firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 10:05:05 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7rC3vNEVBa5RASDBGoXWVR9DvJNYjXNVvf-NgwohNABBXYKLXisWIg==
Age: 1654
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7000
Expires: Tue, 27 Sep 2022 12:29:19 GMT
Date: Tue, 27 Sep 2022 10:32:39 GMT
Connection: keep-alive
www.animehana.in/?m=1
301 Moved Permanently 176 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 995c98ac045ba61078e7684238caf347
f3cef987e074f3327c08ec0f36b929ff364584c8
fe05e0d8748d734ed299382d7ded908b0f05416884cb0deba096a08a34bdb1db
GET /?m=1 HTTP/1.1
Host: www.animehana.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.animehana.in/?m=1
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Tue, 27 Sep 2022 10:32:39 GMT
Expires: Tue, 27 Sep 2022 10:32:39 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 176
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1017811d25642601e984edc1676d118d
c177c4f7a897584bf91347fa4990c83d6bfd0321
f35bb3a8c877dd8d3c5920f3c917722f12b157aff398e2ec30fab51fa6caa2ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2975
Expires: Tue, 27 Sep 2022 11:22:14 GMT
Date: Tue, 27 Sep 2022 10:32:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hCdlrnnlR34/0unq7OwAXc4BSH5urgl+nTmTVDcsUHto0trFok2ycIQkuJS9mnHvr1ky3IktvN8=
x-amz-request-id: DM9XYTBZTAPXP867
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 27 Sep 2022 09:46:47 GMT
age: 2752
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/Rkoo8JTcH3c
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Rkoo8JTcH3c
IP
Hash 305fe3671e3749fd24a0eced63e8c54e
d9a43cb36069a623bc244a543315d1029eb9a6b2
48cc6dd31e1618e60c98e75460c848df6bd1ecc27c437a2576802cea8f269758
POST /s/gts1d4/Rkoo8JTcH3c HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 10:32:40 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 10:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 11:02:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 216k1LGFDKEeKbK3kMXS2vbGgNll10IoJieu5J2Dnhlvhmz8DGBkPw==
Age: 1314
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3647
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Last-Modified: Tue, 27 Sep 2022 09:31:53 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/css/all.min.css
200 OK 9.8 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/css/all.min.css
IP
File type ASCII text, with very long lines (54998)
Hash 2b0f6842c4954ea1ac87e102c86b46d6
b2347b42e69fbf8a8f42f55a41e988f93047db9e
d28ca638cc83a512bd0cea5d91ff833b6109fabebecdef0a58e8226c8f21adbf
GET /ajax/libs/font-awesome/5.8.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:40 GMT
content-type: text/css; charset=utf-8
content-length: 9802
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-d78f"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 5158616
expires: Sun, 17 Sep 2023 10:32:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HPbhI4AP3%2FdcjgSWrWZFsSaunrzxUsQ1%2FzniwozS2GBxaQjCoxOhpI1e9ZsTh%2Fozi8jHaWObRbzBXh0Q1OKyZNBHlt9bxHc1pVp7f%2BHPHcxsSSSQ9X5VyZEmxNhOzBu2Qfujr3Xk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 751393a6a9a40b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.animehana.in/?m=1
200 OK 44 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (56501)
Hash 7f9b431418b19c66dc39c5534362b1c3
b5dcb5463530b1aa3ad5ca183e48bbcdc54af88f
d42856a9da9ab7911ed685565bc519d15c05397858b5f63cfdf5ec1348ef044c
GET /?m=1 HTTP/1.1
Host: www.animehana.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 27 Sep 2022 10:32:40 GMT
date: Tue, 27 Sep 2022 10:32:40 GMT
cache-control: private, max-age=0
last-modified: Tue, 27 Sep 2022 09:58:33 GMT
etag: W/"626233f4aec345157240ca1906627039733fc0a29866460e9c4d7bba47168216"
x-robots-tag: all,noodp
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 44444
server: GSE
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.animehana.in/js/cookienotice.js
200 OK 2.0 kB URL HTTP/2 www.animehana.in/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: www.animehana.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Tue, 27 Sep 2022 10:32:40 GMT
expires: Tue, 04 Oct 2022 10:32:40 GMT
cache-control: public, max-age=604800
last-modified: Mon, 26 Sep 2022 16:53:43 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 39f4c6b878fc92202be480070361362c
5963f72aea1957734b22dfb4019291dc2db459a3
a5954460fca600556f47d2ef8b59206644e00fae1acef9faaff3156d417642a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 18:17:49 GMT
expires: Mon, 25 Sep 2023 18:17:49 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 144891
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-HQ-8xyDGlXk/YDK8A0izerI/AAAAAAAABsQ/1AYmUzX03N0ZxxWPudM209pvcrYk9QongCLcBGAsYHQ/w680/naruto%2Bshippuden.png
200 OK 147 kB URL HTTP/2 1.bp.blogspot.com/-HQ-8xyDGlXk/YDK8A0izerI/AAAAAAAABsQ/1AYmUzX03N0ZxxWPudM209pvcrYk9QongCLcBGAsYHQ/w680/naruto%2Bshippuden.png
IP
File type PNG image data, 680 x 289, 8-bit/color RGBA, non-interlaced\012- data
Size 147 kB (146857 bytes)
Hash 259533505407da63d8805b530fa8c506
7a2d4a91b63a7da3ff6b7fc1e6a5a011d43c5223
373befbbab4d9c8def60fc3016b694b5effaa73e089496f01be6f1fbcd1e02d5
GET /-HQ-8xyDGlXk/YDK8A0izerI/AAAAAAAABsQ/1AYmUzX03N0ZxxWPudM209pvcrYk9QongCLcBGAsYHQ/w680/naruto%2Bshippuden.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="naruto shippuden.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 146857
x-xss-protection: 0
date: Tue, 27 Sep 2022 10:32:40 GMT
expires: Mon, 26 Sep 2022 01:48:04 GMT
cache-control: public, max-age=86400, no-transform
etag: "v6c5"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-bAM2c0QlCy4/YLDIMZXBi4I/AAAAAAAAB-4/a153N_j1EnEXYfgc5IovZEwzJTbNb8eaQCLcBGAsYHQ/w680/One-Piece-Wallpaper-11.jpg
200 OK 116 kB URL HTTP/2 1.bp.blogspot.com/-bAM2c0QlCy4/YLDIMZXBi4I/AAAAAAAAB-4/a153N_j1EnEXYfgc5IovZEwzJTbNb8eaQCLcBGAsYHQ/w680/One-Piece-Wallpaper-11.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x382, components 3\012- data
Size 116 kB (116466 bytes)
Hash e7ba2517e273d44ad64cc58e4e00ddbf
f48cac52cd6e17512845c938d4dc870a2c39db3e
44948cccd272e839f783d7af59484345e4829a752bfdc7c59c867b45d24a6677
GET /-bAM2c0QlCy4/YLDIMZXBi4I/AAAAAAAAB-4/a153N_j1EnEXYfgc5IovZEwzJTbNb8eaQCLcBGAsYHQ/w680/One-Piece-Wallpaper-11.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7ef"
expires: Wed, 28 Sep 2022 10:32:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="One-Piece-Wallpaper-11.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:40 GMT
server: fife
content-length: 116466
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Hc-osQm9-BM/YFonxs0Qq2I/AAAAAAAABwQ/EfQLuhRSbB46MOdmlpwKkGO-sgpkJmXPQCLcBGAsYHQ/w680/dragon%2Bball%2BZ.jpg
200 OK 122 kB URL HTTP/2 1.bp.blogspot.com/-Hc-osQm9-BM/YFonxs0Qq2I/AAAAAAAABwQ/EfQLuhRSbB46MOdmlpwKkGO-sgpkJmXPQCLcBGAsYHQ/w680/dragon%2Bball%2BZ.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 630x1200, components 3\012- data
Size 122 kB (122527 bytes)
Hash 3e049b4ddf00ac8434cfb1c1a177bc27
aac2b2d2ea3f642352fc152c4ff2663347921186
b3067651b073bd48eb443469ce79ad16215dacaebb97e3c0aadaee12ca29725f
GET /-Hc-osQm9-BM/YFonxs0Qq2I/AAAAAAAABwQ/EfQLuhRSbB46MOdmlpwKkGO-sgpkJmXPQCLcBGAsYHQ/w680/dragon%2Bball%2BZ.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v705"
expires: Wed, 28 Sep 2022 10:32:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="dragon ball Z.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:40 GMT
server: fife
content-length: 122527
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Tue, 27 Sep 2022 10:32:40 GMT
expires: Tue, 27 Sep 2022 10:32:40 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6133e354a7138d14e713ab4cd4d0e7
d86dc2d8002443648774db9fbc709a5cff7bb716
a19ed99c04a15360ef292e662bd3334732993732317a38c36e6f7041734d9097
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/4150139458-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/4150139458-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash b318be2224a9b91139a7a4b41f2e4b6e
4bcae447ce5bb3cb36a74745bcca9b72ba419c9f
bc5c92978c40e36f3da25045761d139de3a8a333c5290ccd233273af73bd7f4b
GET /static/v1/widgets/4150139458-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56826
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 15:56:30 GMT
expires: Mon, 25 Sep 2023 15:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 08:50:22 GMT
content-type: text/javascript
age: 153370
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-X8EHRAjevg0/YEps1uLGZWI/AAAAAAAABuY/IiT7n2kAaM8p2DuT-M0wcp2BPFldhgirwCLcBGAsYHQ/w680/ac4352f877cd4265d69538bd7532b7b3.jpg
200 OK 187 kB URL HTTP/2 1.bp.blogspot.com/-X8EHRAjevg0/YEps1uLGZWI/AAAAAAAABuY/IiT7n2kAaM8p2DuT-M0wcp2BPFldhgirwCLcBGAsYHQ/w680/ac4352f877cd4265d69538bd7532b7b3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x850, components 3\012- data
Size 187 kB (186823 bytes)
Hash 67d155d568c45f2781a62a0a9f911312
8fb21902e35d0e425bb8ca14bf4d16689b06b53c
41b4515a351a1aea12b41af57abf44d08ba333c55655d51207266aefb40fb38b
GET /-X8EHRAjevg0/YEps1uLGZWI/AAAAAAAABuY/IiT7n2kAaM8p2DuT-M0wcp2BPFldhgirwCLcBGAsYHQ/w680/ac4352f877cd4265d69538bd7532b7b3.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v6e7"
expires: Wed, 28 Sep 2022 10:32:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ac4352f877cd4265d69538bd7532b7b3.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:40 GMT
server: fife
content-length: 186823
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6133e354a7138d14e713ab4cd4d0e7
d86dc2d8002443648774db9fbc709a5cff7bb716
a19ed99c04a15360ef292e662bd3334732993732317a38c36e6f7041734d9097
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: j9uquYHhiouVXn2KpSdzUQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fWU4BbHsNtNNuOKda0rYX5hGPXo=
rayzershort.com/js/full-page-script.js
200 OK 661 B URL HTTP/2 rayzershort.com/js/full-page-script.js
IP
File type C source, ASCII text, with very long lines (2416), with no line terminators
Hash 5cc30a0815f85d8ff559969a246d9638
fa2ed998e4ad218d07bcc10f14fb07b39ab856c7
6c463146ce3ef14ca92e6ec7909a86c836bcb8c1321255e9d7ca58f6dab94de8
GET /js/full-page-script.js HTTP/1.1
Host: rayzershort.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Thu, 27 Oct 2022 10:32:41 GMT
content-type: application/javascript
last-modified: Wed, 02 Oct 2019 20:15:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,User-Agent
content-length: 661
date: Tue, 27 Sep 2022 10:32:41 GMT
server: LiteSpeed
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14380, version 1.0\012- data
Hash 33543c5cc5d88f5695dd08c87d280dfd
600db9374e47e4f73a59ccc0a99bcc42f4a3e02a
9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52
GET /s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14380
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 22:39:30 GMT
expires: Tue, 26 Sep 2023 22:39:30 GMT
cache-control: public, max-age=31536000
age: 42791
last-modified: Tue, 23 Jul 2019 19:30:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d461c50ca04ee77867f478e2b62a073
869c5f48536dfa1fb5e2011d8de18cfa44145c27
6c44dd39454bbc0daff4153e9047330f032a6e5062a48e89fb6a89934b915ab4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6C44DD39454BBC0DAFF4153E9047330F032A6E5062A48E89FB6A89934B915AB4"
Last-Modified: Mon, 26 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9600
Expires: Tue, 27 Sep 2022 13:12:41 GMT
Date: Tue, 27 Sep 2022 10:32:41 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7f003bc7dfbf94d2dce685f96e5c4854
17a3821c79d10d570855ffc08aad8fa2d4402a87
2e2cbedc1ca5292fe6be1eba7ef441f7a5d401f4c360a26114d52c37a21c94c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2E2CBEDC1CA5292FE6BE1EBA7EF441F7A5D401F4C360A26114D52C37A21C94C6"
Last-Modified: Mon, 26 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15229
Expires: Tue, 27 Sep 2022 14:46:30 GMT
Date: Tue, 27 Sep 2022 10:32:41 GMT
Connection: keep-alive
pl16412951.alternativecpmgate.com/1d5d99db4b20979ac48df82de2b720a4/invoke.js
200 OK 9.3 kB URL HTTP/1.1 pl16412951.alternativecpmgate.com/1d5d99db4b20979ac48df82de2b720a4/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25089), with no line terminators
Hash 32a8add602f5164ca91fca7c9095d2ff
1db916b1d5d70e38e77b0a7883bb31b3170e473c
1075c0a11b4bf10d01ba96d82c5b35f4192d43a71a99862589784b788170ee6b
GET /1d5d99db4b20979ac48df82de2b720a4/invoke.js HTTP/1.1
Host: pl16412951.alternativecpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 27 Sep 2022 10:32:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 817e6b140d7bbf84b7a993a701c206ba
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d542530ba03e999ce85f2bc98889e99b
de1a2a306006f02685d4513c318ee65f0bf67bfa
f7c048541a6984774642bf617984e3ba0ddd0f19b3ba16297665d4c9f11d224c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7C048541A6984774642BF617984E3BA0DDD0F19B3BA16297665D4C9F11D224C"
Last-Modified: Mon, 26 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10811
Expires: Tue, 27 Sep 2022 13:32:52 GMT
Date: Tue, 27 Sep 2022 10:32:41 GMT
Connection: keep-alive
pl16585746.effectivecpmgate.com/fd/01/00/fd0100670da5ab4eeae406271cf131ac.js
200 OK 13 kB URL HTTP/1.1 pl16585746.effectivecpmgate.com/fd/01/00/fd0100670da5ab4eeae406271cf131ac.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37130), with no line terminators
Hash 104719ffc873009d56dd1f287c416bee
f7b41962a366324f16e2ae3efef01096a000d0b3
a18606b142a8e4b9dda3c8386bcb0daa4fb687e67e5f2f6eeb988c8aff3159c4
GET /fd/01/00/fd0100670da5ab4eeae406271cf131ac.js HTTP/1.1
Host: pl16585746.effectivecpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 60517f255212a856d60313b462a6ec12
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.effectivedisplayformat.com/5c30c6f37c44127e49c8271ee31302c3/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectivedisplayformat.com/5c30c6f37c44127e49c8271ee31302c3/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26949), with no line terminators
Hash 7d9d58a48fdccd54207d90a1bbce5841
ab51135765e801a016f7b089b04453b562c4b33f
2f0b43041a395fc48d147b58fe676ee46c6e503f5edd0ef4cd0e84e728df875f
GET /5c30c6f37c44127e49c8271ee31302c3/invoke.js HTTP/1.1
Host: www.effectivedisplayformat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8bb9ceafa87ee80d1cc2a817e2d20109
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 12:31:58 GMT
expires: Sun, 24 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 252044
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Sep 2022 00:48:31 GMT
expires: Sat, 23 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 380651
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ee09b6ab7cfd6fb00b3abacbba58e7bc
4903c09b843081d2e873e272515d2ac8751a0461
92828a32c13bba32c5986661a9570f69f67020c43f452302d7501f159905b731
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 10:32:42 GMT
Last-Modified: Tue, 27 Sep 2022 10:00:14 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qli2OVnqET5Oy1lwErTCEFFJ69OqU8ES38ntiZZAhUwq-f388Xx_nw==
Age: 1948
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ee09b6ab7cfd6fb00b3abacbba58e7bc
4903c09b843081d2e873e272515d2ac8751a0461
92828a32c13bba32c5986661a9570f69f67020c43f452302d7501f159905b731
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 10:32:42 GMT
Last-Modified: Tue, 27 Sep 2022 09:55:50 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MwzgPcmfQrHGwa3oND6XRPE7IdTeojSR4mHSAy7QKrScllB1kzqkgw==
Age: 2212
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 8d533770506b6a32bb2b7626855acf4e
6ee45f81ee6b7bf61586def1b2fc24c7877fdbf7
c8aead19e9cfd1e2b9db49011e47defc1a87857ee347eaf11accb39905e60a59
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.animehana.in
access-control-allow-credentials: true
set-cookie: uid_id2=742243ce-73f0-4e71-b216-e2916da367df:3:1; expires=Fri, 24 Sep 2032 10:32:42 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 281 B IP
Hash 76d1f6267026a53ba2e40c12aff0c2c8
9909ca4abe48a9eeca2da7e5cd7db89a05c76fb0
915114bd4ebe358031f5f2aef414fea695d66012a6069d339e6997cb2263d38b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 10:32:42 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 09:53:49 GMT
Expires: Tue, 04 Oct 2022 09:53:48 GMT
Etag: "9909ca4abe48a9eeca2da7e5cd7db89a05c76fb0"
Cache-Control: max-age=601865,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751393aef8810b3d-OSL
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash bb3f0043571bc424ad01164e0929c317
a2ddcd12db2e7b9fff8077ce6371a761e65a586e
7bcf2b2d144fb490a57967f2f8a1bdd332f7d0f9821613951ac9d72847759859
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.animehana.in
access-control-allow-credentials: true
set-cookie: uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; expires=Fri, 24 Sep 2032 10:32:42 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13023
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 10:32:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13023
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 10:32:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: 09f8fee2-6830-4bec-af40-f2fb6547bc63
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreH5poAMFdxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-0afbf5e01a013e6f0db53da1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CwkfEPDseHez7mArqwz8tmC3WHFwXAZF1OSColucaQ5vG2hvBIDWOg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:42:47 GMT
age: 46195
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:02:24 GMT
age: 48618
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb8d1e3b6d7fbc8c8ba478269621676
84f5a4c8b38acde814bc790e5b514347718d5bb9
ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lf6qqokEw32egp3ofmJGtUTAt3RD2f9rVq5gskbhrk_VFGweeo0oCQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 45804
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40a8f8a-3bc7-4223-a676-6960af975ebc.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40a8f8a-3bc7-4223-a676-6960af975ebc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d478b7bea64d1a5998967c0a665e6be
b078452d30703ea98ad4a7f7fd411b3e2a42ee71
24158d741732109ae2be7314205ac35f4c8b29785876f2785e8bb0ea906762b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40a8f8a-3bc7-4223-a676-6960af975ebc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6628
x-amzn-requestid: 1f0e95f2-d860-422f-80ad-96c6e7c941c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1vvHIaoAMFV4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63296997-5746c99d78e025945cfdd238;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:19:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9-6jF5OoUb2I2HBasyNXBZC-L6rF1VINmgoBFZMuJ9eNelzkS-8BDQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 22:08:24 GMT
age: 44658
etag: "b078452d30703ea98ad4a7f7fd411b3e2a42ee71"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5274e770cb5a704916c8965659709f4a
1a26007f761e439db575fb80fb403031260aecf4
e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: vx-yM_jeJvOaa1UizK5OoDJFkvKnajg2ezLF2l2qnN_OhdTE6I4taQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:05:55 GMT
etag: "1a26007f761e439db575fb80fb403031260aecf4"
content-type: image/jpeg
age: 34007
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash efaaa002eb6251769ea6dbf306ced3a1
9f99fa947a603fd6b10ff149e379cd04ad83d27a
238e0ca1aa29223416c34ef2dfcc6570c00e27a98991d91efc16e9bc4083c197
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4573
x-amzn-requestid: ff35a66a-caf2-4ff4-b850-01a584fc2aa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1B8FzLIAMFSPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63296872-5b4a410a2827baf5598d58e7;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:14:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NFjYOqhUeb3yyjMNWpoBNq_xcsX3wXvc3-rqJt4cGbJXY9Sxr5KpDA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 15:29:19 GMT
age: 68603
etag: "9f99fa947a603fd6b10ff149e379cd04ad83d27a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/117606/320x50?region=eu-central-1
200 OK 116 kB URL HTTP/2 static.a-ads.com/a-ads-banners/117606/320x50?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 320 x 50\012- data
Size 116 kB (115592 bytes)
Hash 9508040cae1ebb4ddf3ca51d66aa4856
4e470543efdf32e047f764da164c535f3e559c6e
f5e257c5ec444909782df2e801e9df8ff8d81972b7164375b184e01a494671e9
GET /a-ads-banners/117606/320x50?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 10:32:42 GMT
content-type: image/gif
content-length: 115592
x-amz-id-2: kgGAaffymDKrR4rEfg/XNXzle3wTJXP49FT5VbkGjaE+uZxNSU4pI96ZQevxR12aplVTNEXjh1g=
x-amz-request-id: KGX692S8BDRPSBRR
last-modified: Sun, 19 Apr 2020 16:06:32 GMT
etag: "9508040cae1ebb4ddf3ca51d66aa4856"
cache-control: max-age=315360000
x-amz-version-id: 6hHJVG54dEDkgArtVQHDAjjhdjNVqVob
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aa940ae56b7489515faf10ee29c7eb43
3596e011acb56bbe68a7508b0e4802d10067ab9a
56f2e1cceb767ce307c8f3f720bcbe1ec05230346d93799ffa9ba71e0bb2ae37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56F2E1CCEB767CE307C8F3F720BCBE1EC05230346D93799FFA9BA71E0BB2AE37"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14725
Expires: Tue, 27 Sep 2022 14:38:07 GMT
Date: Tue, 27 Sep 2022 10:32:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e61d2505910541e93c27d67798eb1dce
d0619f173c2d4690c6add08c4235e27f38f17c8a
20d89db4ff15bc13848817bb08fbc95bd3d3b436e0a6a69d7fd30929b23a5535
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "20D89DB4FF15BC13848817BB08FBC95BD3D3B436E0A6A69D7FD30929B23A5535"
Last-Modified: Mon, 26 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5852
Expires: Tue, 27 Sep 2022 12:10:14 GMT
Date: Tue, 27 Sep 2022 10:32:42 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce9fa7c0f8c668afd33a2fa65bf285e5
0333c06c16ea38e346cee9aad19965aa9d2729b1
50b7e5b9d9833fbd2c737642a86c63217f3296fb4bce6c7a876e4cde3dcddbd8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.variouscreativeformats.com/95f7af6c854715f1b6354f0d32e98fe7/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.variouscreativeformats.com/95f7af6c854715f1b6354f0d32e98fe7/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26943), with no line terminators
Hash 1a2314b58371c0265c49b25b4c54bca4
2dd7aacbd9d892f0c70f0b6640cf1053c07a440b
99be4f8cc513c6ce50294d531da92a93063707b880919a994d07f8864401dabc
Analyzer Verdict Alert quad9 Sinkholed
GET /95f7af6c854715f1b6354f0d32e98fe7/invoke.js HTTP/1.1
Host: www.variouscreativeformats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 27 Sep 2022 10:32:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7e2660eaabdd89f35382c662497aea24
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 10:18:02 GMT
expires: Tue, 27 Sep 2022 10:33:02 GMT
cache-control: public, max-age=900
age: 880
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 27 Sep 2022 10:32:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 27 Sep 2022 10:32:42 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce9fa7c0f8c668afd33a2fa65bf285e5
0333c06c16ea38e346cee9aad19965aa9d2729b1
50b7e5b9d9833fbd2c737642a86c63217f3296fb4bce6c7a876e4cde3dcddbd8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash aef679ed7eea75f77112dbeb067a9ef7
0f45db0c3c27d78eb5bc8d37f227d58c8bc4b829
93d034b84b4dda8a638783c94c4db14760868ef7bce8d5340a7e4b69477a524d
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 27 Sep 2022 10:32:42 GMT
server: ESF
cache-control: private
content-length: 30770
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16bdbd138218fbbfa12d3aa75b28c43e
07f9e39132d7206e0a79c8436d3ffcc32175d173
f5d29f0dd1d27f34d14e0b5bd96494ea722e48568a29aac1b19344e984efe4e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F5D29F0DD1D27F34D14E0B5BD96494EA722E48568A29AAC1B19344E984EFE4E1"
Last-Modified: Mon, 26 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3614
Expires: Tue, 27 Sep 2022 11:32:56 GMT
Date: Tue, 27 Sep 2022 10:32:42 GMT
Connection: keep-alive
hopefullyapricot.com/ntv.json?key=1d5d99db4b20979ac48df82de2b720a4&vstc=2
200 OK 8.5 kB URL HTTP/1.1 hopefullyapricot.com/ntv.json?key=1d5d99db4b20979ac48df82de2b720a4&vstc=2
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (8452), with no line terminators
Hash 517a755a1a95f79346034260ccda52af
c516554853a0204cdb8386c832454b15f6a174ba
9e77db9b2230f153b75fd6612a188581b26ab41a55b7954f9776dd0d167965a6
GET /ntv.json?key=1d5d99db4b20979ac48df82de2b720a4&vstc=2 HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:42 GMT
Content-Type: application/json
Content-Length: 8452
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16312452; expires=Wed, 28 Sep 2022 10:32:42 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 28 Sep 2022 10:32:42 GMT; secure; SameSite=None
uncs=1; expires=Wed, 28 Sep 2022 10:32:42 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 28 Sep 2022 10:32:42 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 28 Sep 2022 10:32:42 GMT; secure; SameSite=None
nlec1d5d99db4b20979ac48df82de2b720a4=[2229333,2229329]; expires=Tue, 27 Sep 2022 10:32:47 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 41ee913368d4ffa5d7fbed22e2ce3941
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5b7b66f5886a12421c3f3970bbf49d5a
13a31565fb5b2f1e75d67ba1ce09dae339f1c0e8
3ed8ffa99cefdf81381912b426c0ab9091fb5888836665d9012435965f99feba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/NAdTarfwBmmVN2jO9_ZDZXbW2JobdXK1pZJ09rC2Bcw.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/NAdTarfwBmmVN2jO9_ZDZXbW2JobdXK1pZJ09rC2Bcw.js
IP
File type ASCII text, with very long lines (35947)
Hash e50215251e55ca26c783e2e9b382e4a9
80a0845ea0b8569e6b04532c7f958ba759b4f207
85041f26f46486b46c2b91fa99da2e214250de0ec79a3c6edb94c73f7fc9243f
GET /js/th/NAdTarfwBmmVN2jO9_ZDZXbW2JobdXK1pZJ09rC2Bcw.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14149
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 07:45:40 GMT
expires: Mon, 25 Sep 2023 07:45:40 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 15:00:00 GMT
content-type: text/javascript
age: 182822
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5d5efe73351159009522167b1d6c48d9
560c6649f35d008448d0f6b33a9b2d728942c09e
ca4f232596c6a032d5309b54757b0a6dfbd47a95d31b28a2308ae4559f0886c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/FzdH2gX03Ik/sddefault.webp
200 OK 25 kB URL HTTP/2 i.ytimg.com/vi_webp/FzdH2gX03Ik/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e1a3bc8df121389c49f102916b7af0c0
07f1a2895cfd3267f2a71f75e2179ede255f7ae3
a1759297178af5c8d8028e7d69ce9301fb7689d7265635469de47dfab355f882
GET /vi_webp/FzdH2gX03Ik/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 24922
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 10:32:42 GMT
expires: Tue, 27 Sep 2022 12:32:42 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5d5efe73351159009522167b1d6c48d9
560c6649f35d008448d0f6b33a9b2d728942c09e
ca4f232596c6a032d5309b54757b0a6dfbd47a95d31b28a2308ae4559f0886c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6908b750175e1c2e2af86c77945ed11
ea6bc6f581500a0974977bbef6bd3432c181bc0f
1dde4f6f372d8e056a96129e101a31d04a0f97448c66df7175251060c6a8d0cd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu_ZETa2dhJyrX1d6KinBHc62xOdk55oDvxlUg5U=s68-c-k-c0x00ffffff-no-rj
200 OK 3.0 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu_ZETa2dhJyrX1d6KinBHc62xOdk55oDvxlUg5U=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 9d4bb804e03313bd8d0d77fbb8469c4d
c0d6aa952e5e659ea285a767f2ddaa8ce6c3f051
300ee6fcac9edce427211d2ae80b278bc78646734aabe5bdf319e6fff78c932e
GET /ytc/AMLnZu_ZETa2dhJyrX1d6KinBHc62xOdk55oDvxlUg5U=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v51"
expires: Wed, 28 Sep 2022 10:32:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:42 GMT
server: fife
content-length: 3019
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
refutationtiptoe.com/watch.435318610590.js?key=5c30c6f37c44127e49c8271ee31302c3&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=742243ce-73f0-4e71-b216-e2916da367df%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 refutationtiptoe.com/watch.435318610590.js?key=5c30c6f37c44127e49c8271ee31302c3&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=742243ce-73f0-4e71-b216-e2916da367df%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.435318610590.js?key=5c30c6f37c44127e49c8271ee31302c3&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=742243ce-73f0-4e71-b216-e2916da367df%3A3%3A1 HTTP/1.1
Host: refutationtiptoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 27 Sep 2022 10:32:42 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Location: https://refutationtiptoe.com/watch.435318610590.js?key=5c30c6f37c44127e49c8271ee31302c3&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=742243ce-73f0-4e71-b216-e2916da367df%3A3%3A1&shu=d701a094b6e0a172c05370a97580892bf64f8135ff151e1bb5fd60ed1b309b6b6d9638abfeb1360242f4850fa54cec661c3ea588bcec2f21ab8378ef68af870528d7b077bd0ed55472327cdd52f901818ad70fb06683f1f5b366ad572941fb&pst=1664274822&rmtc=t
Set-Cookie: u_pl=16312474; expires=Wed, 28 Sep 2022 10:32:42 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XMw63y7mAFoHKTAJWy8IpEcVds59w_uOCkTek7Y1_UM; expires=Tue, 27 Sep 2022 10:33:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d0c332a284a592ee4b8fb00ff318d6ec
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6908b750175e1c2e2af86c77945ed11
ea6bc6f581500a0974977bbef6bd3432c181bc0f
1dde4f6f372d8e056a96129e101a31d04a0f97448c66df7175251060c6a8d0cd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
refutationtiptoe.com/watch.435318610590.js?key=5c30c6f37c44127e49c8271ee31302c3&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=742243ce-73f0-4e71-b216-e2916da367df%3A3%3A1&shu=d701a094b6e0a172c05370a97580892bf64f8135ff151e1bb5fd60ed1b309b6b6d9638abfeb1360242f4850fa54cec661c3ea588bcec2f21ab8378ef68af870528d7b077bd0ed55472327cdd52f901818ad70fb06683f1f5b366ad572941fb&pst=1664274822&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 refutationtiptoe.com/watch.435318610590.js?key=5c30c6f37c44127e49c8271ee31302c3&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=742243ce-73f0-4e71-b216-e2916da367df%3A3%3A1&shu=d701a094b6e0a172c05370a97580892bf64f8135ff151e1bb5fd60ed1b309b6b6d9638abfeb1360242f4850fa54cec661c3ea588bcec2f21ab8378ef68af870528d7b077bd0ed55472327cdd52f901818ad70fb06683f1f5b366ad572941fb&pst=1664274822&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2660)
Hash 504a872bf9d6dcab110b306a9b169b22
0bb838514c3c528ba0d4bc6d9ae1d4ef08b9aa7b
cad99692be157fb938f9aa8c74b4de5dd2e0741ec71ef5166ac24be1b11258ec
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.435318610590.js?key=5c30c6f37c44127e49c8271ee31302c3&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=742243ce-73f0-4e71-b216-e2916da367df%3A3%3A1&shu=d701a094b6e0a172c05370a97580892bf64f8135ff151e1bb5fd60ed1b309b6b6d9638abfeb1360242f4850fa54cec661c3ea588bcec2f21ab8378ef68af870528d7b077bd0ed55472327cdd52f901818ad70fb06683f1f5b366ad572941fb&pst=1664274822&rmtc=t HTTP/1.1
Host: refutationtiptoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Referer: https://www.animehana.in/
Connection: keep-alive
Cookie: u_pl=16312474; ain=eyJhbGciOiJIUzI1NiJ9.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.XMw63y7mAFoHKTAJWy8IpEcVds59w_uOCkTek7Y1_UM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=742243ce-73f0-4e71-b216-e2916da367df:3:1; expires=Tue, 04 Oct 2022 10:32:43 GMT; secure; SameSite=None
iprc44a4f81bbfcdf969a935c2186bf4685d=3569804; expires=Tue, 27 Sep 2022 14:32:43 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
uncs=1; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
pdhtkv26=true; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
uncs26=1; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 39194f1fcbb4d190bdb5de19e6b5716c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.variouscreativeformats.com/d902449c70ece5633a208ef843bfe178/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.variouscreativeformats.com/d902449c70ece5633a208ef843bfe178/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26937), with no line terminators
Hash 8b3e5bfb8c37c7933d1b1ade18460532
858b87dd635a1dc8a1ec1258230e9cb47a785bd9
8f09b22d90eb6fbde7a7cd8db5585991e8f831cd4f7f889c6ec34ee8108657b5
Analyzer Verdict Alert quad9 Sinkholed
GET /d902449c70ece5633a208ef843bfe178/invoke.js HTTP/1.1
Host: www.variouscreativeformats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 50272dc9589bc4e5c3c62fd319a9da0e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 27 Sep 2022 10:32:43 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6dd0ca3919a4fb6785c8bd3fc4dbafe9
1e8e07c12f86c4fc4064736fe4b48d5ecba75dea
c8c609b43b297eef953e30877133adb5ea83e2d3d536bdf78ae8f57cf1abf88a
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 995
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 27 Sep 2022 10:32:43 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0fc75051e565c146221c672a81acaf9b
495ab7020de0f4d36fedbe299b55e59208873585
c32bb7797983bc31f79381513a9127523ecb1e37db6f7a7ba9bdf26b3204a68a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C32BB7797983BC31F79381513A9127523ECB1E37DB6F7A7BA9BDF26B3204A68A"
Last-Modified: Mon, 26 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3035
Expires: Tue, 27 Sep 2022 11:23:18 GMT
Date: Tue, 27 Sep 2022 10:32:43 GMT
Connection: keep-alive
hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skxRvGq7Nz2u%2Fl67oo3gZBUJBJd2cyP1xkMcZING72h4vepLqqZlKmuqqp6pqe5BRckT2Oe9NT55lkgxpk%2FQNcZLKwSFDIXCQHc%2FHiyYuw7FFmDI6%2B0P2%2Bbz3v4fO8VZ%2Ft%2BjMSwtPT5ffMtlSKzi%2FWwurLH0bRleqa1L5f7bcaHzXqV6q291q7UQtfqb4t2KaZj8MoDKMwqq5IKzqmPz8RIbPDdlRrh7V6XIsW6%2Bjb%2F%2FbOB3A0AO%2BdkUuQfFx5FFyGZCPo9MGycJu5yV59K%2FWK5saixw9u601tCo10VnZsgI4%2BOJ%2BGcScrD2H0%2FhQXpvfPYCLHJHj8EIk%2BOIdE0tubciYKQiPh%2F0PRG0GoESQdgZk7kPyEAIzj2jp0ev%2BasQXd%2BlulE3VMKk%2F%2BhCzGpPLrZej02yUl%2B9VbRvlcGu3Q75SQ%2FRFkd4TMHyHfnoMsjsDyTyD5z2T%2ByRp0urfulIHk5dS7lCPIzghKDEBdAD%2F5ZADfCeCzACk%2FrbIoipohZzRstRlb4E2RNHgY0WYnolHYaMGzCd4AeTYAUwMwu4PM7mBTfn6yeAnW%2FwC3UcLxAC4fk%2BDGDnq8RCEICkdQUIJCEhQ5QdEr97lysSvvc%2BV8Ep3n%2BDwvlEOTd3fpvsm7QpPd7Iw8M13N098%2FxaY4rUZ8kbfbPKkncdhutimrt3inFXMRJ804pHU4WUK6uanbbTkmz%2F%2F2AJkck8o9g4QewakjMPkcqI9Ai2EzDkE3hvVWiG19SLVMxQbVtCY1uCmR5RXkW8GuOiMvTDlerNyGYMdXH198PRv%2BchHMlshsiY%2FlI4Kuuju8aQqyd9MUjny3nuUyldt0cn23cpqLC1%2B%2FK7YKY%2Fnqsht89QabCJPy8H3h8jWqudRdR75ZkpwLu2IsE%2BT7VfeBSK57t7HkrfbZ2vU3V1bTzArnpNEjUHmy%2FhRsYvClZ6fv8v8%2F%2FQFpR7C%2BROqPyXlAmiOwbAcum9E7cwFWzWaSLEDhy6GNk9mhkgRKzHqalHD%2F6pNZvevuomtj0PwOdFqiZ0v0VAmqBnD%2B4jDP7PHVH7%2BYxJdI1NwwUXZuL1FW3ZuudvK7ASdPq82FhZA22otRs0lFM6nHrU4j4pTG9UbcaNAF5G7M4pN3%2FgIAAP%2F%2FAQAA%2F%2F9%2FhkRkZwQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skxRvGq7Nz2u%2Fl67oo3gZBUJBJd2cyP1xkMcZING72h4vepLqqZlKmuqqp6pqe5BRckT2Oe9NT55lkgxpk%2FQNcZLKwSFDIXCQHc%2FHiyYuw7FFmDI6%2B0P2%2Bbz3v4fO8VZ%2Ft%2BjMSwtPT5ffMtlSKzi%2FWwurLH0bRleqa1L5f7bcaHzXqV6q291q7UQtfqb4t2KaZj8MoDKMwqq5IKzqmPz8RIbPDdlRrh7V6XIsW6%2Bjb%2F%2FbOB3A0AO%2BdkUuQfFx5FFyGZCPo9MGycJu5yV59K%2FWK5saixw9u601tCo10VnZsgI4%2BOJ%2BGcScrD2H0%2FhQXpvfPYCLHJHj8EIk%2BOIdE0tubciYKQiPh%2F0PRG0GoESQdgZk7kPyEAIzj2jp0ev%2BasQXd%2BlulE3VMKk%2F%2BhCzGpPLrZej02yUl%2B9VbRvlcGu3Q75SQ%2FRFkd4TMHyHfnoMsjsDyTyD5z2T%2ByRp0urfulIHk5dS7lCPIzghKDEBdAD%2F5ZADfCeCzACk%2FrbIoipohZzRstRlb4E2RNHgY0WYnolHYaMGzCd4AeTYAUwMwu4PM7mBTfn6yeAnW%2FwC3UcLxAC4fk%2BDGDnq8RCEICkdQUIJCEhQ5QdEr97lysSvvc%2BV8Ep3n%2BDwvlEOTd3fpvsm7QpPd7Iw8M13N098%2FxaY4rUZ8kbfbPKkncdhutimrt3inFXMRJ804pHU4WUK6uanbbTkmz%2F%2F2AJkck8o9g4QewakjMPkcqI9Ai2EzDkE3hvVWiG19SLVMxQbVtCY1uCmR5RXkW8GuOiMvTDlerNyGYMdXH198PRv%2BchHMlshsiY%2FlI4Kuuju8aQqyd9MUjny3nuUyldt0cn23cpqLC1%2B%2FK7YKY%2Fnqsht89QabCJPy8H3h8jWqudRdR75ZkpwLu2IsE%2BT7VfeBSK57t7HkrfbZ2vU3V1bTzArnpNEjUHmy%2FhRsYvClZ6fv8v8%2F%2FQFpR7C%2BROqPyXlAmiOwbAcum9E7cwFWzWaSLEDhy6GNk9mhkgRKzHqalHD%2F6pNZvevuomtj0PwOdFqiZ0v0VAmqBnD%2B4jDP7PHVH7%2BYxJdI1NwwUXZuL1FW3ZuudvK7ASdPq82FhZA22otRs0lFM6nHrU4j4pTG9UbcaNAF5G7M4pN3%2FgIAAP%2F%2FAQAA%2F%2F9%2FhkRkZwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skxRvGq7Nz2u%2Fl67oo3gZBUJBJd2cyP1xkMcZING72h4vepLqqZlKmuqqp6pqe5BRckT2Oe9NT55lkgxpk%2FQNcZLKwSFDIXCQHc%2FHiyYuw7FFmDI6%2B0P2%2Bbz3v4fO8VZ%2Ft%2BjMSwtPT5ffMtlSKzi%2FWwurLH0bRleqa1L5f7bcaHzXqV6q291q7UQtfqb4t2KaZj8MoDKMwqq5IKzqmPz8RIbPDdlRrh7V6XIsW6%2Bjb%2F%2FbOB3A0AO%2BdkUuQfFx5FFyGZCPo9MGycJu5yV59K%2FWK5saixw9u601tCo10VnZsgI4%2BOJ%2BGcScrD2H0%2FhQXpvfPYCLHJHj8EIk%2BOIdE0tubciYKQiPh%2F0PRG0GoESQdgZk7kPyEAIzj2jp0ev%2BasQXd%2BlulE3VMKk%2F%2BhCzGpPLrZej02yUl%2B9VbRvlcGu3Q75SQ%2FRFkd4TMHyHfnoMsjsDyTyD5z2T%2ByRp0urfulIHk5dS7lCPIzghKDEBdAD%2F5ZADfCeCzACk%2FrbIoipohZzRstRlb4E2RNHgY0WYnolHYaMGzCd4AeTYAUwMwu4PM7mBTfn6yeAnW%2FwC3UcLxAC4fk%2BDGDnq8RCEICkdQUIJCEhQ5QdEr97lysSvvc%2BV8Ep3n%2BDwvlEOTd3fpvsm7QpPd7Iw8M13N098%2FxaY4rUZ8kbfbPKkncdhutimrt3inFXMRJ804pHU4WUK6uanbbTkmz%2F%2F2AJkck8o9g4QewakjMPkcqI9Ai2EzDkE3hvVWiG19SLVMxQbVtCY1uCmR5RXkW8GuOiMvTDlerNyGYMdXH198PRv%2BchHMlshsiY%2FlI4Kuuju8aQqyd9MUjny3nuUyldt0cn23cpqLC1%2B%2FK7YKY%2Fnqsht89QabCJPy8H3h8jWqudRdR75ZkpwLu2IsE%2BT7VfeBSK57t7HkrfbZ2vU3V1bTzArnpNEjUHmy%2FhRsYvClZ6fv8v8%2F%2FQFpR7C%2BROqPyXlAmiOwbAcum9E7cwFWzWaSLEDhy6GNk9mhkgRKzHqalHD%2F6pNZvevuomtj0PwOdFqiZ0v0VAmqBnD%2B4jDP7PHVH7%2BYxJdI1NwwUXZuL1FW3ZuudvK7ASdPq82FhZA22otRs0lFM6nHrU4j4pTG9UbcaNAF5G7M4pN3%2FgIAAP%2F%2FAQAA%2F%2F9%2FhkRkZwQAAA%3D%3D HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Cookie: u_pl=16312452; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec1d5d99db4b20979ac48df82de2b720a4=[2229333,2229329]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 72f3d6437ef20019f579cc95c5e1f252
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eed381093f60d265bf0cc2970650014c
634000599092742388caef6f1a2c6d5378e6c1bb
2501f62b10b278c0e95705040a281c9dd8df9ee336c30995c85f5329fd8be7c0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2501F62B10B278C0E95705040A281C9DD8DF9EE336C30995C85F5329FD8BE7C0"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3741
Expires: Tue, 27 Sep 2022 11:35:04 GMT
Date: Tue, 27 Sep 2022 10:32:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eed381093f60d265bf0cc2970650014c
634000599092742388caef6f1a2c6d5378e6c1bb
2501f62b10b278c0e95705040a281c9dd8df9ee336c30995c85f5329fd8be7c0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2501F62B10B278C0E95705040A281C9DD8DF9EE336C30995C85F5329FD8BE7C0"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3741
Expires: Tue, 27 Sep 2022 11:35:04 GMT
Date: Tue, 27 Sep 2022 10:32:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eed381093f60d265bf0cc2970650014c
634000599092742388caef6f1a2c6d5378e6c1bb
2501f62b10b278c0e95705040a281c9dd8df9ee336c30995c85f5329fd8be7c0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2501F62B10B278C0E95705040A281C9DD8DF9EE336C30995C85F5329FD8BE7C0"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3741
Expires: Tue, 27 Sep 2022 11:35:04 GMT
Date: Tue, 27 Sep 2022 10:32:43 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/82/55/fc/8255fca3bc9e7c9147b2ab36eb30d1b6/1658919989.png
200 OK 95 kB URL HTTP/2 cdn.cloudimagesb.com/cti/82/55/fc/8255fca3bc9e7c9147b2ab36eb30d1b6/1658919989.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 832954c4b42b06378bf4e58ba8e569f6
f6bc7a32bd139dbf5e42e20d96c4a94535f5eaa4
c9cfa61f5f0a9d16f87c1107ba7714ab5e5016892583567b6122670dcc796f68
GET /cti/82/55/fc/8255fca3bc9e7c9147b2ab36eb30d1b6/1658919989.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:43 GMT
content-type: image/png
content-length: 94867
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:06:37 GMT
etag: "62e11c3d-17293"
expires: Thu, 29 Sep 2022 10:32:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg
200 OK 32 kB URL HTTP/2 cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash 3528385dd0c31dbd2e5bfc4af7a6bec5
832c580ffd7711115d6c036ab4232f5bd88480a4
bfbfeebfcb679ca578055235614cc679b0757bad272996ef89b7fd5615a2db75
GET /cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:43 GMT
content-type: image/jpeg
content-length: 32471
server: nginx/1.17.6
last-modified: Thu, 30 Apr 2020 07:58:05 GMT
etag: "5eaa850d-7ed7"
expires: Thu, 29 Sep 2022 10:32:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
200 OK 24 kB URL HTTP/2 cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash d71c872fb9f50bd9383abc0721d1d51e
1f69b40ef2f95798b4e0fd738d630ad4319cd739
6b4a622b9de1ffab8fe905fc8c4633994c732476664b5190ceedd62a3795ab08
GET /cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:43 GMT
content-type: image/jpeg
content-length: 24518
server: nginx/1.17.6
last-modified: Thu, 30 Apr 2020 07:58:34 GMT
etag: "5eaa852a-5fc6"
expires: Thu, 29 Sep 2022 10:32:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
dictatepantry.com/watch.896728653364.js?key=95f7af6c854715f1b6354f0d32e98fe7&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 dictatepantry.com/watch.896728653364.js?key=95f7af6c854715f1b6354f0d32e98fe7&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.896728653364.js?key=95f7af6c854715f1b6354f0d32e98fe7&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1 HTTP/1.1
Host: dictatepantry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Location: https://dictatepantry.com/watch.896728653364.js?key=95f7af6c854715f1b6354f0d32e98fe7&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=99ae81dd5b4ff2fded2407402b4a8827fab0803e9bb07530df4808457206a6066899df15b6008dfe3d5c39396e56f822343dd9fbe4173e15af6db1aaac608cd705ab2e8d2765a7c74ced25668742d97fde9f6fc3&pst=1664274823&rmtc=t
Set-Cookie: u_pl=16312440; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.y_jxl98fEjwABVWmzkvCD2IwM3dLrCpjysGlGBM-u4A; expires=Tue, 27 Sep 2022 10:33:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 241684fadc07c794315cbeaa69849ad8
Strict-Transport-Security: max-age=0; includeSubdomains
hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq7NzWi%2B6Loq3QRAUZNLdmcwPF1lcYyQaN%2FvDRW9SXVUzKVNd1VR1TU9yCq7IHse96anznWSDGmT9A1xksrBIUMhcJAdz8eLFk7DsUWY2OPqgeO%2FV9x0%2B71v1xY4%2FJSE8PVn6wGxJpej8Yi2svvpxFF2qrkrt%2B9V%2Bq%2FFJo36pantvtBu18LXqu4JtmPk4jMIwCqPqsrSiY%2FrzExEyO2hHtXZYq8e1aLGOvv1%2F73wARwPw3im5AMnHlYfBRUg2gk7vLwm3kZvs9XdSr2huLHp8%2F5be0KbQSGdlxwbo6P2zaRh3vPwARu9NcWF6%2Fw4mckyCRw%2BQ6P0zSCS93SlnoiA0Ev4Mit4IQo0g6QjM3IbkxwRgHFfXoNN7V40t6OZTlU7UMak8%2FhuyGJPK7xeh0%2B%2BvKNmv3jTK59Joh36nhOyPILsjZP4Q%2BdYcZHEIln8GyX8l849XodPdNacMJC%2Bnu0s5guyMoMQA1AXwkyMD%2BE4AnwVI%2BUmVRVHUDDmjYavN2AJviqTBw4g2OxGNwkYLnk3wBsizAZgagNltZHYbG%2FLL48ULsP4nuPUSjgdw%2BZgE17fR4yUKQVA4goISFJKgyAmKXrnHlYtdeY8r55PoLMdneaEcmry7Q%2FdM3hWa7GSn5LmpNU%2F%2B%2FBwb4qQa8UXebvOknsRhu9mmrN7inVbMRZw045DW4WQJ6eam227JMXnxj%2FvI5JhU7hok9BBOHYLJF0B9BFoMm3EIuj6st0Js6QOqZSrWqaY1qcFNiSyvIN8MdtQpeWnK8XLlOgQ7uvzo%2FJvZ8LfzYLZEZkt8Kh8SdNWd4Q1TkN0bpnDkh7Usl6ncopPnu5nTXJz79n2xWRjLV5bc4Ju32ESYlAcfCpevUs2l7jry3RXJubDLxjJBflxxH4nkmnfrV7zVPlu99vbySppZ4Zw0egQqj9eegE0WfOX56b989pe%2FIO0I1pdI%2FRE5C0hzCJZtw2UzemfOwarZTJLNofDl0MbJ7FJJAiVmPU1KuP%2F0yazecXfQtTFofhs6LdGzJXqqBFUDOH9%2BmGf26PLPX03iayRqbpgoO7ebKKvuTqy99dRfJ0%2BqzYWFkDbai1GzSUUzqcetTiPilMb1Rtxo0AXkbszi4%2Ff%2BAQAA%2F%2F8BAAD%2F%2FyYJrupnBAAA
200 OK 7 B URL HTTP/1.1 hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq7NzWi%2B6Loq3QRAUZNLdmcwPF1lcYyQaN%2FvDRW9SXVUzKVNd1VR1TU9yCq7IHse96anznWSDGmT9A1xksrBIUMhcJAdz8eLFk7DsUWY2OPqgeO%2FV9x0%2B71v1xY4%2FJSE8PVn6wGxJpej8Yi2svvpxFF2qrkrt%2B9V%2Bq%2FFJo36pantvtBu18LXqu4JtmPk4jMIwCqPqsrSiY%2FrzExEyO2hHtXZYq8e1aLGOvv1%2F73wARwPw3im5AMnHlYfBRUg2gk7vLwm3kZvs9XdSr2huLHp8%2F5be0KbQSGdlxwbo6P2zaRh3vPwARu9NcWF6%2Fw4mckyCRw%2BQ6P0zSCS93SlnoiA0Ev4Mit4IQo0g6QjM3IbkxwRgHFfXoNN7V40t6OZTlU7UMak8%2FhuyGJPK7xeh0%2B%2BvKNmv3jTK59Joh36nhOyPILsjZP4Q%2BdYcZHEIln8GyX8l849XodPdNacMJC%2Bnu0s5guyMoMQA1AXwkyMD%2BE4AnwVI%2BUmVRVHUDDmjYavN2AJviqTBw4g2OxGNwkYLnk3wBsizAZgagNltZHYbG%2FLL48ULsP4nuPUSjgdw%2BZgE17fR4yUKQVA4goISFJKgyAmKXrnHlYtdeY8r55PoLMdneaEcmry7Q%2FdM3hWa7GSn5LmpNU%2F%2B%2FBwb4qQa8UXebvOknsRhu9mmrN7inVbMRZw045DW4WQJ6eam227JMXnxj%2FvI5JhU7hok9BBOHYLJF0B9BFoMm3EIuj6st0Js6QOqZSrWqaY1qcFNiSyvIN8MdtQpeWnK8XLlOgQ7uvzo%2FJvZ8LfzYLZEZkt8Kh8SdNWd4Q1TkN0bpnDkh7Usl6ncopPnu5nTXJz79n2xWRjLV5bc4Ju32ESYlAcfCpevUs2l7jry3RXJubDLxjJBflxxH4nkmnfrV7zVPlu99vbySppZ4Zw0egQqj9eegE0WfOX56b989pe%2FIO0I1pdI%2FRE5C0hzCJZtw2UzemfOwarZTJLNofDl0MbJ7FJJAiVmPU1KuP%2F0yazecXfQtTFofhs6LdGzJXqqBFUDOH9%2BmGf26PLPX03iayRqbpgoO7ebKKvuTqy99dRfJ0%2BqzYWFkDbai1GzSUUzqcetTiPilMb1Rtxo0AXkbszi4%2Ff%2BAQAA%2F%2F8BAAD%2F%2FyYJrupnBAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq7NzWi%2B6Loq3QRAUZNLdmcwPF1lcYyQaN%2FvDRW9SXVUzKVNd1VR1TU9yCq7IHse96anznWSDGmT9A1xksrBIUMhcJAdz8eLFk7DsUWY2OPqgeO%2FV9x0%2B71v1xY4%2FJSE8PVn6wGxJpej8Yi2svvpxFF2qrkrt%2B9V%2Bq%2FFJo36pantvtBu18LXqu4JtmPk4jMIwCqPqsrSiY%2FrzExEyO2hHtXZYq8e1aLGOvv1%2F73wARwPw3im5AMnHlYfBRUg2gk7vLwm3kZvs9XdSr2huLHp8%2F5be0KbQSGdlxwbo6P2zaRh3vPwARu9NcWF6%2Fw4mckyCRw%2BQ6P0zSCS93SlnoiA0Ev4Mit4IQo0g6QjM3IbkxwRgHFfXoNN7V40t6OZTlU7UMak8%2FhuyGJPK7xeh0%2B%2BvKNmv3jTK59Joh36nhOyPILsjZP4Q%2BdYcZHEIln8GyX8l849XodPdNacMJC%2Bnu0s5guyMoMQA1AXwkyMD%2BE4AnwVI%2BUmVRVHUDDmjYavN2AJviqTBw4g2OxGNwkYLnk3wBsizAZgagNltZHYbG%2FLL48ULsP4nuPUSjgdw%2BZgE17fR4yUKQVA4goISFJKgyAmKXrnHlYtdeY8r55PoLMdneaEcmry7Q%2FdM3hWa7GSn5LmpNU%2F%2B%2FBwb4qQa8UXebvOknsRhu9mmrN7inVbMRZw045DW4WQJ6eam227JMXnxj%2FvI5JhU7hok9BBOHYLJF0B9BFoMm3EIuj6st0Js6QOqZSrWqaY1qcFNiSyvIN8MdtQpeWnK8XLlOgQ7uvzo%2FJvZ8LfzYLZEZkt8Kh8SdNWd4Q1TkN0bpnDkh7Usl6ncopPnu5nTXJz79n2xWRjLV5bc4Ju32ESYlAcfCpevUs2l7jry3RXJubDLxjJBflxxH4nkmnfrV7zVPlu99vbySppZ4Zw0egQqj9eegE0WfOX56b989pe%2FIO0I1pdI%2FRE5C0hzCJZtw2UzemfOwarZTJLNofDl0MbJ7FJJAiVmPU1KuP%2F0yazecXfQtTFofhs6LdGzJXqqBFUDOH9%2BmGf26PLPX03iayRqbpgoO7ebKKvuTqy99dRfJ0%2BqzYWFkDbai1GzSUUzqcetTiPilMb1Rtxo0AXkbszi4%2Ff%2BAQAA%2F%2F8BAAD%2F%2FyYJrupnBAAA HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Cookie: u_pl=16312452; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec1d5d99db4b20979ac48df82de2b720a4=[2229333,2229329]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 98682e375346c696f289bc68291b699b
Strict-Transport-Security: max-age=0; includeSubdomains
dictatepantry.com/watch.896728653364.js?key=95f7af6c854715f1b6354f0d32e98fe7&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=99ae81dd5b4ff2fded2407402b4a8827fab0803e9bb07530df4808457206a6066899df15b6008dfe3d5c39396e56f822343dd9fbe4173e15af6db1aaac608cd705ab2e8d2765a7c74ced25668742d97fde9f6fc3&pst=1664274823&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 dictatepantry.com/watch.896728653364.js?key=95f7af6c854715f1b6354f0d32e98fe7&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=99ae81dd5b4ff2fded2407402b4a8827fab0803e9bb07530df4808457206a6066899df15b6008dfe3d5c39396e56f822343dd9fbe4173e15af6db1aaac608cd705ab2e8d2765a7c74ced25668742d97fde9f6fc3&pst=1664274823&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2615)
Hash 9523ad19ed7e053300f4f248675c2e30
9898231fc489c9e14fbe9cba17c5007af801c2b6
a07e2ce9f1b28eae88c2ef8e9599aae3784610ec2071d03bb4ab181ca095a444
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.896728653364.js?key=95f7af6c854715f1b6354f0d32e98fe7&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=99ae81dd5b4ff2fded2407402b4a8827fab0803e9bb07530df4808457206a6066899df15b6008dfe3d5c39396e56f822343dd9fbe4173e15af6db1aaac608cd705ab2e8d2765a7c74ced25668742d97fde9f6fc3&pst=1664274823&rmtc=t HTTP/1.1
Host: dictatepantry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Referer: https://www.animehana.in/
Connection: keep-alive
Cookie: u_pl=16312440; ain=eyJhbGciOiJIUzI1NiJ9.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.y_jxl98fEjwABVWmzkvCD2IwM3dLrCpjysGlGBM-u4A
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; expires=Tue, 04 Oct 2022 10:32:43 GMT; secure; SameSite=None
iprcbfdf0aba6f9bcfbb7cb2ee1f935aade7=3569807; expires=Tue, 27 Sep 2022 14:32:43 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
uncs=1; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
pdhtkv27=true; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
uncs27=1; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1f52ce2ef8f5567bc1adf611f9918b65
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dcfa2a02e144146aada966e9ba2ba156
fa04b854c636434d185728afd19a4a6e3fa2fc15
0bd32e62f576e05ee975af506323465d78edcef6444883c40767b0805f8ef94b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BD32E62F576E05EE975AF506323465D78EDCEF6444883C40767B0805F8EF94B"
Last-Modified: Mon, 26 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3413
Expires: Tue, 27 Sep 2022 11:29:36 GMT
Date: Tue, 27 Sep 2022 10:32:43 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
200 OK 67 kB URL HTTP/2 cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 468 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash a98b4585db1c6db06d6857c73bb75fcb
02a896b08a79e873b2dd26200ee1f0665dc1c80a
fc08e863ffafe25aa63fe8b60c2d5135fc5f52caf0abae4da3f1a90e0f8ed96c
GET /cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:43 GMT
content-type: image/png
content-length: 67174
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:43 GMT
etag: "62e11c7f-10666"
expires: Thu, 29 Sep 2022 10:32:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5988f47d7405c8c8edc9324d40050af7
cca43583eb9c10cfe42dc5dd1f81ee4b2d333e3f
e04fa7fbe4dc86ec87b1445bc8044f56447599d066debb78d558796e68b15a06
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E04FA7FBE4DC86EC87B1445BC8044F56447599D066DEBB78D558796E68B15A06"
Last-Modified: Tue, 27 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 27 Sep 2022 16:32:43 GMT
Date: Tue, 27 Sep 2022 10:32:43 GMT
Connection: keep-alive
reapinject.com/watch.500671532610.js?key=d902449c70ece5633a208ef843bfe178&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 reapinject.com/watch.500671532610.js?key=d902449c70ece5633a208ef843bfe178&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.500671532610.js?key=d902449c70ece5633a208ef843bfe178&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1 HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Location: https://reapinject.com/watch.500671532610.js?key=d902449c70ece5633a208ef843bfe178&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=b70acd1e398ab09873fb5a08f165d0599e4038761dafd91dfa39a4d94d71877616abc0269313264125cfd5929228c69a6615cf1d44fab98b82cb9079fad00ccf51d5807c049652780d2e706c614f83c7ef4efabc&pst=1664274823&rmtc=t
Set-Cookie: u_pl=16312447; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjMxMjQ0NywiayI6ImQ5MDI0NDljNzBlY2U1NjMzYTIwOGVmODQzYmZlMTc4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNTY1NjE2LCJwaWQiOjI5OTYzMSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMiwiYWlkIjozMiwicHQiOjQsInBrIjoiYTBoMGtxYnkiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3LmFuaW1laGFuYS5pbi8_bT0xIn19.89Q89RaJ82GPkvoqoYXpoffRmTH-EOkLJh0ncgIbUNM; expires=Tue, 27 Sep 2022 10:33:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 029b7720aae84305ceffeefc8790db1b
Strict-Transport-Security: max-age=0; includeSubdomains
joiningcriminal.com/6cf758dd74cef0551a05d8da76ecb9b5/invoke.js
200 OK 9.8 kB URL HTTP/1.1 joiningcriminal.com/6cf758dd74cef0551a05d8da76ecb9b5/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26945), with no line terminators
Hash f76b07ea399ae399e6bf45c06abf006d
2d91390663ca346af7a3ce598fddd43f10f99d88
e61f23af79df7ca2b735a16775e79c5ff96ce57e0a7c191ea85c9de829b0982d
GET /6cf758dd74cef0551a05d8da76ecb9b5/invoke.js HTTP/1.1
Host: joiningcriminal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e75efa03e3f5b10a0cb1f227e6629ef0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
reapinject.com/watch.500671532610.js?key=d902449c70ece5633a208ef843bfe178&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=b70acd1e398ab09873fb5a08f165d0599e4038761dafd91dfa39a4d94d71877616abc0269313264125cfd5929228c69a6615cf1d44fab98b82cb9079fad00ccf51d5807c049652780d2e706c614f83c7ef4efabc&pst=1664274823&rmtc=t
200 OK 1.9 kB URL HTTP/1.1 reapinject.com/watch.500671532610.js?key=d902449c70ece5633a208ef843bfe178&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=b70acd1e398ab09873fb5a08f165d0599e4038761dafd91dfa39a4d94d71877616abc0269313264125cfd5929228c69a6615cf1d44fab98b82cb9079fad00ccf51d5807c049652780d2e706c614f83c7ef4efabc&pst=1664274823&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2396)
Hash 34bcd62844c1470972a6cbd32e80844f
c41ad79786bc5c845f021141d2e388b68cd857e4
721dc385264cb3818fec2db8b17777533f9bfe9a4fab911b03eb621323ef9aaf
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.500671532610.js?key=d902449c70ece5633a208ef843bfe178&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=b70acd1e398ab09873fb5a08f165d0599e4038761dafd91dfa39a4d94d71877616abc0269313264125cfd5929228c69a6615cf1d44fab98b82cb9079fad00ccf51d5807c049652780d2e706c614f83c7ef4efabc&pst=1664274823&rmtc=t HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Referer: https://www.animehana.in/
Connection: keep-alive
Cookie: u_pl=16312447; ain=eyJhbGciOiJIUzI1NiJ9.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_bT0xIn19.89Q89RaJ82GPkvoqoYXpoffRmTH-EOkLJh0ncgIbUNM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 27 Sep 2022 10:32:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; expires=Tue, 04 Oct 2022 10:32:43 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
uncs=1; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
pdhtkv32=true; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
uncs32=1; expires=Wed, 28 Sep 2022 10:32:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: de611572b690953f64417c98f76ffdba
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.effectivedisplayformat.com/38b9ffd1f161bf2cde3f10bac77d62df/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectivedisplayformat.com/38b9ffd1f161bf2cde3f10bac77d62df/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26945), with no line terminators
Hash 7317868c19a69511ec28438462b6fab0
f436dd7c866dca46015faf1c77242f95b90ea539
a00aabd21fc90d92c9dfaab618146d010667c889c6ee1bd422da07dce3d04b19
GET /38b9ffd1f161bf2cde3f10bac77d62df/invoke.js HTTP/1.1
Host: www.effectivedisplayformat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 612a0facf8312dc2a306f02cb1662f49
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/cti/06/8f/e0/068fe0ba93f18db4f4857502e14a4496/1663164850.gif
200 OK 14 kB URL HTTP/2 cdn.cloudimagesb.com/cti/06/8f/e0/068fe0ba93f18db4f4857502e14a4496/1663164850.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 300 x 50\012- data
Hash 8e105324fad771cac96f2a0c767ea39d
756a06f1d2e505d139f933d7985505a221fd025d
e1f20579a67907950adf37d4ab29bbf651b5afd2fcd280260ff5cbacd76eb134
GET /cti/06/8f/e0/068fe0ba93f18db4f4857502e14a4496/1663164850.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:44 GMT
content-type: image/gif
content-length: 13576
server: nginx/1.17.6
last-modified: Wed, 14 Sep 2022 14:14:18 GMT
etag: "6321e1ba-3508"
expires: Thu, 29 Sep 2022 10:32:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 18e63e03996c64ae5798541fbfd9fd15
9cf14a22e5eff72ca9f8f8f2d159622f47c592e3
488d4f9856a4a2315d9d63feaff435a480a35f1e3707f7c8f1e88941d9ebc938
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5687
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:44 GMT
Last-Modified: Tue, 27 Sep 2022 08:57:57 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 18e63e03996c64ae5798541fbfd9fd15
9cf14a22e5eff72ca9f8f8f2d159622f47c592e3
488d4f9856a4a2315d9d63feaff435a480a35f1e3707f7c8f1e88941d9ebc938
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5687
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:44 GMT
Last-Modified: Tue, 27 Sep 2022 08:57:57 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eb166e57597c83efa41b969bd403017d
a9d20ac8dfbb3121073f78a58e5fe2e623e21bed
184a49b16d6a67abf7e9d1e7499fefdc853cfadf5cd83fe7cb6aaea3e1397eba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184A49B16D6A67ABF7E9D1E7499FEFDC853CFADF5CD83FE7CB6AAEA3E1397EBA"
Last-Modified: Mon, 26 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2017
Expires: Tue, 27 Sep 2022 11:06:21 GMT
Date: Tue, 27 Sep 2022 10:32:44 GMT
Connection: keep-alive
ad.a-ads.com/1763312?size=300x250
200 OK 337 kB URL HTTP/2 ad.a-ads.com/1763312?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Size 337 kB (336882 bytes)
Hash e315269b66e2cdf40de9133fae92b418
b0cf3e71f27e6f7105f9284b6915d6cd1cec851d
8a2c571c14cb0dd33558eb86330f6151d6df74312ddb1962862631409182682f
GET /1763312?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 10:32:44 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://www.animehana.in/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31569aa52f4ea6217d4571bd4ed27638
7ddd960b2f9280c111bba6ba4641860c976672b7
e676140d85de06c3869d803f8a29de0ec2105756fa4cec44765c754d8a195e70
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E676140D85DE06C3869D803F8A29DE0EC2105756FA4CEC44765C754D8A195E70"
Last-Modified: Mon, 26 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4594
Expires: Tue, 27 Sep 2022 11:49:18 GMT
Date: Tue, 27 Sep 2022 10:32:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3381
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:44 GMT
Last-Modified: Tue, 27 Sep 2022 09:36:23 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
wadmargincling.com/watch.1650126874718.js?key=6cf758dd74cef0551a05d8da76ecb9b5&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 wadmargincling.com/watch.1650126874718.js?key=6cf758dd74cef0551a05d8da76ecb9b5&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1650126874718.js?key=6cf758dd74cef0551a05d8da76ecb9b5&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1 HTTP/1.1
Host: wadmargincling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:44 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Location: https://wadmargincling.com/watch.1650126874718.js?key=6cf758dd74cef0551a05d8da76ecb9b5&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=d43b769ff61d62c9f4bf12794f019aae9e585f9256aec9e185c618fc39baa033eac67b815ab1196db5e369b761e910c660cd463745410a506920141374de8e52ff95e3b9c6bd6b47e77158782b95892c3a28509ad46c2bee44c92cf12503bf&pst=1664274824&rmtc=t
Set-Cookie: u_pl=16312544; expires=Wed, 28 Sep 2022 10:32:44 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.BFhC-GN5DeiCoEUSRQa-p20hZOQy19v7KLANlC3JrT8; expires=Tue, 27 Sep 2022 10:33:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 74be688de9fd7e139fb0204d5f284a07
Strict-Transport-Security: max-age=0; includeSubdomains
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 75fae54b980c19b6701164782087752b
29900b337c8e2d4cf23958c428eb7c9d2916037f
40a764da4b11d1dccecb4859853afcf6cc9aa839365e2fdc068b5d9dade98c60
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 960dccbccb90c5b9802d3290935cee87
etag: "2efcd39a0e6a9de122d9224dac54680e"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 27 Sep 2022 10:41:01 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: dfrlS5gMGbZwEWR4IId1Kw==
x-fb-debug: u7TV5zwW/8asYzI4cr/AgY23yxFdwcTnGKZykQkwSJUJS1zuWr2ygxphhMWuJRGIzv2fB0VW7oNLRG2FllcB+A==
content-length: 1685
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 10:32:44 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3381
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:44 GMT
Last-Modified: Tue, 27 Sep 2022 09:36:23 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.animehana.in/favicon.ico
200 OK 923 B URL HTTP/2 www.animehana.in/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 0059d7511ce6f0bf11823904e9a93d15
3f815c55f08bbc5911abb7cab1247ca582d106b8
d4eff0e12ea5eb961d4559c29ab619321609c6d767a1f3ca677c7e0d2ac01a71
GET /favicon.ico HTTP/1.1
Host: www.animehana.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/?m=1
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=hopefullyapricot.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Tue, 27 Sep 2022 10:32:44 GMT
date: Tue, 27 Sep 2022 10:32:44 GMT
cache-control: private, max-age=86400
last-modified: Tue, 27 Sep 2022 09:58:33 GMT
etag: W/"626233f4aec345157240ca1906627039733fc0a29866460e9c4d7bba47168216"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 923
server: GSE
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 17b745b5d3e387127df4aba170081743
e59dc2fcbab312428ac919358c3f8afe301e723b
94b6219f1fdabe19021204226c005ab3f82f148cbfabd240a999f18267895bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wadmargincling.com/watch.1650126874718.js?key=6cf758dd74cef0551a05d8da76ecb9b5&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=d43b769ff61d62c9f4bf12794f019aae9e585f9256aec9e185c618fc39baa033eac67b815ab1196db5e369b761e910c660cd463745410a506920141374de8e52ff95e3b9c6bd6b47e77158782b95892c3a28509ad46c2bee44c92cf12503bf&pst=1664274824&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 wadmargincling.com/watch.1650126874718.js?key=6cf758dd74cef0551a05d8da76ecb9b5&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=d43b769ff61d62c9f4bf12794f019aae9e585f9256aec9e185c618fc39baa033eac67b815ab1196db5e369b761e910c660cd463745410a506920141374de8e52ff95e3b9c6bd6b47e77158782b95892c3a28509ad46c2bee44c92cf12503bf&pst=1664274824&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2420)
Hash 0ff8a2a013699341fc00955cf88c4ca3
12c7c4bea46dad8cf11fe9275179ce8cb4592124
5aa631f77885005f8f52a048bfcdc0ba116730d4edb73d3febfc5b53f95b31cb
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1650126874718.js?key=6cf758dd74cef0551a05d8da76ecb9b5&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=d43b769ff61d62c9f4bf12794f019aae9e585f9256aec9e185c618fc39baa033eac67b815ab1196db5e369b761e910c660cd463745410a506920141374de8e52ff95e3b9c6bd6b47e77158782b95892c3a28509ad46c2bee44c92cf12503bf&pst=1664274824&rmtc=t HTTP/1.1
Host: wadmargincling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Referer: https://www.animehana.in/
Connection: keep-alive
Cookie: u_pl=16312544; ain=eyJhbGciOiJIUzI1NiJ9.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.BFhC-GN5DeiCoEUSRQa-p20hZOQy19v7KLANlC3JrT8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; expires=Tue, 04 Oct 2022 10:32:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 28 Sep 2022 10:32:44 GMT; secure; SameSite=None
uncs=1; expires=Wed, 28 Sep 2022 10:32:44 GMT; secure; SameSite=None
pdhtkv23=true; expires=Wed, 28 Sep 2022 10:32:44 GMT; secure; SameSite=None
uncs23=1; expires=Wed, 28 Sep 2022 10:32:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 16fe817361f100685faa9b4773bdf566
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
astonishedmule.com/watch.1072640053591.js?key=38b9ffd1f161bf2cde3f10bac77d62df&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 astonishedmule.com/watch.1072640053591.js?key=38b9ffd1f161bf2cde3f10bac77d62df&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1072640053591.js?key=38b9ffd1f161bf2cde3f10bac77d62df&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1 HTTP/1.1
Host: astonishedmule.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:44 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Location: https://astonishedmule.com/watch.1072640053591.js?key=38b9ffd1f161bf2cde3f10bac77d62df&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=936578a40385e6c45d22ced33093cf872cfa70b7743232567da4ce1e73bc158e7d4c2ee4ea7640d543e6c26c402916fa17139a8ea7c645bccb698a434b06e8621ee0d64dc16c09ed27259a1571e50167bae1c17d&pst=1664274824&rmtc=t
Set-Cookie: u_pl=16312293; expires=Wed, 28 Sep 2022 10:32:44 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjMxMjI5MywiayI6IjM4YjlmZmQxZjE2MWJmMmNkZTNmMTBiYWM3N2Q2MmRmIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNTY1NjE2LCJwaWQiOjI5OTYzMSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMiwiYWlkIjo1LCJwdCI6NCwicGsiOiJzbXcwMXg0Y2tmIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy5hbmltZWhhbmEuaW4vP209MSJ9fQ.SbXgA3n0g8eMXFMo57sa3vDrdrkiYU62ySF1bGGPUwU; expires=Tue, 27 Sep 2022 10:33:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 74d0d3761bb9af4620a28da90d1ea396
Strict-Transport-Security: max-age=0; includeSubdomains
www.animehana.in/feeds/posts/default?max-results=3&start-index=2&alt=json-in-script&callback=jQuery112406680016660291053_1664274762020&_=1664274762021
200 OK 6.8 kB URL HTTP/2 www.animehana.in/feeds/posts/default?max-results=3&start-index=2&alt=json-in-script&callback=jQuery112406680016660291053_1664274762020&_=1664274762021
IP
File type Unicode text, UTF-8 text, with very long lines (45895)
Hash 5a83b0ee581b6d19940768dd15747982
d702f9854927d775483ebaeb7078c7846c9625f6
5c37413f5e15593dac6e5f73521ec33e456b3421838973c643f87d0135f918ae
GET /feeds/posts/default?max-results=3&start-index=2&alt=json-in-script&callback=jQuery112406680016660291053_1664274762020&_=1664274762021 HTTP/1.1
Host: www.animehana.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.animehana.in/?m=1
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=hopefullyapricot.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"5cce769d48c3e1e40eab66c4dc7037435555795b4778071d4ca98640395a333e"
date: Tue, 27 Sep 2022 10:32:44 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 27 Sep 2022 10:32:45 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 27 Sep 2022 09:58:33 GMT
content-encoding: gzip
content-length: 6781
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
astonishedmule.com/watch.1072640053591.js?key=38b9ffd1f161bf2cde3f10bac77d62df&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=936578a40385e6c45d22ced33093cf872cfa70b7743232567da4ce1e73bc158e7d4c2ee4ea7640d543e6c26c402916fa17139a8ea7c645bccb698a434b06e8621ee0d64dc16c09ed27259a1571e50167bae1c17d&pst=1664274824&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 astonishedmule.com/watch.1072640053591.js?key=38b9ffd1f161bf2cde3f10bac77d62df&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=936578a40385e6c45d22ced33093cf872cfa70b7743232567da4ce1e73bc158e7d4c2ee4ea7640d543e6c26c402916fa17139a8ea7c645bccb698a434b06e8621ee0d64dc16c09ed27259a1571e50167bae1c17d&pst=1664274824&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2474)
Hash f8957432004eb37096c5c4496e740efe
a01f3088b9d07a5965a68b840227fbef787d0702
867a528c3b6d68e31f795bf84b12d6f86ebc4fbfe4e49baf376855fd0e5a6996
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1072640053591.js?key=38b9ffd1f161bf2cde3f10bac77d62df&kw=%5B%22anime%22%2C%22hana%22%5D&refer=https%3A%2F%2Fwww.animehana.in%2F%3Fm%3D1&tz=0&dev=r&res=12.31&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1&shu=936578a40385e6c45d22ced33093cf872cfa70b7743232567da4ce1e73bc158e7d4c2ee4ea7640d543e6c26c402916fa17139a8ea7c645bccb698a434b06e8621ee0d64dc16c09ed27259a1571e50167bae1c17d&pst=1664274824&rmtc=t HTTP/1.1
Host: astonishedmule.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Referer: https://www.animehana.in/
Connection: keep-alive
Cookie: u_pl=16312293; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjMxMjI5MywiayI6IjM4YjlmZmQxZjE2MWJmMmNkZTNmMTBiYWM3N2Q2MmRmIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNTY1NjE2LCJwaWQiOjI5OTYzMSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMiwiYWlkIjo1LCJwdCI6NCwicGsiOiJzbXcwMXg0Y2tmIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy5hbmltZWhhbmEuaW4vP209MSJ9fQ.SbXgA3n0g8eMXFMo57sa3vDrdrkiYU62ySF1bGGPUwU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 27 Sep 2022 10:32:45 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; expires=Tue, 04 Oct 2022 10:32:45 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
uncs=1; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
pdhtkv5=true; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
uncs5=1; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7e38eaf83ea92b72294c052139fda253
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlB3ZHd9Wq2UUlikWTKDHf7ZAoGPLwmdoSqzl7YY1Kii6aKMd3n6_FT7XN_96t84EwFS_qwVWvSMY9dgzQoT5hLmZm8SBjRT3FmqY_b4mnpeW2zVJKy3X5xo8WBuZonWBsmVs9hib0r3_3ZJtZXP1K9OxES5NTjHrdWVEc26NvXXfFXIClmYdUbkf9/w680/elite.jpg
200 OK 51 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlB3ZHd9Wq2UUlikWTKDHf7ZAoGPLwmdoSqzl7YY1Kii6aKMd3n6_FT7XN_96t84EwFS_qwVWvSMY9dgzQoT5hLmZm8SBjRT3FmqY_b4mnpeW2zVJKy3X5xo8WBuZonWBsmVs9hib0r3_3ZJtZXP1K9OxES5NTjHrdWVEc26NvXXfFXIClmYdUbkf9/w680/elite.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 318x453, components 3\012- data
Hash 7b5e33e27aee972c63bafc30f9eb8124
5d89b9252bf85b744a17ea293ff6593deca31f7e
369174b8da6391250682d316c0787187bbfeec0e93e845a1024d090384bebd5d
GET /img/b/R29vZ2xl/AVvXsEjlB3ZHd9Wq2UUlikWTKDHf7ZAoGPLwmdoSqzl7YY1Kii6aKMd3n6_FT7XN_96t84EwFS_qwVWvSMY9dgzQoT5hLmZm8SBjRT3FmqY_b4mnpeW2zVJKy3X5xo8WBuZonWBsmVs9hib0r3_3ZJtZXP1K9OxES5NTjHrdWVEc26NvXXfFXIClmYdUbkf9/w680/elite.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vaa1"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="elite.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 51170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 224ceb7202a900017c4e9d58c2df178f
72ad76af3da929ac9c1f4e2d008723007e187a68
faa7bf087d0f52f140ccf8973dadbb9ef0ede8da6651bc4f08555f3b54de960e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAA7BF087D0F52F140CCF8973DADBB9EF0EDE8DA6651BC4F08555F3B54DE960E"
Last-Modified: Mon, 26 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5229
Expires: Tue, 27 Sep 2022 11:59:54 GMT
Date: Tue, 27 Sep 2022 10:32:45 GMT
Connection: keep-alive
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 08:56:30 GMT
expires: Mon, 25 Sep 2023 08:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 22:13:13 GMT
content-type: text/javascript
age: 178575
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png
200 OK 56 kB URL HTTP/2 cdn.cloudimagesb.com/cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash 231d615f0b920b0f0c8758342141193b
ca68f0f6e4c9124bbe61c49d789d0447076b0332
3e24999c26c1c68485e879756ea30639ccee4d7f30f1e2c0e5190818cbab8996
GET /cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:45 GMT
content-type: image/png
content-length: 56505
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 15:14:41 GMT
etag: "61080be1-dcb9"
expires: Thu, 29 Sep 2022 10:32:45 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiO0xmPbmZFA9VnTs_BIjPqx51OPdReReDSNmanOKMnc-Y9y1Q1mU55HHKr5IwpoUpiQIRHyski-T3M6fgUQ2GLvhliKaKx4gvuknfVpMqUP8HuA-gilOR5xG3dNojk3NJtY1kcdzS3sNrmBSdNDpi9l3Uf9ZK_7a61fFwvNgr-NvKpjpEV6qO748Bg=w680
200 OK 219 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiO0xmPbmZFA9VnTs_BIjPqx51OPdReReDSNmanOKMnc-Y9y1Q1mU55HHKr5IwpoUpiQIRHyski-T3M6fgUQ2GLvhliKaKx4gvuknfVpMqUP8HuA-gilOR5xG3dNojk3NJtY1kcdzS3sNrmBSdNDpi9l3Uf9ZK_7a61fFwvNgr-NvKpjpEV6qO748Bg=w680
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x856, components 3\012- data
Size 219 kB (218678 bytes)
Hash fe8c12c5115d2fdfcae785cfc389f292
6d798332bcc3740ab66661b8b8040235a353430f
d12f8a19582fa2a06fa474f8dace9e0dbcf50fdb9c45c87551da0d17b4cc4cb4
GET /img/a/AVvXsEiO0xmPbmZFA9VnTs_BIjPqx51OPdReReDSNmanOKMnc-Y9y1Q1mU55HHKr5IwpoUpiQIRHyski-T3M6fgUQ2GLvhliKaKx4gvuknfVpMqUP8HuA-gilOR5xG3dNojk3NJtY1kcdzS3sNrmBSdNDpi9l3Uf9ZK_7a61fFwvNgr-NvKpjpEV6qO748Bg=w680 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v974"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="overlord.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 218678
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=d1242dde6dd1b114433dab40c2a4d634
200 OK 89 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=d1242dde6dd1b114433dab40c2a4d634
IP
File type ASCII text, with very long lines (18598)
Hash 6173fca34b9fb5d9ba6e56907886d47e
773330ec748db0fb54698c9233ecb5e59db0b22e
bd396062f465f0854b9ca1d24e0afd81ac04583ead95360d256777bf423654a6
GET /en_US/sdk.js?hash=d1242dde6dd1b114433dab40c2a4d634 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 2ac4f85003655c46ad57f0b9c343bbfe
etag: "a43f2b27f1cff852867e66295f590d1f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 27 Sep 2023 10:02:36 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: YXP8o0uftdm6blaQeIbUfg==
x-fb-debug: MVKuHe4IH/RuCJm1j9lG4unullkgzB5gpE+HA5GT7i1e3qUGQWjBdyUNdc/nbfD3O99Ld1gAMMOYjxQdvLsA9g==
content-length: 88832
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 10:32:45 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU62cGpGMd-VbQ4llU-g4BhvuAcmb9h5y6ils4FbwXpxyyEDf9jRnrRFskkg9IWwzXPigW3BeyZ2Dg4v1rWpNJpcP93MMlN96iAMsOkmyKibEQfuVzTJB5tUV2gcmniKmsfd4Wh0R0TAjoB_TecSAioqTh0agUs8Qif1nO7Vkywso2Yx2nLF0Gk5F7/w680/dress%20up.jpg
200 OK 126 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU62cGpGMd-VbQ4llU-g4BhvuAcmb9h5y6ils4FbwXpxyyEDf9jRnrRFskkg9IWwzXPigW3BeyZ2Dg4v1rWpNJpcP93MMlN96iAMsOkmyKibEQfuVzTJB5tUV2gcmniKmsfd4Wh0R0TAjoB_TecSAioqTh0agUs8Qif1nO7Vkywso2Yx2nLF0Gk5F7/w680/dress%20up.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x841, components 3\012- data
Size 126 kB (125863 bytes)
Hash 6a181f3e11510fa43742a72125e9cfbe
b3d9c709cfcd394afb4074a22e388743125fc8f5
f177dc6c311c1cbf34815b983ad24029b19c0587b1fbdfc3edabd14b7810c9cf
GET /img/b/R29vZ2xl/AVvXsEhU62cGpGMd-VbQ4llU-g4BhvuAcmb9h5y6ils4FbwXpxyyEDf9jRnrRFskkg9IWwzXPigW3BeyZ2Dg4v1rWpNJpcP93MMlN96iAMsOkmyKibEQfuVzTJB5tUV2gcmniKmsfd4Wh0R0TAjoB_TecSAioqTh0agUs8Qif1nO7Vkywso2Yx2nLF0Gk5F7/w680/dress%20up.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "va33"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="dress up.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 125863
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc_IfiFFa5HyietFDYNgThFgS22jQsHKkN2dlWL6oLA_7NCyD0ZE9tQXbCObW4bMFh9JwLd4EKsEoHa8B30C9JqT6XayR1CrElk9meIo4rUoXapXaLKjkB1Wepoaj0u9sbU6y8cCLekdCaeElD0ua8jkJR2gxgpde4rG4AIMEe0VEKPOjypunIOsGp/w680/jjk0.jpg
200 OK 376 B URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc_IfiFFa5HyietFDYNgThFgS22jQsHKkN2dlWL6oLA_7NCyD0ZE9tQXbCObW4bMFh9JwLd4EKsEoHa8B30C9JqT6XayR1CrElk9meIo4rUoXapXaLKjkB1Wepoaj0u9sbU6y8cCLekdCaeElD0ua8jkJR2gxgpde4rG4AIMEe0VEKPOjypunIOsGp/w680/jjk0.jpg
IP
Hash 8ea87aa7adb4563d27e6f2f7fb359ba4
15c964ab9e4aefc78671e247ce09036258af09de
d9163081e461a910ddb4f099b63852807be72d11fe17a3c79ee8e8cd6ef52938
GET /img/b/R29vZ2xl/AVvXsEjc_IfiFFa5HyietFDYNgThFgS22jQsHKkN2dlWL6oLA_7NCyD0ZE9tQXbCObW4bMFh9JwLd4EKsEoHa8B30C9JqT6XayR1CrElk9meIo4rUoXapXaLKjkB1Wepoaj0u9sbU6y8cCLekdCaeElD0ua8jkJR2gxgpde4rG4AIMEe0VEKPOjypunIOsGp/w680/jjk0.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vafe"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="jjk0.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 229791
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiks1Y_mZzCSKL7f4i8K8fLZac4seJe91cWvMdkKFCe7m_lVainPmCe6T9DV79DKAF6G9bbimtIEuVs-p8s4H37za_9WnIM5LWuzdWDir63X4DbpDbovc9KbpC1SAEfBloCqE-6hyP_xYQt6gULfmKfz497v9FkPFJC1Tg0VBBPYgF8TRoAQBZQmtC_/w680/runaway.jpg
200 OK 116 B URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiks1Y_mZzCSKL7f4i8K8fLZac4seJe91cWvMdkKFCe7m_lVainPmCe6T9DV79DKAF6G9bbimtIEuVs-p8s4H37za_9WnIM5LWuzdWDir63X4DbpDbovc9KbpC1SAEfBloCqE-6hyP_xYQt6gULfmKfz497v9FkPFJC1Tg0VBBPYgF8TRoAQBZQmtC_/w680/runaway.jpg
IP
File type PNG image data, 5 x 1, 4-bit colormap, non-interlaced\012- data
Hash ab32284ad12b62cfe18e6fc3004dbd91
95c739ea1fff8024b0728b882698f83289c9a429
6c7884164b248cb8d87de9edf64dc810e5753bb8ec0cd015800d7f39e08371c1
GET /img/b/R29vZ2xl/AVvXsEiks1Y_mZzCSKL7f4i8K8fLZac4seJe91cWvMdkKFCe7m_lVainPmCe6T9DV79DKAF6G9bbimtIEuVs-p8s4H37za_9WnIM5LWuzdWDir63X4DbpDbovc9KbpC1SAEfBloCqE-6hyP_xYQt6gULfmKfz497v9FkPFJC1Tg0VBBPYgF8TRoAQBZQmtC_/w680/runaway.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vabd"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="runaway.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 143907
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQ-4vHMIQI4HJSFd6CG47Wtna5AeLOvmPbZCVQTAb8qhduG-RY2JKokeJHWbfC9CQ3vquK1Fla4drHpcTrN_D9KG6tI4Ym5r7X7Y5__nJqHIkQMnNBlZGq6Ct9oPqK-KwFxjq-1POEduFt72nc56CNUqMQ9m7TlN3_bN6zTz7SVa6zBVqDFiL7AXkh/w680/fena.jpg
200 OK 117 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQ-4vHMIQI4HJSFd6CG47Wtna5AeLOvmPbZCVQTAb8qhduG-RY2JKokeJHWbfC9CQ3vquK1Fla4drHpcTrN_D9KG6tI4Ym5r7X7Y5__nJqHIkQMnNBlZGq6Ct9oPqK-KwFxjq-1POEduFt72nc56CNUqMQ9m7TlN3_bN6zTz7SVa6zBVqDFiL7AXkh/w680/fena.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x962, components 3\012- data
Size 117 kB (116873 bytes)
Hash 9b2f996fa015127f7f8fb8215da15d97
247e8480284a71a38b1e21ef4b4619a31b2831b4
d4160980e58b70bb9248dc81f2a5f641b5eb68bb592bee2638b14eb93af96145
GET /img/b/R29vZ2xl/AVvXsEiQ-4vHMIQI4HJSFd6CG47Wtna5AeLOvmPbZCVQTAb8qhduG-RY2JKokeJHWbfC9CQ3vquK1Fla4drHpcTrN_D9KG6tI4Ym5r7X7Y5__nJqHIkQMnNBlZGq6Ct9oPqK-KwFxjq-1POEduFt72nc56CNUqMQ9m7TlN3_bN6zTz7SVa6zBVqDFiL7AXkh/w680/fena.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vb04"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="fena.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 116873
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
plainmarshyaltered.com/sbar.json?key=fd0100670da5ab4eeae406271cf131ac&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
200 OK 4.1 kB URL HTTP/1.1 plainmarshyaltered.com/sbar.json?key=fd0100670da5ab4eeae406271cf131ac&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (5696), with no line terminators
Hash e475dd51972bd8ab8fdb852335f31a53
3595e61f61a5526735c23e2621f7c046736b58a7
a9b7a06765b73104a766a7e2412767e540078dc9f8c43c3346456802ab472424
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=fd0100670da5ab4eeae406271cf131ac&uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406%3A1%3A1 HTTP/1.1
Host: plainmarshyaltered.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 27 Sep 2022 10:32:45 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.animehana.in
Access-Control-Allow-Origin: https://www.animehana.in
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16485247; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; expires=Tue, 04 Oct 2022 10:32:45 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
uncs=1; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 28 Sep 2022 10:32:45 GMT; secure; SameSite=None
slecfd0100670da5ab4eeae406271cf131ac=[3240591]; expires=Tue, 27 Sep 2022 10:32:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: caa482d3f399e2c4f5400b18684e76a7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/cti/0a/b1/19/0ab11970b13dadf9c71649681a7b7b25/1663334700.png
200 OK 63 kB URL HTTP/2 cdn.cloudimagesb.com/cti/0a/b1/19/0ab11970b13dadf9c71649681a7b7b25/1663334700.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash ca20347717e56278de527735235fa53c
500f51235625acd96f5c6953ad508853196c6440
4b1caf972f548fd2e2e19b1503154e9df2159d9bc3385f79b9b96b03f90ec58d
GET /cti/0a/b1/19/0ab11970b13dadf9c71649681a7b7b25/1663334700.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:45 GMT
content-type: image/png
content-length: 63011
server: nginx/1.17.6
last-modified: Fri, 16 Sep 2022 13:25:08 GMT
etag: "63247934-f623"
expires: Thu, 29 Sep 2022 10:32:45 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 4487788aac63064974871bf6a8ccde12
deaaebcaa91b93596f639ef233e38b44db9e1730
cc4b1de00c54747bd89eb52aa2a639c1f3067d06a8de1e66a17cefcf1e8af6bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4692
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 10:32:45 GMT
Last-Modified: Tue, 27 Sep 2022 09:14:34 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgr2zij9jT8lHToIkpLeCTDhWmCNcMWJ4JkUmKXZufYbfXO9Fe57A8rw8DjH_EGmdXyBoDtw5ecosriH_HyT90x9vB0DQR4yjBKufc5UXSYD2K0CfT6hOKeY96Bg3cpfTnRSVyJQxVwSHzyKv2cH0cMvSvLuoYalRxrJDpuQ30LavQZhvFbyWlsARa-/w680/kinsou.jpg
200 OK 78 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgr2zij9jT8lHToIkpLeCTDhWmCNcMWJ4JkUmKXZufYbfXO9Fe57A8rw8DjH_EGmdXyBoDtw5ecosriH_HyT90x9vB0DQR4yjBKufc5UXSYD2K0CfT6hOKeY96Bg3cpfTnRSVyJQxVwSHzyKv2cH0cMvSvLuoYalRxrJDpuQ30LavQZhvFbyWlsARa-/w680/kinsou.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x425, components 3\012- data
Hash 9bbc333c01f4199747fd0e9ab6637a54
22b48804225094cbfef56178cad8e24a4291e380
725bca83a30cb74335c51378bf3419371f37352574295987d899b9fee2b66d96
GET /img/b/R29vZ2xl/AVvXsEgr2zij9jT8lHToIkpLeCTDhWmCNcMWJ4JkUmKXZufYbfXO9Fe57A8rw8DjH_EGmdXyBoDtw5ecosriH_HyT90x9vB0DQR4yjBKufc5UXSYD2K0CfT6hOKeY96Bg3cpfTnRSVyJQxVwSHzyKv2cH0cMvSvLuoYalRxrJDpuQ30LavQZhvFbyWlsARa-/w680/kinsou.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vb01"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="kinsou.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 77676
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLfrQdtlmvBBMaAj6Kd3NnH_ESBE7Y2zDqoqOy74ALVxRtGsPVQbWZGoNuf7HfppDfxuDrntf0g-5ALjfuMUvF5XwMiYrCohlE_3hfTdPnmHYYmeaFO4QZA0lJJRyhZBfAHj1M8d5sQcF_Ur66KXswqqd-1pzurgQwYxp1yWmZMcxtSa2rCo87onkC/w680/rent%20a%20gf.jpg
200 OK 194 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLfrQdtlmvBBMaAj6Kd3NnH_ESBE7Y2zDqoqOy74ALVxRtGsPVQbWZGoNuf7HfppDfxuDrntf0g-5ALjfuMUvF5XwMiYrCohlE_3hfTdPnmHYYmeaFO4QZA0lJJRyhZBfAHj1M8d5sQcF_Ur66KXswqqd-1pzurgQwYxp1yWmZMcxtSa2rCo87onkC/w680/rent%20a%20gf.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 680x1020, components 3\012- data
Size 194 kB (194299 bytes)
Hash d13f662d28ae6fbb17a182b508144002
e05ca79ce522599e348303d0d82299444429f2eb
b1672e412debab24828401d5249dee54cb45cbcd009ede4aca9cba810de49ae2
GET /img/b/R29vZ2xl/AVvXsEjLfrQdtlmvBBMaAj6Kd3NnH_ESBE7Y2zDqoqOy74ALVxRtGsPVQbWZGoNuf7HfppDfxuDrntf0g-5ALjfuMUvF5XwMiYrCohlE_3hfTdPnmHYYmeaFO4QZA0lJJRyhZBfAHj1M8d5sQcF_Ur66KXswqqd-1pzurgQwYxp1yWmZMcxtSa2rCo87onkC/w680/rent%20a%20gf.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "va90"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="rent a gf.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 194299
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
plainmarshyaltered.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRidbYOExImqAvUA8oEDSMTZXa93bXqoCCEoImlKy68bzM6MnSGzO6uZXa%2BTSyMqoUoccPkLNs9Jo0KEyh9AhZxKPURCijnlQC78BQipFzgguxGGT1p939v3Du978321W5wRFwU9XVrT21IputCsu7XXP%2FW8q7VVmRb9Wr8VfhYGV2um91Y7rLtv1N4TbFMv%2BK7nup7r1ZalER3dX5iQkNlh26u33Xrg171mgL75P7aFA0sd8N4ZuQTJx3OPncuQbIQ0ebgk7GauszffTQpFc23Q4wcfpZupLlMks7FjHHTSg3M1tD1ZfgSd7k%2FtQvf%2BFcZyTJwnjxCnB%2BcmEff2pj5jBZEi5i%2Bg7I0g1AiSjsD0HUh%2BQgDGcX0daXL%2FujYl3XrG0gk7JnNP%2F4Qsx2Tut8tIkx8WlezXbmlV5FKnFv1OBdkfQXZHyIoj5NsXIMsjsPxLSP4LWXi6ijTZW7dKQ%2FLT18KAcc9rRvNt7or5QARsPvYZnffjZtvzo1YUuOE0IClHkJ0RlBiAWgfF5JMOio6DInOQ8NMa8zwvcjmjbqvNWINHIg6569Go41HPDVso2GSHAfJsAKYGYGYHmdnBprx30rwEU%2FwMu1HB8udg8zFxPriNHq9QCoLSEpSUoJQEZU5Q9qp9rqxvq%2Ftc2SL2zrt%2F3hvVUOfdXbqv865IyW52Rl6c5vfX17exKU5rHT45oTByOW3SOBCCisAN%2FchjHa%2FhUQYrK0h7YbrtthyTl39%2FiEyOydy3GjE9glVHYPIl0OIV0HIY%2BS7oxjBoudhOD2kqE7FBU1qXKbiukOVzyLecXXVGrkx9eOYbCHZ87fN4bfzHg7%2FBTIXMVPhCPiboqrvDm7okezd1acmP61kuE7lNJ298K6e5uPjd%2B2Kr1IavLNnBg7fZhJiMhx8Km6%2FSlMu0a8n3i5JzYZa1YYL8tGI%2FEfGNwm4sFiYtstUb7yyvJJkR1kqdjkDlmJAnx2ByTJ7n5fR8r3y8DGlGMEWFpDgm5wWpj8CyHdhs5t%2FqizBqpokzB2VRDY0fz34qSaDEDNO4gv0Pjmfzrr2LrnkVNL%2BDNKnQMxV6qgJVA9ji4jDPzPG1XxvTQqycYayMsxcro%2B49C9fK01rUaLg0bDe9KKIiigO%2F1Qk9TqkfhH4Y0gZyO2b%2Bydo%2FAAAA%2F%2F8BAAD%2F%2F7NmJ6%2BJBAAA
200 OK 7 B URL HTTP/1.1 plainmarshyaltered.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRidbYOExImqAvUA8oEDSMTZXa93bXqoCCEoImlKy68bzM6MnSGzO6uZXa%2BTSyMqoUoccPkLNs9Jo0KEyh9AhZxKPURCijnlQC78BQipFzgguxGGT1p939v3Du978321W5wRFwU9XVrT21IputCsu7XXP%2FW8q7VVmRb9Wr8VfhYGV2um91Y7rLtv1N4TbFMv%2BK7nup7r1ZalER3dX5iQkNlh26u33Xrg171mgL75P7aFA0sd8N4ZuQTJx3OPncuQbIQ0ebgk7GauszffTQpFc23Q4wcfpZupLlMks7FjHHTSg3M1tD1ZfgSd7k%2FtQvf%2BFcZyTJwnjxCnB%2BcmEff2pj5jBZEi5i%2Bg7I0g1AiSjsD0HUh%2BQgDGcX0daXL%2FujYl3XrG0gk7JnNP%2F4Qsx2Tut8tIkx8WlezXbmlV5FKnFv1OBdkfQXZHyIoj5NsXIMsjsPxLSP4LWXi6ijTZW7dKQ%2FLT18KAcc9rRvNt7or5QARsPvYZnffjZtvzo1YUuOE0IClHkJ0RlBiAWgfF5JMOio6DInOQ8NMa8zwvcjmjbqvNWINHIg6569Go41HPDVso2GSHAfJsAKYGYGYHmdnBprx30rwEU%2FwMu1HB8udg8zFxPriNHq9QCoLSEpSUoJQEZU5Q9qp9rqxvq%2Ftc2SL2zrt%2F3hvVUOfdXbqv865IyW52Rl6c5vfX17exKU5rHT45oTByOW3SOBCCisAN%2FchjHa%2FhUQYrK0h7YbrtthyTl39%2FiEyOydy3GjE9glVHYPIl0OIV0HIY%2BS7oxjBoudhOD2kqE7FBU1qXKbiukOVzyLecXXVGrkx9eOYbCHZ87fN4bfzHg7%2FBTIXMVPhCPiboqrvDm7okezd1acmP61kuE7lNJ298K6e5uPjd%2B2Kr1IavLNnBg7fZhJiMhx8Km6%2FSlMu0a8n3i5JzYZa1YYL8tGI%2FEfGNwm4sFiYtstUb7yyvJJkR1kqdjkDlmJAnx2ByTJ7n5fR8r3y8DGlGMEWFpDgm5wWpj8CyHdhs5t%2FqizBqpokzB2VRDY0fz34qSaDEDNO4gv0Pjmfzrr2LrnkVNL%2BDNKnQMxV6qgJVA9ji4jDPzPG1XxvTQqycYayMsxcro%2B49C9fK01rUaLg0bDe9KKIiigO%2F1Qk9TqkfhH4Y0gZyO2b%2Bydo%2FAAAA%2F%2F8BAAD%2F%2F7NmJ6%2BJBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRidbYOExImqAvUA8oEDSMTZXa93bXqoCCEoImlKy68bzM6MnSGzO6uZXa%2BTSyMqoUoccPkLNs9Jo0KEyh9AhZxKPURCijnlQC78BQipFzgguxGGT1p939v3Du978321W5wRFwU9XVrT21IputCsu7XXP%2FW8q7VVmRb9Wr8VfhYGV2um91Y7rLtv1N4TbFMv%2BK7nup7r1ZalER3dX5iQkNlh26u33Xrg171mgL75P7aFA0sd8N4ZuQTJx3OPncuQbIQ0ebgk7GauszffTQpFc23Q4wcfpZupLlMks7FjHHTSg3M1tD1ZfgSd7k%2FtQvf%2BFcZyTJwnjxCnB%2BcmEff2pj5jBZEi5i%2Bg7I0g1AiSjsD0HUh%2BQgDGcX0daXL%2FujYl3XrG0gk7JnNP%2F4Qsx2Tut8tIkx8WlezXbmlV5FKnFv1OBdkfQXZHyIoj5NsXIMsjsPxLSP4LWXi6ijTZW7dKQ%2FLT18KAcc9rRvNt7or5QARsPvYZnffjZtvzo1YUuOE0IClHkJ0RlBiAWgfF5JMOio6DInOQ8NMa8zwvcjmjbqvNWINHIg6569Go41HPDVso2GSHAfJsAKYGYGYHmdnBprx30rwEU%2FwMu1HB8udg8zFxPriNHq9QCoLSEpSUoJQEZU5Q9qp9rqxvq%2Ftc2SL2zrt%2F3hvVUOfdXbqv865IyW52Rl6c5vfX17exKU5rHT45oTByOW3SOBCCisAN%2FchjHa%2FhUQYrK0h7YbrtthyTl39%2FiEyOydy3GjE9glVHYPIl0OIV0HIY%2BS7oxjBoudhOD2kqE7FBU1qXKbiukOVzyLecXXVGrkx9eOYbCHZ87fN4bfzHg7%2FBTIXMVPhCPiboqrvDm7okezd1acmP61kuE7lNJ298K6e5uPjd%2B2Kr1IavLNnBg7fZhJiMhx8Km6%2FSlMu0a8n3i5JzYZa1YYL8tGI%2FEfGNwm4sFiYtstUb7yyvJJkR1kqdjkDlmJAnx2ByTJ7n5fR8r3y8DGlGMEWFpDgm5wWpj8CyHdhs5t%2FqizBqpokzB2VRDY0fz34qSaDEDNO4gv0Pjmfzrr2LrnkVNL%2BDNKnQMxV6qgJVA9ji4jDPzPG1XxvTQqycYayMsxcro%2B49C9fK01rUaLg0bDe9KKIiigO%2F1Qk9TqkfhH4Y0gZyO2b%2Bydo%2FAAAA%2F%2F8BAAD%2F%2F7NmJ6%2BJBAAA HTTP/1.1
Host: plainmarshyaltered.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Cookie: u_pl=16485247; uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecfd0100670da5ab4eeae406271cf131ac=[3240591]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 27 Sep 2022 10:32:45 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 81c25f4bcc08bb15637fdf07d214393a
Strict-Transport-Security: max-age=0; includeSubdomains
www.facebook.com/v3.0/plugins/page.php?adapt_container_width=true&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df33abfc5a8d7e8c%26domain%3Dwww.animehana.in%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.animehana.in%252Ff372df15ccdcafe%26relation%3Dparent.parent&container_width=300&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fanimehanaa&locale=en_US&sdk=joey&show_facepile=true&small_header=false&width=360
302 Found 0 B URL HTTP/2 www.facebook.com/v3.0/plugins/page.php?adapt_container_width=true&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df33abfc5a8d7e8c%26domain%3Dwww.animehana.in%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.animehana.in%252Ff372df15ccdcafe%26relation%3Dparent.parent&container_width=300&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fanimehanaa&locale=en_US&sdk=joey&show_facepile=true&small_header=false&width=360
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3.0/plugins/page.php?adapt_container_width=true&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df33abfc5a8d7e8c%26domain%3Dwww.animehana.in%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.animehana.in%252Ff372df15ccdcafe%26relation%3Dparent.parent&container_width=300&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fanimehanaa&locale=en_US&sdk=joey&show_facepile=true&small_header=false&width=360 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33abfc5a8d7e8c%2526domain%253Dwww.animehana.in%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fwww.animehana.in%25252Ff372df15ccdcafe%2526relation%253Dparent.parent%26container_width%3D300%26hide_cover%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fanimehanaa%26locale%3Den_US%26sdk%3Djoey%26show_facepile%3Dtrue%26small_header%3Dfalse%26width%3D360
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v8.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: T/LNNnLYW+GChn25h84JEA1Og+7l1RB96EZj2+J/SukO640qh4TzdqKzhLYve9DsnhYUsdJmBTlMeY7TdTBSTQ==
content-length: 0
date: Tue, 27 Sep 2022 10:32:46 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 8e1d1bdba60caa417a7fd246f892767e
896349dbd1f09d917b20b25653d656d555f7578b
9e0efd3fdb74064ce371b5457597d724ff875add6711267cf29d05bb0189b2fd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "9E0EFD3FDB74064CE371B5457597D724FF875ADD6711267CF29D05BB0189B2FD"
Last-Modified: Mon, 26 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Tue, 27 Sep 2022 13:23:46 GMT
Date: Tue, 27 Sep 2022 10:32:46 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 8e1d1bdba60caa417a7fd246f892767e
896349dbd1f09d917b20b25653d656d555f7578b
9e0efd3fdb74064ce371b5457597d724ff875add6711267cf29d05bb0189b2fd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "9E0EFD3FDB74064CE371B5457597D724FF875ADD6711267CF29D05BB0189B2FD"
Last-Modified: Mon, 26 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Tue, 27 Sep 2022 13:23:46 GMT
Date: Tue, 27 Sep 2022 10:32:46 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 8e1d1bdba60caa417a7fd246f892767e
896349dbd1f09d917b20b25653d656d555f7578b
9e0efd3fdb74064ce371b5457597d724ff875add6711267cf29d05bb0189b2fd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "9E0EFD3FDB74064CE371B5457597D724FF875ADD6711267CF29D05BB0189B2FD"
Last-Modified: Mon, 26 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Tue, 27 Sep 2022 13:23:46 GMT
Date: Tue, 27 Sep 2022 10:32:46 GMT
Connection: keep-alive
plainmarshyaltered.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Findex.html&l=1384&fd=681
200 OK 0 B URL HTTP/1.1 plainmarshyaltered.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Findex.html&l=1384&fd=681
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Findex.html&l=1384&fd=681 HTTP/1.1
Host: plainmarshyaltered.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Cookie: u_pl=16485247; uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecfd0100670da5ab4eeae406271cf131ac=[3240591]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 27 Sep 2022 10:32:46 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/img/vpn.png
200 OK 27 kB URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/img/vpn.png
IP
File type PNG image data, 400 x 390, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f627dde2b8596dbd62eb42b76c8e6ba
15cf8a62eab44beffb02d9de51a3a18964a8fb62
8208316116f1f38051a9785616a403519015174b65db5f652cb2dae02ffe8491
GET /sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/img/vpn.png HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:46 GMT
content-type: image/png
content-length: 27328
last-modified: Wed, 03 Aug 2022 08:48:26 GMT
etag: "62ea365a-6ac0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4753713
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mB68kZGVkPBs21sdAtOPXztbu2iVXSaRu4X2KJJ07T0xkuJ02papiC8FqBILnfrcCvUA8j5mb1uKznypXuiBWmB1uJOm3t%2B8YB2UQpgT3ERAdkMWP6LOMMQNGK4cdToo58M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 751393cabbf971d8-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 8e1d1bdba60caa417a7fd246f892767e
896349dbd1f09d917b20b25653d656d555f7578b
9e0efd3fdb74064ce371b5457597d724ff875add6711267cf29d05bb0189b2fd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "9E0EFD3FDB74064CE371B5457597D724FF875ADD6711267CF29D05BB0189B2FD"
Last-Modified: Mon, 26 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Tue, 27 Sep 2022 13:23:46 GMT
Date: Tue, 27 Sep 2022 10:32:46 GMT
Connection: keep-alive
plainmarshyaltered.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Fcss%2Fstyle.css&l=5246&fd=367
200 OK 0 B URL HTTP/1.1 plainmarshyaltered.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Fcss%2Fstyle.css&l=5246&fd=367
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Fcss%2Fstyle.css&l=5246&fd=367 HTTP/1.1
Host: plainmarshyaltered.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Cookie: u_pl=16485247; uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecfd0100670da5ab4eeae406271cf131ac=[3240591]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 27 Sep 2022 10:32:46 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ebeebe5fed09a67757839c68f1a91cf
9954e597f870a2b3f370c5ee8320b7c6fd5229e6
c60ff1191fcf953826fae154177629d126e90abec9b881dc89eedfae696b8ba5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C60FF1191FCF953826FAE154177629D126E90ABEC9B881DC89EEDFAE696B8BA5"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12449
Expires: Tue, 27 Sep 2022 14:00:15 GMT
Date: Tue, 27 Sep 2022 10:32:46 GMT
Connection: keep-alive
cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/css/animate.css
200 OK 4.8 kB URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/css/animate.css
IP
Hash c91016401e0a0b7b3d7572de48c76597
12fb634abb5e708b4f55d1489055b4f626d3cdd1
2472e286e0bf6f54cef9d99e9c63301c873fa02bc4e3979e1a18587a6d973120
GET /sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:46 GMT
content-type: text/css
last-modified: Wed, 07 Jul 2021 10:20:58 GMT
etag: W/"60e5800a-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5SDV4xKZTI0noek4HL0l0Z9msgVtanSmfocV3QYg8S7VIiLG7lYIyr958Tuiov9THOxGXvySpia5CVHzEairUJbigzaKTbKBrXIHvtmjroElSKlOYIVHcWplS3JZJrwkcac%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 751393ca5cd87474-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/js/script.js
200 OK 194 B URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/js/script.js
IP
Hash 9d0d1d223e35512cabac61e5d1b60267
b55b590938c93453cda11f49e7d354598254b63b
9d8ffa56035e0f894424c6c6632304240af07bff691decb4e501d3ee8e381df3
GET /sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:46 GMT
content-type: application/javascript
last-modified: Wed, 07 Jul 2021 10:21:07 GMT
etag: W/"60e58013-18d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xaNIKGm0FJu6bCoV8vwgxVzTzvyL3WwSeLoAlIBD0Z1ysheFt%2BdLGawcHooMwBIQvJ1AotN1ymi8kUKLTgI2XkGE4%2BF5HOOYYCP%2FK4ziYU3BY2HJGMFCAJQBjm44GAiwIKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 751393ca5ce07474-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
plainmarshyaltered.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Fjs%2Fscript.js&l=397&fd=378
200 OK 0 B URL HTTP/1.1 plainmarshyaltered.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Fjs%2Fscript.js&l=397&fd=378
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fios_widget_black_BIG%2F2%2Fjs%2Fscript.js&l=397&fd=378 HTTP/1.1
Host: plainmarshyaltered.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Cookie: u_pl=16485247; uid_id2=64cd1157-9d0e-4e4c-b2ca-2b5912787406:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecfd0100670da5ab4eeae406271cf131ac=[3240591]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 27 Sep 2022 10:32:46 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/css/style.css
200 OK 1.4 kB URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/css/style.css
IP
Hash 6e012a0aa9956c2565d3fbb535ac6ca3
90a15ddd1a89291216b986ec551504cc2cf18945
39391dbc0ca936a28a22af27078f5b1fe141c9c5f5d4ef037fab820983d7516e
GET /sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.animehana.in
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:46 GMT
content-type: text/css
last-modified: Wed, 02 Feb 2022 09:47:17 GMT
etag: W/"61fa5325-147e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ltrMpSkWhYXAUk13HURaz0DkPiZVrLCZy6Vw7iLQ3kID0L8QMXbm0966xupeUaWOjVifGqnZHFBgk6DnenSyvuCeKr3OxFdR1ftuZnYGvy30f4EnpTnb%2BXeYd7pZ0BDUzW0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 751393ca6cee7474-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=fd0100670da5ab4eeae406271cf131ac&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=10
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=fd0100670da5ab4eeae406271cf131ac&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=10
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=64cd1157-9d0e-4e4c-b2ca-2b5912787406&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=fd0100670da5ab4eeae406271cf131ac&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=10 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 27 Sep 2022 10:32:47 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 53ebb04b3b145224c6e9fb8878ff49fb
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/fonts/SFUIDisplay-Regular.woff2
200 OK 43 kB URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/fonts/SFUIDisplay-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 42576, version 1.0\012- data
Hash 2a7d15a301e2045942980e8544ccfbb5
71adf9d8bcff90f86a96b1d21e847bf5d79b3c0e
474b4d7266171e03c8efcd904e8010bd8cb11a068d5e67b5450bc46d768a41e9
GET /sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/fonts/SFUIDisplay-Regular.woff2 HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.animehana.in
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:47 GMT
content-type: application/octet-stream
content-length: 42576
last-modified: Wed, 07 Jul 2021 10:21:01 GMT
etag: "60e5800d-a650"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UMqc%2FR3Np82kXqAFilCi2oygO289%2FwHzmLut3fHW%2BIbdv%2BlVfwlpcnM0TZBK2yx0pCIPSadqvR8sTcffS9Ych13dM0ZRYMtd%2BK6W9TnfpNSB3rE%2BGTMkl52rztTXzTRDqpg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 751393ccd8ed7474-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33abfc5a8d7e8c%2526domain%253Dwww.animehana.in%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fwww.animehana.in%25252Ff372df15ccdcafe%2526relation%253Dparent.parent%26container_width%3D300%26hide_cover%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fanimehanaa%26locale%3Den_US%26sdk%3Djoey%26show_facepile%3Dtrue%26small_header%3Dfalse%26width%3D360
200 OK 8.7 kB URL HTTP/2 www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33abfc5a8d7e8c%2526domain%253Dwww.animehana.in%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fwww.animehana.in%25252Ff372df15ccdcafe%2526relation%253Dparent.parent%26container_width%3D300%26hide_cover%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fanimehanaa%26locale%3Den_US%26sdk%3Djoey%26show_facepile%3Dtrue%26small_header%3Dfalse%26width%3D360
IP
Hash 4c7da0960411124c5c16648648b90c47
52bceaa0112d43d84884d1ab3bb9d1d2a3e31633
b2836256c78704a105ba972d3d5895f7e3abbd4e8c53d90965c8074c72db334d
GET /login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33abfc5a8d7e8c%2526domain%253Dwww.animehana.in%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fwww.animehana.in%25252Ff372df15ccdcafe%2526relation%253Dparent.parent%26container_width%3D300%26hide_cover%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fanimehanaa%26locale%3Den_US%26sdk%3Djoey%26show_facepile%3Dtrue%26small_header%3Dfalse%26width%3D360 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.animehana.in/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: Bb0jXhPEdSENYhtuBWarkv6/CckToATUoKU1WJ15ifSXFsI6pkDcQCEPmJ7dV33CTTmFVbph1tv9EHAUjfGm+Q==
date: Tue, 27 Sep 2022 10:32:46 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ad.a-ads.com/1763391?size=320x50&background_color=7a3333
200 OK 0 B URL HTTP/2 ad.a-ads.com/1763391?size=320x50&background_color=7a3333
IP
ASN #24940 Hetzner Online GmbH
GET /1763391?size=320x50&background_color=7a3333 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 10:32:42 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://www.animehana.in/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ad.a-ads.com/1836016?size=320x100
200 OK 0 B URL HTTP/2 ad.a-ads.com/1836016?size=320x100
IP
ASN #24940 Hetzner Online GmbH
GET /1836016?size=320x100 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 10:32:44 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://www.animehana.in/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.animehana.in&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
200 OK 0 B URL HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.animehana.in&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
IP
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.animehana.in&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 27 Sep 2022 10:32:44 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /o/cspreport, script-src 'nonce-TeMCEefeDNkjICKfvm3O0w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvKIx_M28BnVkl3qw9ChtTX0_Gk2-mRflQ1vN4IUB_v7YdeId-2l4Y1EtlvqQf1SjLbpDqg9O1pRmbt6Np98LXGP2NZHQN3gthqh7pN1Fk0FqZqN9M25jh2_6HSff7Et0kVy5PSamlcPdguQlS6Lkmi1_SpOry56QUJlMjD7hTGtQpMfJHOUExrViP/w680/ranking%20of%20the%20king.jpg
200 OK 0 B URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvKIx_M28BnVkl3qw9ChtTX0_Gk2-mRflQ1vN4IUB_v7YdeId-2l4Y1EtlvqQf1SjLbpDqg9O1pRmbt6Np98LXGP2NZHQN3gthqh7pN1Fk0FqZqN9M25jh2_6HSff7Et0kVy5PSamlcPdguQlS6Lkmi1_SpOry56QUJlMjD7hTGtQpMfJHOUExrViP/w680/ranking%20of%20the%20king.jpg
IP
GET /img/b/R29vZ2xl/AVvXsEjvKIx_M28BnVkl3qw9ChtTX0_Gk2-mRflQ1vN4IUB_v7YdeId-2l4Y1EtlvqQf1SjLbpDqg9O1pRmbt6Np98LXGP2NZHQN3gthqh7pN1Fk0FqZqN9M25jh2_6HSff7Et0kVy5PSamlcPdguQlS6Lkmi1_SpOry56QUJlMjD7hTGtQpMfJHOUExrViP/w680/ranking%20of%20the%20king.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.animehana.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "va0d"
expires: Wed, 28 Sep 2022 10:32:45 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ranking of the king.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 10:32:45 GMT
server: fife
content-length: 171169
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/img/close.svg
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/img/close.svg
IP
GET /sb/interstitial/utility/default/blog/ios_widget_black_BIG/2/img/close.svg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 10:32:46 GMT
content-type: image/svg+xml
last-modified: Wed, 07 Jul 2021 10:21:04 GMT
etag: W/"60e58010-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4753713
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ceZvMMbQMQlz09cmj7uGWJfBlbnzW4FXyUZnHy02ntSnBwvQhd9hCFEcoMGP5oboyXOzvf5JYlZXlhgCJhUgQTt1hj0fc7z8SIq2iEKnv2RzL7vL8jyClXU0oPnKSJZMIBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 751393cacc0771d8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
142.250.74.179
104.17.25.14
148.251.1.246
157.240.200.35
93.184.220.29
23.36.77.32