Report - asianhdplay.pro

Report Overview

Submitted URL
asianhdplay.pro
IP
104.26.2.103
ASN
#13335 CLOUDFLARENET
Submitted
2023-04-03 01:02:17
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-04-03T20:18:12Z	8.6 kB	303 kB	35.241.9.150
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-04-03T23:00:37Z	341 B	739 B	192.229.221.95
firefox-settings-attachments.cdn.mozilla.net	11509	2019-11-30T10:32:57Z	2023-04-03T19:07:13Z	412 B	808 kB	34.111.73.144
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-04-03T19:07:42Z	3.2 kB	52 kB	34.120.237.76
pocli.click	unknown	2022-05-18T05:31:36Z	2023-04-03T02:55:16Z	356 B	746 B	104.21.83.81
asianhdplay.pro	unknown	2023-02-20T09:18:47Z	2023-04-02T23:37:48Z	4.6 kB	80 kB	104.26.3.103
detectportal.firefox.com	1601	2018-08-30T11:52:03Z	2023-04-03T18:14:10Z	909 B	642 B	34.107.221.82
getpocket.cdn.mozilla.net	1369	2018-08-28T15:15:36Z	2023-04-03T19:07:43Z	435 B	41 kB	34.120.5.221
delivery.taroads.com	unknown	2021-10-28T09:23:46Z	2023-04-02T00:51:14Z	953 B	1.7 kB	188.114.96.1
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-04-03T19:06:47Z	606 B	127 B	52.42.182.211
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-04-03T18:12:04Z	3.0 kB	8.0 kB	23.36.77.32
imagecdn.me	249408	2022-01-25T03:33:21Z	2023-04-03T02:55:16Z	12 kB	8.3 MB	172.67.68.115
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-04-03T20:18:12Z	1.3 kB	18 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-04-03T19:06:57Z	333 B	391 B	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-04-03	medium	asianhdplay.pro/	Phishing
2023-04-03	medium	asianhdplay.pro/video/js/jquery.js	Phishing
2023-04-03	medium	asianhdplay.pro/video/js/combo.js?v=10.1.20	Phishing
2023-04-03	medium	asianhdplay.pro/video/js/hamfunction.js?v=10.1.20	Phishing
2023-04-03	medium	asianhdplay.pro/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	asianhdplay.pro/video/js/combo.js?v=10.1.20	4.1 kB	2023-03-10	2024-04-19
Pretty URL asianhdplay.pro/video/js/combo.js?v=10.1.20 IP 104.26.2.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 02:58:06 Last Seen2024-04-19 15:07:32 Times Seen22 Hash d8750df2db5aeb86a2f67658de52062f a48ada66bf7112061c884b1bde3e580fcadc40ef fc55e25553fd3399e85b63f3e7543509ffa621a0e7e6baf0a49e8ceb772fe76c Loading...

	pocli.click/pub?id=21	12 kB	2023-03-13	2023-04-21
Pretty URL pocli.click/pub?id=21 IP 104.21.83.81 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 21:36:17 Last Seen2023-04-21 14:13:01 Times Seen10 Hash c705b0baaf3c8676d307ef058dfbef1c 34b1a52b69f289b00ebb307f31c5a875c4733b6e f88409536b59918245bda7adbe0a907854e6d8049a6638d6c462d13471c3cc2f Loading...

	asianhdplay.pro/video/js/jquery.js	266 kB	2023-03-07	2024-04-19
Pretty URL asianhdplay.pro/video/js/jquery.js IP 104.26.2.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:07:11 Last Seen2024-04-19 15:18:43 Times Seen244 Hash 7dbcb3ecc6d341657ec820452d114712 a9eb4cd339914bce075f18294f9747012e17fa91 d71848991a0c92d7f1aab3360cbe2d230d010fcd63061bd441bfd11429518b67 Loading...

	asianhdplay.pro/	55 B	2023-03-10	2024-04-19
Pretty URL asianhdplay.pro/ IP 104.26.3.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 02:58:06 Last Seen2024-04-19 15:07:32 Times Seen31 Hash cc2b1acfe50c35229b41ac686844af7f 1a37ce870dbb10437e26831a787acd997154efc8 4b394b6d6e20f581ff435e2ebfb15c61374d1cd95602d03a383635e342399b33 Loading...

	asianhdplay.pro/	2.1 kB	2023-03-10	2024-02-20
Pretty URL asianhdplay.pro/ IP 104.26.3.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 02:58:06 Last Seen2024-02-20 09:40:49 Times Seen9 Hash fa01f4fd178eb7991521b09744dcb4e3 23211e9dfd7d50d38207c6d6cb9fa7cd572fff2a 423ab57104f28b381e2b090551ba9643e01ee37d63f611b5576db1af920ad6ea Loading...

	asianhdplay.pro/video/js/hamfunction.js?v=10.1.20	1.3 kB	2023-03-10	2024-04-19
Pretty URL asianhdplay.pro/video/js/hamfunction.js?v=10.1.20 IP 104.26.2.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 02:58:06 Last Seen2024-04-19 15:07:32 Times Seen26 Hash 865274b886887ab023dce28a53969111 1e0dfff1abc0ece9034f1820c0f4948e93eb6a3c 82b383a7edf656b052e3cfaba59ebebe8106253faf79359396aebca65f629b74 Loading...

HTTP Transactions (87)

URL IP Response Size

asianhdplay.pro/

104.26.3.103

301 Moved Permanently

0 B

URL HTTP/1.1
asianhdplay.pro/
IP
104.26.3.103:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 03 Apr 2023 01:01:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 03 Apr 2023 02:01:59 GMT
Location: https://asianhdplay.pro/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aL1I2VUd53Sgck17wFzeolIqapthH0J7h4qHLsrb2Rl9iu%2FJpReS%2BBRgAqdMjlB7Byuj7t%2FXsFRuPTiCe241IPPKJyx7FKT3UUm85wufdy98ADEEB19STVUET%2FvDAAeEiA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b1d62311caa0b41-OSL
alt-svc: h2=":443"; ma=60

detectportal.firefox.com/success.txt?ipv4

34.107.221.82

200 OK

8 B

URL HTTP/1.1
detectportal.firefox.com/success.txt?ipv4
IP
34.107.221.82:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
8 B (8 bytes)
Hash
ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5

HTTP Headers

GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Sun, 02 Apr 2023 12:55:28 GMT
Age: 43591
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9a5b75c678163e98a8a12a50995ceebe
1af89997cf67706a43a6a823ff7b47e1ea77b7b6
4219fcc781123da3638b2864f1335b080d96a5bab99c547c846fa171b9378017

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4219FCC781123DA3638B2864F1335B080D96A5BAB99C547C846FA171B9378017"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14630
Expires: Mon, 03 Apr 2023 05:05:50 GMT
Date: Mon, 03 Apr 2023 01:02:00 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
72ce1c3ba4bffc2acfca34afd35f1697
b29ca01bc2574b4fb5787cde1e03dae584e6cf12
90893dd9ef7c87a4be9bf12a5d232bf66a4fce60d16b1f87772d1cd28c8e8e11

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "90893DD9EF7C87A4BE9BF12A5D232BF66A4FCE60D16B1F87772D1CD28C8E8E11"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11357
Expires: Mon, 03 Apr 2023 04:11:17 GMT
Date: Mon, 03 Apr 2023 01:02:00 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
903ed2d58f1f33d069b70c4b53f1cb1f
0ef89cd6eb79a2ddd74434f9233cf486fffc1142
d8c984b50f04fcdb1ebc99d982502d85193302c85239ee7497666247edfc0061

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8C984B50F04FCDB1EBC99D982502D85193302C85239EE7497666247EDFC0061"
Last-Modified: Sun, 02 Apr 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11669
Expires: Mon, 03 Apr 2023 04:16:29 GMT
Date: Mon, 03 Apr 2023 01:02:00 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: SD+zQi1xRNFXxYHmCmZvcV/QITqT6bbD49UHuViY9KlVSCI17hfmaORyz24zo9ylAsqF8b9UxPM=
x-amz-request-id: WVHA3BY81QXVCCC4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 03 Apr 2023 01:00:25 GMT
age: 95
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30

34.120.5.221

200 OK

40 kB

URL HTTP/2
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30
IP
34.120.5.221:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size
40 kB (40470 bytes)
Hash
b42e914f2c356023598fe47b86677700
09f121a6c5d8289b95bc84a1aa3b3cad017be12a
decd2e6924302a5ede0a697dc4f0809534016985963c9efb08ac5d432d317261

HTTP Headers

GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: 8jnBdRplERiCO5B9MXyVzGf-XvfHMJz9atHJ14gCCfuptxvOCfQYdA==
content-encoding: gzip
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 00:56:13 GMT
age: 524
content-type: application/json
vary: Accept-Encoding
content-length: 40470
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
034b06325b334948200ef1d79d4ddeb7
b9a3c93cff37cbaaf20cca79b965b1a21c525ce8
417ce2093027b05cc34199c75e6b29f155c4dd3150651b6b3dbe8564098c4143

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "417CE2093027B05CC34199C75E6B29F155C4DD3150651B6B3DBE8564098C4143"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9961
Expires: Mon, 03 Apr 2023 03:48:01 GMT
Date: Mon, 03 Apr 2023 01:02:00 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 03 Apr 2023 00:16:27 GMT
content-type: application/json
age: 2733
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

asianhdplay.pro/img/logo_vid.png?3

104.26.2.103

200 OK

5.8 kB

URL HTTP/2
asianhdplay.pro/img/logo_vid.png?3
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size
5.8 kB (5805 bytes)
Hash
1443b8692dd7d53f89f5dd4abfe55d01
ea656d53a4b6e5fbe3871ba4feb831f7d2b9baeb
1170734aa82077c03826221c85363c29ea1820b03d1320123293667e33768c6f

HTTP Headers

GET /img/logo_vid.png?3 HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 5805
last-modified: Wed, 27 Mar 2019 09:55:49 GMT
etag: "5c9b48a5-16ad"
expires: Fri, 21 Apr 2023 11:27:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 999269
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bN%2FCjgnOB1Ud0Bq851pl0pguY645jNyeKxXs7UjEeydcfrDaIH1sHwqL69KTXk8fBQjyhQ0CXfEuJDyjBUcO%2FbT6wQTHITsNwjL2wDKxlwJxFzfbIb4h%2BSe%2FARAcRL7Xlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d6234aedfb51d-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/the-real-deal-has-come-1679286638.png

172.67.68.115

200 OK

371 kB

URL HTTP/2
imagecdn.me/cover/the-real-deal-has-come-1679286638.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
371 kB (371330 bytes)
Hash
7ee5767c71420a3a09cd1b56a598a022
bb229f68b90e25b2289e3b8686447160a3d60a1c
0c79c9af70c033b735fb777b12243643ec4be8adfb23f1e3866615dd0ad1f2a2

HTTP Headers

GET /cover/the-real-deal-has-come-1679286638.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 371330
last-modified: Mon, 20 Mar 2023 04:30:37 GMT
etag: "6417e16d-5aa82"
expires: Fri, 21 Apr 2023 04:40:55 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1023665
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hmMhKJWWFCvVMv%2FmCyBjF6QjVrP2jVt1WSQndwYp3NqjScXaLB9Rr4umH0YmQ8hrlJkEmvWuA%2F10kqMMNZR5v7L1geXgXsACio9rOfaiQgPm4tYxLQlFN%2BNtFlvm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62353d221c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/ask-us-anything.png

172.67.68.115

200 OK

291 kB

URL HTTP/2
imagecdn.me/cover/ask-us-anything.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
291 kB (290984 bytes)
Hash
8531dcab730aff04b31b7d1a1d2c79d1
4bc470c8cab144d747c284dbe2d626f4d4f87e35
d713f74b17dcea511c6dc6877aa87961c619a1c6f2362e56f70d076ef2a8d1cf

HTTP Headers

GET /cover/ask-us-anything.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 290984
last-modified: Fri, 14 Aug 2020 07:27:20 GMT
etag: "5f363cd8-470a8"
expires: Fri, 21 Apr 2023 05:46:11 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1019749
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dpvB0sQEgEDpCO%2FW%2Fb4Y6Zsf9xeE3SCBhDz3f96rfQfCkI1Djk2fS0VN0robOtNUYlBCtZz8bjX8phUrZbH29Fc9OYhjEOoc8OC96B7r4dtLbqgvTKe8Hed3E1hl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d271c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/amazing-saturday.png

172.67.68.115

200 OK

255 kB

URL HTTP/2
imagecdn.me/cover/amazing-saturday.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
255 kB (254863 bytes)
Hash
2235d92e008daee6a69c434fac5e624c
9c2e492bc9a9916974d41221bec6407883291dcf
ae37d09fe7eb6ca602f9d290ea4bfcd9d9eeb1c8c46b920d6083a1f8f10ecf69

HTTP Headers

GET /cover/amazing-saturday.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 254863
last-modified: Sun, 11 Oct 2020 14:35:29 GMT
etag: "5f831831-3e38f"
expires: Fri, 21 Apr 2023 06:32:29 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1016971
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VMV0LFEY4fEZznlDiePJxeZmzFqLaf7VT9z2%2B4QJLgLqlWR7VOE2P%2F%2FLo11xoPpl1cp5pn5L7qgv%2F3eAIiAXPWUkGg5x3eOsOpeJ%2BINmhzqyoykvPa9gdrpoTyJM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d2a1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/future-1659626279.png

172.67.68.115

200 OK

310 kB

URL HTTP/2
imagecdn.me/cover/future-1659626279.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
310 kB (310527 bytes)
Hash
cc3c414c5b4c097deea8e2e9402c39bc
583d8e6a5dadf3de92856a8ce25c1a78651cc1de
e342b5c476f511c8ddf113ff33705d947527eb7f43bc629f60b73bc6239f12cb

HTTP Headers

GET /cover/future-1659626279.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 310527
last-modified: Thu, 04 Aug 2022 15:17:59 GMT
etag: "62ebe327-4bcff"
expires: Fri, 21 Apr 2023 07:39:42 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1012938
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M6YKSjBKIbM%2FxQHLXkiBmqAt5cg1Atli792cKSGK2hauzHwI8lkz4reDKu%2BhVlHfgQhZg7RZ3ut4iTcP83hVm7RwDvPJtStfK%2FhgP3yeA%2B0ti1bSArZWuOHUaw7W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d251c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/first-lady-1675356881.png

172.67.68.115

200 OK

320 kB

URL HTTP/2
imagecdn.me/cover/first-lady-1675356881.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
320 kB (319984 bytes)
Hash
a157dd3ab42d84f64e6c181381c7711b
0598eb506ee0d9405fac0861761b21873298ca1d
ea805502d5060c7399a6777fef942a7bf8848e5387314004e65a238aebfcb741

HTTP Headers

GET /cover/first-lady-1675356881.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 319984
last-modified: Thu, 02 Feb 2023 16:54:40 GMT
etag: "63dbead0-4e1f0"
expires: Fri, 21 Apr 2023 04:23:27 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024713
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IpE8I4YUwQhWz7jUYlF0aOnPkNS3TfChzwKcsUi4%2FZBfyk5nskf8diN9XNmlD9z9AhhXiD1WAz6LqByTDPhWxlYiF6ajA6zXkpeltQXB8nH9jr8fo58ECAJKb2gY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d261c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/to-grow-with-love-2006-1680443473.png

172.67.68.115

200 OK

51 kB

URL HTTP/2
imagecdn.me/cover/to-grow-with-love-2006-1680443473.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x440, components 3\012- data
Size
51 kB (50973 bytes)
Hash
63c0e11c59c3997264080c028305624b
7b4f990c3f3b381cf8e258be8d769f2666c79cae
a7762f6393c6c38018ee68e71dba1b0274ff00e65fa1ea99b4c33e7d8b73c28d

HTTP Headers

GET /cover/to-grow-with-love-2006-1680443473.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 50973
last-modified: Sun, 02 Apr 2023 13:51:12 GMT
etag: "64298850-c71d"
expires: Tue, 02 May 2023 14:04:27 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 39453
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0E4bX6xjBMH246UutL7YZpL0fky0wpoOodvZ4ho0nFbg5OByhxvSAoHQkMi%2FIav8F0v5xMEOEE8XL6dT9JaVCx%2BNzhozhkTt1SjZQ9eiY3%2BFzFArvb6t9B3uq33G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d2f1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/sacred-divorce-1675182978.png

172.67.68.115

200 OK

412 kB

URL HTTP/2
imagecdn.me/cover/sacred-divorce-1675182978.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
412 kB (412525 bytes)
Hash
034181f843cf42aac87beb44eecb3639
8d29b9fb000490724ac86cd395ddab2dfc66719d
e462065e2495531044a3544a7d53b730208b9d15b748a619f4f5243a03b7d5f0

HTTP Headers

GET /cover/sacred-divorce-1675182978.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 412525
last-modified: Tue, 31 Jan 2023 16:36:17 GMT
etag: "63d94381-64b6d"
expires: Fri, 21 Apr 2023 04:41:04 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1023656
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hyCvIfSf6SYZ6iZelhC4u8JEDIlN2an1EWbsW5jF0eGkTy9u3PG%2F%2Bp60jb0ZMXqls5h6s9dJ18C9fKVaZS%2FGP42g8mCjTDhgxk2NNQfSxXV9jhnNkbzljCD88xMC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d241c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/how-do-you-play.png

172.67.68.115

200 OK

236 kB

URL HTTP/2
imagecdn.me/cover/how-do-you-play.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
236 kB (236400 bytes)
Hash
74316948d467515d20b450b9e9dfe030
5a11c2f94e281cc35d0e69c492fcb8e033285256
b17b8afe4ba6daf49486283ef12264b763af985e87371d64fc5dff75c98a3d5c

HTTP Headers

GET /cover/how-do-you-play.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 236400
last-modified: Mon, 30 Sep 2019 03:57:08 GMT
etag: "5d917d14-39b70"
expires: Fri, 21 Apr 2023 05:57:17 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1019083
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nUsgoI0zH%2B6cmctm8FzkQ%2BUshYSy9SBN9VjzPpAbJAgCLG5PPbWIMXGrRMzFd2tvYdilJqP2R1iO46DweWEu6736CjieCzxfk2FKZyY82ss44ngWuHYos%2BpCswPK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d2c1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/royal-doctor-1679338444.png

172.67.68.115

200 OK

384 kB

URL HTTP/2
imagecdn.me/cover/royal-doctor-1679338444.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
384 kB (384477 bytes)
Hash
4dadfa5c292ddcbb16391b8416f6fbfa
90ed4669bd8beb9762d96154dd8ab6520216ffed
c45df0dcebcac31991537b8df96521dcea23beb05fb4abedbca71a644cd19f7c

HTTP Headers

GET /cover/royal-doctor-1679338444.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 384477
last-modified: Mon, 20 Mar 2023 18:54:03 GMT
etag: "6418abcb-5dddd"
expires: Fri, 21 Apr 2023 04:23:28 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024712
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2BozFKaUI09i9fNqNuySPSAqVH9FFOMdB2sUufMVaEnPDLjhOGWCMXr%2F%2B9j7trwhsZWzi87EY0abCvhbMkvuu1N3TIGiWypbcKhWQ7lzSs1D%2Fe8nC2yywaZsR8BB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d281c12-OSL
X-Firefox-Spdy: h2

asianhdplay.pro/video/fonts/fontawesome-webfont.woff2?v=4.5.0

104.26.2.103

200 OK

57 kB

URL HTTP/2
asianhdplay.pro/video/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Size
57 kB (56780 bytes)
Hash
97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c

HTTP Headers

GET /video/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://asianhdplay.pro/video/css/font-awesome.min.css??v=10.1.20
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: application/octet-stream
content-length: 56780
last-modified: Wed, 21 Jul 2021 11:00:50 GMT
etag: "60f7fe62-ddcc"
cache-control: max-age=14400
cf-cache-status: HIT
age: 404
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NYs%2BNSVeEuLVDiMqRK%2FMdmlgyWaJebhA4T27x35Eg55NLk6IE8o97WfNLahryyiRv62tv%2Bv1a2JRCg2kg3G54txLSK0K74PXGZqgvPswxVnicAGo6OAsDb31WXx5bxOdZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d6236b823b51d-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/omniscient-interfering-view.png

172.67.68.115

200 OK

243 kB

URL HTTP/2
imagecdn.me/cover/omniscient-interfering-view.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
243 kB (243120 bytes)
Hash
772cea7e7a56f77e5d045ac01f900b7a
c68f107982fb46d79e60c21afab2766427ac3e66
2d85da2ff895601f08fabcf11b2f4428c29aec472938eb719db6188474a94969

HTTP Headers

GET /cover/omniscient-interfering-view.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 243120
last-modified: Mon, 30 Mar 2020 14:15:43 GMT
etag: "5e81ff0f-3b5b0"
expires: Fri, 21 Apr 2023 04:34:29 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024051
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h3ck6urgz2T8xN%2B4teC6VYzJNB77Vi%2FCRLaU%2F1PV5K3dC%2FZxg7OPoHlF2FVPj%2FSa6HM%2BOAEhNujFPTTpRI3QpMXU8Ax2nhW3BZXjJAk%2Fy%2B42FMUdz%2BCpzNmNwe93"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d2d1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/love-is-written-in-the-stars-1669053330.png

172.67.68.115

200 OK

347 kB

URL HTTP/2
imagecdn.me/cover/love-is-written-in-the-stars-1669053330.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
347 kB (346656 bytes)
Hash
7107b7a8464b45f18d1559df5bace5d9
24cf284121546e34cb2b7779f2f28d17f8c55cea
3e9ea3fe6c97b1bbab9dbf43986f32eca0f62dc186e613e92ae66761dda18fc0

HTTP Headers

GET /cover/love-is-written-in-the-stars-1669053330.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 346656
last-modified: Mon, 21 Nov 2022 17:55:29 GMT
etag: "637bbb91-54a20"
expires: Fri, 21 Apr 2023 14:43:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 987509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e3sFcQyDWmDMntneYrPJTENMJLJ%2BEJI0z4YUJj6x08gy8GYyMY9ynH4knwkihNx%2BNRTSg5gDK4ejh%2FeGxrP7CPBfs1vH4FC2kDWxqD1tXoopIEseFfGICak1rUgg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d231c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/battle-trip-season-2-2022-1666017288.png

172.67.68.115

200 OK

389 kB

URL HTTP/2
imagecdn.me/cover/battle-trip-season-2-2022-1666017288.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
389 kB (388978 bytes)
Hash
08c53991019537d2cdf9e97e05adb4d3
c8fd9b643d16134cf093f2adc4f1b8a189c33085
ca57545a57fe7e33e5da92d60b97501eb7d5ed4e38b9709e73aebe6bb2e40cb6

HTTP Headers

GET /cover/battle-trip-season-2-2022-1666017288.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 388978
last-modified: Mon, 17 Oct 2022 14:34:46 GMT
etag: "634d6806-5ef72"
expires: Fri, 21 Apr 2023 11:09:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1000348
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Epp4UMmYsJNC6XLKoXyY2YGdBTul8IGeOZfThBDJIj9%2B2jrdz%2BrQW5VFAHjp0Ze0SFXFVNbNUfBVpioDAwsx3V%2F%2BLrtFNmOyIeMJjJHbDxdETJlyiyLI%2FgCp5o1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d2b1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/blue-birthday--1675788137.png

172.67.68.115

200 OK

313 kB

URL HTTP/2
imagecdn.me/cover/blue-birthday--1675788137.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
313 kB (312810 bytes)
Hash
dcee2b57c2a2f3628d1937c42a4c08f9
3258353283889935ca24ef006f9aaf9b8ae5728e
146e1fa93bb7f47ae4318a117e091c385820101c64c48b1b95d0d3f72bf16f1d

HTTP Headers

GET /cover/blue-birthday--1675788137.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 312810
last-modified: Tue, 07 Feb 2023 16:42:16 GMT
etag: "63e27f68-4c5ea"
expires: Sat, 22 Apr 2023 23:04:38 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 871042
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QP2xgTYk1uTeIN08T5OkhTI4E9U1VyViM%2Bl0H8y2z8I1p%2BUVRrjtHbQoc0cDvdRns4E08Ss1W5O7ijZjjUu7iXCnCtUlii7Vl1AGSEGdzLt%2By3qHuFcz9EtRj9QG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d2e1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/no-math-school-trip-2023-1678501575.png

172.67.68.115

200 OK

31 kB

URL HTTP/2
imagecdn.me/cover/no-math-school-trip-2023-1678501575.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=422, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 200x281, components 3\012- data
Size
31 kB (31208 bytes)
Hash
b156163ede7d347916e2ab94f537764b
0eadb39f1bee5b8072b3d95ed58f497b48dda7ea
d868f2925c365f692ce1db9affff7a7094b4e0fa0a1bc7e92c5f6b5b1663ffed

HTTP Headers

GET /cover/no-math-school-trip-2023-1678501575.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 31208
last-modified: Sat, 11 Mar 2023 02:26:14 GMT
etag: "640be6c6-79e8"
expires: Fri, 21 Apr 2023 08:07:51 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1011249
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ke8Cu6D%2BsXS4uPBIcexE2IcuKRok3x6JZVxOCLGD0le9rrcgfwAuvUoZbgtEGH7iHFuFsEjWJugPZoDiH0FVErpX0EDJDoVOqmRiXHBsk7Opww%2F3CICHUz9VLAkl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d3a1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/i-live-alone.png

172.67.68.115

200 OK

74 kB

URL HTTP/2
imagecdn.me/cover/i-live-alone.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
74 kB (74145 bytes)
Hash
c28dfdb24a8fd5d4e92ac3bc3ebc145e
0a71e06f1740cc27e66d0259e66d98e67d5570c8
e75cc84079b746ae22c3fff7eec3541a8e1b515d1fc77dc40fd6fca7895eeee8

HTTP Headers

GET /cover/i-live-alone.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 74145
last-modified: Fri, 15 May 2020 10:20:09 GMT
etag: "5ebe6cd9-121a1"
expires: Fri, 21 Apr 2023 06:55:35 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1015585
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SvIEjbr24oO3OaSSV17uJh7DaxXB681%2BFwabD%2FdYKbXqvEApi%2BcYznkcFBTOyFjmdVFTRC0FCUsVEh915Iv%2Bk88nghS6h5bKsVhAHggEODoy25RTesEzw1wTMW1h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d391c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/butterfly-shadow-2023-1679558748.png

172.67.68.115

200 OK

411 kB

URL HTTP/2
imagecdn.me/cover/butterfly-shadow-2023-1679558748.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
411 kB (410794 bytes)
Hash
f1c037760a2cdabf2260cb6c39f2f744
3ff511ca10cc3e243721df0e171d8ba285cbfe30
cc64cdf1240d5058c8a1f24655833b7782af931c7dc26eb33e48d00f4b19f53e

HTTP Headers

GET /cover/butterfly-shadow-2023-1679558748.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 410794
last-modified: Thu, 23 Mar 2023 08:05:48 GMT
etag: "641c085c-644aa"
expires: Sat, 22 Apr 2023 08:08:34 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 924806
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P3y13YYFEbqB6r76sxPpnE5FDhqXgnh3pBLztb%2FPtaZjs3ynsu6PtpL19r%2BN%2Bz9XwO3fiB46OdMr564P2qMMNj%2FnmAlF44%2FmQdgMuLfBeNHyh%2FDcdsaDTBPTAdOc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d301c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/bed-friend.png

172.67.68.115

200 OK

285 kB

URL HTTP/2
imagecdn.me/cover/bed-friend.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
285 kB (284768 bytes)
Hash
b3f1b7b95a1f43259ee258fee0c99852
f19c0a5f5b1f172759b5a155a30d02f945ba6ffc
97ad462f37f9040929caebea0c6246e2f42007101dbcfd3ab57187ffc8a788b9

HTTP Headers

GET /cover/bed-friend.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 284768
last-modified: Mon, 04 Apr 2022 07:48:06 GMT
etag: "624aa2b6-45860"
expires: Fri, 21 Apr 2023 04:23:27 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024713
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N1qiPnc%2FIjV2%2BVHqzp7tlEb7e1KlpLXdBQB5eeHsGraA8OFikKJuw1WnwX%2FM9LiHWpYMKYKPT1rd9X1gnAor2FqIebR%2BNayA%2BmslUM1MTATjltNUDTq7h0ftZaRa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d351c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/science-fell-in-love-so-i-tried-to-prove-it.png

172.67.68.115

200 OK

428 kB

URL HTTP/2
imagecdn.me/cover/science-fell-in-love-so-i-tried-to-prove-it.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
428 kB (428151 bytes)
Hash
3a254bb08976e3ca77ceae47af2b0cff
b579bb4b52936de5ef3148893c1f0a11cf796d30
a6f64df764bd766b07f9c9c0e75885f48fe9964d4995f66c79699659496323ba

HTTP Headers

GET /cover/science-fell-in-love-so-i-tried-to-prove-it.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 428151
last-modified: Sun, 22 May 2022 07:43:01 GMT
etag: "6289e985-68877"
expires: Fri, 21 Apr 2023 09:17:01 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1007099
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5MBc2eCfLaKo%2F0ERlIr52n6WVx36TfCZFR%2Bnoa%2FNhXwpWZsQ7Gr9kWbB4RzKVno2lki8v470shoWJSj6XH%2Btp2f2A%2BSCJs2EDCMLR4TWjpWiBcrKoqK1UKJqWBow"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d311c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/chains-of-heart-1676995810.png

172.67.68.115

200 OK

328 kB

URL HTTP/2
imagecdn.me/cover/chains-of-heart-1676995810.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
328 kB (327996 bytes)
Hash
529a14bfe00fdf44b3b078da671b86e7
6026c6ec288456c23eeb9ad2cc469d950446d71b
8de80e3de588ede186cf2fd7c3c25fc858de6ca43a09978ab30f9a3a77065676

HTTP Headers

GET /cover/chains-of-heart-1676995810.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 327996
last-modified: Tue, 21 Feb 2023 16:10:08 GMT
etag: "63f4ece0-5013c"
expires: Fri, 21 Apr 2023 04:41:07 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1023653
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZQq97mhBMDle3YKkzW4nNgYMC6XJ8cfBs1to3WxxzDbEnK8iP0KYJENjb%2FL7Bp43jqhXmmILitN9DJ6qFdTYZCAK9C9H3yiOORNhHtz5zL1Ek52epRZKm8zNBoCB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d341c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/love--syndrome.png

172.67.68.115

200 OK

300 kB

URL HTTP/2
imagecdn.me/cover/love--syndrome.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
300 kB (299739 bytes)
Hash
38713bdfd0be943656a522b03b4a73eb
d58b9b1a74802fd64981fdf032247b45c16f74f3
d73445be0683946e7a58028f087c7cd74d8c345dd5c1439816620fb1bda58eef

HTTP Headers

GET /cover/love--syndrome.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 299739
last-modified: Mon, 20 Jun 2022 15:46:17 GMT
etag: "62b09649-492db"
expires: Fri, 21 Apr 2023 04:41:07 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1023653
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XMtpsxac2BGkIWpZPInWA2wI7QWUbwII1gyJX0kc%2Bmhyw0Vw3GfIhhzkPIAISUJRnqCcw3JEqAocL5WZnCqE7CE%2FpBx73UCrQ0kIwxPnrN37rXD7qxYTDZcnMqew"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d361c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/real-fake--1665425271.png

172.67.68.115

200 OK

415 kB

URL HTTP/2
imagecdn.me/cover/real-fake--1665425271.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
415 kB (414614 bytes)
Hash
d839ced133374bd6daee3ced886e96c1
49ab5d0ab04cbe8f440b53477e2b3054da358933
8fafa5a94a60c1632893bcf6afd0be999dfb9391e3333e5831553574799515da

HTTP Headers

GET /cover/real-fake--1665425271.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 414614
last-modified: Mon, 10 Oct 2022 18:07:51 GMT
etag: "63445f77-65396"
expires: Fri, 21 Apr 2023 12:05:53 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 996967
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SIswoflt24mKsLFBMz8YSuJzMMmy1%2BcXInAVMBII18TWdR6piRbzKTvBw6CBeqcRPc%2Fl1omUWi4lrWeiBPHRD5E5qkeplIrlOP%2B69TBx9aJ5xCNIjO14uGszJXhU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d331c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/nothing-but-you-.png

172.67.68.115

200 OK

488 kB

URL HTTP/2
imagecdn.me/cover/nothing-but-you-.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
488 kB (487892 bytes)
Hash
2904277afd9b76383ae17813d23c27ec
1c0990660ad576c0456c6eab6a758c2fdea4418b
5b546276ec4bce5a75701c357af2518e37d3076aa3680870534540dd605619cf

HTTP Headers

GET /cover/nothing-but-you-.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 487892
last-modified: Sun, 22 May 2022 16:30:41 GMT
etag: "628a6531-771d4"
expires: Tue, 25 Apr 2023 15:42:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 638343
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hPfyLGeqprv4ZKtp1YeWm0TWpZt9SbZ5pnqVOmBbQWJEEYWKrH2g3w%2BAaJxIQ7QrUD95aH3zppR96UJoGHpopudSmgrWV6uAQfZkIWtnV7UprO%2BHtRWjIEcLfbfO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d321c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/20141208085901-Immortal%20Songs%202.jpg

172.67.68.115

200 OK

25 kB

URL HTTP/2
imagecdn.me/20141208085901-Immortal%20Songs%202.jpg
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 250x188, components 3\012- data
Size
25 kB (24973 bytes)
Hash
d6a9b47b6a65c53faaddc70e548142b5
a39f134beecf30ca6bcb1719e6c1c813afb495cf
3a7390892be092c1ef67ad2358abf1a02dc7943bdb1431a8aba86361132308b7

HTTP Headers

GET /20141208085901-Immortal%20Songs%202.jpg HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/jpeg
content-length: 24973
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-bgj: h2pri
etag: "54856855-618d"
expires: Fri, 21 Apr 2023 11:09:32 GMT
last-modified: Mon, 08 Dec 2014 08:59:01 GMT
pragma: public
cf-cache-status: HIT
age: 1000348
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAT0RAKjc2KrVEz35xt0GuENx7JaU%2FCT6Y3V8cCDnCscLgIL950wbb2WeL1rnsmcDLJqSvIePH3uuflITOfDYtPWV9LFiU3fHbuatECEHm8oKDleqr%2FmuTmHH35L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d291c12-OSL
X-Firefox-Spdy: h2

detectportal.firefox.com/success.txt?ipv4

34.107.221.82

200 OK

8 B

URL HTTP/1.1
detectportal.firefox.com/success.txt?ipv4
IP
34.107.221.82:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
8 B (8 bytes)
Hash
ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5

HTTP Headers

GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Sun, 02 Apr 2023 12:55:28 GMT
Age: 43592
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600

imagecdn.me/cover/duty-after-school-1679677780.png

172.67.68.115

200 OK

355 kB

URL HTTP/2
imagecdn.me/cover/duty-after-school-1679677780.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
355 kB (354850 bytes)
Hash
ead5826485f8a2205696e2c94b68bd5f
8a7b3edcb7d8d6f2915e9631816de045d41b89ee
140fda216bfcea449715b6f66627a533f65aea9aaab7e4d9176dc1cdada5aef3

HTTP Headers

GET /cover/duty-after-school-1679677780.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 354850
last-modified: Fri, 24 Mar 2023 17:09:40 GMT
etag: "641dd954-56a22"
expires: Sun, 23 Apr 2023 17:18:48 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 805392
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5qoPIbPjoTmzjkaOjnZ9cjDcRQ1yQjBsdFickswcactDyQx7rl%2FFx89%2FqLO062F%2Bj6rhzIouKX9d0A4YJ2KQf3C3xkXvBeibdP%2B2D3gpuKKm%2BxOvK8lWORX2Rv%2Bt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d381c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/ren-sheng-zhi-lu-2023-1679327863.png

172.67.68.115

200 OK

396 kB

URL HTTP/2
imagecdn.me/cover/ren-sheng-zhi-lu-2023-1679327863.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
396 kB (395882 bytes)
Hash
8b1b99540975461e305390b029d9c87f
3300955167131e34b9fe9144c2a2be7771997623
85f8215c8bd23bbcb0b42c83d77e12faf401da3b4f473ea1b32a1fe8636d167e

HTTP Headers

GET /cover/ren-sheng-zhi-lu-2023-1679327863.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: image/png
content-length: 395882
last-modified: Mon, 20 Mar 2023 15:57:43 GMT
etag: "64188277-60a6a"
expires: Fri, 21 Apr 2023 04:23:53 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024687
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1v%2FfH2IV4gNczs13y4EXAum0PVXDEngWzyqyLWMrvTJlOX3R%2FgP6Bj%2FtZr8%2F6fLomDWQZK5zroQtHu8FZk6M16myKK8DQwwk6ZsgAQHikWKPzBCuu4bBQplKwtip"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62354d371c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/running-man.png

172.67.68.115

200 OK

257 kB

URL HTTP/2
imagecdn.me/cover/running-man.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
257 kB (256844 bytes)
Hash
c2d67050ad96ebd63a92c6bd6ec55c38
76dac91907c1ee355be59ab4ad7af33a17b045de
08282c203f6a83916467573a108b718abed2640f5d907f2b184e0ea7d9cab3c5

HTTP Headers

GET /cover/running-man.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:01 GMT
content-type: image/png
content-length: 256844
last-modified: Fri, 14 Aug 2020 07:34:07 GMT
etag: "5f363e6f-3eb4c"
expires: Fri, 21 Apr 2023 04:23:27 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024714
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cqBPfOmq4wpvSGtZrdM346NNkgghox%2BXd7BLhJO4XRmQEKY4za1aLdgEgdi%2BkPaDXfOjbLPQzPlj1yoQ%2B%2FeOoC7WDYHQz9Imw2OP2q9Uj8NCwBRP1LU8qfYo%2F6xO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62388e4a1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/bu-yun-qu.png

172.67.68.115

200 OK

63 kB

URL HTTP/2
imagecdn.me/cover/bu-yun-qu.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
63 kB (62752 bytes)
Hash
5bada66a1cf5d7a5c25fec5671acc90d
f9c010f120ac4726a95094e285a8046bec0331f3
1076ac0fdd2216e0a56b777a4b8a3386fca2e80cde506ee4147e2ff953dbf9c1

HTTP Headers

GET /cover/bu-yun-qu.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:01 GMT
content-type: image/png
content-length: 62752
last-modified: Fri, 11 Jun 2021 03:52:38 GMT
etag: "60c2de06-f520"
expires: Fri, 21 Apr 2023 04:23:28 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024713
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MdZJAGDg6guMazF24gaWG82LcJZrInV64W04iVvnoh7A%2BmAmW7GHMs1Z5k50gQ3jci7eu5rpozIBTcKXuX1Q76rpQFRGGKDXrOibKlAlpjw1BE5xgKdOyz25o3rj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62388e4c1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/closer-to-you-2.png

172.67.68.115

200 OK

42 kB

URL HTTP/2
imagecdn.me/cover/closer-to-you-2.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x600, components 3\012- data
Size
42 kB (42481 bytes)
Hash
236ffb71783db3425c5133c611131fbb
b33f16b46eb6e150a26d519014e073f441966d20
ee30fb47aa690ce028c77f1d1369417313f150b7d8a1a5c7b5a58f694753feb6

HTTP Headers

GET /cover/closer-to-you-2.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:01 GMT
content-type: image/png
content-length: 42481
last-modified: Mon, 21 Jun 2021 15:32:00 GMT
etag: "60d0b0f0-a5f1"
expires: Fri, 21 Apr 2023 04:41:07 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1023654
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RhlRqNcKcD5IRfdhX3UE2FrgR38uzkpJ7Fg4KKHJETlG%2FLB4cYP95HIapEvjuRJVjQkYYvWwVQWqVgRL6HKB6hoOqgut0TdxPYLjI2m5Ektrh0S8h68D7HuFor0N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62388e4b1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/umg-1678690315.png

172.67.68.115

200 OK

421 kB

URL HTTP/2
imagecdn.me/cover/umg-1678690315.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
421 kB (420914 bytes)
Hash
ad3ac0236ccdce06ff6f6feb459176e6
4a2aa629cb5193f20d5ddbeb49629c2e041b110a
0a93a6321c11246a85d5e0a185a65feec1f9aa9506b728fe11ad585d447a0488

HTTP Headers

GET /cover/umg-1678690315.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:01 GMT
content-type: image/png
content-length: 420914
last-modified: Mon, 13 Mar 2023 06:51:52 GMT
etag: "640ec808-66c32"
expires: Fri, 21 Apr 2023 04:41:07 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1023654
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XztArtvbiXShr0sw5LPFZxWp2DOMQ5mApTdItIPZGIt7GJuEfR76yTiLQVtIRFg9EY0Ex%2FWeWzBA38r75sCtNyG9djJc8jRLUahDll11O4nMH18PoXv0Uvrtq5hw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62388e4d1c12-OSL
X-Firefox-Spdy: h2

imagecdn.me/cover/dong-lan-xue-2023-1678486985.png

172.67.68.115

200 OK

39 kB

URL HTTP/2
imagecdn.me/cover/dong-lan-xue-2023-1678486985.png
IP
172.67.68.115:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x422, components 3\012- data
Size
39 kB (39238 bytes)
Hash
8f1c68b0f9e8587efae68c1e2710542d
c56136722a0cb04859f826ecaf361445c7539e33
9a4984eb1cf4ad0137d66da88f12c038b1e7e31314d7bb5e39dbc8265d735d03

HTTP Headers

GET /cover/dong-lan-xue-2023-1678486985.png HTTP/1.1
Host: imagecdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:01 GMT
content-type: image/png
content-length: 39238
last-modified: Fri, 10 Mar 2023 22:23:04 GMT
etag: "640badc8-9946"
expires: Fri, 21 Apr 2023 04:23:54 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1024687
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rMvQv%2Fs5avXWz9Gu9UgKSrFczfSdbSRvc9PzF9CDPotPEbkAJqG3IkEJxP%2FvUjx5Sp2RcFsxGIEzEhyFkXPAiy7LFDGWUILPdunkaTY71Y69jyUZhEk9pLmNV5SU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d62388e4e1c12-OSL
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Alert, Expires, Pragma, Content-Length, ETag, Backoff, Cache-Control, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 03 Apr 2023 00:17:28 GMT
age: 2673
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

asianhdplay.pro/img/favicon.png

104.26.2.103

200 OK

3.9 kB

URL HTTP/2
asianhdplay.pro/img/favicon.png
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
3.9 kB (3910 bytes)
Hash
22f6617f86e193baaec094d31eb42a1a
1aa4ee34a01231e1305f9e31beb521f7f3dd3b99
3efa54ddfff908437750e99a9b3feb09a60b9c4b4641c5590b9c38593dcda877

HTTP Headers

GET /img/favicon.png HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:01 GMT
content-type: image/png
content-length: 3910
last-modified: Wed, 21 Jul 2021 11:00:50 GMT
etag: "60f7fe62-f46"
expires: Fri, 21 Apr 2023 09:53:29 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1008675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CoSMCKtH5owRU6AXCDpZS1xmz2hk3H4p3MNK2kz72lDskb2poNiMdi89H0z5iwinKtU1Zn6XuEkaht60g6B1yXafWOsp8THBL%2BfqDWFpXGJWALwBuFJlwXn9jIHTjV4Yjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b1d6238d989b51d-OSL
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d01bc719725bc76729fb299fc72f070f
2f490d875923484686e0396e561e6636a6bdf6f3
bed1c4f858b3cd56eb98aaa8e4c8ebfc326da5b5f18ff07cd52a824a3b7f1012

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BED1C4F858B3CD56EB98AAA8E4C8EBFC326DA5B5F18FF07CD52A824A3B7F1012"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8005
Expires: Mon, 03 Apr 2023 03:15:26 GMT
Date: Mon, 03 Apr 2023 01:02:01 GMT
Connection: keep-alive

ocsp.digicert.com/

192.229.221.95

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3dd6d841548f86fa122337ef99a1f1bd
fcfa76e535e05ed4f148c9e731b8e7c4604196dd
abe049b55c34cd2897f5c0e84d3e7cca9a56db2d4535dc6c340f5dbefcd092b6

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4917
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Apr 2023 01:02:01 GMT
Last-Modified: Sun, 02 Apr 2023 23:40:04 GMT
Server: ECAcc (ska/F77E)
X-Cache: HIT
Content-Length: 471

delivery.taroads.com/creative

188.114.96.1

204 No Content

0 B

URL HTTP/2
delivery.taroads.com/creative
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /creative HTTP/1.1
Host: delivery.taroads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://asianhdplay.pro/
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Origin: https://asianhdplay.pro
Content-Length: 99
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 204 No Content
date: Mon, 03 Apr 2023 01:02:01 GMT
access-control-allow-origin: https://asianhdplay.pro
access-control-allow-credentials: true
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yn0gHYTSPW9zbFnDJLv%2B74P5Szsl7pkpuHF678XqVZOqU38hllD2jileRxIfeFjhD9od%2F0tTqi2Fwa6qXPqTjmZB8os%2F2eYrHmzAT3c2ejTF8CYUWZ%2BRDGtYIHFH0SlmgNiUf0eGeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d623a3a180b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

delivery.taroads.com/openrtb

188.114.96.1

204 No Content

0 B

URL HTTP/2
delivery.taroads.com/openrtb
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /openrtb HTTP/1.1
Host: delivery.taroads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://asianhdplay.pro/
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Origin: https://asianhdplay.pro
Content-Length: 99
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 204 No Content
date: Mon, 03 Apr 2023 01:02:01 GMT
access-control-allow-origin: https://asianhdplay.pro
access-control-allow-credentials: true
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4hT65rAyAR3Fpy8UdPurJB1%2Ftt3ztHfAyWJZCABbD02Ai%2F%2FoVBCfFz2QMk6NQsxOe5fFJ43QRXvWV%2BtmQ6hwVFGgVO9lpuKjURtmAppuqDXtynQRW6qdzx2qCK5c%2F2hm926%2B5gnkeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d623a3a1a0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.42.182.211

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.42.182.211:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tlMKgZgysSGkhKhBzyRDBQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OjtAsbSzcN7/dfpKABQjQQT4Qhs=

asianhdplay.pro/video/css/font-awesome.min.css??v=10.1.20

104.26.2.103

200 OK

6.2 kB

URL HTTP/2
asianhdplay.pro/video/css/font-awesome.min.css??v=10.1.20
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (52552)
Size
6.2 kB (6194 bytes)
Hash
bd7b941e8f99ff48c4625b3d86caa17b
0cb9ef62ef913efd98e6ec3e57679c469d3db7f1
d958307fad930a483bc2b7660d968fd0e03bdf0209879b77f1595a4892a4c9ef

HTTP Headers

GET /video/css/font-awesome.min.css??v=10.1.20 HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 27 Mar 2019 09:55:49 GMT
etag: W/"5c9b48a5-cdeb"
expires: Fri, 21 Apr 2023 11:27:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 999269
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rHAPnhLuBKNa1bwN14c0jt2iPLTlG0l2icTzJpBgDUG0hUZ%2B2qNrDxKytNUB3biFjj6C7LchYhmXVkOQSwij32bIXl6Rnn8xVXURYet%2FlyEP3a4mAPqFD%2FGWhUL1Hm1MzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d6234aedab51d-OSL
content-encoding: br
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221680480064664%22

35.241.9.150

200 OK

22 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221680480064664%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (22067), with no line terminators
Size
22 kB (22067 bytes)
Hash
c71cfae792dda7f243310f9fbd1db695
45d6d8967e227d678791b9d54ee620302b8702f9
f8d09f826d8a159429a122b86dd5be5350b8e481bc97651cf905a0587b4b644c

HTTP Headers

GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221680480064664%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Alert, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 22067
via: 1.1 google
date: Mon, 03 Apr 2023 01:01:58 GMT
age: 3
last-modified: Mon, 03 Apr 2023 00:01:04 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1680201445669&_since=%221666204638208%22

35.241.9.150

200 OK

49 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1680201445669&_since=%221666204638208%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (48988), with no line terminators
Size
49 kB (48988 bytes)
Hash
6b4cb6acccb2e110978175dd713538d9
fdc93e3ac37e90c0206a5d58ab241f05f1367d2e
ad955db5572d6dcee5dc2add8aab401a939b1d1631da31439a6464de13d2e985

HTTP Headers

GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1680201445669&_since=%221666204638208%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 48988
via: 1.1 google
date: Mon, 03 Apr 2023 00:34:08 GMT
age: 1673
last-modified: Thu, 30 Mar 2023 18:37:25 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
x-amz-id-2: d1PSXPsc0aSL1+1ZrWM9mQyzYpTvLO/pMs1e5m8GsJzUsGur+Q5dzeXOv+tuvf3eWQGzkhKNiEY=
x-amz-request-id: C6YKX30GEY2DKEXD
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 03 Apr 2023 00:13:14 GMT
age: 2927
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 03 Apr 2023 00:28:39 GMT
content-type: application/json
age: 2002
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
da90eb7b28ce91905240b4cbe00a914d
5baa4f15c596420bbb8ac12c943c791357bff0bf
b491115f9592a5f41fa34e17d735fe074d62287d27476f7c2d9b7c0c3d94ee0e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B491115F9592A5F41FA34E17D735FE074D62287D27476F7C2D9B7C0C3D94EE0E"
Last-Modified: Sat, 01 Apr 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14092
Expires: Mon, 03 Apr 2023 04:56:53 GMT
Date: Mon, 03 Apr 2023 01:02:01 GMT
Connection: keep-alive

firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin

34.111.73.144

200 OK

807 kB

URL HTTP/2
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
IP
34.111.73.144:0
ASN
#15169 GOOGLE

File type
data
Size
807 kB (807180 bytes)
Hash
914be443bdfbe8a1c3ded61e1c114bd6
4fe7c5ff83f6a29e6699f4cebc17550891504661
41b036d0c889509d547296b238027a063c313261ad52d5f7bb81922011791857

HTTP Headers

GET /staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: aX5gtrfIvrlfrmzn3i+2IqLF7UX9w7+97NePjBD0nDkbKdNThX6dTz+ikiY9V5469opwv0s3KdQ=
x-amz-request-id: 43ZG072S6Z1BYVFX
x-amz-server-side-encryption: AES256
x-amz-version-id: K1ODzappZsD35qeu0OM5zvs_BP1eybj7
accept-ranges: bytes
server: AmazonS3
content-length: 807180
via: 1.1 google
date: Mon, 27 Mar 2023 13:47:07 GMT
age: 558894
last-modified: Tue, 10 Jan 2023 12:38:46 GMT
etag: "914be443bdfbe8a1c3ded61e1c114bd6"
content-type: application/octet-stream
cache-control: public,max-age=604800
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/gfx/changeset?_expected=1680018554787&_since=%221643818378440%22

35.241.9.150

200 OK

10 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/gfx/changeset?_expected=1680018554787&_since=%221643818378440%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (10096), with no line terminators
Size
10 kB (10096 bytes)
Hash
ceb5afa740b44e3ce7f4227d4b439113
c61643d28463d062f8ffee3b8ea1cd89cb7b5a6c
0a2f9b659d2e0c816d958925eba9ce4e1387ef3571542036b5c9641f0f364c26

HTTP Headers

GET /v1/buckets/blocklists/collections/gfx/changeset?_expected=1680018554787&_since=%221643818378440%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 10096
via: 1.1 google
date: Mon, 03 Apr 2023 00:21:03 GMT
age: 2458
last-modified: Tue, 28 Mar 2023 15:49:14 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1680480064664&_since=%221666483264567%22

35.241.9.150

200 OK

94 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1680480064664&_since=%221666483264567%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size
94 kB (94145 bytes)
Hash
e359df6edf21cbc5092f029dd4ccf368
ad2943d7874624216ba58b9cc831c5e9650f8592
d2197ebefdb7b1c201156750df190f8114c270e459e6fbc4a2ac72f2f59104b9

HTTP Headers

GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1680480064664&_since=%221666483264567%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 94145
via: 1.1 google
date: Mon, 03 Apr 2023 00:02:40 GMT
last-modified: Mon, 03 Apr 2023 00:01:04 GMT
content-type: application/json
age: 3562
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
95f61d351f5fc9533cc78e255ce9bc06
fba284117f347782ac23c51d141d7e3ec15a867e
7fcc5f9e52e389d8d7c6df7f1f2a1291ae0aaae8e554f3022239ab092b2ef3c3

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
x-amz-id-2: ncs8s507CgrSuwcPc59Bg7ZDUWDFQMYbh0gsNUb9kN52RRq4JeOz7iNFJLlZwodj4Ixcyb79jGk=
x-amz-request-id: EF4GDSF6QM6MJP94
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 03 Apr 2023 00:52:33 GMT
age: 569
last-modified: Fri, 31 Mar 2023 17:04:39 GMT
etag: "95f61d351f5fc9533cc78e255ce9bc06"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258

35.241.9.150

200 OK

682 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (682), with no line terminators
Size
682 B (682 bytes)
Hash
4bb1b4fc8c2869ca65fb998686896d37
cf12db870d3310470b02271d9874ddcc6b3e7c99
f1654281b2b55768524562e0c0cbfc737c0a4945883d068a4cb74b90bd4d2e76

HTTP Headers

GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Alert, Expires, Pragma, Content-Length, ETag, Backoff, Cache-Control, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 682
via: 1.1 google
date: Mon, 03 Apr 2023 00:17:13 GMT
age: 2689
last-modified: Sat, 01 Apr 2023 16:36:58 GMT
etag: "1680367018198"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22

35.241.9.150

200 OK

1.3 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (1251), with no line terminators
Size
1.3 kB (1251 bytes)
Hash
ac95e17144874629483055652a59b3ab
094cf663f568dd24b674a8513dcacb33c81ec96d
48ee07390b28f4ed2b1c63c8afe6aa0fe0e215e728638eadbfca56c6080f20b7

HTTP Headers

GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Length, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1251
via: 1.1 google
date: Mon, 03 Apr 2023 00:51:29 GMT
age: 633
last-modified: Sat, 01 Apr 2023 16:36:47 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22

35.241.9.150

200 OK

1.7 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (1742), with no line terminators
Size
1.7 kB (1742 bytes)
Hash
692068c33d657bcf4dbc680d834040ff
5ab0860fe1180e65c001a23fe02634f98c9d20c8
397dfc50f368fa2225253fdeba566035edd4e3635f68b5cc016ad45d68bd5925

HTTP Headers

GET /v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1742
via: 1.1 google
date: Mon, 03 Apr 2023 00:56:56 GMT
age: 306
last-modified: Sat, 01 Apr 2023 16:36:47 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1675943045406&_since=%221657747510534%22

35.241.9.150

200 OK

2.4 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1675943045406&_since=%221657747510534%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (2387), with no line terminators
Size
2.4 kB (2387 bytes)
Hash
d0f04fce6ffc2367533a886eab81e9f7
c2cc77e327af6d0792559d50bc25d29d0b625309
0916e36b6bace74e4de43ed96dc6721b2cf559b8072e8dcca83f623a88abc52b

HTTP Headers

GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1675943045406&_since=%221657747510534%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 2387
via: 1.1 google
date: Mon, 03 Apr 2023 00:20:15 GMT
age: 2507
last-modified: Sat, 01 Apr 2023 16:36:46 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1680364263540&_since=%221662044085942%22

35.241.9.150

200 OK

8.0 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1680364263540&_since=%221662044085942%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (7961), with no line terminators
Size
8.0 kB (7961 bytes)
Hash
7b8bb32dc8b9c816dca22028e869675e
08d3cd2217299d9d37061fe91f7f12f0be3df84a
5179456d49be8bd7246542e96c4350bf315b25cc2521f0f8d4de8fcd8074e490

HTTP Headers

GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1680364263540&_since=%221662044085942%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Alert, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 7961
via: 1.1 google
date: Mon, 03 Apr 2023 00:45:17 GMT
age: 1005
last-modified: Sat, 01 Apr 2023 15:51:03 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1680281233544&_since=%221666279968541%22

35.241.9.150

200 OK

71 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1680281233544&_since=%221666279968541%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (65536), with no line terminators
Size
71 kB (71289 bytes)
Hash
833b4990297f29861a5ebf7299ce477e
f65b8983ec61a03cc5aef99f47d04257db994f2b
8188ffc4810a936d8ec3cfb88d76d25d94996ca2259aa66de3ede03db5cb4738

HTTP Headers

GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1680281233544&_since=%221666279968541%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Length, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 71289
via: 1.1 google
date: Mon, 03 Apr 2023 00:01:30 GMT
age: 3632
last-modified: Fri, 31 Mar 2023 16:47:13 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22

35.241.9.150

200 OK

1.5 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (1504), with no line terminators
Size
1.5 kB (1504 bytes)
Hash
50de80e2b05f38f82d229a41cc6487cb
3dab6bdb97a119f4ad78d632b7e8d55f14fc1cf9
910aa8bbfa4adbf92a8ca304d07270c82be4bd6afa6bece6649e83b36b6a751f

HTTP Headers

GET /v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Alert, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1504
via: 1.1 google
date: Mon, 03 Apr 2023 00:34:09 GMT
age: 1673
last-modified: Fri, 31 Mar 2023 16:36:48 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22

35.241.9.150

200 OK

935 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (935), with no line terminators
Size
935 B (935 bytes)
Hash
d78c9933e50dcdfd12baf5e6451b4af0
9ff71e4d53bafa1eb83ec7ae7db8f7e28d4f4a63
d52bc0f54df87b008e7e919bd154e6d03d4eb70f7dcd59020752707b6bb70af9

HTTP Headers

GET /v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 935
via: 1.1 google
date: Mon, 03 Apr 2023 00:09:03 GMT
age: 3179
last-modified: Fri, 31 Mar 2023 16:36:46 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

detectportal.firefox.com/success.txt?ipv4

34.107.221.82

200 OK

8 B

URL HTTP/1.1
detectportal.firefox.com/success.txt?ipv4
IP
34.107.221.82:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
8 B (8 bytes)
Hash
ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5

HTTP Headers

GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Sun, 02 Apr 2023 12:55:28 GMT
Age: 43594
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600

firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22

35.241.9.150

200 OK

772 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (772), with no line terminators
Size
772 B (772 bytes)
Hash
1d339048d51d4c3d091251a61c1cc8e9
c83e25ec971b92afd798da972f5f5340383c7e7e
a10e0e82cabc6e4500512889799e17c6cacbc80838c8dbc1ce928fe89d1bb144

HTTP Headers

GET /v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Alert, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 772
via: 1.1 google
date: Mon, 03 Apr 2023 00:38:07 GMT
age: 1435
last-modified: Fri, 31 Mar 2023 16:36:43 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1678922485545&_since=%221661199949574%22

35.241.9.150

200 OK

25 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1678922485545&_since=%221661199949574%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (25354), with no line terminators
Size
25 kB (25354 bytes)
Hash
1904d8293b5f2c002df47873f23e827b
3ad77fb86caaf84886bcd6a811e39c918ba39a34
7600832994dcc92fd44775fed282ca3fdf7baf4333d4ad8310ad0b50d5e010ce

HTTP Headers

GET /v1/buckets/main/collections/search-config/changeset?_expected=1678922485545&_since=%221661199949574%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Alert, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 25354
via: 1.1 google
date: Mon, 03 Apr 2023 00:50:30 GMT
age: 692
last-modified: Thu, 30 Mar 2023 16:36:43 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ff1d01e68831d80a4f75d7db3970972
1a9e1f3fa7389cccb0e91cff2616767e1616113e
fd74cb98e8809df139d3f187b78b0513a394231cb2660663ee250bc11b8e3e24

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD74CB98E8809DF139D3F187B78B0513A394231CB2660663EE250BC11B8E3E24"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8367
Expires: Mon, 03 Apr 2023 03:21:29 GMT
Date: Mon, 03 Apr 2023 01:02:02 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ff1d01e68831d80a4f75d7db3970972
1a9e1f3fa7389cccb0e91cff2616767e1616113e
fd74cb98e8809df139d3f187b78b0513a394231cb2660663ee250bc11b8e3e24

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD74CB98E8809DF139D3F187B78B0513A394231CB2660663EE250BC11B8E3E24"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8367
Expires: Mon, 03 Apr 2023 03:21:29 GMT
Date: Mon, 03 Apr 2023 01:02:02 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ff1d01e68831d80a4f75d7db3970972
1a9e1f3fa7389cccb0e91cff2616767e1616113e
fd74cb98e8809df139d3f187b78b0513a394231cb2660663ee250bc11b8e3e24

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD74CB98E8809DF139D3F187B78B0513A394231CB2660663EE250BC11B8E3E24"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8367
Expires: Mon, 03 Apr 2023 03:21:29 GMT
Date: Mon, 03 Apr 2023 01:02:02 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0936bac9-0505-47a5-932e-eb63ee65f17f.jpeg

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0936bac9-0505-47a5-932e-eb63ee65f17f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6494 bytes)
Hash
440bc52fc1e8c12ac8264a1ee47fc525
00e85bb08fa00deac46dd33bc11e9358c948ecf5
7fd89896357506803bafdb71eccab202b1c492d6489efb4ebb05fb4b367194ad

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0936bac9-0505-47a5-932e-eb63ee65f17f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6494
x-amzn-requestid: e032a9b8-7231-424c-9bcf-3e376fac5c50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CxM52GoDoAMFnUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6429f50b-5b86488c35a3bb1d297bb989;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sun, 02 Apr 2023 21:35:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: BcUzNKU-YO4ziNV_w26wy18Y7hrf1uLna0vTb18r-3aN1YZk234xxQ==
via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Apr 2023 21:47:04 GMT
age: 11698
etag: "00e85bb08fa00deac46dd33bc11e9358c948ecf5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e421b58-eee4-4dc7-81c0-2d96120d8950.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.1 kB (6136 bytes)
Hash
50c5edd2a6ef5c0560c229935677ca09
6241f7dab794ef6fe2af3922fd4b7f3539898cad
5ad2e855be49fc982e27aaef20483edd40a048282d97665d4f95f981d65fa1d8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e421b58-eee4-4dc7-81c0-2d96120d8950.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6136
x-amzn-requestid: e1ae4e9e-f298-409f-aa10-30e40068322f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CxM54F0BIAMF0cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6429f50b-1ccc6fcc3a8705f24e9b956c;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sun, 02 Apr 2023 21:35:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: HHV4kDxmn33xITsq0SeY6uDSOcaCsNXmjqU1W7ppVmUfhvLc0KQ1gQ==
via: 1.1 1cbc126937aab64e42a05f9bf2f8daee.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Apr 2023 21:47:04 GMT
age: 11698
etag: "6241f7dab794ef6fe2af3922fd4b7f3539898cad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1678736907773&_since=%221656585893704%22

35.241.9.150

200 OK

1.6 kB

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1678736907773&_since=%221656585893704%22
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (1646), with no line terminators
Size
1.6 kB (1646 bytes)
Hash
0530a1e9082b795cd4fd4c2b8bd25d70
3f0229439b1d96f80fcb6ab6b77a25feaa8775e9
84fac3b241036cfdcf0f5ded9e9a46d2b49eba4344b3db83755f7268ee21f553

HTTP Headers

GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1678736907773&_since=%221656585893704%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Alert, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1646
via: 1.1 google
date: Mon, 03 Apr 2023 00:09:04 GMT
age: 3178
last-modified: Tue, 28 Mar 2023 16:36:46 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9859 bytes)
Hash
da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Apr 2023 01:53:48 GMT
age: 83294
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62fb01c8-4d1c-46e4-be18-46a045fc0036.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.7 kB (4731 bytes)
Hash
58debe4956af4fc36cc3387eb76039f3
e5839ed22306bada142aaf5ecad43dbbb3e4efd0
242a4538091de7b737cf9de2198aeb95a7d9d27f98e106e386a6157c65cd59b3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62fb01c8-4d1c-46e4-be18-46a045fc0036.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4731
x-amzn-requestid: 18db2f44-aa9d-4801-9af6-4a1da3092b07
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CvNmRGVHoAMFtsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6429295b-5ae79cdf22dbae6c7c99f9a7;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sun, 02 Apr 2023 07:06:03 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: j-XDi8pZ-NijkdetR3oe6godmSD_WtTo9WJtSKG0v_fG7A-GTnspmg==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Apr 2023 07:14:40 GMT
age: 64042
etag: "e5839ed22306bada142aaf5ecad43dbbb3e4efd0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a042280-b9f5-487e-a2a7-ca18a715f17a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8899 bytes)
Hash
662c5ea1102b90973a319043f7e374b8
cabe1c3c72ce1cd12ecefe520866dd147832e161
5382767e336ab2408dd71edb18672287c44e104980207455fe647fd18a3667a2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a042280-b9f5-487e-a2a7-ca18a715f17a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8899
x-amzn-requestid: 3253fcf6-5571-4c5e-8787-bb064d44c7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CxNGrF58oAMF2mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6429f55d-3d50244a39ca7f252f3748e1;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sun, 02 Apr 2023 21:36:29 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Yl9tlQTTyPc3WLqRlBOKn6tIplMq6HEzyQ0a1Q4wuV285_g_1hJu8Q==
via: 1.1 99db15345b0e5e7ad9c267ae999b8cf4.cloudfront.net (CloudFront), 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Apr 2023 21:50:09 GMT
age: 11513
etag: "cabe1c3c72ce1cd12ecefe520866dd147832e161"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31a62407-5adb-494c-99fe-66eb40e7acaa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9341 bytes)
Hash
bc6ca00959a786b38b4f1fa72a38e0ae
ecf9da54e2f1ad1b60f063664f5a0aab9f86bfb5
54282a4a4cfe1fc7d98ff732913aab3daa03bba601d4a21f4a02303807c55782

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31a62407-5adb-494c-99fe-66eb40e7acaa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9341
x-amzn-requestid: bdbcdbf2-9692-4cbf-8a84-c109d3a5ac4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CrXSKHsKIAMF13A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64279f40-271b6c252e8b454e34d625b7;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sat, 01 Apr 2023 03:04:32 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: qZdTZljBfd9arYpqR39GbDvc02vik1Ybf7ODy_9vx3O1AyCfo4V7RQ==
via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Apr 2023 03:30:55 GMT
age: 77467
etag: "ecf9da54e2f1ad1b60f063664f5a0aab9f86bfb5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

asianhdplay.pro/video/js/jquery.js

104.26.2.103

200 OK

0 B

URL HTTP/2
asianhdplay.pro/video/js/jquery.js
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /video/js/jquery.js HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 21 Jul 2021 11:00:50 GMT
etag: W/"60f7fe62-40f4a"
expires: Fri, 21 Apr 2023 12:30:14 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 999269
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z%2BjkCoaSCaIdun20gnQ0SZAZW2W68hDQiXdz1WnHb%2FDVviYSIQqnOyfkZ82nW%2BsRqABzJ6CGTE9Y71hYYNs17dwEo3oYSMibwYJ2lvwP9FWiZGcfofF3Xukx82LrT2iGwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d6234aedeb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2

asianhdplay.pro/video/js/combo.js?v=10.1.20

104.26.2.103

200 OK

0 B

URL HTTP/2
asianhdplay.pro/video/js/combo.js?v=10.1.20
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /video/js/combo.js?v=10.1.20 HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 21 Jul 2021 11:00:50 GMT
etag: W/"60f7fe62-fff"
expires: Fri, 21 Apr 2023 12:30:14 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 999269
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c6%2F0y9gDa7JPxtNIsATzas5VUdZJ6qYURPUH2SynH9hzYpY%2Fxig%2BhLRCqh1WL5rlmYoQNX6K60y3znAU7pnDR%2F9cZOdsSWWPkTCZJmwwVL7cjmtDRXgHAg8SiUJQFyRjnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d6234ef01b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2

asianhdplay.pro/video/js/hamfunction.js?v=10.1.20

104.26.2.103

200 OK

0 B

URL HTTP/2
asianhdplay.pro/video/js/hamfunction.js?v=10.1.20
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /video/js/hamfunction.js?v=10.1.20 HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 21 Jul 2021 11:00:50 GMT
etag: W/"60f7fe62-50e"
expires: Fri, 21 Apr 2023 12:30:14 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 999269
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SjAtPQp8oqpLqLQ5Y4Pn%2FUKmRGvDE3Fi8X3D3JH3f7yYkYudQS7FPlP1hu3e4v0c7ysKU4QApc1QzKbbtujvnRQ9FAiwWmz8SO%2Fxt64dZqxRteJqLKjUW3%2Bt20fpk1Xx0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d6234eeffb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2

asianhdplay.pro/video/css/style.css??v=10.1.20

104.26.2.103

200 OK

0 B

URL HTTP/2
asianhdplay.pro/video/css/style.css??v=10.1.20
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /video/css/style.css??v=10.1.20 HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; token=642a3438e7695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Fri, 31 Dec 2021 07:33:23 GMT
etag: W/"61ceb243-2904"
expires: Fri, 21 Apr 2023 11:27:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 999270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0oELf2pilzUAKV%2FTdhnguiqr4QYZadydngc6rcTU3oKlEQMagBY3%2FipNL5vRfjXm%2BAQBXIo%2B0cZh3ddF%2FqoNYATLWmYWxktvyQl%2Fml33NHo8yqEz%2BpUJc8HLZ%2B4a3qRXBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d6234aedcb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2

asianhdplay.pro/

104.26.2.103

200 OK

0 B

URL HTTP/2
asianhdplay.pro/
IP
104.26.2.103:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: asianhdplay.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.13
set-cookie: tvshow=tkn9k19rni3ack52orgu1khfs4; path=/
token=642a3438e7695; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4hvUGhpdeog5I56kNXg5d9ycsyHKcDey5icexwdN4ERzeZvYJOE5Yozf%2Br%2BaFkqNH2QS97ZROI%2B%2BI%2B0xkcSBF%2BNVMjlwLGG7QBX1bdaTi8vet5cmmEOuBKaCAmRsmjXwyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d62323d0fb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2

pocli.click/pub?id=21

104.21.83.81

200 OK

0 B

URL HTTP/2
pocli.click/pub?id=21
IP
104.21.83.81:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /pub?id=21 HTTP/1.1
Host: pocli.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asianhdplay.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 03 Apr 2023 01:02:01 GMT
content-type: text/javascript;charset=UTF-8
cf-bgj: minify
cf-polished: origSize=12464
vary: Accept-Encoding
cache-control: max-age=120
cf-cache-status: HIT
age: 405
last-modified: Mon, 03 Apr 2023 00:55:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2B1aR6kqUf%2F2NveM53tj3hDxNcSU9IAxEnSoV8keyR0AvzVsz6K3BU%2B1Q%2BQtVqlxdua%2FbwKf8nxuF2tEQAfN%2F6fhqQ25Zj2xxAl4MizUyYI5BP8DbLyE5GyuRqV45w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b1d6238b87eb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (87)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN