Report - cdn-111.anonfiles.com/v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition

Report Overview

Submitted URL
cdn-111.anonfiles.com/v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar
IP
195.96.151.60
ASN
#41634 Svea Hosting AB
Submitted
2022-09-25 17:28:59
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
djv99sxoqpv11.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	71 kB	54.230.245.59
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	35.162.203.49
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	63 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.35
anonfiles.com	117161	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.0 kB	149 kB	45.154.253.151
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	326 B	729 B	23.36.76.226
sultingcoe.buzz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	782 B	44.195.137.121
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658 B	1.5 kB	93.184.220.29
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	331 B	700 B	142.250.74.3
cdn-111.anonfiles.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	922 B	697 B	195.96.151.60
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.9 kB	8.0 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
vjs.zencdn.net	4968	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	726 B	143 kB	151.101.86.217
baconaces.pro	835148	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	453 B	376 B	107.22.28.167

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-25	medium	djv99sxoqpv11.cloudfront.net/GMEV0ckNTKhoUfEQsEE90A3JHQHoWLwcdLUB4DEMJBhYEQ3diBydUN0ohSUJlXCQaFX4WIBoRfgFjFRYhDXFSBjNfLkkKMlg2BQsuXiQdVDZReBkdOVkpGBNmAgNBXHMVd0RaOwF0UUEBFXdEHipeMAxXcQA9TEQcBnFRQQEVd0QANRV2NUt1HnVdV3EAIh-ERKF9gRjRxAHREQnIAdFFAc1YsBhclXz1RQAUJc1pCZUV4RkpzBXVDRHAAd0BDdAd2	Malware
2022-09-25	medium	djv99sxoqpv11.cloudfront.net/iczdSNkYQWDxQeQdeNgtxQABhBXZVXSFZKAMKBHt2EnE+AxcGej9iYAdNNgt2VVszWCFOETdYJU4GdFciEQpmEDMSCj9ZPBpbPldjQXFnGHZWBWIePkIGdwUEVgViWi8dQioTdENPagAZRQN3BQRWBWJEMFYEEw9wXQd7E3RDUDdVLRwSYHB0QwZiBndDBn-cEdhVeIFMgHE93BABKAXwGYAYKYA52RgdlAHVDBWYHcUQE	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	rtoomany.buzz/Uk9uSmozLQ0nVTNyDGwfICNTb1gUalwMDjg5V3MZKiAfOhxjfkApBj06CiwYPSEaZAQ3O0t4LBUCKxxaMSQgHiE6IDssLwM8Kw9TYg5dACIDBwEdJiUsCgY/EHsqDycYDQYTLwN8CiMoKys7BFo9Jz0fID4XLRsLFBdaHSMQIDwsDRQlKBgzOgs2DDkQJSAsJjkkJQcGNX0sGxknFwcbDgQLNBgPECQKBTw5PykIJD8OCQQoCgcjHA5iHQ8FHRR/Ox8vEAk2Li8aJh4vJxM3Nik7E3Y6DzsxDQAMOAMeKxwOYh4vBDgEfSAfHmMHABwOBHwrCyM6YisYIRR2CRgAADcvAjgXHgADKzYJKAsJYxYdCAIxIzYwWwAeLx8gMX4eCTAHGVoYASI1LBI8Fh0mCys2fywODhMrXGwAISAAOlcqfiR8OSJ+WhgoAQ	3.0 kB	2023-03-08	2023-03-08
Pretty URL rtoomany.buzz/Uk9uSmozLQ0nVTNyDGwfICNTb1gUalwMDjg5V3MZKiAfOhxjfkApBj06CiwYPSEaZAQ3O0t4LBUCKxxaMSQgHiE6IDssLwM8Kw9TYg5dACIDBwEdJiUsCgY/EHsqDycYDQYTLwN8CiMoKys7BFo9Jz0fID4XLRsLFBdaHSMQIDwsDRQlKBgzOgs2DDkQJSAsJjkkJQcGNX0sGxknFwcbDgQLNBgPECQKBTw5PykIJD8OCQQoCgcjHA5iHQ8FHRR/Ox8vEAk2Li8aJh4vJxM3Nik7E3Y6DzsxDQAMOAMeKxwOYh4vBDgEfSAfHmMHABwOBHwrCyM6YisYIRR2CRgAADcvAjgXHgADKzYJKAsJYxYdCAIxIzYwWwAeLx8gMX4eCTAHGVoYASI1LBI8Fh0mCys2fywODhMrXGwAISAAOlcqfiR8OSJ+WhgoAQ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:09:40 Last Seen2023-03-08 01:09:40 Times Seen1 Hash bd8350d387b8698eebd6cc870a9dae61 070caa54640a4026e6ea90faae3e18c9337a47d5 aa000e5336ab45b389126b44fe1875a592d4c3fcde09c0f48c3d2717bc5b14d6 Loading...

	rtoomany.buzz/b2ZsMnEOBA9fTg5bDhQEHQpRF0MpQ150FQUQVQsCFwkdQgdeV0JRHQATCFQDAAgYHB8KEkkANwYFFlYiIQ01YyYrHj1XIAsDIlUFFzctcBktPjZkKTwgNnkwIi0uegVdIwJ3VF0kLUoSKAMGCxg2Jwh8PwgSXmQnHBw7cTcgIzhWKCUzWHUVKQUFdyAfCyl2PDwlBgsrPyQcUCEDAgZjKSkIK3orOCQ7exQ/DSV1FRgzKWQWOQ87W0kLNwVdJQsjImIQCCc2YCAhVS5jIzgkO3g0IiA1dzQYXxtqIAtRKQEjKzMoVicjNBthKCckXGMGNQ8uXBUrJAIfEioCBGQUJiAhVTkqX19wMC0tLWoGKD8tazo2J1kAIwgCAHM5OSIuZSgnBTljNEkMH10fH1s6f0EOIAAHIBorAWY	2.9 kB	2023-03-08	2023-03-08
Pretty URL rtoomany.buzz/b2ZsMnEOBA9fTg5bDhQEHQpRF0MpQ150FQUQVQsCFwkdQgdeV0JRHQATCFQDAAgYHB8KEkkANwYFFlYiIQ01YyYrHj1XIAsDIlUFFzctcBktPjZkKTwgNnkwIi0uegVdIwJ3VF0kLUoSKAMGCxg2Jwh8PwgSXmQnHBw7cTcgIzhWKCUzWHUVKQUFdyAfCyl2PDwlBgsrPyQcUCEDAgZjKSkIK3orOCQ7exQ/DSV1FRgzKWQWOQ87W0kLNwVdJQsjImIQCCc2YCAhVS5jIzgkO3g0IiA1dzQYXxtqIAtRKQEjKzMoVicjNBthKCckXGMGNQ8uXBUrJAIfEioCBGQUJiAhVTkqX19wMC0tLWoGKD8tazo2J1kAIwgCAHM5OSIuZSgnBTljNEkMH10fH1s6f0EOIAAHIBorAWY IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:09:40 Last Seen2023-03-08 01:09:40 Times Seen1 Hash a722364163d9e12178245a5d020f3f79 6ec3d7859c5a272230f9119e65f2510a24b18a0e eff3bfc1e2dab40c1cd2636566b3538be06063e8833136196fc01b520254bac8 Loading...

	anonfiles.com/js/app.js?1663356951	193 kB	2023-03-07	2023-03-17
Pretty URL anonfiles.com/js/app.js?1663356951 IP 45.154.253.151 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2023-03-17 12:50:45 Times Seen1 Hash ebf881a573c65e946d0b67bbae1f7d8d 5693e08ea7915521918fc75fc5dd8fa9f7f786fb ee607a4919a33f6946c245c09d6db9dd3085ef77bf9f8a7a3a819f3cffe178a7 Loading...

	anonfiles.com/v2r4xbk3u8	1.8 kB	2023-03-07	2023-08-07
Pretty URL anonfiles.com/v2r4xbk3u8 IP 45.154.253.151 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2023-08-07 17:15:14 Times Seen811 Hash 222132c7cee7981cc82b3c57684aefe4 988196a7d039385d2a5dec48b60328949be4544b 29c9404d415384cdb3fa69ac2c92d9319f6527112ad2d82fbd27ae52542ac823 Loading...

	vjs.zencdn.net/7.3.0/video.min.js	476 kB	2023-03-07	2024-04-22
Pretty URL vjs.zencdn.net/7.3.0/video.min.js IP 151.101.86.217 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2024-04-22 10:30:32 Times Seen1046 Hash 057f19acd50fc7e3ad917dd600889ee5 479d8baad992ec24bf4c3ac8365014be01565219 963ccc559571c588baa7f6d61513b26277c7847c250773e3270c51f5038216fb Loading...

	unknown	0 B	2023-03-07	2024-05-11
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-11 05:52:08 Times Seen37535234 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	djv99sxoqpv11.cloudfront.net/GMEV0ckNTKhoUfEQsEE90A3JHQHoWLwcdLUB4DEMJBhYEQ3diBydUN0ohSUJlXCQaFX4WIBoRfgFjFRYhDXFSBjNfLkkKMlg2BQsuXiQdVDZReBkdOVkpGBNmAgNBXHMVd0RaOwF0UUEBFXdEHipeMAxXcQA9TEQcBnFRQQEVd0QANRV2NUt1HnVdV3EAIh-ERKF9gRjRxAHREQnIAdFFAc1YsBhclXz1RQAUJc1pCZUV4RkpzBXVDRHAAd0BDdAd2	775 B	2023-03-08	2023-03-08
Pretty URL djv99sxoqpv11.cloudfront.net/GMEV0ckNTKhoUfEQsEE90A3JHQHoWLwcdLUB4DEMJBhYEQ3diBydUN0ohSUJlXCQaFX4WIBoRfgFjFRYhDXFSBjNfLkkKMlg2BQsuXiQdVDZReBkdOVkpGBNmAgNBXHMVd0RaOwF0UUEBFXdEHipeMAxXcQA9TEQcBnFRQQEVd0QANRV2NUt1HnVdV3EAIh-ERKF9gRjRxAHREQnIAdFFAc1YsBhclXz1RQAUJc1pCZUV4RkpzBXVDRHAAd0BDdAd2 IP 54.230.245.59 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:09:40 Last Seen2023-03-08 01:09:40 Times Seen1 Hash e2d762477057a08696ddb8e233cd2d04 63464879df170a7264781c8ccb4d54cd4e4b242c b4aa5e35db1dd5a4acf3a02c504f126f0c4a5c4663813d9e12ff1729e9d8e533 Loading...

	djv99sxoqpv11.cloudfront.net/iczdSNkYQWDxQeQdeNgtxQABhBXZVXSFZKAMKBHt2EnE+AxcGej9iYAdNNgt2VVszWCFOETdYJU4GdFciEQpmEDMSCj9ZPBpbPldjQXFnGHZWBWIePkIGdwUEVgViWi8dQioTdENPagAZRQN3BQRWBWJEMFYEEw9wXQd7E3RDUDdVLRwSYHB0QwZiBndDBn-cEdhVeIFMgHE93BABKAXwGYAYKYA52RgdlAHVDBWYHcUQE	292 B	2023-03-08	2023-03-08
Pretty URL djv99sxoqpv11.cloudfront.net/iczdSNkYQWDxQeQdeNgtxQABhBXZVXSFZKAMKBHt2EnE+AxcGej9iYAdNNgt2VVszWCFOETdYJU4GdFciEQpmEDMSCj9ZPBpbPldjQXFnGHZWBWIePkIGdwUEVgViWi8dQioTdENPagAZRQN3BQRWBWJEMFYEEw9wXQd7E3RDUDdVLRwSYHB0QwZiBndDBn-cEdhVeIFMgHE93BABKAXwGYAYKYA52RgdlAHVDBWYHcUQE IP 54.230.245.59 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:09:40 Last Seen2023-03-08 01:09:40 Times Seen1 Hash b74154c7a5894484698abfa80f748855 8224db9e2f0de34840c1781615dc24fc4d214d09 9ebe60cddf30c602a3fd772b0797abb8701936f473b7d7e1555f9303cce6efcb Loading...

	anonfiles.com/sw_anonfiles.js	45 kB	2023-03-07	2023-08-07
Pretty URL anonfiles.com/sw_anonfiles.js IP 45.154.253.151 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2023-08-07 17:15:14 Times Seen835 Hash 3adab942a2ab6c02c549daaf694f58fa 33792c7a0ee33eb3d88af7eab2b86bcb846aeee5 9091b2493e77eac744b42f7634ab2bbd51f693cc036926c9a91efbeef482d167 Loading...

	anonfiles.com/v2r4xbk3u8	167 B	2023-03-07	2023-08-07
Pretty URL anonfiles.com/v2r4xbk3u8 IP 45.154.253.151 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2023-08-07 17:15:14 Times Seen616 Hash eb6aaa05fed3e182e1146d30bbbd9d63 ef6184b02b8e6207ef756285a23da1b77b1e8142 b70d7ebc545a9d5a8db93d03f377433c555fec98cabcc67e8a4607b26e035707 Loading...

	anonfiles.com/v2r4xbk3u8	160 B	2023-03-08	2023-03-08
Pretty URL anonfiles.com/v2r4xbk3u8 IP 45.154.253.151 ASN #41634 Svea Hosting AB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:09:40 Last Seen2023-03-08 01:09:40 Times Seen1 Hash ec816f2c25ca99dd3c00da7f9fc5a5f8 d0ca527f6be5edc51e4044742d2c19702ca678cc c02cf787a8494eb0b96da60237c1288339133b529177ba6aa834961dad6794a1 Loading...

	baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1	58 kB	2023-03-08	2023-03-08
Pretty URL baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1 IP 107.22.28.167 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:09:40 Last Seen2023-03-08 01:09:40 Times Seen1 Hash db76c4af3d912913d4a346262870217d d90589d0d7dc4e004d72a804f966d63face87d22 b7b4d06ee1426651ce6238a8fa6be5e6cd565395e237e1f11f92a68d19afe602 Loading...

HTTP Transactions (57)

URL IP Response Size

cdn-111.anonfiles.com/v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar

195.96.151.60

301 Moved Permanently

162 B

URL HTTP/1.1
cdn-111.anonfiles.com/v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar
IP
195.96.151.60:0
ASN
#41634 Svea Hosting AB

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET /v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar HTTP/1.1
Host: cdn-111.anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 25 Sep 2022 17:28:48 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://cdn-111.anonfiles.com/v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18637
Expires: Sun, 25 Sep 2022 22:39:25 GMT
Date: Sun, 25 Sep 2022 17:28:48 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 17:15:02 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ppbkIWd_yYS5Uf73C6ppJxWej-UureHX2mcyECbutPdiQvWz3P-OQQ==
Age: 826

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b3e81b5bd7bd8e12288a8159e44ceb3f
977945964ffcbf49ac78f840db9da822c50c82f0
4721814da286852318f7ebf9857bd4bf01f0beea2c9eb7ddb9f290e3fa472232

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4721814DA286852318F7EBF9857BD4BF01F0BEEA2C9EB7DDB9F290E3FA472232"
Last-Modified: Fri, 23 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14612
Expires: Sun, 25 Sep 2022 21:32:21 GMT
Date: Sun, 25 Sep 2022 17:28:49 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: Mgt15tIVFas+IZQ+fuqJD2vYOOUdfQVSn59ugVTrIFtievPkXluTXP9JQ8lYrp7ahrjp+ChiNd4=
x-amz-request-id: C95SPH6GPPATFFX6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 25 Sep 2022 16:47:08 GMT
age: 2501
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

cdn-111.anonfiles.com/v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar

195.96.151.60

301 Moved Permanently

0 B

URL HTTP/1.1
cdn-111.anonfiles.com/v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar
IP
195.96.151.60:0
ASN
#41634 Svea Hosting AB

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v2r4xbk3u8/ca9d063e-1664033391/valoranty_private_edition_v1.0%20(1).rar HTTP/1.1
Host: cdn-111.anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Location: https://anonfiles.com/v2r4xbk3u8
X-Cache-Host: filecache-01
X-Cache-Disk: nvme-01
Accept-Ranges: bytes

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
46579f063e2835e9d3d2df610954e99c
830c37c6716754a0ec864dc7846eba5890bc3e53
0ba1b4b691d64c1e706c3e4c900aac195c2716849e725f35bae38d6a744dbf0e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BA1B4B691D64C1E706C3E4C900AAC195C2716849E725F35BAE38D6A744DBF0E"
Last-Modified: Sat, 24 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13196
Expires: Sun, 25 Sep 2022 21:08:45 GMT
Date: Sun, 25 Sep 2022 17:28:49 GMT
Connection: keep-alive

anonfiles.com/v2r4xbk3u8

45.154.253.151

404 Not Found

2.4 kB

URL HTTP/1.1
anonfiles.com/v2r4xbk3u8
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
2.4 kB (2437 bytes)
Hash
62f6fb4246102d398ef71d537498216f
0cb23f142c699730fa9c9ee0e1a4c4612edc5dbf
28fc6a01882703af83eeb122ca990a9691f3d5a14f5e00da08252608b6d9c6ff

HTTP Headers

GET /v2r4xbk3u8 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 6
Content-Encoding: gzip

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 17:28:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

anonfiles.com/css/anonfiles.css?1663356951

45.154.253.151

200 OK

25 kB

URL HTTP/1.1
anonfiles.com/css/anonfiles.css?1663356951
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (65452)
Size
25 kB (25261 bytes)
Hash
bf84dfe5f6e6044aa4c1095a7a9a850e
e411fe5ea4f2b5ce7382dfe3079589f4817ad165
2af9a43ff27bbcad03007d87fa7d09bed286aa594a3a3d2e16f409319e782f60

HTTP Headers

GET /css/anonfiles.css?1663356951 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2321
Content-Encoding: gzip

anonfiles.com/sw_anonfiles.js

45.154.253.151

200 OK

16 kB

URL HTTP/1.1
anonfiles.com/sw_anonfiles.js
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (25712)
Size
16 kB (15666 bytes)
Hash
5e03f95322bfd924a10943354a145be8
149a1d27b2169791e547a074c3d40b279319d35b
27217ff2c97023ff148125e47bcc97af3fbc6307336f8b67689da13ffb14acaf

HTTP Headers

GET /sw_anonfiles.js HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 52314
Content-Encoding: gzip

vjs.zencdn.net/7.3.0/video-js.min.css

151.101.86.217

200 OK

9.7 kB

URL HTTP/2
vjs.zencdn.net/7.3.0/video-js.min.css
IP
151.101.86.217:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (35998), with no line terminators
Size
9.7 kB (9673 bytes)
Hash
3397ce943db8add2728dccd9a3b8b8bc
a57bbb7546a458fe57d72d06baab950125260cc9
5779043d07e39f23d64752c34c3113055eaaadf57fcd02f366cb028485e626ba

HTTP Headers

GET /7.3.0/video-js.min.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
last-modified: Fri, 26 Oct 2018 18:06:27 GMT
etag: "895e6b29db41953ef6197815c6be59d3"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Sun, 25 Sep 2022 17:28:49 GMT
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 161
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 9673
X-Firefox-Spdy: h2

anonfiles.com/js/app.js?1663356951

45.154.253.151

200 OK

58 kB

URL HTTP/1.1
anonfiles.com/js/app.js?1663356951
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (63238)
Size
58 kB (57886 bytes)
Hash
ba67ff13fd07739a7037fbc27b2a1955
3e253f69b2f12659c541de122c6bce0ed82ba369
1cb363c41be4b3558b7b97b28bb7620cf532033c8a7a0035020831c104aaf818

HTTP Headers

GET /js/app.js?1663356951 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 750
Content-Encoding: gzip

anonfiles.com/img/flags/24/se.png

45.154.253.151

200 OK

581 B

URL HTTP/1.1
anonfiles.com/img/flags/24/se.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
581 B (581 bytes)
Hash
c9b1e40987c4411b4a7d13c07a8843aa
cfce93be3ba77e4e30033d25e2e5c6a37da1b27d
8c04b3b52d605637bb4c6a26449c45e5320a3f33f14e8c737ce599433bc19f14

HTTP Headers

GET /img/flags/24/se.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 581
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4348
accept-ranges: bytes

anonfiles.com/img/flags/24/es.png

45.154.253.151

200 OK

666 B

URL HTTP/1.1
anonfiles.com/img/flags/24/es.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
666 B (666 bytes)
Hash
5fa381a8eb16d9e673d32980e7fd1710
fc29fbbebe97109ef1d16a0d4a65637d6b725ac8
7b6f223153c8eda1b541326f9cd66aeb53a28801c58c4de751fd2f9f6f1d96ff

HTTP Headers

GET /img/flags/24/es.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 666
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 607
accept-ranges: bytes

anonfiles.com/img/flags/24/de.png

45.154.253.151

200 OK

483 B

URL HTTP/1.1
anonfiles.com/img/flags/24/de.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
483 B (483 bytes)
Hash
9f8cc07c258bcd2de0c7900861e20ffc
fed97219e44693d4f3918fc4037b325732225d81
07cd5a4cad20604f77dced9c7d8a92ca9ae3321718e5a1935296e4d75f921a19

HTTP Headers

GET /img/flags/24/de.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 483
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2635
accept-ranges: bytes

anonfiles.com/img/flags/24/no.png

45.154.253.151

200 OK

611 B

URL HTTP/1.1
anonfiles.com/img/flags/24/no.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
611 B (611 bytes)
Hash
f14ac70aa6dd4d371671c0e6d7cba4e3
1139e3acd6e073bffb59157cbc10af72ed757218
9a4473862ea2b9bd1c5e1543900416e693b33516cae53fde32e1c3a83d3382e4

HTTP Headers

GET /img/flags/24/no.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 611
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 525
accept-ranges: bytes

vjs.zencdn.net/7.3.0/video.min.js

151.101.86.217

200 OK

132 kB

URL HTTP/2
vjs.zencdn.net/7.3.0/video.min.js
IP
151.101.86.217:0
ASN
#54113 FASTLY

File type
Unicode text, UTF-8 text, with very long lines (65141)
Size
132 kB (132230 bytes)
Hash
e296d874aca2a1550b409394be51efaa
c184c030e9aab3d03de27bc588919e249d5ccdf7
401c15b7916797f936e9d8443945ef22e0f93305655c057a92c8d9b80c327c9f

HTTP Headers

GET /7.3.0/video.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
last-modified: Fri, 26 Oct 2018 18:06:27 GMT
etag: "057f19acd50fc7e3ad917dd600889ee5"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Sun, 25 Sep 2022 17:28:49 GMT
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 2
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 132230
X-Firefox-Spdy: h2

anonfiles.com/img/flags/24/fi.png

45.154.253.151

200 OK

456 B

URL HTTP/1.1
anonfiles.com/img/flags/24/fi.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
456 B (456 bytes)
Hash
0ea9115d18d5210d4f1db520881faa3a
09829c2b7b5e4bae28d62b1dff90220f28c3bdf5
544fee9d1bff8bc83865ab87538924de207ebe4848787496c7308b91b539b6da

HTTP Headers

GET /img/flags/24/fi.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 456
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 1749
accept-ranges: bytes

anonfiles.com/img/flags/24/dk.png

45.154.253.151

200 OK

537 B

URL HTTP/1.1
anonfiles.com/img/flags/24/dk.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
537 B (537 bytes)
Hash
b6ebe55a7d176720cd2b1003298187a8
930858408b9af1f79c430bbe15c185db555a7815
07575cf7a8d7d2b8edfbea80f8e8a228ecc56a03a567bc60c0ef4dc6ac0f328a

HTTP Headers

GET /img/flags/24/dk.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 537
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4330
accept-ranges: bytes

anonfiles.com/img/flags/24/jp.png

45.154.253.151

200 OK

599 B

URL HTTP/1.1
anonfiles.com/img/flags/24/jp.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
599 B (599 bytes)
Hash
857f6f0e0886a3729b758b7241e42e61
a7be973a93c6ad51cf07a9f21a5dd72cc3e15680
8e7b1cd46120293756d1f21bac4de809d2895c7c26dc7586e3e2a09a0f7c1d64

HTTP Headers

GET /img/flags/24/jp.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 599
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 341
accept-ranges: bytes

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 25 Sep 2022 17:04:17 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 25 Sep 2022 17:17:03 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UINf9nUSFjFu2W_u9ncCAZKfifCrFD_Oa7MIxxvSpi2kwSneY9f_jQ==
Age: 1472

anonfiles.com/img/flags/24/br.png

45.154.253.151

200 OK

1.1 kB

URL HTTP/1.1
anonfiles.com/img/flags/24/br.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1115 bytes)
Hash
6a5938d2e7f7d6f4026d6eb1b4b4f2cd
7a038177fe4deec455d61d3e9c90019fa4727d40
0ab6c46e677fa7e49b6344fcde39c06ff6c014d9163571cdb36f8b5fc59c17eb

HTTP Headers

GET /img/flags/24/br.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 1115
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 496
accept-ranges: bytes

anonfiles.com/static/logo.png

45.154.253.151

200 OK

18 kB

URL HTTP/1.1
anonfiles.com/static/logo.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 450 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size
18 kB (18441 bytes)
Hash
f9fd716d30e220aa24bab0e94ebf0aa0
4af32d78655436173f272bb65159a232f1671b8d
5e937c4d8fd33714e43b400f238cf37630e6eaeefa105cca9d77760223a16e94

HTTP Headers

GET /static/logo.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 18441
Connection: keep-alive
last-modified: Thu, 13 Aug 2020 11:36:54 GMT
etag: "5f3525d6-4809"

anonfiles.com/img/flags/24/kr.png

45.154.253.151

200 OK

988 B

URL HTTP/1.1
anonfiles.com/img/flags/24/kr.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
988 B (988 bytes)
Hash
cb22f00511d088a71e84f8c1c864caed
6599812ed106bda6017487287e12bc836570649f
09a03e08c73db3d8fb50241f004b69d673ec8ea90a6ca7252d66ce821d0b6db1

HTTP Headers

GET /img/flags/24/kr.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 988
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 334
accept-ranges: bytes

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
edeaa8d3aef409f67571064f18c8c754
c577160cd143e8058f5e597a4d483a0f16fdd2ac
70d269083e913cdaddbe727d4e19e7985dc80cbd7487697e0293d3f336481f9f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70D269083E913CDADDBE727D4E19E7985DC80CBD7487697E0293D3F336481F9F"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8049
Expires: Sun, 25 Sep 2022 19:42:58 GMT
Date: Sun, 25 Sep 2022 17:28:49 GMT
Connection: keep-alive

anonfiles.com/img/flags/24/fr.png

45.154.253.151

200 OK

536 B

URL HTTP/1.1
anonfiles.com/img/flags/24/fr.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
536 B (536 bytes)
Hash
e81efecf1a1b1d3a17d00a904c5cc3c9
1203894dbfc8363302dc709d852c05a4dd8bf9dc
54df4beda3ad05d5c621511ff15b2882588ff457e36132035d5f21fb29f2a750

HTTP Headers

GET /img/flags/24/fr.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 536
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 355
accept-ranges: bytes

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fd3b36dc2b620b48de491a8d9ba00fc0
be67ba7db5215dcb7c9225876e35a5e0a5005c9e
28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4245
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 17:28:49 GMT
Last-Modified: Sun, 25 Sep 2022 16:18:04 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

anonfiles.com/img/flags/24/us.png

45.154.253.151

200 OK

656 B

URL HTTP/1.1
anonfiles.com/img/flags/24/us.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
656 B (656 bytes)
Hash
ae506a6c014bfeb8d8cbfdfbe94c14c9
f4e74440c4e79e71959b9b8f799f2e8a7e15b7ee
bc6dd978e70894c8a0148e6806f4fde9566ee59349adb03c02a61a3b2e25b6f1

HTTP Headers

GET /img/flags/24/us.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 656
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2223
accept-ranges: bytes

anonfiles.com/img/flags/24/ru.png

45.154.253.151

200 OK

403 B

URL HTTP/1.1
anonfiles.com/img/flags/24/ru.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
403 B (403 bytes)
Hash
d8df89b036e6afb48f72d2440831bad0
04abb4b29dae9c6f1ac0f1d8a507aabe26a3be35
2db4b55326c0ef7cd3caf53e835ae1f38629da1d1c2f5a127e0785165b16078c

HTTP Headers

GET /img/flags/24/ru.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 403
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 610
accept-ranges: bytes

djv99sxoqpv11.cloudfront.net/?xsvjd=737329

54.230.245.59

200 OK

69 kB

URL HTTP/2
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
IP
54.230.245.59:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (15945)
Size
69 kB (68566 bytes)
Hash
4ee5b2b8bb5c9f970a7be50bce6b1a84
0fb1a8b5e7fb7cab01080a3169918ff3e25da2a2
43f1a3513a3426d848309ea0dce395c867c17c43ca837f690fc56bf401636252

HTTP Headers

GET /?xsvjd=737329 HTTP/1.1
Host: djv99sxoqpv11.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-length: 68566
date: Sun, 25 Sep 2022 17:28:49 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VkzXDhO1pGMv-dPpEyy6-CQ5BKWaijatdHp5jcchcXG4bwPFuimu6Q==
X-Firefox-Spdy: h2

anonfiles.com/img/flags/24/pl.png

45.154.253.151

200 OK

347 B

URL HTTP/1.1
anonfiles.com/img/flags/24/pl.png
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
347 B (347 bytes)
Hash
baf3aff7caef0be58f29b41f20a0e4db
11c840dfa1f1bd22a04aa1fa53fcac95f381b9a6
0a3a8803b7a137166a04369522ec2b31513dcd4c07e2120107c55d9a7f7b646f

HTTP Headers

GET /img/flags/24/pl.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:49 GMT
Content-Type: image/png
Content-Length: 347
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 605
accept-ranges: bytes

e1.o.lencr.org/

23.36.76.226

200 OK

346 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
346 B (346 bytes)
Hash
a25c9ec4a454a066602b75cf5ada8100
d5dd928f487e691aaf7ea9d80178eeb150388f05
5d6745ce630b5637da657f690babf0da4284c6246c785f24dd64c2e2b47f1473

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "5D6745CE630B5637DA657F690BABF0DA4284C6246C785F24DD64C2E2B47F1473"
Last-Modified: Sun, 25 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7402
Expires: Sun, 25 Sep 2022 19:32:11 GMT
Date: Sun, 25 Sep 2022 17:28:49 GMT
Connection: keep-alive

anonfiles.com/sw_anonfiles.js?M2ZidWpoRFVGXQBUUVdGEUROV1xQBFMTUgMCTxRaAVFPQQgDAk9MXwtfT0BSBAJXTFMDUgYTUxFKQBdTAQQEEFhWS1VEDlBLVkZdUEtbTFpWS1pGXQYEUxZcBVMEEEgfRBECSB9EEQAGRw8MEglcA0wXH0kcQFlIAlZMQEgfAAMZGVZKBBQGQANOEwtfFQco

45.154.253.151

200 OK

16 kB

URL HTTP/1.1
anonfiles.com/sw_anonfiles.js?M2ZidWpoRFVGXQBUUVdGEUROV1xQBFMTUgMCTxRaAVFPQQgDAk9MXwtfT0BSBAJXTFMDUgYTUxFKQBdTAQQEEFhWS1VEDlBLVkZdUEtbTFpWS1pGXQYEUxZcBVMEEEgfRBECSB9EEQAGRw8MEglcA0wXH0kcQFlIAlZMQEgfAAMZGVZKBBQGQANOEwtfFQco
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
ASCII text, with very long lines (25712)
Size
16 kB (15666 bytes)
Hash
5e03f95322bfd924a10943354a145be8
149a1d27b2169791e547a074c3d40b279319d35b
27217ff2c97023ff148125e47bcc97af3fbc6307336f8b67689da13ffb14acaf

HTTP Headers

GET /sw_anonfiles.js?M2ZidWpoRFVGXQBUUVdGEUROV1xQBFMTUgMCTxRaAVFPQQgDAk9MXwtfT0BSBAJXTFMDUgYTUxFKQBdTAQQEEFhWS1VEDlBLVkZdUEtbTFpWS1pGXQYEUxZcBVMEEEgfRBECSB9EEQAGRw8MEglcA0wXH0kcQFlIAlZMQEgfAAMZGVZKBBQGQANOEwtfFQco HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:50 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 49932
Content-Encoding: gzip

push.services.mozilla.com/

35.162.203.49

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.162.203.49:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0It3EySiu+SgHtqO8ZKL0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EEAsHdCWBa/QeInCQh8KrX1zyc4=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6d25393cc0cc55649339afb3f5bf5666
4dad4f4227d8dffb51937ca29cebb65a1dc5f9ed
a7704ab52ccc88f53dd225d2535dd961122df5fd3331494e4b9e55109f175563

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A7704AB52CCC88F53DD225D2535DD961122DF5FD3331494E4B9E55109F175563"
Last-Modified: Fri, 23 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4629
Expires: Sun, 25 Sep 2022 18:45:59 GMT
Date: Sun, 25 Sep 2022 17:28:50 GMT
Connection: keep-alive

anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1663356888

45.154.253.151

200 OK

1.3 kB

URL HTTP/1.1
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1663356888
IP
45.154.253.151:0
ASN
#41634 Svea Hosting AB

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1309 bytes)
Hash
ee0e6dd4ef643128a1b7bd4ab32b8a79
8136c70aac1e50f8356c83f91fb77ea4b6596cbc
51f305558b4ed6fcf3a31b4f9e404fc2ea426cb5e785ac46ce827de0c5cabb4c

HTTP Headers

GET /img/favicon/favicon-32x32-anonfiles.png?1663356888 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/v2r4xbk3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 17:28:50 GMT
Content-Type: image/png
Content-Length: 1309
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2190
accept-ranges: bytes

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
dab3e5282ac0f1ca4b167bf147382439
746358bc1c029a5ddeb3f8679020f07109f9fbea
fd299b43eafa48b711fafa6509c1d7580681e2a11ded1c24678e76a9fcef555d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2293
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 17:28:50 GMT
Last-Modified: Sun, 25 Sep 2022 16:50:37 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

djv99sxoqpv11.cloudfront.net/GMEV0ckNTKhoUfEQsEE90A3JHQHoWLwcdLUB4DEMJBhYEQ3diBydUN0ohSUJlXCQaFX4WIBoRfgFjFRYhDXFSBjNfLkkKMlg2BQsuXiQdVDZReBkdOVkpGBNmAgNBXHMVd0RaOwF0UUEBFXdEHipeMAxXcQA9TEQcBnFRQQEVd0QANRV2NUt1HnVdV3EAIh-ERKF9gRjRxAHREQnIAdFFAc1YsBhclXz1RQAUJc1pCZUV4RkpzBXVDRHAAd0BDdAd2

54.230.245.59

200 OK

553 B

URL HTTP/2
djv99sxoqpv11.cloudfront.net/GMEV0ckNTKhoUfEQsEE90A3JHQHoWLwcdLUB4DEMJBhYEQ3diBydUN0ohSUJlXCQaFX4WIBoRfgFjFRYhDXFSBjNfLkkKMlg2BQsuXiQdVDZReBkdOVkpGBNmAgNBXHMVd0RaOwF0UUEBFXdEHipeMAxXcQA9TEQcBnFRQQEVd0QANRV2NUt1HnVdV3EAIh-ERKF9gRjRxAHREQnIAdFFAc1YsBhclXz1RQAUJc1pCZUV4RkpzBXVDRHAAd0BDdAd2
IP
54.230.245.59:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (775), with no line terminators
Size
553 B (553 bytes)
Hash
8a778b5ae9e47444d3bb8962cd0f840a
5acd7a87b7f0217b5fc1f95bb3ced95d801af712
1571ab55f6795d8d69426b79af575327b0cc582b0aa1fd24946c288c287019a6

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /GMEV0ckNTKhoUfEQsEE90A3JHQHoWLwcdLUB4DEMJBhYEQ3diBydUN0ohSUJlXCQaFX4WIBoRfgFjFRYhDXFSBjNfLkkKMlg2BQsuXiQdVDZReBkdOVkpGBNmAgNBXHMVd0RaOwF0UUEBFXdEHipeMAxXcQA9TEQcBnFRQQEVd0QANRV2NUt1HnVdV3EAIh-ERKF9gRjRxAHREQnIAdFFAc1YsBhclXz1RQAUJc1pCZUV4RkpzBXVDRHAAd0BDdAd2 HTTP/1.1
Host: djv99sxoqpv11.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtoomany.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 553
date: Sun, 25 Sep 2022 17:28:50 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NlNDOiwPi5ATLcLLep8n2vLr_zUZcZpLGzyKCLJBPLePnyDZViK-nQ==
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
267300d587831dda7559c30c40cc614e
d7ff0b9754e61f5d4178eddb5e63c3390ab559c8
ec7aad1a3116ce8ef5258b49de87cf3456c8c4890206fa5d46c8e510ded80ac0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 17:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 382
Origin: https://anonfiles.com
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

djv99sxoqpv11.cloudfront.net/iczdSNkYQWDxQeQdeNgtxQABhBXZVXSFZKAMKBHt2EnE+AxcGej9iYAdNNgt2VVszWCFOETdYJU4GdFciEQpmEDMSCj9ZPBpbPldjQXFnGHZWBWIePkIGdwUEVgViWi8dQioTdENPagAZRQN3BQRWBWJEMFYEEw9wXQd7E3RDUDdVLRwSYHB0QwZiBndDBn-cEdhVeIFMgHE93BABKAXwGYAYKYA52RgdlAHVDBWYHcUQE

54.230.245.59

200 OK

251 B

URL HTTP/2
djv99sxoqpv11.cloudfront.net/iczdSNkYQWDxQeQdeNgtxQABhBXZVXSFZKAMKBHt2EnE+AxcGej9iYAdNNgt2VVszWCFOETdYJU4GdFciEQpmEDMSCj9ZPBpbPldjQXFnGHZWBWIePkIGdwUEVgViWi8dQioTdENPagAZRQN3BQRWBWJEMFYEEw9wXQd7E3RDUDdVLRwSYHB0QwZiBndDBn-cEdhVeIFMgHE93BABKAXwGYAYKYA52RgdlAHVDBWYHcUQE
IP
54.230.245.59:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
251 B (251 bytes)
Hash
15da5e2a7b1775507b159a244d92011b
1eccc36f062dd53a6a1c9ba4bac5c60a476ab7d0
d297a6b3c23034e618761c6b0820524d84cd30d62e4c8eb632367b64c868fed4

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /iczdSNkYQWDxQeQdeNgtxQABhBXZVXSFZKAMKBHt2EnE+AxcGej9iYAdNNgt2VVszWCFOETdYJU4GdFciEQpmEDMSCj9ZPBpbPldjQXFnGHZWBWIePkIGdwUEVgViWi8dQioTdENPagAZRQN3BQRWBWJEMFYEEw9wXQd7E3RDUDdVLRwSYHB0QwZiBndDBn-cEdhVeIFMgHE93BABKAXwGYAYKYA52RgdlAHVDBWYHcUQE HTTP/1.1
Host: djv99sxoqpv11.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtoomany.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 251
date: Sun, 25 Sep 2022 17:28:50 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VmpD1fg8r6pFGS9tOzpsXij6LoNJwmxZKNXmQghVkG1Sudfr80Fznw==
X-Firefox-Spdy: h2

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonfiles.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://anonfiles.com
Content-Length: 351
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonfiles.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://anonfiles.com
Content-Length: 347
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

sultingcoe.buzz/

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonfiles.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://anonfiles.com
Content-Length: 354
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10967
Expires: Sun, 25 Sep 2022 20:31:38 GMT
Date: Sun, 25 Sep 2022 17:28:51 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10967
Expires: Sun, 25 Sep 2022 20:31:38 GMT
Date: Sun, 25 Sep 2022 17:28:51 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10967
Expires: Sun, 25 Sep 2022 20:31:38 GMT
Date: Sun, 25 Sep 2022 17:28:51 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10967
Expires: Sun, 25 Sep 2022 20:31:38 GMT
Date: Sun, 25 Sep 2022 17:28:51 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Size
13 kB (12826 bytes)
Hash
b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rN_8rm10Pxb0AUKW6ECfNulcYxBaS7FgGD15gT14dX-FlsGJfqahxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:19 GMT
age: 71492
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (7977 bytes)
Hash
4b247d936b6e75a5075e09d9d2f7c3b1
7d3650b77b7f501d2f94592b8a4c0e02a75feb70
165d5ef729be431744228c7f1791141536db476811a3e9c7ab5958c6e38a781a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7977
x-amzn-requestid: 6d6cbdf9-91f4-4fb5-8afe-cb8dea476e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EoFjtIAMFjcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7883-5681f08725a5ce7e36c27d75;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:07 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0H0AT4oKoQUzJWzgfJuK9M_bisrd4bhX6jVfbj3VZ5IPp8u2opEuOA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:39:25 GMT
etag: "7d3650b77b7f501d2f94592b8a4c0e02a75feb70"
content-type: image/jpeg
age: 71366
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10032 bytes)
Hash
aa150280eb113504d61a25935c0f0127
ed04f74fbb4c77b21e2babc51a82857f5e23d169
07df17fffb391aa82efb09e30d97e88fa4dbe6df00e37bb90304f69179f4848e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10032
x-amzn-requestid: 521c4012-9834-4100-a7ed-30093502f1a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPBHGYoAMFh-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-77b03c321240d76a572d603a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5CzA52-o7GYViSJ4lna7ptv9dycJCUL-NLWOk-iCW-ZxDU_FQH_OoQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:51:18 GMT
age: 70653
etag: "ed04f74fbb4c77b21e2babc51a82857f5e23d169"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa43fecfd-7ebd-4a19-85fe-29bd0f3c5033.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (9042 bytes)
Hash
ca8f8393365641de380e9443b37a8581
2fde9899cf74129d7df8868008b323a527dc1170
dbcc05dcbbbf4b89bf0f10999c0f5679e822cce6f9e3437f2cafb913606bd8c3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa43fecfd-7ebd-4a19-85fe-29bd0f3c5033.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9042
x-amzn-requestid: 8c2e6356-2b43-4162-94b9-efd45249047c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--PmHRtIAMFwaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7730-034b1944694141f04debec31;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k1hcUfebiQMb8IRsmeAOkyI02F1vUvh7J9GxgU4qO8Ebp3TQUC2fQQ==
via: 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 22:24:40 GMT
age: 68651
etag: "2fde9899cf74129d7df8868008b323a527dc1170"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b4f012b-e562-4fc6-aab8-ec2ffc328b6d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7757 bytes)
Hash
9d59e1bbd58ff8c5fe5faecb58149601
ad7f5ed3a5f6923a0b1bb093bbc0f31a44fd0bcd
c16a2adaeaabbe45801ab5d12ceaeab587b525b4959933f53a9c8dcdb12aec68

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b4f012b-e562-4fc6-aab8-ec2ffc328b6d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7757
x-amzn-requestid: 3092c81c-f703-403a-b718-e18f035f9464
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YpOJQFUWIAMF7Pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6326c3d4-565f665c7e34294079703141;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 07:08:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hc0cpj1kMbAQqcM0ooSgEdS8nPP0m4FJD1bHdY7jN2OENNsJF_gluA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 08:16:33 GMT
age: 33138
etag: "ad7f5ed3a5f6923a0b1bb093bbc0f31a44fd0bcd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0737a7ae-3ae7-4fe5-b739-e988b295c795.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8715 bytes)
Hash
a89e7161745036637a66e8ab5b7efdf9
79c83cc27996b2339bd63764dbb2ae9744db6d70
13b990c3c6a9bee6def25d007e14628c52e427b6f4c718895b1817d5e8e59760

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0737a7ae-3ae7-4fe5-b739-e988b295c795.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8715
x-amzn-requestid: d5e237f4-4c0e-4e3b-b3ae-ea1eb5b7cafc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y5JmTEAwIAMF_Mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632d22f4-48a975a866edc1755858600f;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 03:07:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Sm6N8Un8XKHtGGZwxLd1aYygBns1l8siRvcc2w_9V2imJopvt8Ockw==
via: 1.1 44cd593d82a2d200a94217033c614c6a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 07:09:15 GMT
age: 37176
etag: "79c83cc27996b2339bd63764dbb2ae9744db6d70"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1

107.22.28.167

200 OK

0 B

URL HTTP/2
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
IP
107.22.28.167:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1 HTTP/1.1
Host: baconaces.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"e105-2QWJ0NfcTgBNcqgE+WbWP6zofSI"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-credentials: true
X-Firefox-Spdy: h2

sultingcoe.buzz/M2ZidWpoRFVGXQBUUVdGEUROV1xQBFMTUgMCTxRaAVFPQQgDAk9MXwtfT0BSBAJXTFMDUgYTUxFKQBdTAQQEEFhWS1VEDlBLVkZdUEtbTFpWS1pGXQYEUxZcBVMEEEgfRBECSB9EEQAGRw8MEglcA0wXH0kcQFlIAlZMQEgfAAMZGVZKBBQGQANOEwtfFQco

44.195.137.121

200 OK

0 B

URL HTTP/2
sultingcoe.buzz/M2ZidWpoRFVGXQBUUVdGEUROV1xQBFMTUgMCTxRaAVFPQQgDAk9MXwtfT0BSBAJXTFMDUgYTUxFKQBdTAQQEEFhWS1VEDlBLVkZdUEtbTFpWS1pGXQYEUxZcBVMEEEgfRBECSB9EEQAGRw8MEglcA0wXH0kcQFlIAlZMQEgfAAMZGVZKBBQGQANOEwtfFQco
IP
44.195.137.121:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /M2ZidWpoRFVGXQBUUVdGEUROV1xQBFMTUgMCTxRaAVFPQQgDAk9MXwtfT0BSBAJXTFMDUgYTUxFKQBdTAQQEEFhWS1VEDlBLVkZdUEtbTFpWS1pGXQYEUxZcBVMEEEgfRBECSB9EEQAGRw8MEglcA0wXH0kcQFlIAlZMQEgfAAMZGVZKBBQGQANOEwtfFQco HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 58566a416dbddde48ed2bfba8cae6c82=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8445-RrBKEiWaiNVfaHt5cn+lR/wo3jI"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP