urlquery - report: mybodymoncorps.afterlivre.com/amazon-livres-best-sellers.html

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
mybodymoncorps.afterlivre.com (1)	0	No data	No data	78.41.204.33	Unknown ranking
main.exdynsrv.com (1)	91821	2017-01-30 11:01:34 UTC	2022-11-30 21:22:00 UTC	95.211.229.248
twistconcept.com (1)	0	No data	No data	104.21.86.46	Unknown ranking
ocsp.sca1b.amazontrust.com (1)	1015	2017-03-03 15:20:51 UTC	2019-03-27 04:05:54 UTC	143.204.42.158
r3.o.lencr.org (7)	344	2020-12-02 08:52:13 UTC	2022-11-30 17:12:16 UTC	23.33.119.27
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-30 17:13:24 UTC	34.117.237.239
img-getpocket.cdn.mozilla.net (8)	1631	2017-09-01 03:40:57 UTC	2022-11-30 17:26:07 UTC	34.120.237.76
supanimegames.com (3)	0	No data	No data	188.114.97.1	Unknown ranking
click-v4.expmdiadi.com (1)	0	2022-07-04 08:55:48 UTC	2022-11-30 19:47:20 UTC	198.134.116.17	Unknown ranking
main.realsrv.com (1)	91110	2019-02-11 13:11:59 UTC	2022-11-30 21:22:00 UTC	95.211.229.247
e1.o.lencr.org (2)	6159	2021-08-20 07:36:30 UTC	2022-11-30 17:37:57 UTC	95.101.11.115
mc.yandex.ru (3)	2672	2017-01-29 05:34:36 UTC	2022-11-30 18:58:07 UTC	87.250.250.119
ocsp.globalsign.com (1)	2075	2012-05-25 06:20:55 UTC	2022-11-30 17:14:19 UTC	104.18.21.226
simplewebanalysis.com (1)	0	2022-02-25 04:06:25 UTC	2022-11-30 17:25:03 UTC	18.185.190.54	Unknown ranking
professionalswebcheck.com (1)	0	No data	No data	18.185.190.54	Unknown ranking
ocsp.digicert.com (4)	86	2012-05-21 07:02:23 UTC	2022-11-30 20:24:46 UTC	93.184.220.29
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-30 17:12:31 UTC	34.102.187.140
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-11-30 17:19:42 UTC	34.160.144.191
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-11-30 17:12:17 UTC	54.203.75.56
gracelessbrief.com (2)	0	No data	No data	192.243.61.227	Unknown ranking
ln.gamesrevenue.com (1)	117740	No data	No data	5.161.79.44

Scan Date	Severity	Indicator	Comment
2022-12-01	2	mybodymoncorps.afterlivre.com/amazon-livres-best-sellers.html	Phishing

Date	UQ / IDS / BL	URL	IP
2023-01-15 02:41:10 +0000	0 - 2 - 0	w.zhzy999.net/images/m.exe	78.41.204.33
2023-01-05 03:23:39 +0000	0 - 2 - 3	blog.afterlivre.com/amazon-livres-italiens.html	78.41.204.33
2022-12-01 02:19:02 +0000	0 - 0 - 1	lesmeilleursmomentsdusport.afterlivre.com/liv (...)	78.41.204.33
2022-12-01 01:29:30 +0000	0 - 0 - 2	blog.afterlivre.com/livre-de-francais-3eme-an (...)	78.41.204.33
2022-12-01 01:18:39 +0000	0 - 0 - 1	mybodymoncorps.afterlivre.com/amazon-livres-b (...)	78.41.204.33

Date	UQ / IDS / BL	URL	IP
2023-02-03 12:56:06 +0000	0 - 1 - 5	util4u.com/ctrl/getid.php?prog=executable.exe	78.41.204.30
2023-02-03 12:54:10 +0000	0 - 1 - 5	util4u.com/ctrl/getid.php?prog=0071b2d052ecf8 (...)	78.41.204.30
2023-02-02 07:55:51 +0000	0 - 0 - 1	kryptrks.com/click.php?project_id=a0b729fa5f& (...)	193.34.166.202
2023-02-01 12:48:49 +0000	0 - 0 - 1	monchatauquotidien.afterlivre.com/livre-pour- (...)	78.41.204.26
2023-01-31 23:27:00 +0000	0 - 0 - 5	inytuit.com/	78.41.204.37

Date	UQ / IDS / BL	URL	IP
2023-02-01 12:48:49 +0000	0 - 0 - 1	monchatauquotidien.afterlivre.com/livre-pour- (...)	78.41.204.26
2023-01-05 03:23:39 +0000	0 - 2 - 3	blog.afterlivre.com/amazon-livres-italiens.html	78.41.204.33
2023-01-05 02:34:03 +0000	0 - 2 - 35	blog.afterlivre.com/livre-francais-histoire-v (...)	78.41.204.28
2023-01-05 02:33:59 +0000	0 - 0 - 1	monchatauquotidien.afterlivre.com/livre-de-fr (...)	78.41.204.28
2023-01-05 01:35:57 +0000	0 - 3 - 1	mybodymoncorps.afterlivre.com/livre-francais- (...)	78.41.204.28

Date	UQ / IDS / BL	URL	IP
2023-01-15 21:33:34 +0000	0 - 0 - 6	www.emurom.net/es/emulacion/nintendo-roms/det (...)	51.15.62.143
2023-01-15 20:52:02 +0000	0 - 0 - 15	kyliehill7.blogspot.com/2022/09/sekaran-and-b (...)	142.250.74.161
2023-01-07 06:23:40 +0000	0 - 0 - 1	supanimegames.com/common/tr/ce/land_ce_300520 (...)	104.21.31.221
2022-12-09 04:48:54 +0000	0 - 0 - 25	elaina.bloggplatsen.seelaina.bloggplatsen.se/	188.126.64.122
2022-12-03 18:51:04 +0000	0 - 0 - 3	2tty.584ce.wh.wy5532.com/	37.48.65.152

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7232 Expires: Thu, 01 Dec 2022 03:18:59 GMT Date: Thu, 01 Dec 2022 01:18:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a5daf4dc99951793ae2315d4795e8146 Sha1: 4427507ca4d3a5632cc8f598afbc85e2195d00bd Sha256: 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2804 Cache-Control: max-age=122376 Date: Thu, 01 Dec 2022 01:18:27 GMT Etag: "638730f7-1d7" Expires: Fri, 02 Dec 2022 11:18:03 GMT Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT Server: ECS (ska/F6FC) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: f3cf023c797da81728c0ac84c8759331 Sha1: fa07c5e39e4b0741ea484101cccb2202acea9d9c Sha256: 5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 01 Dec 2022 00:19:45 GMT cache-control: public,max-age=3600 age: 3522 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9178 Expires: Thu, 01 Dec 2022 03:51:25 GMT Date: Thu, 01 Dec 2022 01:18:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6d9d34c96b9a826ae5676640c966469c Sha1: 8052a16d41a637e420478b7de1ff5a2dc951fccd Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: fUo0Y6Lv6xVC+mBj40kGW0/V8VMDV/8jOuz/+iZcAtL2AwDdw/OFZyPbUrxQm1Dnnh6bz+gqjGU= x-amz-request-id: 0ZZ07F6FP8A6CWXJ content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 01 Dec 2022 00:45:27 GMT age: 1980 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Thu, 01 Dec 2022 01:18:27 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /amazon-livres-best-sellers.html HTTP/1.1 Host: mybodymoncorps.afterlivre.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: mybodymoncorps.afterlivre.com/amazon-livres-best-seller (...) FQDN: mybodymoncorps.afterlivre.com IP: 78.41.204.33 HASH: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47 78.41.204.33 HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate connection: close content-length: 11 date: Thu, 01 Dec 2022 01:18:27 GMT location: http://click-v4.expmdiadi.com/click?i=MiYWfW0jWLw_0 server: nginx set-cookie: sid=0f30bc56-7116-11ed-b578-096a4b672456; path=/; domain=.afterlivre.com; expires=Tue, 19 Dec 2090 04:32:35 GMT; max-age=2147483647; HttpOnly --- Additional Info --- Magic: ASCII text, with no line terminators Size: 11 Md5: 32682312d17c7cbf18e73594f5570319 Sha1: 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47 Alerts: Blocklists: - fortinet: Phishing
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 01 Dec 2022 01:11:15 GMT cache-control: public,max-age=3600 age: 433 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /click?i=MiYWfW0jWLw_0 HTTP/1.1 Host: click-v4.expmdiadi.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: click-v4.expmdiadi.com/click?i=MiYWfW0jWLw_0 FQDN: click-v4.expmdiadi.com IP: 198.134.116.17 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.134.116.17 HTTP/1.1 302 Found Cache-Control: no-store Content-Length: 0 Age: 0 Connection: keep-alive Location: https://gracelessbrief.com/twh5yffg?key=131c3c32be0edd4d7fb964bdde74c4d2&psid=afterlivre.com Pragma: no-cache --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2809 Cache-Control: max-age=117312 Date: Thu, 01 Dec 2022 01:18:28 GMT Etag: "63871d2b-1d7" Expires: Fri, 02 Dec 2022 09:53:40 GMT Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT Server: ECS (ska/F6FC) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: cfdd00e67ee6ca21712b867eb5288ab6 Sha1: b61d5d6ec3b7ad71619e13e32c87f2d01871b88a Sha256: f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: cp6tBeKRS/0Ke1v0Y7zZqA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.203.75.56 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.203.75.56 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: EsOwVHrIsOMfkrstV+vWnW1OhbY= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: d5bdf69b5057c189a64d96b7198082b7a868ef7033abfb29f6c384caa5f2b3c8 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D5BDF69B5057C189A64D96B7198082B7A868EF7033ABFB29F6C384CAA5F2B3C8" Last-Modified: Tue, 29 Nov 2022 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=1710 Expires: Thu, 01 Dec 2022 01:46:59 GMT Date: Thu, 01 Dec 2022 01:18:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c493f00e555ef0bf3d899d4ccd3d083b Sha1: 0294f1f011d9f503d1dd3bbaa19a11b4e05b4e07 Sha256: d5bdf69b5057c189a64d96b7198082b7a868ef7033abfb29f6c384caa5f2b3c8
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13062 Expires: Thu, 01 Dec 2022 04:56:11 GMT Date: Thu, 01 Dec 2022 01:18:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13062 Expires: Thu, 01 Dec 2022 04:56:11 GMT Date: Thu, 01 Dec 2022 01:18:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13062 Expires: Thu, 01 Dec 2022 04:56:11 GMT Date: Thu, 01 Dec 2022 01:18:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8740 x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cP7uyE9CoAMF6Xg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 18:58:06 GMT age: 22823 etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8740 Md5: 26d6dffbf400da4803a2e76e2a8ef2f8 Sha1: 2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8 Sha256: 04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabcce497-e838-40ff-ab98-af5f631b766f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d5701207a8b6b358359ebfd85a6916af7a3abf79acba235bf7d4131b0bc2e9b5 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 2382 x-amzn-requestid: 7279ff68-1e32-4c57-9b9d-f5803a19e8e9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cJYQuEmEIAMFkeg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63806d9e-2cf28dc150b53b9f3c60bb4c;Sampled=0 x-amzn-remapped-date: Fri, 25 Nov 2022 07:24:14 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: UaUyc03Gw0P7G_7gjAyp-c3XxjIDbllO7lmG_8UWVCuBP4WgEgSydQ== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 14:26:41 GMT age: 39108 etag: "b3eaec75f854d22cd1dcd6aa42e37f6d0df50036" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 2382 Md5: f5469e846da1e0f21cfc480f56a656a6 Sha1: b3eaec75f854d22cd1dcd6aa42e37f6d0df50036 Sha256: d5701207a8b6b358359ebfd85a6916af7a3abf79acba235bf7d4131b0bc2e9b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7609 x-amzn-requestid: 1a464872-7c15-42d3-a12a-f344adf99662 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cV91PHVUoAMFf4Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63857687-3f77f387752222b212d6e2a5;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: XUcf5sxPRTQEOS_HWPDW5ioStuq1TPMKvKQSRi2kZI5TbTWEVKFfog== via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 03:42:48 GMT age: 77741 etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7609 Md5: 0d0219e6bee2a28f003f396f872eecf0 Sha1: b3d22d146c6094cb539de40a72b9c5a140802ee5 Sha256: 41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1fe6f5b-2658-4434-b276-36d841c8ceee.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 8a40883d87b1e2c6e116e3cf881a8b39c987200a8556b651f78a376b3ddbaa26 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8124 x-amzn-requestid: e000c0d5-82d0-41a8-8def-b36970226969 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cb0UqEd1oAMFakQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6387cdb7-27efd8c92b8f6e4f257cec3b;Sampled=0 x-amzn-remapped-date: Wed, 30 Nov 2022 21:40:07 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 1GIxjB2nXfoxuqJHLtkXl4OJT_Po5DJA_w26E2K8WOmm_PZw1qU3IQ== via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 22:19:35 GMT etag: "ec0fd74a981603e197df26c6fb79ef039f737557" age: 10734 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8124 Md5: 42c762f71487f8e0285dd2129700f069 Sha1: ec0fd74a981603e197df26c6fb79ef039f737557 Sha256: 8a40883d87b1e2c6e116e3cf881a8b39c987200a8556b651f78a376b3ddbaa26
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7837c610-4f38-4ecd-b984-5752ff89a1f8.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: c90c80dd5cadbde3fef20a9c4561b1efa47401e5f6bdf64c91246553c50204f0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7957 x-amzn-requestid: 54f43d6b-cf41-4067-b459-6b8d98869354 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cV91PGgNIAMF2Xg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63857687-069ac54c22797a511c69a220;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 5et72pBhP9fdm4fNy6V5AJjs7B5N3HUGgaToNJV3LbA59D-0QDAMvw== via: 1.1 6c90b631453c435bd0022caa657b67e8.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 03:31:51 GMT age: 78398 etag: "01a07f9a5725f608fafeced7b3d1ebdbcb776c29" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7957 Md5: 37004182402c955f288eb1fa8df7aef4 Sha1: 01a07f9a5725f608fafeced7b3d1ebdbcb776c29 Sha256: c90c80dd5cadbde3fef20a9c4561b1efa47401e5f6bdf64c91246553c50204f0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9e3a9eb-bc9d-4e50-8738-e978a333d2ae.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a05bb542d7c711b71a7a9a857130acf888a6400f4eb32ff5df1a506a3f8591ce 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4542 x-amzn-requestid: 254467ba-82aa-4964-9e3b-04b2d79a43d5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cJWiqEQhIAMFnJw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63806add-2ad86b6031c6984c43f2741d;Sampled=0 x-amzn-remapped-date: Fri, 25 Nov 2022 07:12:29 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 2J8Dkm4nUOgJfxXf1aXt3_z-mOmxeksWf0TbTp9mQXOjI1skSW7XJg== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 02:00:33 GMT age: 83876 etag: "ce0321a9b4ea6b56f8d768796a16f26520654b50" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4542 Md5: 80e7af4c2331ee27460e67d6d84f5740 Sha1: ce0321a9b4ea6b56f8d768796a16f26520654b50 Sha256: a05bb542d7c711b71a7a9a857130acf888a6400f4eb32ff5df1a506a3f8591ce
GET /twh5yffg?key=131c3c32be0edd4d7fb964bdde74c4d2&psid=afterlivre.com HTTP/1.1 Host: gracelessbrief.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: gracelessbrief.com/twh5yffg?key=131c3c32be0edd4d7fb964b (...) FQDN: gracelessbrief.com IP: 192.243.61.227 HASH: fb493d5cb0f5b30fb81d2469c45866f4f48b7ea904fd502276987398247004ba 192.243.61.227 HTTP/1.1 200 OK Content-Type: text/html Server: nginx/1.22.0 Date: Thu, 01 Dec 2022 01:18:29 GMT Transfer-Encoding: chunked Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Set-Cookie: u_pl=16719801; expires=Fri, 02 Dec 2022 01:18:29 GMT ain=eyJhbGciOiJIUzI1NiJ9.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.Z1BdqkSb_gddXRIgSUxAxKR9m-VYjORuuGAUggBdy1E; expires=Thu, 01 Dec 2022 01:19:29 GMT Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: c91bd0134c8fb1679ba18ed8862167f6 Strict-Transport-Security: max-age=0; includeSubdomains Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (325) Size: 2389 Md5: 130edf8e8189eefb7e5daff1531a6e4b Sha1: 18f8a94dcbeda6866aae4f5ab90b69cd71b660d0 Sha256: fb493d5cb0f5b30fb81d2469c45866f4f48b7ea904fd502276987398247004ba
GET /twh5yffg?pst=1669857569&rmtc=t&uuid=&pii=&in=false&key=131c3c32be0edd4d7fb964bdde74c4d2&shu=f14f95e9bb76ec41d2be6e42d3e54faac44176839807fafc60e1ad0c7c7b4731349dcef606dde9a2e6fa299d2e322dc5f067853e34b729ae0fd5f9f9259d46548dac3083d645687c2c8b41925e848272dbe5ae0b&fr=0&sw2=1280&sh2=939&sw3=1280&sh3=176&sw4=1280&sh4=939&sw5=1280&sh5=1024&sw6=1280&sh6=1024&sw7=1280&sh7=1002 HTTP/1.1 Host: gracelessbrief.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://gracelessbrief.com/twh5yffg?key=9ca601a9f47c735df76d5ca46fa26a66&submetric=16719801 Cookie: u_pl=16719801; ain=eyJhbGciOiJIUzI1NiJ9.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.Z1BdqkSb_gddXRIgSUxAxKR9m-VYjORuuGAUggBdy1E; cjs=t Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin	URL: gracelessbrief.com/twh5yffg?pst=1669857569&rmtc=t&uuid= (...) FQDN: gracelessbrief.com IP: 192.243.61.227 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 192.243.61.227 HTTP/1.1 302 Found Content-Type: text/html Server: nginx/1.22.0 Date: Thu, 01 Dec 2022 01:18:29 GMT Content-Length: 0 Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Location: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy&sub1=pu_remnant&sub2=16719801 Set-Cookie: iprca83ac91c9159665f2daa54c69978ffaa=2270707; expires=Fri, 02 Dec 2022 01:18:29 GMT pdhtkv=true; expires=Fri, 02 Dec 2022 01:18:29 GMT uncs=1; expires=Fri, 02 Dec 2022 01:18:29 GMT pdhtkv28=true; expires=Fri, 02 Dec 2022 01:18:29 GMT uncs28=1; expires=Fri, 02 Dec 2022 01:18:29 GMT Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 47120607d9d5dfd1aa8a571c6e0846cb Strict-Transport-Security: max-age=0; includeSubdomains --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: c89efc6e9247a2e0f7a1183916254e46327405d2fdca051be35929acb0ea89d5 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4559 Cache-Control: max-age=166570 Date: Thu, 01 Dec 2022 01:18:29 GMT Etag: "6387d6c0-117" Expires: Fri, 02 Dec 2022 23:34:39 GMT Last-Modified: Wed, 30 Nov 2022 22:18:40 GMT Server: ECS (amb/6B7D) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: 0c731782ac849adbdd81a0200077962c Sha1: 194f80c4fc6354b7543bb3637a4d5eca7850acd8 Sha256: c89efc6e9247a2e0f7a1183916254e46327405d2fdca051be35929acb0ea89d5
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: c89efc6e9247a2e0f7a1183916254e46327405d2fdca051be35929acb0ea89d5 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4560 Cache-Control: max-age=166570 Date: Thu, 01 Dec 2022 01:18:30 GMT Etag: "6387d6c0-117" Expires: Fri, 02 Dec 2022 23:34:40 GMT Last-Modified: Wed, 30 Nov 2022 22:18:40 GMT Server: ECS (ska/F6FC) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: 0c731782ac849adbdd81a0200077962c Sha1: 194f80c4fc6354b7543bb3637a4d5eca7850acd8 Sha256: c89efc6e9247a2e0f7a1183916254e46327405d2fdca051be35929acb0ea89d5
GET /common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy&sub1=pu_remnant&sub2=16719801 HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://gracelessbrief.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1 (...) FQDN: supanimegames.com IP: 188.114.97.1 HASH: 5a9234a45a4b28685ceac1c703679e131c5ba2acebce8c094c583d66efcefa42 188.114.97.1 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Thu, 01 Dec 2022 01:18:30 GMT cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3d%2FCeb8oEEwh57%2BNScXe%2BjR8goE%2FFtBRDCoRC2qEod%2Fa98%2BGpveaii8poOJ%2FYQVFs5FLOc%2BljcVBguNTpkDyjGNi4WFImt%2B%2B6%2BHjX6PU6FSwWXa3yEBhPAGFyFNu81v5AKa8Vw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 7727fd3ceaf00b31-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (568) Size: 5666 Md5: bc5d4832355accb93243f0694c7dba63 Sha1: 3e7cb7e7d34e7fa24b20544685b9aed13ddce07a Sha256: 5a9234a45a4b28685ceac1c703679e131c5ba2acebce8c094c583d66efcefa42
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: f64d6ad7d9ac11cc217326e80c482db1ada5ef9e7aca63da2e942ccc419d0263 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F64D6AD7D9AC11CC217326E80C482DB1ADA5EF9E7ACA63DA2E942CCC419D0263" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18278 Expires: Thu, 01 Dec 2022 06:23:08 GMT Date: Thu, 01 Dec 2022 01:18:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c569c3372daba294d5d6e060497439d1 Sha1: e46024e5e9ae5ac764c01b29ce5cd197e23bb549 Sha256: f64d6ad7d9ac11cc217326e80c482db1ada5ef9e7aca63da2e942ccc419d0263
GET /common/tr/ce/land_ce_300520_na_en/css/main.css HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/css (...) FQDN: supanimegames.com IP: 188.114.97.1 HASH: f3f6b19446effd7925d81ba2859dba81f23a341ece1865fda7774fdfaa25507d 188.114.97.1 HTTP/2 200 OK content-type: text/css date: Thu, 01 Dec 2022 01:18:30 GMT last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: W/"5f5657d7-99f" cache-control: max-age=14400 cf-cache-status: REVALIDATED report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2bQTOnoJqNFGQY0lxSBaHl8X5Ggi5dR5VhmKseOACm6Ad0kYOzD3ooQXE1TT3TNO8PgMT0vgCyNYZGpAVT0ktaqMz2lYvtf7HzDmGWEhMxGRstbaNT0FMZAAy%2Bt49DksWER1XA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7727fd3f1b670b31-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 246404 Md5: 797ec9662e41f7c3aa859dbfc583c80b Sha1: fd9011cd8050207d6b200decf1c77fbaa2de34ea Sha256: f3f6b19446effd7925d81ba2859dba81f23a341ece1865fda7774fdfaa25507d
GET /tag.php?goal=d463e4eafcfd7a2c779b390efdb813cf HTTP/1.1 Host: main.exdynsrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.exdynsrv.com/tag.php?goal=d463e4eafcfd7a2c779b390e (...) FQDN: main.exdynsrv.com IP: 95.211.229.248 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.248 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Thu, 01 Dec 2022 01:18:30 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A52911%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-11-30%22%3B%7D%7D; expires=Fri, 01 Dec 2023 01:18:30 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=d463e4eafcfd7a2c779b390efdb813cf HTTP/1.1 Host: main.realsrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.realsrv.com/tag.php?goal=d463e4eafcfd7a2c779b390ef (...) FQDN: main.realsrv.com IP: 95.211.229.247 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.247 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Thu, 01 Dec 2022 01:18:30 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A52911%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-11-30%22%3B%7D%7D; expires=Fri, 01 Dec 2023 01:18:30 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 95.101.11.115 HASH: 963a48bc4b5b4ef5a169d63b33d937f02bcaea95607d53a71645236e4a60c067 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 345 ETag: "963A48BC4B5B4EF5A169D63B33D937F02BCAEA95607D53A71645236E4A60C067" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6953 Expires: Thu, 01 Dec 2022 03:14:23 GMT Date: Thu, 01 Dec 2022 01:18:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 345 Md5: 89428f9552b1f1de5883d3d64ce844e3 Sha1: c91fd6a1fdf8e6c66b83daf1adc80b39624128ff Sha256: 963a48bc4b5b4ef5a169d63b33d937f02bcaea95607d53a71645236e4a60c067
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 95.101.11.115 HASH: 963a48bc4b5b4ef5a169d63b33d937f02bcaea95607d53a71645236e4a60c067 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 345 ETag: "963A48BC4B5B4EF5A169D63B33D937F02BCAEA95607D53A71645236E4A60C067" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6953 Expires: Thu, 01 Dec 2022 03:14:23 GMT Date: Thu, 01 Dec 2022 01:18:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 345 Md5: 89428f9552b1f1de5883d3d64ce844e3 Sha1: c91fd6a1fdf8e6c66b83daf1adc80b39624128ff Sha256: 963a48bc4b5b4ef5a169d63b33d937f02bcaea95607d53a71645236e4a60c067
GET /index.min.js?pk=42c6f09dc9e74035608496705631ef5d HTTP/1.1 Host: twistconcept.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: twistconcept.com/index.min.js?pk=42c6f09dc9e74035608496 (...) FQDN: twistconcept.com IP: 104.21.86.46 HASH: 32858f596974eee59048d2b0a177e95bbe00e274bdda4c9fe490bf19acec62fb 104.21.86.46 HTTP/2 200 OK content-type: application/javascript date: Thu, 01 Dec 2022 01:18:30 GMT last-modified: Thu, 07 Apr 2022 08:49:08 GMT etag: W/"624ea584-28c" cache-control: max-age=14400 cf-cache-status: HIT age: 1389 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hsRnGE%2BfOVvCKlVwUaGIRX6GsTzEzI4Gbi4SJXh9UYSWneTb%2BgKQqrSSospeuk5Oqkw6Bazt8dTlzHUBGwgQzKt%2BAjLsxn5mmnZEoEEqIHj8TGhmPtIxycmKyuEEXHXEx6C5"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7727fd42bcc6b509-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (651) Size: 377 Md5: 1bbd15594e64bd1a1e03ccdb99f28d3c Sha1: a779fb5853cf4e2923086aa5f3a47a614a76b453 Sha256: 32858f596974eee59048d2b0a177e95bbe00e274bdda4c9fe490bf19acec62fb
POST /gseccovsslca2018 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gseccovsslca2018 FQDN: ocsp.globalsign.com IP: 104.18.21.226 HASH: 0b6a3182e7b36523b4ba91f962fe1d8b354727c20eb47608a13da4a433f0b12d 104.18.21.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 01:18:30 GMT Content-Length: 938 Connection: keep-alive Expires: Sun, 04 Dec 2022 23:12:06 GMT ETag: "a68e9cd02f268b31f05ae2452df1280b26071561" Last-Modified: Wed, 30 Nov 2022 23:12:07 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 493 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7727fd4348a1fab8-OSL --- Additional Info --- Magic: data Size: 938 Md5: cae0818f79d3ab4b74a6db5d97b03971 Sha1: a68e9cd02f268b31f05ae2452df1280b26071561 Sha256: 0b6a3182e7b36523b4ba91f962fe1d8b354727c20eb47608a13da4a433f0b12d
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 143.204.42.158 HASH: 9794d926ccf993a8cd760c76077cf94f5b270633aff450e45934a5c8fd52d62d 143.204.42.158 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=133084 Date: Thu, 01 Dec 2022 01:18:30 GMT Etag: "63875b15-1d7" Expires: Fri, 02 Dec 2022 14:16:34 GMT Last-Modified: Wed, 30 Nov 2022 13:31:01 GMT Server: ECS (nyb/1D2E) X-Cache: Miss from cloudfront Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: ne-03YBpI8elFHJAh2SlCOTiaADLvaMuNJSOjb_MdpTj3eqS5tXUwA== Age: 2733 --- Additional Info --- Magic: data Size: 471 Md5: 819f953b0edd066d30cf5847c5564d3c Sha1: 12f3ea06c2a617db03caa556e37c1cb106d44f93 Sha256: 9794d926ccf993a8cd760c76077cf94f5b270633aff450e45934a5c8fd52d62d
GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: mc.yandex.ru/metrika/tag.js FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993 87.250.250.119 HTTP/2 200 OK content-type: application/javascript content-length: 73267 date: Thu, 01 Dec 2022 01:18:30 GMT access-control-allow-origin: * etag: "63875d46-11e33" expires: Thu, 01 Dec 2022 02:18:30 GMT last-modified: Wed, 30 Nov 2022 16:40:22 GMT cache-control: max-age=3600 content-encoding: br strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 (with BOM) text, with very long lines (587) Size: 73267 Md5: 1d79426653c3b55939eaec59a2ce8ef5 Sha1: c6db0314df7a4e5c08047f6306e0b79a1ad3bab2 Sha256: 2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993
GET /px.gif?akey=42c6f09dc9e74035608496705631ef5d HTTP/1.1 Host: simplewebanalysis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: simplewebanalysis.com/px.gif?akey=42c6f09dc9e7403560849 (...) FQDN: simplewebanalysis.com IP: 18.185.190.54 HASH: c8f9ae01217b519363312c79328c09f3f8bdfd0ffa6dc31eabc8e187d26049e4 18.185.190.54 HTTP/2 307 Temporary Redirect content-type: image/gif date: Thu, 01 Dec 2022 01:18:31 GMT content-length: 0 location: https://professionalswebcheck.com/dbs?uuid=e5bf9d02-e6ee-40ad-a3ab-5036e3e1132d&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoxLCJhY3VzIjoxLCJhY2kiOnsgIjM3IjoxNjY5ODU3NTExfSwiYWNjbCI6eyAiMjAsMSI6MTY2OTg1NzUxMX19.WcxBowBgwDPFOXqn3kZ0JQw7q2BpH5WrKwFk1Mhy4fw server: nginx/1.17.6 set-cookie: uid_id2=e5bf9d02-e6ee-40ad-a3ab-5036e3e1132d:1:1; expires=Sun, 28 Nov 2032 01:18:31 GMT; secure; SameSite=None ak=37,1669857511; expires=Wed, 01 Mar 2023 01:18:31 GMT; secure; SameSite=None acl=20,1,1669857511; expires=Wed, 01 Mar 2023 01:18:31 GMT; secure; SameSite=None expires: Thu, 01 Dec 2022 01:18:31 GMT cache-control: max-age=0, : no-cache X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 595 Md5: 61a9b14d1d29b8f32942bf18a0005ac8 Sha1: 479d22797e23fd17bd04e7da2fda3e9066042578 Sha256: c8f9ae01217b519363312c79328c09f3f8bdfd0ffa6dc31eabc8e187d26049e4
GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/metrika/advert.gif FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Thu, 01 Dec 2022 01:18:31 GMT access-control-allow-origin: * etag: "63875d46-2b" expires: Thu, 01 Dec 2022 02:18:31 GMT accept-ranges: bytes last-modified: Wed, 30 Nov 2022 16:40:22 GMT cache-control: max-age=3600 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: df3e567d6f16d040326c7a0ea29a4f41 Sha1: ea7df583983133b62712b5e73bffbcd45cc53736 Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/57021556?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1272%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1252359445181%3Ahid%3A661234194%3Az%3A0%3Ai%3A20221201011829%3Aet%3A1669857510%3Ac%3A1%3Arn%3A943155511%3Arqn%3A1%3Au%3A1669857510135049727%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A30%2C56%2C290%2C0%2C389%2C0%2C%2C496%2C1%2C%2C%2C%2C1266%3Ans%3A1669857508106%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669857510%3At%3AEmpire&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://supanimegames.com Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/57021556?wmode=7&page-url=https%3A%2 (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: ba0ada442ab5eda527bfd968fc2d243cfdd2409aec418094524d3ec92b886e47 87.250.250.119 HTTP/2 302 Found location: /watch/57021556/1?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1272%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1252359445181%3Ahid%3A661234194%3Az%3A0%3Ai%3A20221201011829%3Aet%3A1669857510%3Ac%3A1%3Arn%3A943155511%3Arqn%3A1%3Au%3A1669857510135049727%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A30%2C56%2C290%2C0%2C389%2C0%2C%2C496%2C1%2C%2C%2C%2C1266%3Ans%3A1669857508106%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669857510%3At%3AEmpire&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 date: Thu, 01 Dec 2022 01:18:31 GMT access-control-allow-origin: https://supanimegames.com set-cookie: yandexuid=1201383311669857511; Expires=Fri, 01-Dec-2023 01:18:31 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=1201383311669857511; Expires=Fri, 01-Dec-2023 01:18:31 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=1696265781669857511; Path=/; SameSite=None; Secure i=/Ph8t53a1Y2Y/ZdGvl4Jl4kL0Ab73nv1WXLhRgeQIdGF7Mi8np7ElxIvX+zYG/bRS5uil8TLd3vWiwfg+TJuZ4s5bjE=; Expires=Sun, 28-Nov-2032 01:18:13 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1701393511.yc.1669857511#1701393511.yrts.1669857511#1701393511.yrtsi.1669857511; Expires=Fri, 01-Dec-2023 01:18:31 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Thu, 01-Dec-2022 01:18:31 GMT last-modified: Thu, 01-Dec-2022 01:18:31 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (400), with no line terminators Size: 400 Md5: 317149672b535c72471fc1584ea3d30b Sha1: 15f3d7e3770389faa4062aa824e2e327227546ea Sha256: ba0ada442ab5eda527bfd968fc2d243cfdd2409aec418094524d3ec92b886e47
GET /dbs?uuid=e5bf9d02-e6ee-40ad-a3ab-5036e3e1132d&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoxLCJhY3VzIjoxLCJhY2kiOnsgIjM3IjoxNjY5ODU3NTExfSwiYWNjbCI6eyAiMjAsMSI6MTY2OTg1NzUxMX19.WcxBowBgwDPFOXqn3kZ0JQw7q2BpH5WrKwFk1Mhy4fw HTTP/1.1 Host: professionalswebcheck.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://supanimegames.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: professionalswebcheck.com/dbs?uuid=e5bf9d02-e6ee-40ad-a (...) FQDN: professionalswebcheck.com IP: 18.185.190.54 HASH: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c 18.185.190.54 HTTP/2 200 OK content-type: image/gif date: Thu, 01 Dec 2022 01:18:31 GMT content-length: 7 server: nginx/1.17.6 set-cookie: uid_id2=e5bf9d02-e6ee-40ad-a3ab-5036e3e1132d:1:1; expires=Sun, 28 Nov 2032 01:18:31 GMT; secure; SameSite=None ak=37,1669857511; expires=Wed, 01 Mar 2023 01:18:31 GMT; secure; SameSite=None acl=20,1,1669857511; expires=Wed, 01 Mar 2023 01:18:31 GMT; secure; SameSite=None expires: Thu, 01 Dec 2022 01:18:31 GMT cache-control: max-age=0, : no-cache X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 7 Md5: 132d6af1b46048b45cf86cdee7991d31 Sha1: eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9613 x-amzn-requestid: a46cc458-2e28-4ca7-b223-ba66256caef1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cTPfmEmKoAMFZvQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63845f96-7ecee5764c4a40e50e5b1f98;Sampled=0 x-amzn-remapped-date: Mon, 28 Nov 2022 07:13:26 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 6p5kV3OCTlaiLWEa9wyeRJOYoxPNZwLhXGIbEnymaufjKL246zfrhw== via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 06:20:48 GMT age: 68267 etag: "3628390c62642dcc375b28f58c9b48180c4abd73" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9613 Md5: b92721cbe24623f1713a5248d6a7c1b2 Sha1: 3628390c62642dcc375b28f58c9b48180c4abd73 Sha256: 37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58944430-2906-4564-bfb3-fcd58e0176cb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 749bb9e85eaf54cbc9e585cb4c717865a1b561bd5f674baf86328dc9cb28bf2c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4275 x-amzn-requestid: 837db7d2-328f-410a-9de3-563cd7414ec2 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cPcVxGZMoAMFvnA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6382da8b-4625cb717b07b22e7a66ded3;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 03:33:31 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: gf4U_uRbEr4XGr8cqOzjGlU86MpauwoDRPvn79lKV74R8kwcLt-dCg== via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 04:35:39 GMT age: 74577 etag: "e566d2d329c8da0b21a0085346c73a0a7d913ea8" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4275 Md5: d47ad663d972de9047b0c7aa53d858be Sha1: e566d2d329c8da0b21a0085346c73a0a7d913ea8 Sha256: 749bb9e85eaf54cbc9e585cb4c717865a1b561bd5f674baf86328dc9cb28bf2c
GET /common/tr/ce/land_ce_300520_na_en/libs/jq.js HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/lib (...) FQDN: supanimegames.com IP: 188.114.97.1 188.114.97.1 HTTP/2 200 OK content-type: application/javascript date: Thu, 01 Dec 2022 01:18:30 GMT last-modified: Thu, 15 Jul 2021 12:31:47 GMT etag: W/"60f02ab3-15851" cache-control: max-age=14400 cf-cache-status: REVALIDATED report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k9JKODVJY8tytw920XAqPlxiciQ1OYUVeaLhcjexD1Sn5fAVQ2bkcmUuGYNCf6W6wbqTFLw7iD%2FXm5%2BSjlbhxpIp3tb32QdEV6z7Ie1rTlWOZODfv9r8s4UREqPzmq8AGkOctQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7727fd3f2b690b31-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /px1.js HTTP/1.1 Host: ln.gamesrevenue.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ln.gamesrevenue.com/px1.js FQDN: ln.gamesrevenue.com IP: 5.161.79.44 5.161.79.44 HTTP/2 200 OK content-type: application/javascript server: nginx date: Thu, 01 Dec 2022 01:18:30 GMT last-modified: Fri, 21 Oct 2022 09:01:18 GMT etag: W/"63525fde-3a8c" content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 2804 

                                        
                                            
Cache-Control: max-age=122376 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:27 GMT 

                                        
                                            
Etag: "638730f7-1d7" 

                                        
                                            
Expires: Fri, 02 Dec 2022 11:18:03 GMT 

                                        
                                            
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT 

                                        
                                            
Server: ECS (ska/F6FC) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    f3cf023c797da81728c0ac84c8759331

                                                Sha1:   fa07c5e39e4b0741ea484101cccb2202acea9d9c

                                                Sha256: 5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9178 

                                        
                                            
Expires: Thu, 01 Dec 2022 03:51:25 GMT 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:27 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6d9d34c96b9a826ae5676640c966469c

                                                Sha1:   8052a16d41a637e420478b7de1ff5a2dc951fccd

                                                Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 01 Dec 2022 01:18:27 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 01:11:15 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 433 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 2809 

                                        
                                            
Cache-Control: max-age=117312 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:28 GMT 

                                        
                                            
Etag: "63871d2b-1d7" 

                                        
                                            
Expires: Fri, 02 Dec 2022 09:53:40 GMT 

                                        
                                            
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT 

                                        
                                            
Server: ECS (ska/F6FC) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    cfdd00e67ee6ca21712b867eb5288ab6

                                                Sha1:   b61d5d6ec3b7ad71619e13e32c87f2d01871b88a

                                                Sha256: f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D5BDF69B5057C189A64D96B7198082B7A868EF7033ABFB29F6C384CAA5F2B3C8" 

                                        
                                            
Last-Modified: Tue, 29 Nov 2022 07:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=1710 

                                        
                                            
Expires: Thu, 01 Dec 2022 01:46:59 GMT 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:29 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    c493f00e555ef0bf3d899d4ccd3d083b

                                                Sha1:   0294f1f011d9f503d1dd3bbaa19a11b4e05b4e07

                                                Sha256: d5bdf69b5057c189a64d96b7198082b7a868ef7033abfb29f6c384caa5f2b3c8

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13062 

                                        
                                            
Expires: Thu, 01 Dec 2022 04:56:11 GMT 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:29 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a97c452e75cf1d4833e777d7ba7f2c47

                                                Sha1:   58f15763fd33f742ce870f49f1c2dbed5b41205f

                                                Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8740 

                                        
                                            
x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cP7uyE9CoAMF6Xg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA== 

                                        
                                            
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 30 Nov 2022 18:58:06 GMT 

                                        
                                            
age: 22823 

                                        
                                            
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8740

                                                Md5:    26d6dffbf400da4803a2e76e2a8ef2f8

                                                Sha1:   2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8

                                                Sha256: 04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7609 

                                        
                                            
x-amzn-requestid: 1a464872-7c15-42d3-a12a-f344adf99662 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cV91PHVUoAMFf4Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63857687-3f77f387752222b212d6e2a5;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: XUcf5sxPRTQEOS_HWPDW5ioStuq1TPMKvKQSRi2kZI5TbTWEVKFfog== 

                                        
                                            
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 30 Nov 2022 03:42:48 GMT 

                                        
                                            
age: 77741 

                                        
                                            
etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7609

                                                Md5:    0d0219e6bee2a28f003f396f872eecf0

                                                Sha1:   b3d22d146c6094cb539de40a72b9c5a140802ee5

                                                Sha256: 41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7837c610-4f38-4ecd-b984-5752ff89a1f8.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7957 

                                        
                                            
x-amzn-requestid: 54f43d6b-cf41-4067-b459-6b8d98869354 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cV91PGgNIAMF2Xg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63857687-069ac54c22797a511c69a220;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: 5et72pBhP9fdm4fNy6V5AJjs7B5N3HUGgaToNJV3LbA59D-0QDAMvw== 

                                        
                                            
via: 1.1 6c90b631453c435bd0022caa657b67e8.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 30 Nov 2022 03:31:51 GMT 

                                        
                                            
age: 78398 

                                        
                                            
etag: "01a07f9a5725f608fafeced7b3d1ebdbcb776c29" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7957

                                                Md5:    37004182402c955f288eb1fa8df7aef4

                                                Sha1:   01a07f9a5725f608fafeced7b3d1ebdbcb776c29

                                                Sha256: c90c80dd5cadbde3fef20a9c4561b1efa47401e5f6bdf64c91246553c50204f0

                                        
                                            GET /twh5yffg?key=131c3c32be0edd4d7fb964bdde74c4d2&psid=afterlivre.com HTTP/1.1 

                                        
                                            
Host: gracelessbrief.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         192.243.61.227

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Server: nginx/1.22.0 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:29 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" 

                                        
                                            
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA 

                                        
                                            
Set-Cookie: u_pl=16719801; expires=Fri, 02 Dec 2022 01:18:29 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.Z1BdqkSb_gddXRIgSUxAxKR9m-VYjORuuGAUggBdy1E; expires=Thu, 01 Dec 2022 01:19:29 GMT 

                                        
                                            
Expires: Thu, 01 Jan 1970 00:00:01 GMT 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
X-Request-ID: c91bd0134c8fb1679ba18ed8862167f6 

                                        
                                            
Strict-Transport-Security: max-age=0; includeSubdomains 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (325)

                                                Size:   2389

                                                Md5:    130edf8e8189eefb7e5daff1531a6e4b

                                                Sha1:   18f8a94dcbeda6866aae4f5ab90b69cd71b660d0

                                                Sha256: fb493d5cb0f5b30fb81d2469c45866f4f48b7ea904fd502276987398247004ba

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 4559 

                                        
                                            
Cache-Control: max-age=166570 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:29 GMT 

                                        
                                            
Etag: "6387d6c0-117" 

                                        
                                            
Expires: Fri, 02 Dec 2022 23:34:39 GMT 

                                        
                                            
Last-Modified: Wed, 30 Nov 2022 22:18:40 GMT 

                                        
                                            
Server: ECS (amb/6B7D) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 279 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   279

                                                Md5:    0c731782ac849adbdd81a0200077962c

                                                Sha1:   194f80c4fc6354b7543bb3637a4d5eca7850acd8

                                                Sha256: c89efc6e9247a2e0f7a1183916254e46327405d2fdca051be35929acb0ea89d5

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy&sub1=pu_remnant&sub2=16719801 HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://gracelessbrief.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         188.114.97.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
date: Thu, 01 Dec 2022 01:18:30 GMT 

                                        
                                            
cf-cache-status: DYNAMIC 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3d%2FCeb8oEEwh57%2BNScXe%2BjR8goE%2FFtBRDCoRC2qEod%2Fa98%2BGpveaii8poOJ%2FYQVFs5FLOc%2BljcVBguNTpkDyjGNi4WFImt%2B%2B6%2BHjX6PU6FSwWXa3yEBhPAGFyFNu81v5AKa8Vw%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 7727fd3ceaf00b31-OSL 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (568)

                                                Size:   5666

                                                Md5:    bc5d4832355accb93243f0694c7dba63

                                                Sha1:   3e7cb7e7d34e7fa24b20544685b9aed13ddce07a

                                                Sha256: 5a9234a45a4b28685ceac1c703679e131c5ba2acebce8c094c583d66efcefa42

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/css/main.css HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5ODU3NTA5fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8MXxwc3ViPWFmdGVybGl2cmUuY29tfHNoPWYxNGY5NWU5YmI3NmVjNDFkMmJlNmU0MmQzZTU0ZmFhYzQ0MTc2ODM5ODA3ZmFmYzYwZTFhZDBjN2M3YjQ3MzEzNDlkY2VmNjA2ZGRlOWEyZTZmYTI5OWQyZTMyMmRjNWYwNjc4NTNlMzRiNzI5YWUwZmQ1ZjlmOTI1OWQ0NjU0OGRhYzMwODNkNjQ1Njg3YzJjOGI0MTkyNWU4NDgyNzJkYmU1YWUwYnxscz0zfG90dj1hfDAzYmY4MmRhYWZmMTkxMDVhNzcxMTNiY2EwODhiMGEy&sub1=pu_remnant&sub2=16719801 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         188.114.97.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
date: Thu, 01 Dec 2022 01:18:30 GMT 

                                        
                                            
last-modified: Mon, 07 Sep 2020 15:55:03 GMT 

                                        
                                            
etag: W/"5f5657d7-99f" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: REVALIDATED 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2bQTOnoJqNFGQY0lxSBaHl8X5Ggi5dR5VhmKseOACm6Ad0kYOzD3ooQXE1TT3TNO8PgMT0vgCyNYZGpAVT0ktaqMz2lYvtf7HzDmGWEhMxGRstbaNT0FMZAAy%2Bt49DksWER1XA%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 7727fd3f1b670b31-OSL 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with CRLF line terminators

                                                Size:   246404

                                                Md5:    797ec9662e41f7c3aa859dbfc583c80b

                                                Sha1:   fd9011cd8050207d6b200decf1c77fbaa2de34ea

                                                Sha256: f3f6b19446effd7925d81ba2859dba81f23a341ece1865fda7774fdfaa25507d

                                        
                                            GET /tag.php?goal=d463e4eafcfd7a2c779b390efdb813cf HTTP/1.1 

                                        
                                            
Host: main.realsrv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         95.211.229.247

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:30 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Set-Cookie: goals=a%3A1%3A%7Bi%3A52911%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-11-30%22%3B%7D%7D; expires=Fri, 01 Dec 2023 01:18:30 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none 

                                        
                                            
X-Robots-Tag: noindex, follow 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   20

                                                Md5:    a4745abc5e7fdb89cc6df3069f3c6e69

                                                Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed

                                                Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: e1.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 345 

                                        
                                            
ETag: "963A48BC4B5B4EF5A169D63B33D937F02BCAEA95607D53A71645236E4A60C067" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6953 

                                        
                                            
Expires: Thu, 01 Dec 2022 03:14:23 GMT 

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:30 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   345

                                                Md5:    89428f9552b1f1de5883d3d64ce844e3

                                                Sha1:   c91fd6a1fdf8e6c66b83daf1adc80b39624128ff

                                                Sha256: 963a48bc4b5b4ef5a169d63b33d937f02bcaea95607d53a71645236e4a60c067

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 79 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.21.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Thu, 01 Dec 2022 01:18:30 GMT 

                                        
                                            
Content-Length: 938 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Sun, 04 Dec 2022 23:12:06 GMT 

                                        
                                            
ETag: "a68e9cd02f268b31f05ae2452df1280b26071561" 

                                        
                                            
Last-Modified: Wed, 30 Nov 2022 23:12:07 GMT 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 493 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 7727fd4348a1fab8-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   938

                                                Md5:    cae0818f79d3ab4b74a6db5d97b03971

                                                Sha1:   a68e9cd02f268b31f05ae2452df1280b26071561

                                                Sha256: 0b6a3182e7b36523b4ba91f962fe1d8b354727c20eb47608a13da4a433f0b12d

                                        
                                            GET /metrika/tag.js HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         87.250.250.119

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
content-length: 73267 

                                        
                                            
date: Thu, 01 Dec 2022 01:18:30 GMT 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
etag: "63875d46-11e33" 

                                        
                                            
expires: Thu, 01 Dec 2022 02:18:30 GMT 

                                        
                                            
last-modified: Wed, 30 Nov 2022 16:40:22 GMT 

                                        
                                            
cache-control: max-age=3600 

                                        
                                            
content-encoding: br 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (587)

                                                Size:   73267

                                                Md5:    1d79426653c3b55939eaec59a2ce8ef5

                                                Sha1:   c6db0314df7a4e5c08047f6306e0b79a1ad3bab2

                                                Sha256: 2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993

                                        
                                            GET /metrika/advert.gif HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         87.250.250.119

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
content-length: 43 

                                        
                                            
date: Thu, 01 Dec 2022 01:18:31 GMT 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
etag: "63875d46-2b" 

                                        
                                            
expires: Thu, 01 Dec 2022 02:18:31 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
last-modified: Wed, 30 Nov 2022 16:40:22 GMT 

                                        
                                            
cache-control: max-age=3600 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   43

                                                Md5:    df3e567d6f16d040326c7a0ea29a4f41

                                                Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736

                                                Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

                                        
                                            GET /dbs?uuid=e5bf9d02-e6ee-40ad-a3ab-5036e3e1132d&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoxLCJhY3VzIjoxLCJhY2kiOnsgIjM3IjoxNjY5ODU3NTExfSwiYWNjbCI6eyAiMjAsMSI6MTY2OTg1NzUxMX19.WcxBowBgwDPFOXqn3kZ0JQw7q2BpH5WrKwFk1Mhy4fw HTTP/1.1 

                                        
                                            
Host: professionalswebcheck.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         18.185.190.54

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
date: Thu, 01 Dec 2022 01:18:31 GMT 

                                        
                                            
content-length: 7 

                                        
                                            
server: nginx/1.17.6 

                                        
                                            
set-cookie: uid_id2=e5bf9d02-e6ee-40ad-a3ab-5036e3e1132d:1:1; expires=Sun, 28 Nov 2032 01:18:31 GMT; secure; SameSite=None
ak=37,1669857511; expires=Wed, 01 Mar 2023 01:18:31 GMT; secure; SameSite=None
acl=20,1,1669857511; expires=Wed, 01 Mar 2023 01:18:31 GMT; secure; SameSite=None 

                                        
                                            
expires: Thu, 01 Dec 2022 01:18:31 GMT 

                                        
                                            
cache-control: max-age=0, : no-cache 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   7

                                                Md5:    132d6af1b46048b45cf86cdee7991d31

                                                Sha1:   eb7007d03d59b65bc6da7e098c4d38fc6dfb6285

                                                Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58944430-2906-4564-bfb3-fcd58e0176cb.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4275 

                                        
                                            
x-amzn-requestid: 837db7d2-328f-410a-9de3-563cd7414ec2 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cPcVxGZMoAMFvnA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6382da8b-4625cb717b07b22e7a66ded3;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 03:33:31 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: gf4U_uRbEr4XGr8cqOzjGlU86MpauwoDRPvn79lKV74R8kwcLt-dCg== 

                                        
                                            
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 30 Nov 2022 04:35:39 GMT 

                                        
                                            
age: 74577 

                                        
                                            
etag: "e566d2d329c8da0b21a0085346c73a0a7d913ea8" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4275

                                                Md5:    d47ad663d972de9047b0c7aa53d858be

                                                Sha1:   e566d2d329c8da0b21a0085346c73a0a7d913ea8

                                                Sha256: 749bb9e85eaf54cbc9e585cb4c717865a1b561bd5f674baf86328dc9cb28bf2c

                                        
                                            GET /px1.js HTTP/1.1 

                                        
                                            
Host: ln.gamesrevenue.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         5.161.79.44

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 01 Dec 2022 01:18:30 GMT 

                                        
                                            
last-modified: Fri, 21 Oct 2022 09:01:18 GMT 

                                        
                                            
etag: W/"63525fde-3a8c" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	mybodymoncorps.afterlivre.com/amazon-livres-best-sellers.html
IP	78.41.204.33 (Netherlands)
ASN	#62370 Snel.com B.V.
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-01 01:18:39 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (21)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 78.41.204.33

Last 5 reports on ASN: Snel.com B.V.

Last 5 reports on domain: afterlivre.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (44)

Overview

Domain Summary (21)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 78.41.204.33

Last 5 reports on ASN: Snel.com B.V.

Last 5 reports on domain: afterlivre.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (44)

Network Intrusion Detection Systems