Thu, 01 Dec 2022 11:50:26 GMT etag: W/"63889502-3c9d" content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /cw/cw_0922/land_cw_140922_2_na_en/libs/jquery.min.js HTTP/1.1 Host: animeplaynow.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://animeplaynow.com/cw/cw_0922/land_cw_140922_2_na_en/?utm_campaign=pu_exo_manga_na&utm_medium=click&utm_source=pu&utm_content=tioanime.com&bnid=land_cw_140922_2_na_en&landing=modest&land=land_cw_140922_2_na_en&crID=2498420&zID=95870 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: animeplaynow.com/cw/cw_0922/land_cw_140922_2_na_en/libs (...) FQDN: animeplaynow.com IP: 104.21.19.67 104.21.19.67 HTTP/2 200 OK content-type: application/javascript date: Fri, 09 Dec 2022 03:42:47 GMT last-modified: Wed, 14 Sep 2022 18:17:40 GMT etag: W/"63221ac4-1538f" cache-control: max-age=14400 cf-cache-status: HIT age: 6264 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YSEgMIjaBoMbjcTUSZls4LJ3%2FojVzAMC03IJxI7ofNq4iQgYrZnkC2y00%2Bsbac%2B92COtyNxhhuCTZzX%2BB2cA99gN7%2F%2FdP97JB2%2BG2uADqlNoPscrhgvZ3QGH7oEHdF9f7dPp"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 776abb99ebe4b506-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /?5defa5d178518&ag_custom_domain=tioanime.com HTTP/1.1 Host: goplayhere.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://syndication.exdynsrv.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: goplayhere.com/?5defa5d178518&ag_custom_domain=tioanime.com FQDN: goplayhere.com IP: 172.67.187.242 172.67.187.242 HTTP/2 302 Found content-type: text/html date: Fri, 09 Dec 2022 03:42:46 GMT location: https://animeplaynow.com/cw/cw_0922/land_cw_140922_2_na_en/?utm_campaign=pu_exo_manga_na&utm_medium=click&utm_source=pu&utm_content=tioanime.com&bnid=land_cw_140922_2_na_en&landing=modest&land=land_cw_140922_2_na_en&crID=2498420&zID=95870 set-cookie: c_4922a3b7a0e06c7197ab9b98de0b2684=1; Expires=Sat, 10-Dec-22 03:42:46 GMT; Domain=goplayhere.com; Path=/; Secure; SameSite=None z_1ee83bf51fc9ae04880b726070ec8393=1; Expires=Sat, 10-Dec-22 03:42:46 GMT; Domain=goplayhere.com; Path=/; Secure; SameSite=None cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rF5qLyZiRyrq8d%2FZ9gfqUQUav5GpD86qg7V0NqncKfwMgWnnD5U%2FBkdMIj51lCPG%2FwxATkTH8jg7zjlkSkbVzWZnf4oiYEav8wVnDtxopf32ZrMP3%2BFQN4Q3hb2hPcj%2F2Q%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 776abb965c12b4e8-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            GET /splash.php?cat=&idzone=4734030&type=8&p=https://tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY= HTTP/1.1 

                                        
                                            
Host: syndication.exdynsrv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         95.211.229.247

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:45 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392aeb5dd0f44.000619202311939815%22%3B%7D; expires=Sun, 08 Dec 2024 03:42:45 GMT; path=; domain=.exdynsrv.com; 

                                        
                                            
X-Robots-Tag: noindex, follow 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (811)

                                                Size:   550

                                                Md5:    3b855e4bcb6e9109d18f869e903989cd

                                                Sha1:   a986622c42b62dd40e1fbceef8b32fbcab116b4e

                                                Sha256: a99c2ce1c69cd8a9156157b42129365a71eda1dd765840dedbf217e26da180dc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5973 

                                        
                                            
Expires: Fri, 09 Dec 2022 05:22:19 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:46 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aea93551fa9deb76ae49a3b4019d64fe

                                                Sha1:   e3b8862057ebe839959228e42246d7b1807fc90c

                                                Sha256: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA" 

                                        
                                            
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5538 

                                        
                                            
Expires: Fri, 09 Dec 2022 05:15:04 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:46 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    4ee537977be9c03702f8ffe0025bf1fe

                                                Sha1:   21637881c4aa34c4add703f8bff4eff573159f45

                                                Sha256: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 09 Dec 2022 03:42:46 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /splash.php?cat=&idzone=4734030&type=8&p=https://tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0 HTTP/1.1 

                                        
                                            
Host: syndication.exdynsrv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://syndication.exdynsrv.com/splash.php?cat=&idzone=4734030&type=8&p=https://tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY= 

                                        
                                            
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392aeb5dd0f44.000619202311939815%22%3B%7D 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         95.211.229.247

                                        
                                            HTTP/1.1 302 Found 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:46 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392aeb5dd0f44.000619202311939815%22%3B%7D; expires=Sun, 08 Dec 2024 03:42:46 GMT; path=; domain=.exdynsrv.com;
impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxamecmrmabgeimacslbecnxgxaaabssxamgeislsaroornxgxamercxaxlgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxamecmscacgeiccmmlmlcnxgxameomroeegeialbsereanxgxaalrollmegeioslmrxbrnxgxamercxaxlgeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxamercolsxgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameexmllsgeiccmmlleanxgxameexmerxgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamecmrmabgeioslmrxbmnxgxamesrlmlogeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxameoxbrrrgeimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamecabelcgeimcclsxmenxgxamecabelcgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxameexxllrgeimcclsxbcnxgxameomoscbgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamesemoslgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamesemoslgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxaalrlccrxgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxaalesmxrsgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameolxrmmgeimcclselenxgxamecrasabgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxamecrasabgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxameobesbsgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamecrasabgeimmccrlacnxgxamecmrmabgeimrblxeoenxgxamecrasabgeimmccrlaonxgxamecmscacgeimrxccosoncgxamecmselogxcceicloaxxacnxgxamecmselsgxcceixaoossalnsgxamecmselsgxcceimmccrbxenxgxamecbxbacgeimmcorsxonxgxamecmscacgxcceicmarxbbonsgxamecmscacgxcceialbmlesenxgxamecmcmrogxcceimrxmbarenxgxamecmcmrogxcceimxlbmoconcgxamecmrsbogxcceicloaxxaanxgxamecmmsrogxcceimraeelabnsgxamecmmcxsgxcceimrxccosancgxamecmmcsogxcceimxxerreonxgxamecmmcsogxcceiceecmorsnxgxamecmmcsogxcceimeembesonxgxamecmbbmegxcceimxxerrxenxgxamecmlbxegxcceimcssmlrensgxamecmlbxegxcceialbbebsbnxgxamecmlbxegxcceimmossscensgxamecmlbxegxcceimxxerrebnxgxamecbeobxgxcceimxlbalcenogxamecbeobogxcceimeembescnxgxamecbessmgxcceialrexeoonxgxamecbxmbmgxcceimmccrlaenxgxamercolsxgeimcoaxmxoncgxamecbsaregxcceimeembecenxgxamecbsaregxcceimasbmxconxgxamecbmrbsgxcceimxlbmosensgxamecbbmbcgxcceimmooobranogxamecloaaogxcceimeelaclonogxamecloaaogxcceimeelaclanxgxamecloaaogxcceicloaxxabnxgxameclomccgxcceimmcoaalenxgxameclcbsbgxcceimxlbmosanogxamerexxbogxcceimcoaxmxcncgxamereobergxcceimcssmlrcnsgxamereobergxcceimrceboxanxgxamerelarmgxcceimaoobbebnxgxamerelarmgxcceicloaecoanxgxamerelarmgxcceimmooobronogxamerelbregxcceimaabamcanxgxamerelbregxcceimxreaomcnxgxamerxslmbgxcceimmxerbocnxgxamerxslmlgxcceimmosssconsgxameroxoscgxcceimcssmlroncgxameroxoscgxcceimxlbmosonrgxameroxoscgxcceialbbebrenxgxameroxoscgxcceimmcaacrancgxameroxoscgxcceialrexexbnxgxameroxmargxcceimclsaoxbnmgxamerooesbgxcceimxxerrecnxgxamerooeslgxcceimexexabbnxgxamerooecxgxcceicxmecmcanxgxamerooecxgxcceimrbleaxonogxameroarrbgxcceimxlbmoobnogxamerssomrgxcceimxlbalscnxgxamerscassgxcceimmsoxrlenxgxamersreclgxcceimrxccoscnxgxamersrlacgxcceimxeoxsbenxgxamersblamgxcceimxlbmxbbnxgxamersblamgxcceimsacexoonxgxamersblamgxcceimmcorsebnxgxamersblamgxcceimxlbmxlonogxamercxaxlgxcceislmbeslrnxgxamercxaxlgxoaeimmcorsxanogxamercxaxlgxcceimxeoxsacnogxamercxaxlgxcceimaoolcoonxgxamercxmxcgxcceimmccrbebnxgxamercolsxgeimmxcxslenxgxamercolsxgxcceimmsoxrlonxgxamerccesxgxcceimmsxrlabnxgxamerccesxgxcceimaalslbanogxamerccesxgxcceimmsoxrlcnxgxamerccesxgxcceimrbxmxmanxgxamercbeblgxcceimmoabamcnogxamercbeblgxcceimaoobrbcnogxamercbeblgxcceimaooloranxgxamerrsxaagxcceimaoobrbanogxamerrsxaagxcceialbmmbbenxgxamerrsrbcgxcceimmooobrcnxgxamerrsrbcgxcceiaaxcambbnxgxamerrsrbcgxcceimromoslanxgxamerrsrbcgxcceimxlbmoscnxgxamerrsrbcgxcceimxeemleanxgxamerrsrbcgxcceimrcebeaenxgxamerrmsaagxcce; expires=Sat, 10 Dec 2022 03:42:46 GMT; path=/; domain=.exdynsrv.com;
c-tag=%7B%22tag-link%22%3A%22v3%7C%7CNOR%7C4734030%7C75408060%7C0%7C%7C517%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C6392aeb5dd0f44.000619202311939815%7C8eb713ec8cdc14035d0efbf4dd15f05c%7C0%7Ctioanime.com%7C1280x1024%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Sat, 10 Dec 2022 03:42:46 GMT; path=/; domain=.exdynsrv.com; 

                                        
                                            
Location: https://goplayhere.com/?5defa5d178518&ag_custom_domain=tioanime.com 

                                        
                                            
X-Robots-Tag: noindex, follow 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5981 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:46 GMT 

                                        
                                            
Last-Modified: Fri, 09 Dec 2022 02:03:05 GMT 

                                        
                                            
Server: ECS (amb/6B93) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 280 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   280

                                                Md5:    07f4d799f20c86bc36a16a606fbed917

                                                Sha1:   e05f5cd071693de228d62d3e54b2626fcb3c9707

                                                Sha256: 8ed3c868d556318eb23d4dc0592daa2b8ceaec5bedb493b7c59f5959471f11a0

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5981 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:46 GMT 

                                        
                                            
Last-Modified: Fri, 09 Dec 2022 02:03:05 GMT 

                                        
                                            
Server: ECS (ska/F70C) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 280 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   280

                                                Md5:    07f4d799f20c86bc36a16a606fbed917

                                                Sha1:   e05f5cd071693de228d62d3e54b2626fcb3c9707

                                                Sha256: 8ed3c868d556318eb23d4dc0592daa2b8ceaec5bedb493b7c59f5959471f11a0

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: qRg+6V2bcvyPPOI9KgtNxQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         52.42.148.177

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: x0714zWO+XPTwRxxQubz0uQCQmw= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /awpx_click.js HTTP/1.1 

                                        
                                            
Host: animeplaynow.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://animeplaynow.com/cw/cw_0922/land_cw_140922_2_na_en/?utm_campaign=pu_exo_manga_na&utm_medium=click&utm_source=pu&utm_content=tioanime.com&bnid=land_cw_140922_2_na_en&landing=modest&land=land_cw_140922_2_na_en&crID=2498420&zID=95870 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         104.21.19.67

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
date: Fri, 09 Dec 2022 03:42:47 GMT 

                                        
                                            
last-modified: Mon, 22 Aug 2022 12:49:51 GMT 

                                        
                                            
etag: W/"63037b6f-5cb" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 6264 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0VASm3xfi3IWKdWwnupd5NBo6qshADoYBREG8Wa4Hbqv0GWCLNqPym3B68RKcgVSIcDpUhKOfYRyMiQ2fH1a5kJ5zYtcIo6X0kVEprlhOgxW8a2ep5nmI%2Bd3UDC8Nzyu%2FyK6"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 776abb99ebe5b506-OSL 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   1098

                                                Md5:    785dd85fc122a176c7a3964795c5375b

                                                Sha1:   0cf2d7946a4644c9665ce15973551c8478c4f84f

                                                Sha256: 0a8dcfdced369bc8c3760d55a78ef8d68d9e2fbe8dd319ea77d9add25d7c570e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4C0D144B20AB8CF7FEC972A66E08ED2B993121E9C4B6C88BBF0F3E7388F2B058" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5122 

                                        
                                            
Expires: Fri, 09 Dec 2022 05:08:09 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:47 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    acea7cb44141792f5d84b0c9ab8c57e4

                                                Sha1:   69f1e46739200324bd891063d17c7a7083f313b7

                                                Sha256: 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058

                                        
                                            GET /tag.php?goal=006c56869df4f6cad4a6c2049dd87c17 HTTP/1.1 

                                        
                                            
Host: syndication.exoclick.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://animeplaynow.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         95.211.229.246

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:48 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Set-Cookie: goals=a%3A1%3A%7Bi%3A59059%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 03:42:48 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none 

                                        
                                            
X-Robots-Tag: noindex, follow 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   162

                                                Md5:    45289159d49f317a7e9b0e967e62139c

                                                Sha1:   433fee419e85e4d94961301cdc8ec4c09a182b0b

                                                Sha256: f79aa32cd04043dc2b32a78e71dde2ae77e4c47c054927472852cf8aa4d7d8f0

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4081 

                                        
                                            
Expires: Fri, 09 Dec 2022 04:50:49 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:48 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7b8c1870f03a90aac6370fc69516f95f

                                                Sha1:   1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb

                                                Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8345 

                                        
                                            
x-amzn-requestid: 4e42c335-cc27-41bc-8d5c-cbe3dcc1f623 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cpwRBF_gIAMFdCA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638d60d3-254d38575d76726a4462c66f;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: Z2JMjvOva19O3uj7la6UmjCpwleEyo3y2IfRCp4qp5iuob0AYN9Mng== 

                                        
                                            
via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 08 Dec 2022 12:37:33 GMT 

                                        
                                            
age: 54315 

                                        
                                            
etag: "4792b0893827924e84cc51450012407717da4d2b" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8345

                                                Md5:    659b6eb1f1c430e2780758c7787b9a23

                                                Sha1:   4792b0893827924e84cc51450012407717da4d2b

                                                Sha256: f14393b6bcc036fa9ed61114944ebb25192adfec72c09807eb7948a88c790d69

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7557 

                                        
                                            
x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ctluwGo4oAMFhTg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 08 Dec 2022 12:33:10 GMT 

                                        
                                            
age: 54578 

                                        
                                            
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7557

                                                Md5:    5de5d319f43d9c9c641419d96655541f

                                                Sha1:   cde4c7fa0145d3645af17e34c83c63c08f76a076

                                                Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8204 

                                        
                                            
x-amzn-requestid: cf54b5f8-ede8-49d5-aa56-5d9de98e3ab8 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cjtKfEiToAMFSXA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638af576-6ddfe35c0b31074d6a07076f;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:30 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: UfqFAlLedF6ZkfbGXhyYDcvu0porNJb6LPaeQ8p4dqWqsFD6iRgWLw== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 08 Dec 2022 15:12:28 GMT 

                                        
                                            
age: 45020 

                                        
                                            
etag: "6cee6b1828c709f68b995197ca943a5c393f86fb" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8204

                                                Md5:    9cb76c68a8cd472600106cc118067868

                                                Sha1:   6cee6b1828c709f68b995197ca943a5c393f86fb

                                                Sha256: 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: e1.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 346 

                                        
                                            
ETag: "74A41CB73844D67C6BB09A04095878441A1B9D59CBCE67A7CA0CD7DD64F08354" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8148 

                                        
                                            
Expires: Fri, 09 Dec 2022 05:58:36 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 03:42:48 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   346

                                                Md5:    60f8362598607aac51bd2e40ae9c0801

                                                Sha1:   4eddc9eefc8c181c23add2a7a44b22376844ab2e

                                                Sha256: 74a41cb73844d67c6bb09a04095878441a1b9d59cbce67a7ca0cd7dd64f08354

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7217 

                                        
                                            
x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: csUEDEWpIAMFqUQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 08 Dec 2022 08:39:07 GMT 

                                        
                                            
age: 68628 

                                        
                                            
etag: "2506152cdd1056533116feb9350124356e570e54" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7217

                                                Md5:    955c6ac69b89f6cbd497df53fcb2ae1b

                                                Sha1:   2506152cdd1056533116feb9350124356e570e54

                                                Sha256: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe

                                        
                                            GET /px1.js HTTP/1.1 

                                        
                                            
Host: ln.gamesrevenue.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://animeplaynow.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         5.161.79.44

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 09 Dec 2022 03:42:47 GMT 

                                        
                                            
last-modified: Thu, 01 Dec 2022 11:50:26 GMT 

                                        
                                            
etag: W/"63889502-3c9d" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /?5defa5d178518&ag_custom_domain=tioanime.com HTTP/1.1 

                                        
                                            
Host: goplayhere.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: http://syndication.exdynsrv.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         172.67.187.242

                                        
                                            HTTP/2 302 Found 

                                        
                                            
content-type: text/html

                                        

                                        
                                            
date: Fri, 09 Dec 2022 03:42:46 GMT 

                                        
                                            
location: https://animeplaynow.com/cw/cw_0922/land_cw_140922_2_na_en/?utm_campaign=pu_exo_manga_na&utm_medium=click&utm_source=pu&utm_content=tioanime.com&bnid=land_cw_140922_2_na_en&landing=modest&land=land_cw_140922_2_na_en&crID=2498420&zID=95870 

                                        
                                            
set-cookie: c_4922a3b7a0e06c7197ab9b98de0b2684=1; Expires=Sat, 10-Dec-22 03:42:46 GMT; Domain=goplayhere.com; Path=/; Secure; SameSite=None
z_1ee83bf51fc9ae04880b726070ec8393=1; Expires=Sat, 10-Dec-22 03:42:46 GMT; Domain=goplayhere.com; Path=/; Secure; SameSite=None 

                                        
                                            
cf-cache-status: DYNAMIC 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rF5qLyZiRyrq8d%2FZ9gfqUQUav5GpD86qg7V0NqncKfwMgWnnD5U%2FBkdMIj51lCPG%2FwxATkTH8jg7zjlkSkbVzWZnf4oiYEav8wVnDtxopf32ZrMP3%2BFQN4Q3hb2hPcj%2F2Q%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 776abb965c12b4e8-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	syndication.exdynsrv.com/splash.php?cat=&idzone=4734030&type=8&p=tioanime.com/anime/baki-2018&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=
IP	95.211.229.246 (Netherlands)
ASN	#60781 LeaseWeb Netherlands B.V.
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-09 03:42:57 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (17)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 95.211.229.246

Last 5 reports on ASN: LeaseWeb Netherlands B.V.

Last 5 reports on domain: exdynsrv.com

No other reports with similar screenshot

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (39)

Overview

Domain Summary (17)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 95.211.229.246

Last 5 reports on ASN: LeaseWeb Netherlands B.V.

Last 5 reports on domain: exdynsrv.com

No other reports with similar screenshot

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (39)

Network Intrusion Detection Systems