| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8d2e6150f7d0845dc26f5bd5cd6f28dd 6aad5091620585a5f76065c1888456ee70b88257 ed538ea400323f4c987f91c0b0afc79a8526b62f7aa317dd62bd107cb37850a2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "ED538EA400323F4C987F91C0B0AFC79A8526B62F7AA317DD62BD107CB37850A2"
Last-Modified: Tue, 03 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6708
Expires: Thu, 05 Sep 2024 03:49:02 GMT
Date: Thu, 05 Sep 2024 01:57:14 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash66fbf7f95cb55f388373a20d4b1a736e afc34259758a563362367848629ff7639982e1fb 41c00088afc20571f6a0c6998324d9517346256ac33696dc706192ec606fe7a7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "41C00088AFC20571F6A0C6998324D9517346256AC33696DC706192EC606FE7A7"
Last-Modified: Mon, 02 Sep 2024 12:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12569
Expires: Thu, 05 Sep 2024 05:26:43 GMT
Date: Thu, 05 Sep 2024 01:57:14 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1f0091b166a0138433eabf08a4530e4a 769d1eeaefb4987198c821ea98e06ea8ba0de215 2eff28e3e6829bf2cfcbc417fd76313d5b5e8ba8a3f0f0de6a5b5cdc2888e7e5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2EFF28E3E6829BF2CFCBC417FD76313D5B5E8BA8A3F0F0DE6A5B5CDC2888E7E5"
Last-Modified: Mon, 02 Sep 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20578
Expires: Thu, 05 Sep 2024 07:40:12 GMT
Date: Thu, 05 Sep 2024 01:57:14 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashddc456a9c96d929e15c05fe0f98b8768 3eb86e0b169ada76e98ed62750b77a24e8b49eb4 f9496ce271a170952f322ae70a9da041e2a1e49a45fd2056f62a88358acadd09
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F9496CE271A170952F322AE70A9DA041E2A1E49A45FD2056F62A88358ACADD09"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2713
Expires: Thu, 05 Sep 2024 02:42:28 GMT
Date: Thu, 05 Sep 2024 01:57:15 GMT
Connection: keep-alive
|
|
| GET flingforyou.com/click.php?key=pg9qqk858z5ttgbr02nc&source=4332&fb=%7Bfb%7D&subid=6720 |  164.92.239.223 | 302 Found | 0 B |
URL User Request GET HTTP/1.1flingforyou.com/click.php?key=pg9qqk858z5ttgbr02nc&source=4332&fb=%7Bfb%7D&subid=6720 IP164.92.239.223:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectflingforyou.com Fingerprint71:4B:F5:FD:39:49:76:E7:2A:A0:6A:6A:CA:2F:12:B7:87:BF:0B:05 ValidityWed, 17 Jul 2024 02:05:52 GMT - Tue, 15 Oct 2024 02:05:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /click.php?key=pg9qqk858z5ttgbr02nc&source=4332&fb=%7Bfb%7D&subid=6720 HTTP/1.1
Host: flingforyou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Thu, 05 Sep 2024 01:57:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=2ta3j2a90; expires=Fri, 06-Sep-2024 01:57:16 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2; expires=Fri, 06-Sep-2024 01:57:16 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Strict-Transport-Security: max-age=31536000
|
|
| ocsp.r2m03.amazontrust.com/ |  143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash5c94bf82f978f7cf51c75ab3e057034d 560d9f016a4cccdf8f97b2f63ecc1a4a54bbd036 c3dcae74ba043eecbe1d1a92c8c02d44f503ed6948833b92254b1ea64086bdbc
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Thu, 05 Sep 2024 01:57:16 GMT
Server: ECAcc (amb/6B67)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PjwPeNAg-4Y8l9BQYg2lsg0WCmLsOWZoUUVMV0FYKhdTtDRNWpIg0w==
|
|
| GET www.canimeether.com/19301722435313689/script.min.js | 54.240.174.35 | 200 OK | 519 B |
URL GET HTTP/2www.canimeether.com/19301722435313689/script.min.js IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
Hash9c95fde5cdc1cd266c53bd652ee19424 66082c408dfce07d764251e39f31af70da9f233f 824c9b9df4af8a671f4f5d66d8c4e5e811166adaf16d7070bbdfc276165bb436
GET /19301722435313689/script.min.js HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 519
date: Wed, 31 Jul 2024 14:32:32 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "9c95fde5cdc1cd266c53bd652ee19424"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 75-7CLWqVy72DMxKlh1zf16lxrsk1OT1C2FtKmH6eubPiGwq61euSw==
age: 3065086
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/custom.js | 54.240.174.35 | 200 OK | 710 B |
URL GET HTTP/2www.canimeether.com/19301722435313689/custom.js IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash2dab9ba0c4e5ac661c0cb89a9fad32dc e4f0c2201ab6e685cca3c9ac081fbf1eb6732812 253d2c39d2e694299ebede9086516646f0b9c2bb6395a121f9ef9b790873ef50
GET /19301722435313689/custom.js HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 710
date: Wed, 31 Jul 2024 14:32:32 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "2dab9ba0c4e5ac661c0cb89a9fad32dc"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O_9sCueiKTTmlECAetHT15bHoCiaNoNI7d4r7pciSy-Xq3ZBDWSjFw==
age: 3065086
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/games.png | 54.240.174.35 | 200 OK | 12 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/games.png IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit colormap, non-interlaced Hashb3937035cba9bd2d93f5f5ac27ef4e4a 856321e16f0f64efa951acba1a3c53588024b62b 2fe6faabae780470de0b02d0e895b1618bd7350965d8da34b7574816c6d2910a
GET /19301722435313689/games.png HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11689
date: Wed, 31 Jul 2024 14:32:32 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "b3937035cba9bd2d93f5f5ac27ef4e4a"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NLWxvR-ssOJeLRSCGffumvB_2MaHjRsvzHRMBY-snJdhlDT4ZjfVYg==
age: 3065086
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/cams.png | 54.240.174.35 | 200 OK | 12 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/cams.png IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit colormap, non-interlaced Hashe4b961c90962e71d9de98d1f50c59dbe f077355ef0a68326a13a711f92354dc5e251fb81 b5fb8309cc3845a94dc11c97dd7cd1fcdc4898f0e857bfb74509bf67c96ff6de
GET /19301722435313689/cams.png HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11654
date: Wed, 31 Jul 2024 14:32:32 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "e4b961c90962e71d9de98d1f50c59dbe"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ty5Up3nYLKATmKQz4yZJGAtipqQdb8hmSYgILinSBx9a_MmWjvQkxA==
age: 3065086
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/style.css | 54.240.174.35 | 200 OK | 2.0 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/style.css IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
Hash2887c094ae28ab0f6ea28f63f0b600ac 9e7a3bced064fa746c268f1d35a387a88f02bc2f 0d9c4c44541ad9755bfb60b6fb3099731bd3774dd0916cf4e24c31fb425c8301
GET /19301722435313689/style.css HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Wed, 31 Jul 2024 14:17:53 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: W/"2887c094ae28ab0f6ea28f63f0b600ac"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i5WuD-JDOVkEvhgFVh8ILiKI2GD0-NzTaP76__1DH2uOJlMrkoLvTQ==
age: 3065965
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/t10.js | 54.240.174.35 | 200 OK | 14 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/t10.js IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
Hash68eca3ff8c0b2650197e35e0fd08e6a5 89b26667e3f0ae1c246e0c2f227fc3139d0d2c50 dbab5bcacf690cc65b22ffce70188f8dc974308601e68f79e6789594a5f56be8
GET /19301722435313689/t10.js HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
date: Wed, 31 Jul 2024 14:18:08 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: W/"68eca3ff8c0b2650197e35e0fd08e6a5"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3KKZHKWyAn4Ex_sd4kaXMNRWFLx2ky0O7zGkk2fDSw8ITySOEhbB4A==
age: 3065950
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 | 54.240.174.35 | 200 OK | 36 kB |
URL User Request GET HTTP/2www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 IP54.240.174.35:443
CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash9115c9fd074068b7c59eebe7fe771ab0 c2024afa8bf09761a5f8864d0d863c916598d927 aa819e5f84b6204d3bc1559304be055a1f8e928e16aa74651359ff213d849090
GET /19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Wed, 31 Jul 2024 14:17:53 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: W/"9115c9fd074068b7c59eebe7fe771ab0"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tOWhKFG-xltkkpSTVsztOFxZBngqZndNdU0qUH7cxIdf8TknmM5__g==
age: 3065964
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16386
Expires: Thu, 05 Sep 2024 06:30:23 GMT
Date: Thu, 05 Sep 2024 01:57:17 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16386
Expires: Thu, 05 Sep 2024 06:30:23 GMT
Date: Thu, 05 Sep 2024 01:57:17 GMT
Connection: keep-alive
|
|
| GET www.canimeether.com/19301722435313689/bg1.jpg | 54.240.174.35 | 200 OK | 54 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/bg1.jpg IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x563, components 3 Hash0326aa67743cad3e671513dabaf87b6f 21cacde973d6cf44b8ebebd84637d7332f8fc474 3aca5abb6f9410195aa8a1493a97aa037d46f775d3163bd9fde8adda2a4e30c0
GET /19301722435313689/bg1.jpg HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpg
content-length: 54387
date: Wed, 31 Jul 2024 14:32:33 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "0326aa67743cad3e671513dabaf87b6f"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sgqh7cOaziWInOBGIU5acy0fQncoWeguebBatWSBOcBTGvGevHHcsQ==
age: 3065085
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/87-1722435405177.jpg | 54.240.174.35 | 200 OK | 19 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/87-1722435405177.jpg IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x900, components 3 Hash6b8c6526a9a40d51b451d9343a24acfd ddd893d8c4916f04ebbcf519426bb77a12c8d086 678053d3609ed2c8578e375e2eb0dd511cddf15510a1f56ac7aeb727855ffa13
GET /19301722435313689/87-1722435405177.jpg HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 18609
date: Thu, 01 Aug 2024 12:57:55 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "6b8c6526a9a40d51b451d9343a24acfd"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4FOBbk6ze0pjErfm1SmweS_uNrAm3AIna0CdE03I8NhsTXMmpD1BDQ==
age: 2984363
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/%7B%7Blogo%7D%7D | 54.240.174.35 | 404 Not Found | 361 B |
URL GET HTTP/2www.canimeether.com/19301722435313689/%7B%7Blogo%7D%7D IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typeHTML document, ASCII text Hash21823134ae5fc0b939c85623690ad66d 08c8b7994ad294e8382afb49c3d166ffd46fe648 01e575fe28f1b68b10dbe998e1815497dd10df0039a0a072705f43cbc3aaa27b
GET /19301722435313689/%7B%7Blogo%7D%7D HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
content-length: 361
date: Thu, 05 Sep 2024 01:57:16 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: srDeIUQRLFchJaqOPIX8D_WHeTim-aYhFMyOW8PVKMI4-vbHIP5vzA==
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash06fb45d8638e8a153bca14c5664fce9c 39373873b2a16d8e19dd1254581d8c8b759c1132 243adb73dd4941e61529b495dd326920ead03d838ad04fec876231398ec655da
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Sep 2024 01:57:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| GET www.googletagmanager.com/gtm.js?id=GTM-PKBDJ82 | 142.250.74.168 | 200 OK | 69 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-PKBDJ82 IP142.250.74.168:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint6F:61:E4:8D:EC:1C:CD:28:E6:08:5A:59:AA:A1:D3:6D:7E:95:B9:28 ValidityMon, 05 Aug 2024 06:37:21 GMT - Mon, 28 Oct 2024 06:37:20 GMT
File typeJavaScript source, ASCII text, with very long lines (2345) Hashda2551714af10c978d6d1e56eed72080 7e73fe465fbedb84d24f1656a65dd1bdb2474e48 4cb6ecb2e2fe6349814215fd30d3630ff3b940f7ab647465c89afd71d9d40fc1
GET /gtm.js?id=GTM-PKBDJ82 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 05 Sep 2024 01:57:17 GMT
expires: Thu, 05 Sep 2024 01:57:17 GMT
cache-control: private, max-age=900
last-modified: Thu, 05 Sep 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68573
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| OPTIONS app.api-push.com/get-keys | 172.67.161.187 | 204 No Content | 0 B |
URL OPTIONS HTTP/2app.api-push.com/get-keys IP172.67.161.187:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerGoogle Trust Services Subjectapi-push.com FingerprintFE:F4:92:6A:3A:29:09:08:0B:66:BF:14:00:E0:1D:A1:C3:A8:3E:08 ValidityThu, 08 Aug 2024 02:46:21 GMT - Wed, 06 Nov 2024 02:46:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /get-keys HTTP/1.1
Host: app.api-push.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.canimeether.com/
Origin: https://www.canimeether.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 05 Sep 2024 01:57:17 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH
access-control-allow-headers: content-type
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BZhPWkDlkX96LgknUga1TxHuC0Q6bpZCQw2kmw%2FF2g0xJ7s%2FQmOvyxJgThVtM6%2FFg%2FrSLnEmJeqgk6GX00wb88Zu4kola1W2GPVNAp247MHI%2F0vBeq2f3XvoiHV0Ye6286D7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8be29b8f3fb41c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash06fb45d8638e8a153bca14c5664fce9c 39373873b2a16d8e19dd1254581d8c8b759c1132 243adb73dd4941e61529b495dd326920ead03d838ad04fec876231398ec655da
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Sep 2024 01:57:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| GET cdn-static3.com/cdn/push.min.js |  104.21.91.224 | 200 OK | 11 kB |
URL GET HTTP/2cdn-static3.com/cdn/push.min.js IP104.21.91.224:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerGoogle Trust Services Subjectcdn-static3.com Fingerprint32:65:7D:76:D1:A8:1F:D0:6A:17:D4:16:36:64:01:FB:96:DE:91:C4 ValidityTue, 03 Sep 2024 18:24:40 GMT - Mon, 02 Dec 2024 18:24:39 GMT
File typeJavaScript source, ASCII text, with very long lines (36273) Hash44c9e373bc246e347c8420a2eb8f54d4 5eb6010833c0c873766407c7a51ea5eafe69dbdf 2dac93602a4e47e156b8b54455dfdcd7a7a4901ab33f2a0c2c416a395e1ebda5
GET /cdn/push.min.js HTTP/1.1
Host: cdn-static3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 05 Sep 2024 01:57:17 GMT
content-type: application/x-javascript
content-security-policy: block-all-mixed-content
etag: W/"44c9e373bc246e347c8420a2eb8f54d4"
last-modified: Mon, 06 Jun 2022 20:30:35 GMT
strict-transport-security: max-age=15724800; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 17DF447EC59FB378
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 769
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4g%2Fu8sHZ5J0ymvOo4hpY3iTdRc1sl7djNomJO5nEk42mcP3H82FxO%2FmMFJ2jf0zwCCpnq6f5MmR4jXcXYG7wCoahk03s7HnbdCAUBAGjjTzEk27ddLvGPvDmt06YetjT1uQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8be29b8e387ab4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/favicon.png | 54.240.174.35 | 200 OK | 1.8 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/favicon.png IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typePNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced Hash0d658e55a18c46569f820dcb53fb0228 8d6f6d24829a0599c1309beedb3814b8fce7b8e4 0a225727f83c4d29abd12f49aa2161b6b7560dd23f3864cab690471fee17ac9a
GET /19301722435313689/favicon.png HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1831
date: Wed, 31 Jul 2024 14:19:43 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "0d658e55a18c46569f820dcb53fb0228"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _3R_S-5hQB4bBvcxQoXrwNdZqgLndmXaxHg7H5OkSnjFU6gMkFgAhw==
age: 3065854
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/%7B%7Blogo%7D%7D | 54.240.174.35 | 404 Not Found | 361 B |
URL GET HTTP/2www.canimeether.com/19301722435313689/%7B%7Blogo%7D%7D IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typeHTML document, ASCII text Hash21823134ae5fc0b939c85623690ad66d 08c8b7994ad294e8382afb49c3d166ffd46fe648 01e575fe28f1b68b10dbe998e1815497dd10df0039a0a072705f43cbc3aaa27b
GET /19301722435313689/%7B%7Blogo%7D%7D HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
content-length: 361
date: Thu, 05 Sep 2024 01:57:16 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dHXtTEis8p3pKvRaIWuxi1yvVnWcPCmzWt9Jts0qsM5AqmVv011JsA==
age: 3
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/favicon.png | 54.240.174.35 | 200 OK | 1.8 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/favicon.png IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typePNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced Hash0d658e55a18c46569f820dcb53fb0228 8d6f6d24829a0599c1309beedb3814b8fce7b8e4 0a225727f83c4d29abd12f49aa2161b6b7560dd23f3864cab690471fee17ac9a
GET /19301722435313689/favicon.png HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1831
date: Wed, 31 Jul 2024 14:19:43 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: "0d658e55a18c46569f820dcb53fb0228"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m_q9vwaobagug65a32RLOfPMVIcAJNcGVzQRg1XTzDm9YW2XNcBj4A==
age: 3065857
X-Firefox-Spdy: h2
|
|
| plasticwine.com/nlp/index.php?key=pg9qqk858z5ttgbr02nc&source=4332&fb={fb}&subid=6720&url_bnm_redirect=https://flingforyou.com/click.php | 142.93.95.250 | | 6.3 kB |
URL plasticwine.com/nlp/index.php?key=pg9qqk858z5ttgbr02nc&source=4332&fb={fb}&subid=6720&url_bnm_redirect=https://flingforyou.com/click.php IP142.93.95.250:0 ASN#14061 DIGITALOCEAN-ASN
File typegzip compressed data, from Unix Hash0c6eef5a3acbe3b95f7d3a1ecff448c7 17863fb240d3c049c5d9e1d0ad715e71c0b888b6 5e9dddbbdff9a03c1505a72c16ad6b7a3f58dfd8591e683ca8ed651f35419095
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /nlp/index.php?key=pg9qqk858z5ttgbr02nc&source=4332&fb={fb}&subid=6720&url_bnm_redirect=https://flingforyou.com/click.php HTTP/1.1
Host: plasticwine.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.2
date: Thu, 05 Sep 2024 01:57:16 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET tsyndicate.com/api/v1/retargeting/set/31274e87-1118-4d7c-bc72-9007731936c3 | 136.243.59.248 | 200 OK | 43 B |
URL GET HTTP/2tsyndicate.com/api/v1/retargeting/set/31274e87-1118-4d7c-bc72-9007731936c3 IP136.243.59.248:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerLet's Encrypt Subjecttsyndicate.com Fingerprint4D:12:60:AA:74:8F:2E:44:38:74:D2:5E:33:2E:CB:10:F3:F5:0A:39 ValidityMon, 12 Aug 2024 09:07:54 GMT - Sun, 10 Nov 2024 09:07:53 GMT
File typeGIF image data, version 89a, 1 x 1 Hashba036c43037cfe89320d1ef7b64cd43f 88c72d3e26047eb1e45e5564a76427734f120efe 42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/31274e87-1118-4d7c-bc72-9007731936c3 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 05 Sep 2024 01:57:17 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
set-cookie: ts_rt_31274e87-1118-4d7c-bc72-9007731936c3=AAMC; expires=Fri, 05 Sep 2025 01:57:17 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
|
|
| GET www.canimeether.com/19301722435313689/jquery.min.js | 54.240.174.35 | 200 OK | 97 kB |
URL GET HTTP/2www.canimeether.com/19301722435313689/jquery.min.js IP54.240.174.35:443
Requested byhttps://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2 CertificateIssuerAmazon Subjectcanimeether.com Fingerprint62:1C:59:EE:CE:86:43:C5:C5:FA:B7:4F:28:B8:87:1C:70:69:F3:C6 ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32077) Hash4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /19301722435313689/jquery.min.js HTTP/1.1
Host: www.canimeether.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.canimeether.com/19301722435313689/?subid=10&lander=1331&uclick=2ta3j2a90&uclickhash=2ta3j2a90-2ta3j2a90-2t-0-bz-ydd5-gxa6wj-f638b2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
date: Wed, 31 Jul 2024 14:18:08 GMT
last-modified: Wed, 31 Jul 2024 14:16:46 GMT
etag: W/"4f252523d4af0b478c810c2547a63e19"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0o7qOari6QHAMssO0vdWOHsKhPr7QXBQJMel_bmj_5XahUaURTf1UQ==
age: 3065950
X-Firefox-Spdy: h2
|
|