Report - cdn-115.anonfiles.com/qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar

Report Overview

Submitted URL
cdn-115.anonfiles.com/qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar
IP
195.96.151.67
ASN
#41634 Svea Hosting AB
Submitted
2022-09-28 15:19:35
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
cdn-115.anonfiles.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	896 B	684 B	195.96.151.67
djv99sxoqpv11.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	71 kB	54.230.245.107
baconaces.pro	835148	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	453 B	376 B	107.22.28.167
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	6.2 kB	23.36.76.226
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.35
vjs.zencdn.net	4968	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	740 B	10 kB	151.101.86.217
andamafraidt.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	4.9 kB	54.230.111.24
sultingcoe.buzz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	28 kB	44.195.137.121
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	60 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.115
anonfiles.com	117161	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.4 kB	150 kB	45.154.253.150
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658 B	1.5 kB	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	52.43.253.52
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	331 B	700 B	142.250.74.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-28	medium	djv99sxoqpv11.cloudfront.net/BbGpEaFEPBSoObhgDIFVmX113WmhKADcHPxxXCR5gBy02CRsHXyNOJRYOeVh3AAsqD2xKDyoLbF1MJQwzUV5iHCEDAXkDNwUMMAc3DgQ1TiQNVykHKwUGKAl0XixxRmFJWHRAKV1bYVsTSVh0BDgCHzxNY1wSfF4OWl5hWxNJWHQaJ0lZBVFnQlptTWNcDS-ELOgNPdi5jXFt0WGBcW2FaYQoDNg03AxJhWhdVXGpYdxlXdVlpW1p9WGRdWnRRYl9e	Malware
2022-09-28	medium	djv99sxoqpv11.cloudfront.net/rejQzMlUZW11Uag5dVw9iSQMAAWVcXkBdOwoJY1thKwJAcxQfEkdIMUcEFV40FFMOFDAUVw4DcxtQUQ9hXEFSDzgVTlpeORsRAXRgVAQWAGVSTAIDcEl2FgBlFl1dRy1fBgNKbUxrBQZwSXYWAGUIQhYBFEMCHQJ8XwYDVTAZX1wXZzwGAwNlSgUDA3BIBF-VbJx9SXEpwSHIKBHtKEkYPZEsMBAJsSgECAmVDBwAG	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	anonfiles.com/qeyfj953yc	160 B	2023-03-08	2023-03-08
Pretty URL anonfiles.com/qeyfj953yc IP 45.154.253.150 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:07:49 Last Seen2023-03-08 03:07:49 Times Seen1 Hash 9af777ea1e06f7bb8d10a140e6dff001 fa6e18b7eac41ce0b10e9b5b3a11d71325e8a9e2 f74982542a52e31cab1eb1e3397c40f0aa84ba77f090f9396b92e2999417eb42 Loading...

	baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1	58 kB	2023-03-08	2023-03-08
Pretty URL baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1 IP 107.22.28.167 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:07:49 Last Seen2023-03-08 03:07:49 Times Seen1 Hash 271191b7c0c0a54b8cb537d1f8ec1e83 8d02db051c2de15bf95821d2fa4a9884fe8dabd8 80c35ec59c2a980af39038d9515a765511a21837be2d8d3ad6a8b4331e775223 Loading...

	andamafraidt.xyz/MzhRandSWjIHSFIFM0wCQVRsT0V1HWMsE1lOaFMES1cgGgECCX8JG1xNNQwFXFYlRBlWTHRYMXFaFhoyUn4UOjVgVx4IH1R8GCwhXmBgW0RkVTkhNndbGToPS2ASOEJUeihaRXBqIiIvSnYeICVqdzQ8HwB5EBkGdwopITNKVx0IMQJ1GzsASW0HXx57exQuNmtTFSQAZnUcKxQAfDY7RmdRACQhSlMZIQBmfxorGwNgOBIPYVUXICB7ahAhIQJaCDwEZ2sHAkdxfDYpP0lAHzNGRGs3LEN8bz1fH2RAHyAge2kwIEdfYhM8MV1pPRoDZ28fCTNgFRQmOFR2AQ4eBlIJLAMDbxYoFGQKFwsuYlcVJBADCxASPVtvOQ4ha38hMxNLVAkOIV9IBlsHCm8WOBNkVgM4Ll8BNEwdQFc/Gkp+TmABMEFZGwFCVA	3.0 kB	2023-03-08	2023-03-08
Pretty URL andamafraidt.xyz/MzhRandSWjIHSFIFM0wCQVRsT0V1HWMsE1lOaFMES1cgGgECCX8JG1xNNQwFXFYlRBlWTHRYMXFaFhoyUn4UOjVgVx4IH1R8GCwhXmBgW0RkVTkhNndbGToPS2ASOEJUeihaRXBqIiIvSnYeICVqdzQ8HwB5EBkGdwopITNKVx0IMQJ1GzsASW0HXx57exQuNmtTFSQAZnUcKxQAfDY7RmdRACQhSlMZIQBmfxorGwNgOBIPYVUXICB7ahAhIQJaCDwEZ2sHAkdxfDYpP0lAHzNGRGs3LEN8bz1fH2RAHyAge2kwIEdfYhM8MV1pPRoDZ28fCTNgFRQmOFR2AQ4eBlIJLAMDbxYoFGQKFwsuYlcVJBADCxASPVtvOQ4ha38hMxNLVAkOIV9IBlsHCm8WOBNkVgM4Ll8BNEwdQFc/Gkp+TmABMEFZGwFCVA IP 54.230.111.24 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:07:49 Last Seen2023-03-08 03:07:49 Times Seen1 Hash 24b01738b580250d15ad889147f1b252 dcd025d3aebac60de1d2e083a3483b1ff966892d 6c2b166e8998188d04cbce8eec496a07aa5d7eca90ac3dec5bddcade8597993e Loading...

	djv99sxoqpv11.cloudfront.net/BbGpEaFEPBSoObhgDIFVmX113WmhKADcHPxxXCR5gBy02CRsHXyNOJRYOeVh3AAsqD2xKDyoLbF1MJQwzUV5iHCEDAXkDNwUMMAc3DgQ1TiQNVykHKwUGKAl0XixxRmFJWHRAKV1bYVsTSVh0BDgCHzxNY1wSfF4OWl5hWxNJWHQaJ0lZBVFnQlptTWNcDS-ELOgNPdi5jXFt0WGBcW2FaYQoDNg03AxJhWhdVXGpYdxlXdVlpW1p9WGRdWnRRYl9e	783 B	2023-03-08	2023-03-08
Pretty URL djv99sxoqpv11.cloudfront.net/BbGpEaFEPBSoObhgDIFVmX113WmhKADcHPxxXCR5gBy02CRsHXyNOJRYOeVh3AAsqD2xKDyoLbF1MJQwzUV5iHCEDAXkDNwUMMAc3DgQ1TiQNVykHKwUGKAl0XixxRmFJWHRAKV1bYVsTSVh0BDgCHzxNY1wSfF4OWl5hWxNJWHQaJ0lZBVFnQlptTWNcDS-ELOgNPdi5jXFt0WGBcW2FaYQoDNg03AxJhWhdVXGpYdxlXdVlpW1p9WGRdWnRRYl9e IP 54.230.245.107 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:07:49 Last Seen2023-03-08 03:07:49 Times Seen1 Hash d4e8e9097bfe441c6ef6e68a1d0359ab f3f0741001df3ce9f829b103f6618c2e35a5ed99 8b52195aa4fac2753a4a694113be88889a162f95fb4db6afdfbc4033a6a47e37 Loading...

	djv99sxoqpv11.cloudfront.net/rejQzMlUZW11Uag5dVw9iSQMAAWVcXkBdOwoJY1thKwJAcxQfEkdIMUcEFV40FFMOFDAUVw4DcxtQUQ9hXEFSDzgVTlpeORsRAXRgVAQWAGVSTAIDcEl2FgBlFl1dRy1fBgNKbUxrBQZwSXYWAGUIQhYBFEMCHQJ8XwYDVTAZX1wXZzwGAwNlSgUDA3BIBF-VbJx9SXEpwSHIKBHtKEkYPZEsMBAJsSgECAmVDBwAG	293 B	2023-03-08	2023-03-08
Pretty URL djv99sxoqpv11.cloudfront.net/rejQzMlUZW11Uag5dVw9iSQMAAWVcXkBdOwoJY1thKwJAcxQfEkdIMUcEFV40FFMOFDAUVw4DcxtQUQ9hXEFSDzgVTlpeORsRAXRgVAQWAGVSTAIDcEl2FgBlFl1dRy1fBgNKbUxrBQZwSXYWAGUIQhYBFEMCHQJ8XwYDVTAZX1wXZzwGAwNlSgUDA3BIBF-VbJx9SXEpwSHIKBHtKEkYPZEsMBAJsSgECAmVDBwAG IP 54.230.245.107 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:07:49 Last Seen2023-03-08 03:07:49 Times Seen1 Hash 315d94b3a9d5c06ff21b956997eafb20 3a8e1425cf959d6e702243ab0a63917882ea5482 c4539021c96ca30c8e8850a345274f45a0fcc749eab46122f5653563d2a470c0 Loading...

	vjs.zencdn.net/7.3.0/video.min.js	476 kB	2023-03-07	2024-01-20
Pretty URL vjs.zencdn.net/7.3.0/video.min.js IP 151.101.86.217 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2024-01-20 06:52:22 Times Seen1044 Hash 057f19acd50fc7e3ad917dd600889ee5 479d8baad992ec24bf4c3ac8365014be01565219 963ccc559571c588baa7f6d61513b26277c7847c250773e3270c51f5038216fb Loading...

	anonfiles.com/qeyfj953yc	167 B	2023-03-07	2023-08-07
Pretty URL anonfiles.com/qeyfj953yc IP 45.154.253.150 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2023-08-07 17:15:14 Times Seen616 Hash eb6aaa05fed3e182e1146d30bbbd9d63 ef6184b02b8e6207ef756285a23da1b77b1e8142 b70d7ebc545a9d5a8db93d03f377433c555fec98cabcc67e8a4607b26e035707 Loading...

	anonfiles.com/qeyfj953yc	1.8 kB	2023-03-07	2023-08-07
Pretty URL anonfiles.com/qeyfj953yc IP 45.154.253.150 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2023-08-07 17:15:14 Times Seen811 Hash 222132c7cee7981cc82b3c57684aefe4 988196a7d039385d2a5dec48b60328949be4544b 29c9404d415384cdb3fa69ac2c92d9319f6527112ad2d82fbd27ae52542ac823 Loading...

	andamafraidt.xyz/aTBiVVgIUgE4ZwgNAHMtG1xfcGovFVATPANGW2wrEV8TJS5YAUw2NAZFBjMqBl4WezYMREdnHhtVCAQiJFw3Dw9YATc0P1xUNCJhAGMzGBkoZzQ2AAJyBhovBno7ZCwBexUfGQpIMzMdAlQrGA0KdSQDbFl2JBgXL3QjAA4eBCY2IB1hNwRhAWgnEwstSgUDDAVABxoKGmIjDQoOZiMEDyh3NAYMKHkmNh0FAiQyGgV2DmQ8O0lTMxoOfik3DRFCIAQCHmM6DA8odzccCQFpIBMdJHMqBBJRaBUMHD9kIw8AWEc6DyIedyMiFgVjBQAcKAMgHBovHTQ3EhEJMQ0dGUcxHREiciohEyxbOwUCLEMvFxkjQzEyHSpxDwMcK0cjEn4DQw07KFRgC2EJX0MjFD0	2.9 kB	2023-03-08	2023-03-08
Pretty URL andamafraidt.xyz/aTBiVVgIUgE4ZwgNAHMtG1xfcGovFVATPANGW2wrEV8TJS5YAUw2NAZFBjMqBl4WezYMREdnHhtVCAQiJFw3Dw9YATc0P1xUNCJhAGMzGBkoZzQ2AAJyBhovBno7ZCwBexUfGQpIMzMdAlQrGA0KdSQDbFl2JBgXL3QjAA4eBCY2IB1hNwRhAWgnEwstSgUDDAVABxoKGmIjDQoOZiMEDyh3NAYMKHkmNh0FAiQyGgV2DmQ8O0lTMxoOfik3DRFCIAQCHmM6DA8odzccCQFpIBMdJHMqBBJRaBUMHD9kIw8AWEc6DyIedyMiFgVjBQAcKAMgHBovHTQ3EhEJMQ0dGUcxHREiciohEyxbOwUCLEMvFxkjQzEyHSpxDwMcK0cjEn4DQw07KFRgC2EJX0MjFD0 IP 54.230.111.24 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:07:49 Last Seen2023-03-08 03:07:49 Times Seen1 Hash ea14ff60cb2fdb3931cb3f0bb6c74643 37712035853501387964a9984d4cd7b4a9c960d9 611753dca1a799c7af385c59a8c49db0dd3996b216377111d94a758b7a370673 Loading...

	anonfiles.com/sw_anonfiles.js	45 kB	2023-03-07	2023-08-07
Pretty URL anonfiles.com/sw_anonfiles.js IP 45.154.253.150 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2023-08-07 17:15:14 Times Seen835 Hash 3adab942a2ab6c02c549daaf694f58fa 33792c7a0ee33eb3d88af7eab2b86bcb846aeee5 9091b2493e77eac744b42f7634ab2bbd51f693cc036926c9a91efbeef482d167 Loading...

HTTP Transactions (58)

URL IP Response Size

cdn-115.anonfiles.com/qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar

195.96.151.67

301 Moved Permanently

162 B

URL HTTP/1.1
cdn-115.anonfiles.com/qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar
IP
195.96.151.67:0
ASN
#41634 Svea Hosting AB

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET /qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar HTTP/1.1
Host: cdn-115.anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 28 Sep 2022 15:19:24 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://cdn-115.anonfiles.com/qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 14:35:09 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lWEyL9Nmhlvna_IaG0TGASr9WScw7cr043FpuILzx0jAEdRlSRvIqw==
Age: 2655

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
490c003436e215e91596f285fcba92f5
0c4c9a5802e7cdb699f4918c252dbdf8431c25ec
9fe6beb1cb3851018168765a243b6de69ec71d30770f8c2dcc57cae7d9978cc1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9FE6BEB1CB3851018168765A243B6DE69EC71D30770F8C2DCC57CAE7D9978CC1"
Last-Modified: Wed, 28 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17816
Expires: Wed, 28 Sep 2022 20:16:20 GMT
Date: Wed, 28 Sep 2022 15:19:24 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vST7HqCJLYwgP5PYG3f9WDX_AbOyqnpnO1J_WSB9lDOtlvFaYnElKw==
age: 35458
X-Firefox-Spdy: h2

cdn-115.anonfiles.com/qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar

195.96.151.67

301 Moved Permanently

0 B

URL HTTP/1.1
cdn-115.anonfiles.com/qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar
IP
195.96.151.67:0
ASN
#41634 Svea Hosting AB

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /qeyfj953yc/3d954096-1664293430/geometry%20dash%20v2.22.rar HTTP/1.1
Host: cdn-115.anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 28 Sep 2022 15:19:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Location: https://anonfiles.com/qeyfj953yc
X-Cache-Host: filecache-01
X-Cache-Disk: nvme-01
Accept-Ranges: bytes

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
96c862e9447beac6a60dbcb16ab39709
643b2c2202c6ab93f46bc57f6a101dfe3aa9e31f
d69cc8953b3e935ec0fbea01703c6c745d91514ab46a3e0cf007c60963a39852

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D69CC8953B3E935EC0FBEA01703C6C745D91514AB46A3E0CF007C60963A39852"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7208
Expires: Wed, 28 Sep 2022 17:19:32 GMT
Date: Wed, 28 Sep 2022 15:19:24 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 15:19:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

anonfiles.com/qeyfj953yc

45.154.253.150

404 Not Found

2.4 kB

URL HTTP/1.1
anonfiles.com/qeyfj953yc
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
2.4 kB (2444 bytes)
Hash
6630ab0497e0a706618ce1dc073c07d7
3c635a287485cccef39f081b90046a06ab2f949a
5d199d44a25c7b2c43e7b50e07966ba016631b136f758e91e837245463dd5af2

HTTP Headers

GET /qeyfj953yc HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: N
Content-Encoding: gzip

anonfiles.com/css/anonfiles.css?1661352192

45.154.253.150

200 OK

25 kB

URL HTTP/1.1
anonfiles.com/css/anonfiles.css?1661352192
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (65452)
Size
25 kB (25261 bytes)
Hash
bf84dfe5f6e6044aa4c1095a7a9a850e
e411fe5ea4f2b5ce7382dfe3079589f4817ad165
2af9a43ff27bbcad03007d87fa7d09bed286aa594a3a3d2e16f409319e782f60

HTTP Headers

GET /css/anonfiles.css?1661352192 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2705
Content-Encoding: gzip

anonfiles.com/sw_anonfiles.js

45.154.253.150

200 OK

16 kB

URL HTTP/1.1
anonfiles.com/sw_anonfiles.js
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (25712)
Size
16 kB (15666 bytes)
Hash
5e03f95322bfd924a10943354a145be8
149a1d27b2169791e547a074c3d40b279319d35b
27217ff2c97023ff148125e47bcc97af3fbc6307336f8b67689da13ffb14acaf

HTTP Headers

GET /sw_anonfiles.js HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 36028
Content-Encoding: gzip

vjs.zencdn.net/7.3.0/video-js.min.css

151.101.86.217

200 OK

9.7 kB

URL HTTP/2
vjs.zencdn.net/7.3.0/video-js.min.css
IP
151.101.86.217:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (35998), with no line terminators
Size
9.7 kB (9673 bytes)
Hash
3397ce943db8add2728dccd9a3b8b8bc
a57bbb7546a458fe57d72d06baab950125260cc9
5779043d07e39f23d64752c34c3113055eaaadf57fcd02f366cb028485e626ba

HTTP Headers

GET /7.3.0/video-js.min.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
last-modified: Fri, 26 Oct 2018 18:06:27 GMT
etag: "895e6b29db41953ef6197815c6be59d3"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Wed, 28 Sep 2022 15:19:25 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1402
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 9673
X-Firefox-Spdy: h2

anonfiles.com/js/app.js?1661352192

45.154.253.150

200 OK

58 kB

URL HTTP/1.1
anonfiles.com/js/app.js?1661352192
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (63238)
Size
58 kB (57886 bytes)
Hash
ba67ff13fd07739a7037fbc27b2a1955
3e253f69b2f12659c541de122c6bce0ed82ba369
1cb363c41be4b3558b7b97b28bb7620cf532033c8a7a0035020831c104aaf818

HTTP Headers

GET /js/app.js?1661352192 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3964
Content-Encoding: gzip

anonfiles.com/img/flags/24/no.png

45.154.253.150

200 OK

611 B

URL HTTP/1.1
anonfiles.com/img/flags/24/no.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
611 B (611 bytes)
Hash
f14ac70aa6dd4d371671c0e6d7cba4e3
1139e3acd6e073bffb59157cbc10af72ed757218
9a4473862ea2b9bd1c5e1543900416e693b33516cae53fde32e1c3a83d3382e4

HTTP Headers

GET /img/flags/24/no.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 611
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 745
accept-ranges: bytes

anonfiles.com/img/flags/24/br.png

45.154.253.150

200 OK

1.1 kB

URL HTTP/1.1
anonfiles.com/img/flags/24/br.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1115 bytes)
Hash
6a5938d2e7f7d6f4026d6eb1b4b4f2cd
7a038177fe4deec455d61d3e9c90019fa4727d40
0ab6c46e677fa7e49b6344fcde39c06ff6c014d9163571cdb36f8b5fc59c17eb

HTTP Headers

GET /img/flags/24/br.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 1115
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 891
accept-ranges: bytes

anonfiles.com/img/flags/24/dk.png

45.154.253.150

200 OK

537 B

URL HTTP/1.1
anonfiles.com/img/flags/24/dk.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
537 B (537 bytes)
Hash
b6ebe55a7d176720cd2b1003298187a8
930858408b9af1f79c430bbe15c185db555a7815
07575cf7a8d7d2b8edfbea80f8e8a228ecc56a03a567bc60c0ef4dc6ac0f328a

HTTP Headers

GET /img/flags/24/dk.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 537
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4893
accept-ranges: bytes

anonfiles.com/img/flags/24/in.png

45.154.253.150

200 OK

593 B

URL HTTP/1.1
anonfiles.com/img/flags/24/in.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
593 B (593 bytes)
Hash
ccaf96cfc341dc9a17e24b96bef223ff
8791d6db6628e0fb21b847ab94484f0c615e38ac
728e008d94e2e3bae2679d50a051562f1ccce1fd604196c7880a3d96f3070354

HTTP Headers

GET /img/flags/24/in.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 852
accept-ranges: bytes

anonfiles.com/img/flags/24/es.png

45.154.253.150

200 OK

666 B

URL HTTP/1.1
anonfiles.com/img/flags/24/es.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
666 B (666 bytes)
Hash
5fa381a8eb16d9e673d32980e7fd1710
fc29fbbebe97109ef1d16a0d4a65637d6b725ac8
7b6f223153c8eda1b541326f9cd66aeb53a28801c58c4de751fd2f9f6f1d96ff

HTTP Headers

GET /img/flags/24/es.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 666
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4657
accept-ranges: bytes

anonfiles.com/img/flags/24/fi.png

45.154.253.150

200 OK

456 B

URL HTTP/1.1
anonfiles.com/img/flags/24/fi.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
456 B (456 bytes)
Hash
0ea9115d18d5210d4f1db520881faa3a
09829c2b7b5e4bae28d62b1dff90220f28c3bdf5
544fee9d1bff8bc83865ab87538924de207ebe4848787496c7308b91b539b6da

HTTP Headers

GET /img/flags/24/fi.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 456
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4910
accept-ranges: bytes

anonfiles.com/img/flags/24/se.png

45.154.253.150

200 OK

581 B

URL HTTP/1.1
anonfiles.com/img/flags/24/se.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
581 B (581 bytes)
Hash
c9b1e40987c4411b4a7d13c07a8843aa
cfce93be3ba77e4e30033d25e2e5c6a37da1b27d
8c04b3b52d605637bb4c6a26449c45e5320a3f33f14e8c737ce599433bc19f14

HTTP Headers

GET /img/flags/24/se.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 581
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 876
accept-ranges: bytes

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 14:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 15:24:44 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ek-FnyTweXbOXMaU9ZsTbtrTuPbduAzrpR0AuvOqRw6v9P3n0KTzng==
Age: 2992

anonfiles.com/static/logo.png

45.154.253.150

200 OK

18 kB

URL HTTP/1.1
anonfiles.com/static/logo.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 450 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size
18 kB (18441 bytes)
Hash
f9fd716d30e220aa24bab0e94ebf0aa0
4af32d78655436173f272bb65159a232f1671b8d
5e937c4d8fd33714e43b400f238cf37630e6eaeefa105cca9d77760223a16e94

HTTP Headers

GET /static/logo.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 18441
Connection: keep-alive
last-modified: Thu, 13 Aug 2020 12:57:58 GMT
etag: "5f3538d6-4809"

anonfiles.com/img/flags/24/kr.png

45.154.253.150

200 OK

988 B

URL HTTP/1.1
anonfiles.com/img/flags/24/kr.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
988 B (988 bytes)
Hash
cb22f00511d088a71e84f8c1c864caed
6599812ed106bda6017487287e12bc836570649f
09a03e08c73db3d8fb50241f004b69d673ec8ea90a6ca7252d66ce821d0b6db1

HTTP Headers

GET /img/flags/24/kr.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 988
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 898
accept-ranges: bytes

anonfiles.com/img/flags/24/jp.png

45.154.253.150

200 OK

599 B

URL HTTP/1.1
anonfiles.com/img/flags/24/jp.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
599 B (599 bytes)
Hash
857f6f0e0886a3729b758b7241e42e61
a7be973a93c6ad51cf07a9f21a5dd72cc3e15680
8e7b1cd46120293756d1f21bac4de809d2895c7c26dc7586e3e2a09a0f7c1d64

HTTP Headers

GET /img/flags/24/jp.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 599
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 851
accept-ranges: bytes

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b2ede48779672bd58ca04f0450923d4
42cf3859dfda6cb4a8cf617982511fc7ff9fec3e
caf0cf066407ae185f4862e7e9357bda053874a44a47642e5635cb39ce95d2f9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CAF0CF066407AE185F4862E7E9357BDA053874A44A47642E5635CB39CE95D2F9"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2083
Expires: Wed, 28 Sep 2022 15:54:08 GMT
Date: Wed, 28 Sep 2022 15:19:25 GMT
Connection: keep-alive

anonfiles.com/img/flags/24/pl.png

45.154.253.150

200 OK

347 B

URL HTTP/1.1
anonfiles.com/img/flags/24/pl.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
347 B (347 bytes)
Hash
baf3aff7caef0be58f29b41f20a0e4db
11c840dfa1f1bd22a04aa1fa53fcac95f381b9a6
0a3a8803b7a137166a04369522ec2b31513dcd4c07e2120107c55d9a7f7b646f

HTTP Headers

GET /img/flags/24/pl.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 347
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2690
accept-ranges: bytes

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3526d5ce1381ba26cbc553db057e1915
fe01c920696448e8bf12e6fff877bce8281d34a2
09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4844
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 15:19:25 GMT
Last-Modified: Wed, 28 Sep 2022 13:58:41 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

anonfiles.com/img/flags/24/us.png

45.154.253.150

200 OK

656 B

URL HTTP/1.1
anonfiles.com/img/flags/24/us.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
656 B (656 bytes)
Hash
ae506a6c014bfeb8d8cbfdfbe94c14c9
f4e74440c4e79e71959b9b8f799f2e8a7e15b7ee
bc6dd978e70894c8a0148e6806f4fde9566ee59349adb03c02a61a3b2e25b6f1

HTTP Headers

GET /img/flags/24/us.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 656
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 715
accept-ranges: bytes

anonfiles.com/img/flags/24/de.png

45.154.253.150

200 OK

483 B

URL HTTP/1.1
anonfiles.com/img/flags/24/de.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
483 B (483 bytes)
Hash
9f8cc07c258bcd2de0c7900861e20ffc
fed97219e44693d4f3918fc4037b325732225d81
07cd5a4cad20604f77dced9c7d8a92ca9ae3321718e5a1935296e4d75f921a19

HTTP Headers

GET /img/flags/24/de.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 483
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 1216
accept-ranges: bytes

anonfiles.com/img/flags/24/fr.png

45.154.253.150

200 OK

536 B

URL HTTP/1.1
anonfiles.com/img/flags/24/fr.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
536 B (536 bytes)
Hash
e81efecf1a1b1d3a17d00a904c5cc3c9
1203894dbfc8363302dc709d852c05a4dd8bf9dc
54df4beda3ad05d5c621511ff15b2882588ff457e36132035d5f21fb29f2a750

HTTP Headers

GET /img/flags/24/fr.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 536
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4357
accept-ranges: bytes

djv99sxoqpv11.cloudfront.net/?xsvjd=737329

54.230.245.107

200 OK

69 kB

URL HTTP/2
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
IP
54.230.245.107:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (15945)
Size
69 kB (68575 bytes)
Hash
ef3f905a80ff35e8878139c58bf19991
50e8fea124cb548fa465a96a5c41a3dd745b433f
fe1d0ce9d876bb1bf7c9128fd711b1416159e2fcc9bec08be4a8fd5c3795def2

HTTP Headers

GET /?xsvjd=737329 HTTP/1.1
Host: djv99sxoqpv11.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-length: 68575
date: Wed, 28 Sep 2022 15:19:25 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6ZEl2lwzIsb6ICrV0Ov-CARTTxAv7mw4efHwoZ-LVTa9atr0tBvriA==
X-Firefox-Spdy: h2

anonfiles.com/img/flags/24/ru.png

45.154.253.150

200 OK

403 B

URL HTTP/1.1
anonfiles.com/img/flags/24/ru.png
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
403 B (403 bytes)
Hash
d8df89b036e6afb48f72d2440831bad0
04abb4b29dae9c6f1ac0f1d8a507aabe26a3be35
2db4b55326c0ef7cd3caf53e835ae1f38629da1d1c2f5a127e0785165b16078c

HTTP Headers

GET /img/flags/24/ru.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: image/png
Content-Length: 403
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 871
accept-ranges: bytes

anonfiles.com/sw_anonfiles.js?NVR5ak1udk5ZegZmSkhhF3ZVSHtWNkgMdQUwVAt9B2NUXi8FMFRTeA1tVF91AjBMU3QFYB0MdBd4W1kuAmwbXXoHeRpZewN5TVl%2BVnkYWXgEeUFZdQE1HF8oBDFJX28Zdgodbxl2Ch8hQT0XDS5aMVcIOE8uW0ZvBGRXX28ZMhgGPlB4HwshRjFVDCxZJxw3

45.154.253.150

200 OK

16 kB

URL HTTP/1.1
anonfiles.com/sw_anonfiles.js?NVR5ak1udk5ZegZmSkhhF3ZVSHtWNkgMdQUwVAt9B2NUXi8FMFRTeA1tVF91AjBMU3QFYB0MdBd4W1kuAmwbXXoHeRpZewN5TVl%2BVnkYWXgEeUFZdQE1HF8oBDFJX28Zdgodbxl2Ch8hQT0XDS5aMVcIOE8uW0ZvBGRXX28ZMhgGPlB4HwshRjFVDCxZJxw3
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (25712)
Size
16 kB (15666 bytes)
Hash
5e03f95322bfd924a10943354a145be8
149a1d27b2169791e547a074c3d40b279319d35b
27217ff2c97023ff148125e47bcc97af3fbc6307336f8b67689da13ffb14acaf

HTTP Headers

GET /sw_anonfiles.js?NVR5ak1udk5ZegZmSkhhF3ZVSHtWNkgMdQUwVAt9B2NUXi8FMFRTeA1tVF91AjBMU3QFYB0MdBd4W1kuAmwbXXoHeRpZewN5TVl%2BVnkYWXgEeUFZdQE1HF8oBDFJX28Zdgodbxl2Ch8hQT0XDS5aMVcIOE8uW0ZvBGRXX28ZMhgGPlB4HwshRjFVDCxZJxw3 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 11729
Content-Encoding: gzip

push.services.mozilla.com/

52.43.253.52

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.43.253.52:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5rHir6uOiRKrf2J4fPY96Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4dbZPPAzeh4ToRQrfYX+Xpz4oPQ=

andamafraidt.xyz/MzhRandSWjIHSFIFM0wCQVRsT0V1HWMsE1lOaFMES1cgGgECCX8JG1xNNQwFXFYlRBlWTHRYMXFaFhoyUn4UOjVgVx4IH1R8GCwhXmBgW0RkVTkhNndbGToPS2ASOEJUeihaRXBqIiIvSnYeICVqdzQ8HwB5EBkGdwopITNKVx0IMQJ1GzsASW0HXx57exQuNmtTFSQAZnUcKxQAfDY7RmdRACQhSlMZIQBmfxorGwNgOBIPYVUXICB7ahAhIQJaCDwEZ2sHAkdxfDYpP0lAHzNGRGs3LEN8bz1fH2RAHyAge2kwIEdfYhM8MV1pPRoDZ28fCTNgFRQmOFR2AQ4eBlIJLAMDbxYoFGQKFwsuYlcVJBADCxASPVtvOQ4ha38hMxNLVAkOIV9IBlsHCm8WOBNkVgM4Ll8BNEwdQFc/Gkp+TmABMEFZGwFCVA

54.230.111.24

200 OK

1.2 kB

URL HTTP/2
andamafraidt.xyz/MzhRandSWjIHSFIFM0wCQVRsT0V1HWMsE1lOaFMES1cgGgECCX8JG1xNNQwFXFYlRBlWTHRYMXFaFhoyUn4UOjVgVx4IH1R8GCwhXmBgW0RkVTkhNndbGToPS2ASOEJUeihaRXBqIiIvSnYeICVqdzQ8HwB5EBkGdwopITNKVx0IMQJ1GzsASW0HXx57exQuNmtTFSQAZnUcKxQAfDY7RmdRACQhSlMZIQBmfxorGwNgOBIPYVUXICB7ahAhIQJaCDwEZ2sHAkdxfDYpP0lAHzNGRGs3LEN8bz1fH2RAHyAge2kwIEdfYhM8MV1pPRoDZ28fCTNgFRQmOFR2AQ4eBlIJLAMDbxYoFGQKFwsuYlcVJBADCxASPVtvOQ4ha38hMxNLVAkOIV9IBlsHCm8WOBNkVgM4Ll8BNEwdQFc/Gkp+TmABMEFZGwFCVA
IP
54.230.111.24:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3033), with no line terminators
Size
1.2 kB (1188 bytes)
Hash
b29c69ef19c9df2ec2ecab68abb359ed
de1ed92742daa2c47f80ec90b2ee971df67e0bd5
bac6b76c41f585f6b64dff9ec6fa6ec3c09801182ff43353ca3b0edf5d510cd3

HTTP Headers

GET /MzhRandSWjIHSFIFM0wCQVRsT0V1HWMsE1lOaFMES1cgGgECCX8JG1xNNQwFXFYlRBlWTHRYMXFaFhoyUn4UOjVgVx4IH1R8GCwhXmBgW0RkVTkhNndbGToPS2ASOEJUeihaRXBqIiIvSnYeICVqdzQ8HwB5EBkGdwopITNKVx0IMQJ1GzsASW0HXx57exQuNmtTFSQAZnUcKxQAfDY7RmdRACQhSlMZIQBmfxorGwNgOBIPYVUXICB7ahAhIQJaCDwEZ2sHAkdxfDYpP0lAHzNGRGs3LEN8bz1fH2RAHyAge2kwIEdfYhM8MV1pPRoDZ28fCTNgFRQmOFR2AQ4eBlIJLAMDbxYoFGQKFwsuYlcVJBADCxASPVtvOQ4ha38hMxNLVAkOIV9IBlsHCm8WOBNkVgM4Ll8BNEwdQFc/Gkp+TmABMEFZGwFCVA HTTP/1.1
Host: andamafraidt.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/html
content-length: 1188
date: Wed, 28 Sep 2022 15:19:25 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NruKIay6B3Jr6LlAmKBZvU2CGkJQscz40cO-uOYEIvlHgwVWb3xKbg==
X-Firefox-Spdy: h2

andamafraidt.xyz/aTBiVVgIUgE4ZwgNAHMtG1xfcGovFVATPANGW2wrEV8TJS5YAUw2NAZFBjMqBl4WezYMREdnHhtVCAQiJFw3Dw9YATc0P1xUNCJhAGMzGBkoZzQ2AAJyBhovBno7ZCwBexUfGQpIMzMdAlQrGA0KdSQDbFl2JBgXL3QjAA4eBCY2IB1hNwRhAWgnEwstSgUDDAVABxoKGmIjDQoOZiMEDyh3NAYMKHkmNh0FAiQyGgV2DmQ8O0lTMxoOfik3DRFCIAQCHmM6DA8odzccCQFpIBMdJHMqBBJRaBUMHD9kIw8AWEc6DyIedyMiFgVjBQAcKAMgHBovHTQ3EhEJMQ0dGUcxHREiciohEyxbOwUCLEMvFxkjQzEyHSpxDwMcK0cjEn4DQw07KFRgC2EJX0MjFD0

54.230.111.24

200 OK

1.2 kB

URL HTTP/2
andamafraidt.xyz/aTBiVVgIUgE4ZwgNAHMtG1xfcGovFVATPANGW2wrEV8TJS5YAUw2NAZFBjMqBl4WezYMREdnHhtVCAQiJFw3Dw9YATc0P1xUNCJhAGMzGBkoZzQ2AAJyBhovBno7ZCwBexUfGQpIMzMdAlQrGA0KdSQDbFl2JBgXL3QjAA4eBCY2IB1hNwRhAWgnEwstSgUDDAVABxoKGmIjDQoOZiMEDyh3NAYMKHkmNh0FAiQyGgV2DmQ8O0lTMxoOfik3DRFCIAQCHmM6DA8odzccCQFpIBMdJHMqBBJRaBUMHD9kIw8AWEc6DyIedyMiFgVjBQAcKAMgHBovHTQ3EhEJMQ0dGUcxHREiciohEyxbOwUCLEMvFxkjQzEyHSpxDwMcK0cjEn4DQw07KFRgC2EJX0MjFD0
IP
54.230.111.24:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3007), with no line terminators
Size
1.2 kB (1166 bytes)
Hash
078b999815e205726e232b1fac6fa35b
f037e9223e119a246d49a340df65e670b709f494
f635be7c8f942df4948570f0b23acd6d912fff25035cfce08bccdf49f76c3742

HTTP Headers

GET /aTBiVVgIUgE4ZwgNAHMtG1xfcGovFVATPANGW2wrEV8TJS5YAUw2NAZFBjMqBl4WezYMREdnHhtVCAQiJFw3Dw9YATc0P1xUNCJhAGMzGBkoZzQ2AAJyBhovBno7ZCwBexUfGQpIMzMdAlQrGA0KdSQDbFl2JBgXL3QjAA4eBCY2IB1hNwRhAWgnEwstSgUDDAVABxoKGmIjDQoOZiMEDyh3NAYMKHkmNh0FAiQyGgV2DmQ8O0lTMxoOfik3DRFCIAQCHmM6DA8odzccCQFpIBMdJHMqBBJRaBUMHD9kIw8AWEc6DyIedyMiFgVjBQAcKAMgHBovHTQ3EhEJMQ0dGUcxHREiciohEyxbOwUCLEMvFxkjQzEyHSpxDwMcK0cjEn4DQw07KFRgC2EJX0MjFD0 HTTP/1.1
Host: andamafraidt.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: text/html
content-length: 1166
date: Wed, 28 Sep 2022 15:19:25 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LYroSXwtBl7wXRUJ1hza6BPIr1P8K2QEjhpsOi7ew189y3Q22KR-LQ==
X-Firefox-Spdy: h2

andamafraidt.xyz/utx?tid=737323&top=anonfiles.com&cb=DXbADm9IRt3W

54.230.111.24

204 No Content

0 B

URL HTTP/2
andamafraidt.xyz/utx?tid=737323&top=anonfiles.com&cb=DXbADm9IRt3W
IP
54.230.111.24:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /utx?tid=737323&top=anonfiles.com&cb=DXbADm9IRt3W HTTP/1.1
Host: andamafraidt.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonfiles.com
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
date: Wed, 28 Sep 2022 15:19:25 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://anonfiles.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 28 Sep 2022 15:20:25 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9vT3hBio-vgqqqpOezpMv8XYMskWHL8oGJMBzk0r8FRLvUq-WhBUGg==
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0c442042df7a2301a6a73ddf063c275e
53bad0578bfa37500272aa77085ced507fc7a2d0
a48fb618d75cd68f982a169f3d33719d42fb321582aae2be04c98d9bb26a0a50

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A48FB618D75CD68F982A169F3D33719D42FB321582AAE2BE04C98D9BB26A0A50"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17706
Expires: Wed, 28 Sep 2022 20:14:32 GMT
Date: Wed, 28 Sep 2022 15:19:26 GMT
Connection: keep-alive

anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1597323478

45.154.253.150

200 OK

1.3 kB

URL HTTP/1.1
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1597323478
IP
45.154.253.150:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1309 bytes)
Hash
ee0e6dd4ef643128a1b7bd4ab32b8a79
8136c70aac1e50f8356c83f91fb77ea4b6596cbc
51f305558b4ed6fcf3a31b4f9e404fc2ea426cb5e785ac46ce827de0c5cabb4c

HTTP Headers

GET /img/favicon/favicon-32x32-anonfiles.png?1597323478 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/qeyfj953yc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 15:19:26 GMT
Content-Type: image/png
Content-Length: 1309
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3675
accept-ranges: bytes

djv99sxoqpv11.cloudfront.net/BbGpEaFEPBSoObhgDIFVmX113WmhKADcHPxxXCR5gBy02CRsHXyNOJRYOeVh3AAsqD2xKDyoLbF1MJQwzUV5iHCEDAXkDNwUMMAc3DgQ1TiQNVykHKwUGKAl0XixxRmFJWHRAKV1bYVsTSVh0BDgCHzxNY1wSfF4OWl5hWxNJWHQaJ0lZBVFnQlptTWNcDS-ELOgNPdi5jXFt0WGBcW2FaYQoDNg03AxJhWhdVXGpYdxlXdVlpW1p9WGRdWnRRYl9e

54.230.245.107

200 OK

560 B

URL HTTP/2
djv99sxoqpv11.cloudfront.net/BbGpEaFEPBSoObhgDIFVmX113WmhKADcHPxxXCR5gBy02CRsHXyNOJRYOeVh3AAsqD2xKDyoLbF1MJQwzUV5iHCEDAXkDNwUMMAc3DgQ1TiQNVykHKwUGKAl0XixxRmFJWHRAKV1bYVsTSVh0BDgCHzxNY1wSfF4OWl5hWxNJWHQaJ0lZBVFnQlptTWNcDS-ELOgNPdi5jXFt0WGBcW2FaYQoDNg03AxJhWhdVXGpYdxlXdVlpW1p9WGRdWnRRYl9e
IP
54.230.245.107:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (783), with no line terminators
Size
560 B (560 bytes)
Hash
e51d203acb6befa457c37fd21701e35d
7f0bd888ef6f0ae47ff64c28441b3607abea9599
23151da67ef26b5786518ecc65cb70349291f8c4bc2bd9a27bce827f04fba106

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /BbGpEaFEPBSoObhgDIFVmX113WmhKADcHPxxXCR5gBy02CRsHXyNOJRYOeVh3AAsqD2xKDyoLbF1MJQwzUV5iHCEDAXkDNwUMMAc3DgQ1TiQNVykHKwUGKAl0XixxRmFJWHRAKV1bYVsTSVh0BDgCHzxNY1wSfF4OWl5hWxNJWHQaJ0lZBVFnQlptTWNcDS-ELOgNPdi5jXFt0WGBcW2FaYQoDNg03AxJhWhdVXGpYdxlXdVlpW1p9WGRdWnRRYl9e HTTP/1.1
Host: djv99sxoqpv11.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://andamafraidt.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 560
date: Wed, 28 Sep 2022 15:19:26 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GkuOJlp9aJ2GZoUWly6h_zXvcNEwfxf3pyUYbfhwBhqzyOf6oo0rcA==
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fd9c95c1c24789f4041887b11468ab7e
bf202eeda47e79ac15d77325a02a1206bec63dcb
86f005e634685a4eb89dd87735b4cc0d91163be2912c470a529f0eb223531dbf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5676
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 15:19:26 GMT
Last-Modified: Wed, 28 Sep 2022 13:44:50 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 15:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

andamafraidt.xyz/utx?cb=52VHtPBoQEFo&top=anonfiles.com&tid=737329

54.230.111.24

204 No Content

0 B

URL HTTP/2
andamafraidt.xyz/utx?cb=52VHtPBoQEFo&top=anonfiles.com&tid=737329
IP
54.230.111.24:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /utx?cb=52VHtPBoQEFo&top=anonfiles.com&tid=737329 HTTP/1.1
Host: andamafraidt.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonfiles.com
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
date: Wed, 28 Sep 2022 15:19:26 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://anonfiles.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 28 Sep 2022 15:20:26 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fmYS7K2tZJmFHv-9G-VHxTO2hxzwttLmdtxgP4MQiJ0C86FvaxujkA==
X-Firefox-Spdy: h2

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 384
Origin: https://anonfiles.com
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

djv99sxoqpv11.cloudfront.net/rejQzMlUZW11Uag5dVw9iSQMAAWVcXkBdOwoJY1thKwJAcxQfEkdIMUcEFV40FFMOFDAUVw4DcxtQUQ9hXEFSDzgVTlpeORsRAXRgVAQWAGVSTAIDcEl2FgBlFl1dRy1fBgNKbUxrBQZwSXYWAGUIQhYBFEMCHQJ8XwYDVTAZX1wXZzwGAwNlSgUDA3BIBF-VbJx9SXEpwSHIKBHtKEkYPZEsMBAJsSgECAmVDBwAG

54.230.245.107

200 OK

252 B

URL HTTP/2
djv99sxoqpv11.cloudfront.net/rejQzMlUZW11Uag5dVw9iSQMAAWVcXkBdOwoJY1thKwJAcxQfEkdIMUcEFV40FFMOFDAUVw4DcxtQUQ9hXEFSDzgVTlpeORsRAXRgVAQWAGVSTAIDcEl2FgBlFl1dRy1fBgNKbUxrBQZwSXYWAGUIQhYBFEMCHQJ8XwYDVTAZX1wXZzwGAwNlSgUDA3BIBF-VbJx9SXEpwSHIKBHtKEkYPZEsMBAJsSgECAmVDBwAG
IP
54.230.245.107:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
252 B (252 bytes)
Hash
fc6b67283aac81b5dd6b5f965eecba72
e06f924136268bb5f36e94c02103fd3283207e2a
f11ef4c12b150ed5b852f9574c1b84bae7b0661b0c396ccb75118e0cb882acc7

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /rejQzMlUZW11Uag5dVw9iSQMAAWVcXkBdOwoJY1thKwJAcxQfEkdIMUcEFV40FFMOFDAUVw4DcxtQUQ9hXEFSDzgVTlpeORsRAXRgVAQWAGVSTAIDcEl2FgBlFl1dRy1fBgNKbUxrBQZwSXYWAGUIQhYBFEMCHQJ8XwYDVTAZX1wXZzwGAwNlSgUDA3BIBF-VbJx9SXEpwSHIKBHtKEkYPZEsMBAJsSgECAmVDBwAG HTTP/1.1
Host: djv99sxoqpv11.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://andamafraidt.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 252
date: Wed, 28 Sep 2022 15:19:26 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U7Wj51ZkOasE0-TZE-KfScvy26V_yO2447WDH34qzko3vf2OTohhwA==
X-Firefox-Spdy: h2

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonfiles.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://anonfiles.com
Content-Length: 351
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonfiles.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://anonfiles.com
Content-Length: 357
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonfiles.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://anonfiles.com
Content-Length: 354
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6783
Expires: Wed, 28 Sep 2022 17:12:30 GMT
Date: Wed, 28 Sep 2022 15:19:27 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6783
Expires: Wed, 28 Sep 2022 17:12:30 GMT
Date: Wed, 28 Sep 2022 15:19:27 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6783
Expires: Wed, 28 Sep 2022 17:12:30 GMT
Date: Wed, 28 Sep 2022 15:19:27 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7455 bytes)
Hash
ea3890e460356d6ecc3ba4e405ac2e9e
b383135e2ebc23fe80eb0d594b198cb8c89327a5
8fcff053ce6e5750136bf876bad5b2916935f13ea039912d977928b086f0a48b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: e99c9f33-b72a-4070-80cf-06fb4a87d1df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZG4S6EcAoAMFX1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6332a0df-04122b4a345dbc3f3918af98;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 07:06:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Di1kDUlYEc1rv31fHM-OquU_W_LggEzDCTVME5iFJ5KffZcQyN6i2A==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 07:31:39 GMT
age: 28068
etag: "b383135e2ebc23fe80eb0d594b198cb8c89327a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8500 bytes)
Hash
6139c878a7d2bd32c61fc8287996eb5b
9c4692ea64832895fbd107d91f879728b6a440c7
3839df92f0a10c1433d5b576df50c9f7953912ae4f425012262f08ee8a59ce2e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: af82c8d6-950c-4933-87e3-7bbb15cb1ac8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3HOaoAMFoPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-77e0ecc522de575e40f429b3;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: rD5LsVDLQkaomG1nCGZGihbdlWKMCjUYNC2kRyAjJesJEOEBSj8Q3A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:47:03 GMT
age: 63144
etag: "9c4692ea64832895fbd107d91f879728b6a440c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12016 bytes)
Hash
4b794c6812cb546de0295e087ebe66a7
a54803cca7d3c509c195f65961e1110c8ec56f55
6a207f75eb3951f3dea5252bc8d185cd604d3d657f15b838774e8087e91f37f5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12016
x-amzn-requestid: ec1b3715-5d0f-4045-aa5b-b70a55c81d72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3EtyIAMFdZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-201dd1ef1426a09965c68dab;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: y3DefdcXJyoDHpJXwz460gfWcv2JUboOFExNQmTFgy30B4mn54Xvuw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:44:30 GMT
age: 63297
etag: "a54803cca7d3c509c195f65961e1110c8ec56f55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13213 bytes)
Hash
62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rV80hKsopWPf_A8hKw0kwTOjVN4Bq-5f8oXDP2wluyGwof5yXFe2Bw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:42:47 GMT
age: 63400
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13299 bytes)
Hash
ad84ed0c5b2090df7996007514cf1984
651600f2ef18cecc2e38370069bbb5e1d86f68e0
a3d0729e1d43afeadd2dd8273c858b8839d9e476f773c8ec9d96b5969a9e0b4a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13299
x-amzn-requestid: 926df8b6-beec-470d-b0b3-33be326cd379
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UPF8YIAMF3Nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-343e91e735af43d01fc83ddd;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KmVkKXoPqZmnwFtpKhuox1kJNDoSxMEmYE39_zVPyaeoU4sPqq-_wA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:44:23 GMT
age: 63304
etag: "651600f2ef18cecc2e38370069bbb5e1d86f68e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

sultingcoe.buzz/NVR5ak1udk5ZegZmSkhhF3ZVSHtWNkgMdQUwVAt9B2NUXi8FMFRTeA1tVF91AjBMU3QFYB0MdBd4W1kuAmwbXXoHeRpZewN5TVl%2BVnkYWXgEeUFZdQE1HF8oBDFJX28Zdgodbxl2Ch8hQT0XDS5aMVcIOE8uW0ZvBGRXX28ZMhgGPlB4HwshRjFVDCxZJxw3

44.195.137.121

200 OK

28 kB

URL HTTP/2
sultingcoe.buzz/NVR5ak1udk5ZegZmSkhhF3ZVSHtWNkgMdQUwVAt9B2NUXi8FMFRTeA1tVF91AjBMU3QFYB0MdBd4W1kuAmwbXXoHeRpZewN5TVl%2BVnkYWXgEeUFZdQE1HF8oBDFJX28Zdgodbxl2Ch8hQT0XDS5aMVcIOE8uW0ZvBGRXX28ZMhgGPlB4HwshRjFVDCxZJxw3
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type
data
Size
28 kB (27662 bytes)
Hash
f09a909b5b32c6c3d3805dfdf13f13df
3b5e1c69b41ee4bd42651f55bdfea6181d595378
2312b6577aa5156578b0f836b5bb328812aff56ef96b202a573713cf49cb254f

HTTP Headers

GET /NVR5ak1udk5ZegZmSkhhF3ZVSHtWNkgMdQUwVAt9B2NUXi8FMFRTeA1tVF91AjBMU3QFYB0MdBd4W1kuAmwbXXoHeRpZewN5TVl%2BVnkYWXgEeUFZdQE1HF8oBDFJX28Zdgodbxl2Ch8hQT0XDS5aMVcIOE8uW0ZvBGRXX28ZMhgGPlB4HwshRjFVDCxZJxw3 HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 6d477cbd5e78655b04472c51b800b863=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8445-8u/pdn4LILdl7biaYzDRT4cO3ME"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

vjs.zencdn.net/7.3.0/video.min.js

151.101.86.217

200 OK

0 B

URL HTTP/2
vjs.zencdn.net/7.3.0/video.min.js
IP
151.101.86.217:0
ASN
#54113 FASTLY

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /7.3.0/video.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
last-modified: Fri, 26 Oct 2018 18:06:27 GMT
etag: "057f19acd50fc7e3ad917dd600889ee5"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Wed, 28 Sep 2022 15:19:25 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 13
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 132230
X-Firefox-Spdy: h2

baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1

107.22.28.167

200 OK

0 B

URL HTTP/2
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
IP
107.22.28.167:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1 HTTP/1.1
Host: baconaces.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"e109-jQLbBRwt4Vv5WCHS+kqYhP6Nq9g"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-credentials: true
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations