Report - syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=

Report Overview

Submitted URL
syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=
IP
95.211.229.247
ASN
#60781 LeaseWeb Netherlands B.V.
Submitted
2022-12-12 13:24:07
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.9 kB	23.36.77.32
goplayhere.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	526 B	1.1 kB	104.21.7.171
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	36 kB	34.120.237.76
syndication.exdynsrv.com	34243	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	7.3 kB	95.211.229.246
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	95.101.11.115
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.0 kB	93.184.220.29
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	350 B	1.0 kB	54.230.245.110
syndication.exoclick.com	22750	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	427 B	437 B	95.211.229.247
twistconcept.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	715 B	104.21.86.46
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	44.228.207.167
simplewebanalysis.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	423 B	775 B	3.71.139.39
animeplaynow.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	8.8 kB	172.67.185.151
ln.gamesrevenue.com	117740	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	362 B	3.9 kB	5.161.79.44
professionalswebcheck.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	608 B	509 B	3.71.139.39

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-12	medium	simplewebanalysis.com/px.gif?akey=c73209e3a548f31485d4d93c096d1d6c	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	ln.gamesrevenue.com/px1.js	16 kB	2023-03-08	2023-03-13
Pretty URL ln.gamesrevenue.com/px1.js IP 5.161.79.44 ASN #213230 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:21:44 Last Seen2023-03-13 00:32:25 Times Seen1 Hash 16fceccc6bf8703c933322eacec7dca2 75bd13516b93a6d2608545729ac783c795cf8225 549d9052dd52c40ac7ffde033c2491e554261ba672be6b94e6e64964a7139a24 Loading...

	animeplaynow.com/awpx_click.js?v=005	1.5 kB	2023-03-07	2023-03-17
Pretty URL animeplaynow.com/awpx_click.js?v=005 IP 172.67.185.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17:18 Last Seen2023-03-17 12:45:45 Times Seen1 Hash 71288531bb78712be4b65c044e2719b8 37ad5fce2a2cdb6a4c16345c9003f3f7863b5ddb c3c7eb606fc5eea8b43b6153fa95545fed3cfc4b073d5a68322a56ac145520fd Loading...

	animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/scripts/main.js	292 B	2023-03-08	2024-04-19
Pretty URL animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/scripts/main.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:19:27 Last Seen2024-04-19 10:50:41 Times Seen13 Hash 7d34f846662d075cf9776018c9168a7e f3f5f181061268bb7e4bc326dbaec7f2c84d7857 adab57bc821cebfedc845c7b18ca9f55287eff4ef3a11f7f9dd5eda572418628 Loading...

	twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c	652 B	2023-03-08	2023-08-25
Pretty URL twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c IP 104.21.86.46 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:21:44 Last Seen2023-08-25 08:03:34 Times Seen61 Hash 01a127c75bfb3af3f7dadcfb76dea285 1574b0cc420485c73fa9262b11c18cc24c1105b3 dd4a94c7375b7ab6958904bdcb765f6900226be76e2068a68007bf5000968b13 Loading...

	syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=	840 B	2023-03-09	2023-03-09
Pretty URL syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY= IP 95.211.229.246 ASN #60781 LeaseWeb Netherlands B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 04:30:28 Last Seen2023-03-09 04:30:28 Times Seen1 Hash cd56f22d458ea67384a3f9123eaed35c 2df879bcbaaf82e18a58ba82fee06fe2cb2fb496 31709fb180b4c46d73ee022d8834de8494d2a12188358c2913ea84d154288a91 Loading...

	animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/libs/jquery.min.js	87 kB	2023-03-07	2024-04-26
Pretty URL animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/libs/jquery.min.js IP 172.67.185.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-26 11:32:14 Times Seen106339 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

HTTP Transactions (39)

URL IP Response Size

95.211.229.246

200 OK

564 B

URL HTTP/1.1
syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=
IP
95.211.229.246:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (834)
Size
564 B (564 bytes)
Hash
0f32e6eeec1f119c151b049d5c94e110
159e53ff9793cea20866af35afefc534933ddfb6
08ea4e83a5486f29d604bd6393b86b74f63166f05c5320ffdc325cd7ae7c2189

HTTP Headers

GET /splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY= HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 13:23:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263972b6bb41cd5.334637991642642616%22%3B%7D; expires=Wed, 11 Dec 2024 13:23:55 GMT; path=; domain=.exdynsrv.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8487
Expires: Mon, 12 Dec 2022 15:45:22 GMT
Date: Mon, 12 Dec 2022 13:23:55 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7407
Expires: Mon, 12 Dec 2022 15:27:22 GMT
Date: Mon, 12 Dec 2022 13:23:55 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 13:08:35 GMT
content-type: application/json
age: 921
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10296
Expires: Mon, 12 Dec 2022 16:15:32 GMT
Date: Mon, 12 Dec 2022 13:23:56 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: xOEZuzzGE7hdeNlGwEBNjd2Y0XUJPGUOcdY0JE6S53HpM+msnvw3MYnIB9WMEHBDaOFuB4COad0=
x-amz-request-id: 2NQ1BA9WF2B2DMY2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 12:51:30 GMT
age: 1946
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0

95.211.229.246

302 Found

0 B

URL HTTP/1.1
syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0
IP
95.211.229.246:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0 HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263972b6bb41cd5.334637991642642616%22%3B%7D
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 12 Dec 2022 13:23:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263972b6bb41cd5.334637991642642616%22%3B%7D; expires=Wed, 11 Dec 2024 13:23:56 GMT; path=; domain=.exdynsrv.com;
impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxamebscormgeimacslbecnxgxaaabssxamgeislsaroornxgxamebscormgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxamemllesegeiccmmlmlcnxgxameomroeegeialbsereanxgxamemlblaageioslmrxbrnxgxamermrablgeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxamebellmbgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameboaxalgeiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamemlblaageioslmrxbmnxgxamebxlmmsgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamemlblaageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamebellmbgeimcclsxmenxgxamebellmbgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamebellmbgeimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamebscormgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamebscormgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamebxlmxrgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameolxrmmgeimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxamemlcssogeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamemlblaageimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamebelccxgeimmccrlacnxgxamemacmmmgeimrblxeoenxgxamecrasabgeimmccrlaonxgxamebelccxgeimmccrbxenxgxamemsxoscgeimmccrlaenxgxamemsxoscgeimmccrbebnxgxamemxemcbgeiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimasbmxsenxgxamemambmrgxcceimmsoxrlcnxgxamemambbogxcceimmcmerrenxgxamemambbogxcceimrxmbacanxgxamemambblgxcceicloaecocnxgxamemamlrmgxcceimxlbmoconogxamemabsobgxcceimcssmlrensgxamemabsobgxcceimxlbmxbbnogxamembasoxgxcceimcssmlrcnsgxamembasoxgxcceimaoobbebnxgxamembmocmgxcceicloaxxmonxgxamembmocmgxcceialcaercenxgxamembbscxgxcceimxlbmosanogxamembbscxgxcceimcssmlronsgxamembbscxgxcceimmosssconsgxamembbscxgxcceimaslbmrcnxgxamembbcrmgxcceialblsceanxgxamembbcbrgxcceimeembescnxgxamemlemslgxcceimeembecenxgxamemlemslgxcceimxlbmxlcnogxamemlcssogxcceimxlbmxlonogxamemlcsssgxcceimxlbalsbnogxamemlcsssgxcceimcoaxmxcnrgxamemlcassgxcceimxlbmosenogxamemlcascgxcceimxeoxsacnrgxamemlcascgxcceicloaxxoanxgxamemlcbebgxcceicloaecoanxgxamemlcbelgxcceimmsoxrlonxgxamemlrcmlgxcceimemlxbocnxgxamemlbxemgxcceimxxerrxenxgxamemlbxemgxcceimxlbalcenogxamemlbxemgxcceixlsoalbcnxgxamemlblabgxcceimxlbmxlenogxamemlblabgxcceimxlbmoobnogxamemllesegxcceimxxerreanxgxamemllesegxcceimclsaoxbnrgxamemllesxgxcceimcoaxmxoncgxamemllesxgxcceiccblrxrbnxgxamemllxcxgxcceiccblrxaanxgxamemllxcxgxcceialbbebrenxgxamemllxcxgxcceialbbebsanxgxamemllxcogxcceimrlxebebnxgxamemllxcogxcceiaaxcambbnxgxamemllxcogxcceirarrrcaenxgxamebexarlgxcceimaoobseanxgxamebexarlgxcceimoobcobenxgxamebeorsxgxcceimxxrecsanxgxamebesabbgxcceialrexeoonxgxamebesabbgxcceialrexexbnxgxamebesabbgxcceimmsoxrlenxgxameberorbgxcceicloaxxmenxgxamebemacsgxcceimxlbmosonogxamebemacsgxcceicloaxxaanxgxamebemacsgxcceirreacmsbnxgxamebemmbxgxcceialbbebsbnxgxamebemmbxgxcceimxeoxsbenogxamebelccxgxcceislmbesllnxgxamebelccxgxoaeimrmaobxanogxamebxsmabgxcceimaoobrbcnsgxamebxmboxgxcceicloaecoenxgxamebxllclgxcceimaoobrbansgxameboeaoagxcceimaalslbbnxgxameboeaoagxcceimeelaclonsgxameboeaoagxcceimeelaclanogxameboeaoagxcceixaoossalnxgxameboosxrgxcceimrcebxconxgxameboosxrgxcceimmsxrlabnxgxameboosxrgxcceimraeelabnxgxameboosxrgxcceimxxerrecnxgxameboaxalgxcceimsacexoonxgxameboaxalgxcceirrmlllronxgxameboaxalgxcceimmceabsbnsgxameboaxmegxcceimrxccosanxgxameboaocogxcceimmxerbocnxgxameboacosgxcceimexlaeoonxgxameboacosgxcceicloaxxabnxgxamebobbxmgxcceimmooobranxgxamebobbxbgxcceimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimxlbalscnxgxamebscormgxcceimxxerrebnxgxamebscormgxcceimmoabamcnxgxamebcloxsgxcceialaroxrcnxgxamebcloxbgxcceimrcebeccnxgxamebrxcsagxcce; expires=Tue, 13 Dec 2022 13:23:56 GMT; path=/; domain=.exdynsrv.com;
c-tag=%7B%22tag-link%22%3A%22v3%7C%7CNOR%7C4254288%7C75408044%7C0%7C%7C517%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C63972b6bb41cd5.334637991642642616%7C30a4b8dd0e8004879feaccf8802f74e8%7C0%7Cleveling-solo.org%7C1280x1024%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 13 Dec 2022 13:23:56 GMT; path=/; domain=.exdynsrv.com;
Location: https://goplayhere.com/?61a6301f073f9&ag_custom_domain=mushoku-tensei.online
X-Robots-Tag: noindex, follow

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 13:23:56 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
5a972027b000fe32f9b65e5b6dfd8ad5
57e76d2f82b0c1f8a1c1ad4acfb1401708a2a47d
61cde6fc5ba34cfefa06b4b0657fc795cf5e939ee03f7f9a3feea0319ff9716c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6234
Cache-Control: max-age=99555
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 13:23:56 GMT
Etag: "6395f4f6-118"
Expires: Tue, 13 Dec 2022 17:03:11 GMT
Last-Modified: Sun, 11 Dec 2022 15:19:18 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280

syndication.exdynsrv.com/favicon.ico

95.211.229.246

204 No Content

0 B

URL HTTP/1.1
syndication.exdynsrv.com/favicon.ico
IP
95.211.229.246:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://syndication.exdynsrv.com/splash.php?cat=&idzone=4254288&type=8&p=https://leveling-solo.org/manga/solo-leveling-chapter-4-62/&sub=&tags=&el=&cookieconsent=true&scr_info=cmVtb3RlfHBvcHVuZGVyanN8MjYyMjU2NjY=
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263972b6bb41cd5.334637991642642616%22%3B%7D; c-tag=%7B%22tag-link%22%3A%22v3%7C%7CNOR%7C4254288%7C75408044%7C0%7C%7C517%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C63972b6bb41cd5.334637991642642616%7C30a4b8dd0e8004879feaccf8802f74e8%7C0%7Cleveling-solo.org%7C1280x1024%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D

HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 12 Dec 2022 13:23:56 GMT
Connection: keep-alive
X-Robots-Tag: noindex, follow

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
5a972027b000fe32f9b65e5b6dfd8ad5
57e76d2f82b0c1f8a1c1ad4acfb1401708a2a47d
61cde6fc5ba34cfefa06b4b0657fc795cf5e939ee03f7f9a3feea0319ff9716c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6234
Cache-Control: max-age=99555
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 13:23:56 GMT
Etag: "6395f4f6-118"
Expires: Tue, 13 Dec 2022 17:03:11 GMT
Last-Modified: Sun, 11 Dec 2022 15:19:18 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 13:07:56 GMT
age: 960
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.77.32

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
36fd108e205444f0e0fa7ef827191ae7
1136b79c5a85921c51e4d57477d28823cfa3992b
604a8995e5a7205b95883bf20552516b777cd25c6b2246eb61859d965266fb06

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "604A8995E5A7205B95883BF20552516B777CD25C6B2246EB61859D965266FB06"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1208
Expires: Mon, 12 Dec 2022 13:44:04 GMT
Date: Mon, 12 Dec 2022 13:23:56 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ee19f96e42a0eca99d00c8d91f977c35
3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9
6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 54
Cache-Control: max-age=157429
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 13:23:56 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 09:07:45 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

e1.o.lencr.org/

23.36.77.32

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
36fd108e205444f0e0fa7ef827191ae7
1136b79c5a85921c51e4d57477d28823cfa3992b
604a8995e5a7205b95883bf20552516b777cd25c6b2246eb61859d965266fb06

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "604A8995E5A7205B95883BF20552516B777CD25C6B2246EB61859D965266FB06"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1208
Expires: Mon, 12 Dec 2022 13:44:04 GMT
Date: Mon, 12 Dec 2022 13:23:56 GMT
Connection: keep-alive

push.services.mozilla.com/

44.228.207.167

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.228.207.167:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: teuSh9dIsgmhYQO2lhU3bA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CYUiJcgaUeSlwE79r1LeexTg0b0=

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0c925a7c39c1d5709cf28d0950c6b0e6
2eaeef6e47c3652cae0ff75e6660e785c382380b
a3d04fd01e8aed2062444500d83d1a99b900163fc73d26da1f47d3773189c5eb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3D04FD01E8AED2062444500D83D1A99B900163FC73D26DA1F47D3773189C5EB"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20336
Expires: Mon, 12 Dec 2022 19:02:53 GMT
Date: Mon, 12 Dec 2022 13:23:57 GMT
Connection: keep-alive

e1.o.lencr.org/

23.36.77.32

200 OK

344 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
ca6e1c8d02e0a7c5932dc6f4010741c7
f1acede87ecf1f92a668cd1593b57dcd66116db7
c7be7c6fa7eb66ef8d1fa9cb7fb038cc3468d979d4af1344f6b19e4909fcadce

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "C7BE7C6FA7EB66EF8D1FA9CB7FB038CC3468D979D4AF1344F6B19E4909FCADCE"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3509
Expires: Mon, 12 Dec 2022 14:22:26 GMT
Date: Mon, 12 Dec 2022 13:23:57 GMT
Connection: keep-alive

e1.o.lencr.org/

23.36.77.32

200 OK

344 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
ca6e1c8d02e0a7c5932dc6f4010741c7
f1acede87ecf1f92a668cd1593b57dcd66116db7
c7be7c6fa7eb66ef8d1fa9cb7fb038cc3468d979d4af1344f6b19e4909fcadce

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "C7BE7C6FA7EB66EF8D1FA9CB7FB038CC3468D979D4AF1344F6B19E4909FCADCE"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3509
Expires: Mon, 12 Dec 2022 14:22:26 GMT
Date: Mon, 12 Dec 2022 13:23:57 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ff0076f6a3e06bd68745da6bc14eb3bb
7ca7ae7986041dd62858f40306a9fb389ccd1330
f3dd0098c27cc629a34a0f9c96eb0b8db9e63f4b85ef28526693f83532749304

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3DD0098C27CC629A34A0F9C96EB0B8DB9E63F4B85EF28526693F83532749304"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10903
Expires: Mon, 12 Dec 2022 16:25:40 GMT
Date: Mon, 12 Dec 2022 13:23:57 GMT
Connection: keep-alive

ln.gamesrevenue.com/px1.js

5.161.79.44

200 OK

3.7 kB

URL HTTP/2
ln.gamesrevenue.com/px1.js
IP
5.161.79.44:0
ASN
#213230 Hetzner Online GmbH

File type
data
Size
3.7 kB (3670 bytes)
Hash
001b7e4dc38e17e3a8f1ff591b8b1811
79457456d96a442c373727d79c852c1fe3078210
34382af5afeaf2ac194d0f57d9c70d553474c8d84c0f57bbfc3ccde19c8a1089

HTTP Headers

GET /px1.js HTTP/1.1
Host: ln.gamesrevenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://animeplaynow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 13:23:57 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 11:50:26 GMT
etag: W/"63889502-3c9d"
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

54.230.245.110

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.110:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
f0b47065b11cbea51cb76d12a9bfa1fb
e4297c96b6395dd7d35cac31717d3153fb3d95a4
7e851c843752269d2e3efd2908be5074cdd273eb839bf91bb7fbf57dacba5855

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91522
Date: Mon, 12 Dec 2022 13:23:57 GMT
Etag: "6395db96-1d7"
Expires: Tue, 13 Dec 2022 14:49:19 GMT
Last-Modified: Sun, 11 Dec 2022 13:31:02 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: T9jGx7gVtg6mUrtljFzxwQE0AhDXMnnxgQ1LCPbKsRIpPG786I3U_A==
Age: 4697

syndication.exoclick.com/tag.php?goal=006c56869df4f6cad4a6c2049dd87c17

95.211.229.247

200 OK

20 B

URL HTTP/1.1
syndication.exoclick.com/tag.php?goal=006c56869df4f6cad4a6c2049dd87c17
IP
95.211.229.247:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type
data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

HTTP Headers

GET /tag.php?goal=006c56869df4f6cad4a6c2049dd87c17 HTTP/1.1
Host: syndication.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://animeplaynow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 13:23:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A59059%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-12%22%3B%7D%7D; expires=Tue, 12 Dec 2023 13:23:57 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

simplewebanalysis.com/px.gif?akey=c73209e3a548f31485d4d93c096d1d6c

3.71.139.39

307 Temporary Redirect

0 B

URL HTTP/2
simplewebanalysis.com/px.gif?akey=c73209e3a548f31485d4d93c096d1d6c
IP
3.71.139.39:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /px.gif?akey=c73209e3a548f31485d4d93c096d1d6c HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://animeplaynow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 307 Temporary Redirect
date: Mon, 12 Dec 2022 13:23:57 GMT
content-type: image/gif
content-length: 0
location: https://professionalswebcheck.com/dbs?uuid=4fc958e7-1cc7-4400-ac5a-f5545d11e86e&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsgIjQyMSI6MTY3MDg1MTQzN30sImFjY2wiOnsgIjIwLDMiOjE2NzA4NTE0Mzd9fQ.GJq2GXYWRMiHK6kjXi4X_vq7EM_vuTzMxSQPxmFUIGw
server: nginx/1.17.6
set-cookie: uid_id2=4fc958e7-1cc7-4400-ac5a-f5545d11e86e:3:1; expires=Thu, 09 Dec 2032 13:23:57 GMT; secure; SameSite=None
ak=421,1670851437; expires=Sun, 12 Mar 2023 13:23:57 GMT; secure; SameSite=None
acl=20,3,1670851437; expires=Sun, 12 Mar 2023 13:23:57 GMT; secure; SameSite=None
expires: Mon, 12 Dec 2022 13:23:57 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2

professionalswebcheck.com/dbs?uuid=4fc958e7-1cc7-4400-ac5a-f5545d11e86e&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsgIjQyMSI6MTY3MDg1MTQzN30sImFjY2wiOnsgIjIwLDMiOjE2NzA4NTE0Mzd9fQ.GJq2GXYWRMiHK6kjXi4X_vq7EM_vuTzMxSQPxmFUIGw

3.71.139.39

200 OK

7 B

URL HTTP/2
professionalswebcheck.com/dbs?uuid=4fc958e7-1cc7-4400-ac5a-f5545d11e86e&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsgIjQyMSI6MTY3MDg1MTQzN30sImFjY2wiOnsgIjIwLDMiOjE2NzA4NTE0Mzd9fQ.GJq2GXYWRMiHK6kjXi4X_vq7EM_vuTzMxSQPxmFUIGw
IP
3.71.139.39:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

HTTP Headers

GET /dbs?uuid=4fc958e7-1cc7-4400-ac5a-f5545d11e86e&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsgIjQyMSI6MTY3MDg1MTQzN30sImFjY2wiOnsgIjIwLDMiOjE2NzA4NTE0Mzd9fQ.GJq2GXYWRMiHK6kjXi4X_vq7EM_vuTzMxSQPxmFUIGw HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://animeplaynow.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 12 Dec 2022 13:23:57 GMT
content-type: image/gif
content-length: 7
server: nginx/1.17.6
set-cookie: uid_id2=4fc958e7-1cc7-4400-ac5a-f5545d11e86e:3:1; expires=Thu, 09 Dec 2032 13:23:57 GMT; secure; SameSite=None
ak=421,1670851437; expires=Sun, 12 Mar 2023 13:23:57 GMT; secure; SameSite=None
acl=20,3,1670851437; expires=Sun, 12 Mar 2023 13:23:57 GMT; secure; SameSite=None
expires: Mon, 12 Dec 2022 13:23:57 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11658
Expires: Mon, 12 Dec 2022 16:38:16 GMT
Date: Mon, 12 Dec 2022 13:23:58 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11658
Expires: Mon, 12 Dec 2022 16:38:16 GMT
Date: Mon, 12 Dec 2022 13:23:58 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11658
Expires: Mon, 12 Dec 2022 16:38:16 GMT
Date: Mon, 12 Dec 2022 13:23:58 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6311 bytes)
Hash
2020df3404a4b7c3e142af4a1330b848
2fe69b52fe03128e86550bf08474ecac82682384
37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UU3eyJXDqth6F65_913HL9lqA3qZHfGExAV89BRzHpQho5wZbQRTmw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:38:41 GMT
age: 56717
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/css/main.css

172.67.185.151

200 OK

6.1 kB

URL HTTP/2
animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/css/main.css
IP
172.67.185.151:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (2093), with no line terminators
Size
6.1 kB (6066 bytes)
Hash
7d77d775e183d5f1d132f6ceb6fdf5e1
1254c036f3e0a099e12cb8413a60edfb5d231b32
6d647500eee39bd54d48c89058f54b543e18fac18dd4dcd4d69da0a00c7c87d9

HTTP Headers

GET /ft/ft_0922/land_ft_140922_na_en/css/main.css HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/?event=1&utm_campaign=pu_exo_mushoku-tensei.online_na&utm_medium=click&utm_source=pu&utm_content=mushoku-tensei.online&bnid=land_ft_140922_na_en&crID=2498415&zID=99123&p=1&land=land_ft_140922_na_en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 12 Dec 2022 13:23:56 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 18:15:36 GMT
etag: W/"63221a48-82d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6430
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7mjdQcWUd9fvrjt0j7oMWj8YU99hBx0ZIFVJuG86a%2BI3ZYHlC3uHqFM4Y2DeRajJNggXZ2SKEXoW3aZlsaU1qMHYT2TFwofyDky0LwNH%2FRRzWdgcWOb5QRf0hzrLfVYeSTZZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7786c7085c74b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7557 bytes)
Hash
5de5d319f43d9c9c641419d96655541f
cde4c7fa0145d3645af17e34c83c63c08f76a076
fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7557
x-amzn-requestid: e68bff96-83e0-471c-95ed-d9773d2354a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c82_MHywoAMFe_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6395052d-23c53ea949b7266822b23787;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 22:16:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ixT5PO8EbYNrH-zZ4-HgHnEhAFKj0FS17a40ksn979_wqT8WandGiw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 06:37:54 GMT
age: 24364
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde328206-b913-49f3-9a85-6ccf3ddb1dee.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.0 kB (5979 bytes)
Hash
03a041f97f828bf7e3cb9af23202d164
66360922920cdf1a9412930d5fd0339fe4845b6d
63f96ad2555a107107efcade18fdeb4cc9f2aaf65650c6945b300a9ff41f6655

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde328206-b913-49f3-9a85-6ccf3ddb1dee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5979
x-amzn-requestid: 929d1f96-64db-4280-8b90-852246063c37
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD33GQJIAMF4Ng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964cfe-79604f955b788ac9319e2e3e;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:34:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lkyT46jQIc9ZPYgCyWS2l5HBQIIHqSlJ4Lu3DrOQHf-JbrSK_zQ6_g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:34:55 GMT
age: 56943
etag: "66360922920cdf1a9412930d5fd0339fe4845b6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.6 kB (5619 bytes)
Hash
9f8d3e3c9e5d2ed74c3894b4825fcc2f
6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:59:55 GMT
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
content-type: image/jpeg
age: 55443
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.7 kB (4720 bytes)
Hash
38876d760ef06c8471468c474c1e28a7
d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kwweq9Tz-UmF0uP_LKgkPlXwvak8U55ZoBW37FyytkDV0peSujBf5Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:16:48 GMT
age: 54430
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

animeplaynow.com/awpx_click.js?v=005

172.67.185.151

200 OK

0 B

URL HTTP/2
animeplaynow.com/awpx_click.js?v=005
IP
172.67.185.151:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /awpx_click.js?v=005 HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/?event=1&utm_campaign=pu_exo_mushoku-tensei.online_na&utm_medium=click&utm_source=pu&utm_content=mushoku-tensei.online&bnid=land_ft_140922_na_en&crID=2498415&zID=99123&p=1&land=land_ft_140922_na_en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 12 Dec 2022 13:23:56 GMT
content-type: application/javascript
last-modified: Mon, 22 Aug 2022 12:49:51 GMT
etag: W/"63037b6f-5cb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3439
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mO8%2BuSVgRLBRNhPx1AyPf0jkn8Inoihn2RGLsujl3wKF2VnFQfIqVYyj%2FXfGYAlJ9kZD9TI8ErOIAXYeBVn5t4xbU%2BvWDFY1VFolgzBkKYkqZnM4HBRKxt1LQRBgKDI96qjy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7786c7085c7db500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c

104.21.86.46

200 OK

0 B

URL HTTP/2
twistconcept.com/index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c
IP
104.21.86.46:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /index.min.js?pk=c73209e3a548f31485d4d93c096d1d6c HTTP/1.1
Host: twistconcept.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://animeplaynow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 12 Dec 2022 13:23:57 GMT
content-type: application/javascript
last-modified: Thu, 07 Apr 2022 08:49:08 GMT
etag: W/"624ea584-28c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1550
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AuWiLCWxMGfq322wN%2FeiDAinB7VDO9fXILNS6ezj6YOEICgD%2FomTQyDG%2BIiseHHR2P7Q2vlL4f6HWhZbSz18H4iKmwxi2oolygSznE6UlAuDY6ZkB9Pov6btpyQevk22N8vG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7786c70b7967b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

goplayhere.com/?61a6301f073f9&ag_custom_domain=mushoku-tensei.online

104.21.7.171

302 Found

0 B

URL HTTP/2
goplayhere.com/?61a6301f073f9&ag_custom_domain=mushoku-tensei.online
IP
104.21.7.171:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /?61a6301f073f9&ag_custom_domain=mushoku-tensei.online HTTP/1.1
Host: goplayhere.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://syndication.exdynsrv.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
date: Mon, 12 Dec 2022 13:23:56 GMT
content-type: text/html
location: https://animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/?event=1&utm_campaign=pu_exo_mushoku-tensei.online_na&utm_medium=click&utm_source=pu&utm_content=mushoku-tensei.online&bnid=land_ft_140922_na_en&crID=2498415&zID=99123&p=1&land=land_ft_140922_na_en
set-cookie: c_1ade8abed30b15bfc05b39d8fa191da0=1; Expires=Tue, 13-Dec-22 13:23:56 GMT; Domain=goplayhere.com; Path=/; Secure; SameSite=None
z_ebbeb8e6a37c4382709382f882af8e88=1; Expires=Tue, 13-Dec-22 13:23:56 GMT; Domain=goplayhere.com; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8ermurfxzFYyGgjXW8noa2%2ByZwRrXuVs52cOnFtgtqC8c%2B60pI2wHCaCrYj1KpYcASoS1PVeFSRJKj2tSHMyLmyoIMt%2FRY%2B128y1t2trzQhjXlx6ffQhiJKO0wFWi8D11A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7786c704fc22b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/?event=1&utm_campaign=pu_exo_mushoku-tensei.online_na&utm_medium=click&utm_source=pu&utm_content=mushoku-tensei.online&bnid=land_ft_140922_na_en&crID=2498415&zID=99123&p=1&land=land_ft_140922_na_en

172.67.185.151

200 OK

0 B

URL HTTP/2
animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/?event=1&utm_campaign=pu_exo_mushoku-tensei.online_na&utm_medium=click&utm_source=pu&utm_content=mushoku-tensei.online&bnid=land_ft_140922_na_en&crID=2498415&zID=99123&p=1&land=land_ft_140922_na_en
IP
172.67.185.151:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ft/ft_0922/land_ft_140922_na_en/?event=1&utm_campaign=pu_exo_mushoku-tensei.online_na&utm_medium=click&utm_source=pu&utm_content=mushoku-tensei.online&bnid=land_ft_140922_na_en&crID=2498415&zID=99123&p=1&land=land_ft_140922_na_en HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://syndication.exdynsrv.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 12 Dec 2022 13:23:56 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AeqgZ4b3MiIc7IYKUhSncM8mPunFHUuC0OMIsIPmLbepNZTW7U5INRiiFJVK6b1rccm959W4DGdlh2xkKbShT%2BvdHjH%2FIKfCY2uoY7xnP%2FJbhCu1pvcsgwuOdajF5hDsExV4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7786c7069a17b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/libs/jquery.min.js

172.67.185.151

200 OK

0 B

URL HTTP/2
animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/libs/jquery.min.js
IP
172.67.185.151:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ft/ft_0922/land_ft_140922_na_en/libs/jquery.min.js HTTP/1.1
Host: animeplaynow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://animeplaynow.com/ft/ft_0922/land_ft_140922_na_en/?event=1&utm_campaign=pu_exo_mushoku-tensei.online_na&utm_medium=click&utm_source=pu&utm_content=mushoku-tensei.online&bnid=land_ft_140922_na_en&crID=2498415&zID=99123&p=1&land=land_ft_140922_na_en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 12 Dec 2022 13:23:56 GMT
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 18:15:42 GMT
etag: W/"63221a4e-1538f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6430
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ud03jH%2Fy0uCvWyhPztnKYM9c74wAaBdkRAP%2BIycdOTorjdP970qo5jG3EtKgEgm%2FV3%2FN09MgURWYYtTi%2BfHDao3rTAaK2Jc6pr3alglhnYm3DY2t4X07xHNIJakhaQ%2F3yHg1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7786c7085c76b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size