anonymfile.com/img/logo-anon-warning.webp
15 kB URL anonymfile.com/img/logo-anon-warning.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7b596f481388ac5ef6d74a15a351f6c3
6756e88c0b46cc981b7bbbdaf2ead77bd258a472
cd830cff1dfb9af2181dfe61645addbe21981954713fba54d5875a038e673972
GET /img/logo-anon-warning.webp HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/z83wg/server.exe
Cookie: XSRF-TOKEN=eyJpdiI6IlFHWW1QV2NoR2xRYmZhYzVqT1ZaK2c9PSIsInZhbHVlIjoiNlB3M09zT1puK1RtTllHZXREN2JHVHhlUm9CVEJxbEh5OHQ1K1VubnN4TWJQWXdIQlYwcHJmbXRMQmFWZEpoSlAyakpyVmRTbzN0MWJhRnh3c1g2dlRyV0RiMGxDS3NnK1ZUU000ZlR6bk9sazdrVGFtTmFXWlM2c0daWFZ1elMiLCJtYWMiOiJlYWIzZjg2OWIyOTYyYWMyMTM5MTE0MTBmNTU5MTBkODE3YjUxNjM5MzJlODVlNzRiMWVkYTVlYWUwZjZmNjAwIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6ImwzazU4OUdNQzdRaCs1dk1jZTUzenc9PSIsInZhbHVlIjoiWjRLRGx2WGx5MkVuSDdWbjBFM3RtaWVpYWNNUGo4M0V5T2xWNHhTYlZJT2F4M3U3SlVDTEsyVGU2ZFJlSVdVSzZRUXVYTjdLQWxXUkVnb3J2ZzUxT0hIUTk2U1hWNjFrQXNuQ0ZyV3F3VWJ3djNCYUlSR3pzWUQ5V3RwOWxJSTIiLCJtYWMiOiI5OWE4MDdhNTA0YzFiNjZlNzZmYWUyZDA3YTY3YmI3OTljYjUwNzYwODkzNWFmMzEzMWMwMWM5YmE3YTUyOGVmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
content-length: 15344
etag: "617d3713-3bf0"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
accept-ranges: bytes
date: Tue, 30 May 2023 01:42:32 GMT
expires: Tue, 30 May 2023 01:47:32 GMT
X-Firefox-Spdy: h2
anonymfile.com/img/main/footer.webp
178 kB URL anonymfile.com/img/main/footer.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image\012- data
Size 178 kB (178070 bytes)
Hash 79ccb3a1b78412a1a530284f45ea7056
626d0494e1bd871e67ecffad44d04ac2343fb7e5
3d4e83b59664d7a779fa777d4ee0e17a1bc09302f9b9cde60815a3142256d8b8
GET /img/main/footer.webp HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/z83wg/server.exe
Cookie: XSRF-TOKEN=eyJpdiI6IlFHWW1QV2NoR2xRYmZhYzVqT1ZaK2c9PSIsInZhbHVlIjoiNlB3M09zT1puK1RtTllHZXREN2JHVHhlUm9CVEJxbEh5OHQ1K1VubnN4TWJQWXdIQlYwcHJmbXRMQmFWZEpoSlAyakpyVmRTbzN0MWJhRnh3c1g2dlRyV0RiMGxDS3NnK1ZUU000ZlR6bk9sazdrVGFtTmFXWlM2c0daWFZ1elMiLCJtYWMiOiJlYWIzZjg2OWIyOTYyYWMyMTM5MTE0MTBmNTU5MTBkODE3YjUxNjM5MzJlODVlNzRiMWVkYTVlYWUwZjZmNjAwIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6ImwzazU4OUdNQzdRaCs1dk1jZTUzenc9PSIsInZhbHVlIjoiWjRLRGx2WGx5MkVuSDdWbjBFM3RtaWVpYWNNUGo4M0V5T2xWNHhTYlZJT2F4M3U3SlVDTEsyVGU2ZFJlSVdVSzZRUXVYTjdLQWxXUkVnb3J2ZzUxT0hIUTk2U1hWNjFrQXNuQ0ZyV3F3VWJ3djNCYUlSR3pzWUQ5V3RwOWxJSTIiLCJtYWMiOiI5OWE4MDdhNTA0YzFiNjZlNzZmYWUyZDA3YTY3YmI3OTljYjUwNzYwODkzNWFmMzEzMWMwMWM5YmE3YTUyOGVmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
content-length: 178070
etag: "62f35b9c-2b796"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
accept-ranges: bytes
date: Tue, 30 May 2023 01:42:32 GMT
expires: Tue, 30 May 2023 01:47:32 GMT
X-Firefox-Spdy: h2
anonymfile.com/pagespeed_static/js_defer.I4cHjq6EEP.js
6.9 kB URL anonymfile.com/pagespeed_static/js_defer.I4cHjq6EEP.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (534)
Hash 2387078eae8410f7e540e3866bcb2fda
324d38dcb7f7bcb16b355b6afdbbc87bd089422d
59dbda86041a5f394b83391ffe0b939341aabb817fa60a6ea78c80f5835596b5
GET /pagespeed_static/js_defer.I4cHjq6EEP.js HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/z83wg/server.exe
Cookie: XSRF-TOKEN=eyJpdiI6IlFHWW1QV2NoR2xRYmZhYzVqT1ZaK2c9PSIsInZhbHVlIjoiNlB3M09zT1puK1RtTllHZXREN2JHVHhlUm9CVEJxbEh5OHQ1K1VubnN4TWJQWXdIQlYwcHJmbXRMQmFWZEpoSlAyakpyVmRTbzN0MWJhRnh3c1g2dlRyV0RiMGxDS3NnK1ZUU000ZlR6bk9sazdrVGFtTmFXWlM2c0daWFZ1elMiLCJtYWMiOiJlYWIzZjg2OWIyOTYyYWMyMTM5MTE0MTBmNTU5MTBkODE3YjUxNjM5MzJlODVlNzRiMWVkYTVlYWUwZjZmNjAwIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6ImwzazU4OUdNQzdRaCs1dk1jZTUzenc9PSIsInZhbHVlIjoiWjRLRGx2WGx5MkVuSDdWbjBFM3RtaWVpYWNNUGo4M0V5T2xWNHhTYlZJT2F4M3U3SlVDTEsyVGU2ZFJlSVdVSzZRUXVYTjdLQWxXUkVnb3J2ZzUxT0hIUTk2U1hWNjFrQXNuQ0ZyV3F3VWJ3djNCYUlSR3pzWUQ5V3RwOWxJSTIiLCJtYWMiOiI5OWE4MDdhNTA0YzFiNjZlNzZmYWUyZDA3YTY3YmI3OTljYjUwNzYwODkzNWFmMzEzMWMwMWM5YmE3YTUyOGVmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
vary: Accept-Encoding
x-content-type-options: nosniff
date: Tue, 30 May 2023 01:46:09 GMT
last-modified: Tue, 30 May 2023 01:46:09 GMT
cache-control: max-age=31536000
etag: W/"0"
content-encoding: br
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css
14 kB URL cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css
IP
File type ASCII text, with very long lines (65345)
Hash b94102c568b10816907c96d987fc156c
033d2cf8dc346fc5ae26677bb877155ecf3e72e3
81735261671cd094376ce5c6d31058c64fa70ad0f3b0798ffce2f2d8eeb7ab51
GET /ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:09 GMT
content-type: text/css; charset=utf-8
content-length: 14374
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61498362-3826"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1036000
expires: Sun, 19 May 2024 01:46:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i3mvOoKekD2sIW5J%2FeRRxSKAG8mBp0dmx2b09Z2HSXXKz34WfgCPBf2GhOzbk%2FtGpkbPFyN4oVOE2iauC5gpx6x7QmfZv1i1oJp4%2FHiznVJ5Q7Gb7pBVdIoJfVS%2FriCtQeyPi%2BGP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d43ef7b1c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
30 kB URL cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
IP
File type ASCII text, with very long lines (65370)
Hash 516f35ea42aa797b3b106a8f108edb88
9b1313b221c5d59835c31da0327f4273a2647174
9677264de392aeedd3b391fe53578415c87835405d14068380f9bf3970a48286
GET /ajax/libs/filepond/4.30.3/filepond.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 29707
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "615c7e96-740b"
last-modified: Tue, 05 Oct 2021 16:34:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 26455058
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9v9Q9%2BSzXjSJk%2Fj39SMfbtfxJ1VgkRjR3ZJZo7VRDLeBNkFy%2BYqaCgFcauT9zNo%2FcLNKOwKXV9RkQ5gkrROo%2FSonJuJ2NELUGmekenCQgx3ocXni5%2B3PIC%2BSzTWwHGbg%2BDMTazeP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d44dfb71c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
28 kB URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5812394
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g5c%2FPQ1HgUkc4C6Urz%2B%2BeEwTClEDspUXSOcF8NE7N5pc2U4sDeXqLKaF0tPHxokx8CdwLyxfczRkG1kE9crIYGMJGSNWmGheBVKBzFLAWoTjUCcZtolpcUQ8copOtgHWSA0Q0gMR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d44dfb81c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
6.0 kB URL cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
IP
File type ASCII text, with very long lines (18706)
Hash 541aecc95a7faeef0fc27558070f3647
0ec7ca4778ba3ccb4d1b1688094720834fbe9ed3
f395875eb5d58c5128c434812cd0a53d438b11536f7fd1577077d8a5c612e1fd
GET /ajax/libs/popper.js/2.10.2/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 6037
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6155af49-1795"
last-modified: Thu, 30 Sep 2021 12:36:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8969364
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1wW7VnzcKSlBCNuBxh%2BAhATYky9lJHkY%2FycwI1Ih6wF3bg0f5RcgrNj97HyaxBO5RxwsFYjUP%2FcbE9RejdmDOtthbepgDjXOZgw300wLICBUa%2Bsu40gQxUiTwAJKl3cuegqe7LCA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d44efbe1c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
15 kB URL cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (58940)
Hash 259e416ef6833be43801b8b68a93b008
19080c3b817985336aab5e1ce6925c99803f2efd
70c3d690bdc5ce3b9a1527c46044989a3176e610882fa99f4523e75bc395bcce
GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 14584
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6161dfe3-38f8"
last-modified: Sat, 09 Oct 2021 18:30:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7200735
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=77OUOjYxwWMNTZVpPYmnbVVcc9GhH9gVajsAXIlb3Jr4z%2Ba1w0v8Z5pXqc8C%2Byfx8dvF4YZ1T0PGZyTX8BQdeqed%2Fmi6BiBbCGP5o7CAq19l8r1Ur1RiY2p%2BBjED2w89g6VQ%2Bkno"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d44efbd1c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
3.0 kB URL cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (10584)
Hash 27784b7376dd992368c71b6c5559f358
f86d2ac408c4de0d5281cf91d6ddfb93e5e5d2ff
11be927cda59c8b6019ebbea838285c5beaf21183ea4b83dbd4e4fbf9413ce4a
GET /ajax/libs/clipboard.js/2.0.8/clipboard.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 3000
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6049431e-29b4"
last-modified: Wed, 10 Mar 2021 22:07:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 15492490
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y016UvoXAFnf6nEArSqHz6d0Edox2WpMgSKx5Ke%2BgqjWCvIfFrl9R%2Fmkd58TDTnG2hJv1BskIttiiXEAHpRWESkPU1ypAwJsfYMCrYXoa%2BOg%2B4Fs%2FtAz1KmqRfL54FCAli7GezUt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d44efbc1c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
30 kB URL cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
IP
File type ASCII text, with very long lines (65370)
Hash 516f35ea42aa797b3b106a8f108edb88
9b1313b221c5d59835c31da0327f4273a2647174
9677264de392aeedd3b391fe53578415c87835405d14068380f9bf3970a48286
GET /ajax/libs/filepond/4.30.3/filepond.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 29707
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "615c7e96-740b"
last-modified: Tue, 05 Oct 2021 16:34:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 26455058
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BHA2DeG2aEzLFCEqgPq%2FVWkmyc%2ByHvnn7aRtQhh5khSeUpihso54MmDp1ak4CYF%2BfOJDuQPz1BuvAlXqEG3iOw2utv2oSrQQ%2FT%2BGQOEJ9gk5U1d6Xaf8pqf4iRB3OZDo3YeDk0C4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d451fc71c06-OSL
alt-svc: h3=":443"; ma=86400
cdn.jsdelivr.net/npm/sweetalert2@11
19 kB URL cdn.jsdelivr.net/npm/sweetalert2@11
IP
File type ASCII text, with very long lines (44032)
Hash 406c3862879463f6ea61aa435efc6b53
304758fbceb753ecc2506b153d66af2669942317
22c2ed009a181233fce7fc35695519b73765a6c41761c5cf5ea7e4e090f2b7e2
GET /npm/sweetalert2@11 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 11.7.8
x-jsd-version-type: version
etag: W/"fd71-MEdY+863U+zCUGsVPWavJmmUIxc"
content-encoding: br
accept-ranges: bytes
date: Tue, 30 May 2023 01:46:10 GMT
age: 8387
x-served-by: cache-fra-eddf8230029-FRA, cache-bma1667-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 19323
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
1.5 kB URL ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 2903644e1cd4bf0651b9f2407309ea34
1caff9161efd8c0a89d5bb243ee9270b73a32d5a
ed410a39f445e56390acdfbb442236cfb4f5edd1d2b466acf923bf43153f3e72
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 01:46:10 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "DFC4ABD0BB13D2EAEF1253B9ABF30FEE5BA13F45"
Expires: Tue, 30 May 2023 12:00:00 GMT
Last-Modified: Tue, 30 May 2023 00:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2743
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cf34d45bb59b51e-OSL
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
28 kB URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5812394
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FsbakLdSUHiFKU%2BC1Ym7EjxdhNzoYc79iB2%2B2MIW7P2BXHbwNHXfUSp1enNiMABvlHrDyNH4G7VIp4gaDBxIGM8XvOagUUuamPAJX4oGIjNz4icnh8xdEGGr9UN26%2BDUnY%2FMKMHE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d45cff41c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
28 kB URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5812394
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HjFw6iQh5DC93pYKWVnsP4a5qFx%2FzHaPADjQs3XOXxFPyeXbeDyM%2BZgbcqjuYv13z64BsVywpRhnE7Qj8CLRMqaO8ceSrZOeT%2F%2FwxQ4oremQtFsX11hm9QoHbelKnmgZA%2B5GbTC7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d46c83a1c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
6.0 kB URL cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
IP
File type ASCII text, with very long lines (18706)
Hash 541aecc95a7faeef0fc27558070f3647
0ec7ca4778ba3ccb4d1b1688094720834fbe9ed3
f395875eb5d58c5128c434812cd0a53d438b11536f7fd1577077d8a5c612e1fd
GET /ajax/libs/popper.js/2.10.2/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 6037
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6155af49-1795"
last-modified: Thu, 30 Sep 2021 12:36:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8969364
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yN3h8HZszQWMEtvwQ%2B0iYj9TxPcb1ts5x4WPxq5vDW4bx5pwTbrE5ibuIIz5R9XpBbJ7IjNgQTh2%2Bn1qmR4iexI1L%2F212eFbotGXH%2BUYEu0ktz4CfppjP0iueHhzdinfhYmVny06"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d4708531c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
15 kB URL cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (58940)
Hash 259e416ef6833be43801b8b68a93b008
19080c3b817985336aab5e1ce6925c99803f2efd
70c3d690bdc5ce3b9a1527c46044989a3176e610882fa99f4523e75bc395bcce
GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 14584
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6161dfe3-38f8"
last-modified: Sat, 09 Oct 2021 18:30:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7200735
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K7Lb6qPqvzDFsM71dtXq7Y6mc2khv2gNqYeAAGQU5hX%2BpLmezvEra%2Brv5psGhoJkMsr7wrF3GwGsWVZ8pVi87cW0D%2BwUI8WGL45%2FMNjAdPJHZvNyGrInuWtYTGRGBgUICmM0ruHI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d47586a1c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
3.0 kB URL cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (10584)
Hash 27784b7376dd992368c71b6c5559f358
f86d2ac408c4de0d5281cf91d6ddfb93e5e5d2ff
11be927cda59c8b6019ebbea838285c5beaf21183ea4b83dbd4e4fbf9413ce4a
GET /ajax/libs/clipboard.js/2.0.8/clipboard.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 3000
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6049431e-29b4"
last-modified: Wed, 10 Mar 2021 22:07:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 15492490
expires: Sun, 19 May 2024 01:46:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1U65rxwcWh8KabDNDKS7z%2FIY23Ll1DXKAE9Nc4nY0w6gVmO2ZARNPWkjbuIL9kaT2fhlA3%2F9z2scv%2BnelfmWUyDRaxeUJwHG3UrUEAaEvtXt9OwNh6FR0FtEiEqDR34UrWbgcUTb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d47a8791c06-OSL
alt-svc: h3=":443"; ma=86400
anonymfile.com/img/logo-anon-warning.png
200 OK 41 kB URL GET HTTP/2 anonymfile.com/img/logo-anon-warning.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/z83wg/server.exe
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Hash d52ea6ebcd0b10dcf112a9d6c43ceee0
641e5277e2e079f0e88e2899879fda8882e58d28
77cb73f16f049b51c0a81c12ed878e11efe3b9a71c632a3bdb647d963059532e
GET /img/logo-anon-warning.png HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/z83wg/server.exe
Cookie: XSRF-TOKEN=eyJpdiI6IlFHWW1QV2NoR2xRYmZhYzVqT1ZaK2c9PSIsInZhbHVlIjoiNlB3M09zT1puK1RtTllHZXREN2JHVHhlUm9CVEJxbEh5OHQ1K1VubnN4TWJQWXdIQlYwcHJmbXRMQmFWZEpoSlAyakpyVmRTbzN0MWJhRnh3c1g2dlRyV0RiMGxDS3NnK1ZUU000ZlR6bk9sazdrVGFtTmFXWlM2c0daWFZ1elMiLCJtYWMiOiJlYWIzZjg2OWIyOTYyYWMyMTM5MTE0MTBmNTU5MTBkODE3YjUxNjM5MzJlODVlNzRiMWVkYTVlYWUwZjZmNjAwIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6ImwzazU4OUdNQzdRaCs1dk1jZTUzenc9PSIsInZhbHVlIjoiWjRLRGx2WGx5MkVuSDdWbjBFM3RtaWVpYWNNUGo4M0V5T2xWNHhTYlZJT2F4M3U3SlVDTEsyVGU2ZFJlSVdVSzZRUXVYTjdLQWxXUkVnb3J2ZzUxT0hIUTk2U1hWNjFrQXNuQ0ZyV3F3VWJ3djNCYUlSR3pzWUQ5V3RwOWxJSTIiLCJtYWMiOiI5OWE4MDdhNTA0YzFiNjZlNzZmYWUyZDA3YTY3YmI3OTljYjUwNzYwODkzNWFmMzEzMWMwMWM5YmE3YTUyOGVmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:10 GMT
content-type: image/png
content-length: 40729
last-modified: Fri, 29 Oct 2021 10:50:56 GMT
vary: Accept-Encoding
etag: "617bd210-9f19"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
unpkg.com/filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js
43 kB URL unpkg.com/filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js
IP
Hash 6170d2a086cb1d5769c6fd1f76edf99b
d61c541caceb4e5deb35d8642702b89091a8bb42
6fc678b64782a17a266b5675e195be5956efd7513fd228143901b427983df928
GET /filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 30 May 2023 01:46:10 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1d07-1hxUHKzrTl3rNdhkJwK4kJGou0I"
via: 1.1 fly.io
fly-request-id: 01G2PJZCDRWWWP671QTKZ7W61J-fra
cf-cache-status: HIT
age: 1702110
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cf34d45ce06b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2
123 kB URL cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 122760, version 768.66\012- data
Size 123 kB (122760 bytes)
Hash d1bea16f470ff27ca26131a867131fda
c1e34985d239716f1f236b932f2ecf4fb4c167d2
57deb9ccde6d49564a916cc58a799d8ebd793c7aff69a7f3cce48cbfb0c48777
GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 122760
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "61498362-1df88"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1566643
expires: Sun, 19 May 2024 01:46:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c8O8JiDIOiSZAxVQjG7X0QxMF%2BzVjoGBY1AudC%2FNAdz%2FmL5ScsS2AbutKRVQFjjISF%2FiZeSPZeNDx5pEDo6Igx5bPl9iMPmP8%2FAqCeFyjmP74oyA3wm3a9Ioyi30TFKFYqHEZiZH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d4c09a01c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2
24 kB URL cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23456, version 768.66\012- data
Hash e3e5eef95eb3652d939b8c86ecb47fac
ff36e7b2a956a05de0b94dbe7b1bf7e2d6d44cb2
445189de22489c06a549b75c8f8e95cc56639d4128cd72e76896b4d2a7c40ce2
GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 23456
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "61498362-5ba0"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5805475
expires: Sun, 19 May 2024 01:46:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V49aI204aTkZ%2FiHbi0cErbUytL%2FlnjPEnyYReBbHc9fKO30LQVuSzzCublp0byOgakiLyoZjbGqi1OYEojkZwC%2B88SHC%2FWXYZRfDTVmidh%2B3LC3CKHy0e5YZ2R2nNxQXe9faZodG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d4c49ba1c06-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2
105 kB URL cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 105264, version 768.66\012- data
Size 105 kB (105264 bytes)
Hash ef9332780500ea981e97dff51cc30669
4020ed1a099b98c421f09ceb9a92f4a1d8d5d9c8
ec372177b8e8df39d755e16551dfbbddcc53938ca52765fd730d0925885c964e
GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 105264
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "61498362-19b30"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 896290
expires: Sun, 19 May 2024 01:46:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KFNNAdzKQlp7MhX3jtZp2AnLhkRG%2FhC4VqcJM4hQ8hDhniYsqKgqFYMQL%2B5LMdM2crSXsEMh6JIl5p5Xtq7MQjNWBAONHZtnThtNM0UHgZUs3H0OaDnUEtea6Zhfh1rBldz822bf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cf34d4c49bb1c06-OSL
alt-svc: h3=":443"; ma=86400
unpkg.com/filepond-plugin-file-validate-type/dist/filepond-plugin-file-validate-type.js
2.3 kB URL unpkg.com/filepond-plugin-file-validate-type/dist/filepond-plugin-file-validate-type.js
IP
Hash 2787712f86abb80cee68f9f3a1c67dba
a040c7076bfd0853cbec530ccf733db2688615a9
5311c67abc1329cf5b2710b55cc0521cffd82f9172768ba7b64d23dae3339e74
GET /filepond-plugin-file-validate-type/dist/filepond-plugin-file-validate-type.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 30 May 2023 01:46:10 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01H1N5B1TKFWCZZVEBZ7CN51ZY-arn
cf-cache-status: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cf34d453dbbb4f1-OSL
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=f507de1e9ceb443d874b5a8295049ced
65 B URL my.rtmark.net/gid.js?userId=f507de1e9ceb443d874b5a8295049ced
IP
File type JSON data\012- , ASCII text
Hash e7319ebfd20c111ff8f56ff6704d1a06
2c8737640749ab7145a5cae38cf2006a58b383a4
1addf4f3abb572751a9d7087763fc59364b5f41717c425e7e1e0a4e969d7f715
GET /gid.js?userId=f507de1e9ceb443d874b5a8295049ced HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f507de1e9ceb443d874b5a8295049ced; expires=Wed, 29 May 2024 01:46:11 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibrapush.com/zone?pub=0&zone_id=5307590&is_mobile=false&domain=anonymfile.com&var=&ymid=&var_3=
880 B URL ibrapush.com/zone?pub=0&zone_id=5307590&is_mobile=false&domain=anonymfile.com&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (879)
Hash 9a79eb532be05b25b171e663df059d41
a95d4b1aa942f0e3ceebf9e35d82f09903dc3f86
16b800016f6a5fdbc08640d372447ac8794feab17f688afbbd3131e381352ede
GET /zone?pub=0&zone_id=5307590&is_mobile=false&domain=anonymfile.com&var=&ymid=&var_3= HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: 8521494310b2fe164138d50296d85af0
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ibrapush.com/custom
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
ibrapush.com/custom
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
ibrapush.com/custom
39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 381
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 6d8df6ef527cf4cd1023cc9eb3cd188d
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ibrapush.com/custom
39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 761
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 1114534071414ec43b50edc16601d533
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
anonymfile.com/sw.js
5.5 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4320)
Hash 012a168f10ba4cf6f084fc9855c72974
9b9c594e72bf88f5e2e3d3219cb009f7ef09a7f3
30a7c295027e2261b505fb652a69948a40a1f7c1eafeecef064ce6d68c157812
GET /sw.js HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/z83wg/server.exe
Cookie: XSRF-TOKEN=eyJpdiI6IlFHWW1QV2NoR2xRYmZhYzVqT1ZaK2c9PSIsInZhbHVlIjoiNlB3M09zT1puK1RtTllHZXREN2JHVHhlUm9CVEJxbEh5OHQ1K1VubnN4TWJQWXdIQlYwcHJmbXRMQmFWZEpoSlAyakpyVmRTbzN0MWJhRnh3c1g2dlRyV0RiMGxDS3NnK1ZUU000ZlR6bk9sazdrVGFtTmFXWlM2c0daWFZ1elMiLCJtYWMiOiJlYWIzZjg2OWIyOTYyYWMyMTM5MTE0MTBmNTU5MTBkODE3YjUxNjM5MzJlODVlNzRiMWVkYTVlYWUwZjZmNjAwIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6ImwzazU4OUdNQzdRaCs1dk1jZTUzenc9PSIsInZhbHVlIjoiWjRLRGx2WGx5MkVuSDdWbjBFM3RtaWVpYWNNUGo4M0V5T2xWNHhTYlZJT2F4M3U3SlVDTEsyVGU2ZFJlSVdVSzZRUXVYTjdLQWxXUkVnb3J2ZzUxT0hIUTk2U1hWNjFrQXNuQ0ZyV3F3VWJ3djNCYUlSR3pzWUQ5V3RwOWxJSTIiLCJtYWMiOiI5OWE4MDdhNTA0YzFiNjZlNzZmYWUyZDA3YTY3YmI3OTljYjUwNzYwODkzNWFmMzEzMWMwMWM5YmE3YTUyOGVmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
date: Tue, 30 May 2023 01:46:10 GMT
x-page-speed: 1.13.35.2-0
cache-control: max-age=0, no-cache
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash a450f53210ba1c053c5a4893c9e71c57
3d778e245fc7572e7d5198f3d8ba3aa951a30684
e951d9d88cbd91de7866d2d66ee7487408082844501abdc9a7f174409cba2521
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 01:46:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 28 May 2023 03:49:40 GMT
Expires: Sun, 04 Jun 2023 03:49:39 GMT
Etag: "3d778e245fc7572e7d5198f3d8ba3aa951a30684"
Cache-Control: max-age=440126,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cf34d504cb90b41-OSL
tzegilo.com/stattag.js
6.9 kB IP
File type ASCII text, with very long lines (17479), with no line terminators
Hash dd2f9f2bb1e1c74b905556d0a7bc5545
0c831c8c56da8167b9e2dfd1d3eb3288348da85d
63f957dde1ae04a83eaff7e442e693725562c4aa1062bc072b7509640ec4f663
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:59 GMT
etag: W/"646736cf-4447"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1146
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lNi1jGSJvL2yRQAv%2BK5bOxD6yZOhhFXlgqfmp0MwCEraxjio6n6C2OEH8WvgPxEe9LpIJofwpzSwRUouDPq5DB8ID2Yb18cJ7YplM6udHwxIEWLKluUfiRBbzRFfAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf34d4f3f5c0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
12 B URL fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1318
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 30 May 2023 01:46:33 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://anonymfile.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://anonymfile.com/z83wg/server.exe
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash 88c62b6fb891adef3a11b2364d2e19ad
6cc12fbcedb645dd7e6e4b2253b1d48a17e0b718
20ede34a3946332d5f535c55c81717dc748d79d207f380a344ecb27b3643f971
Analyzer Verdict Alert quad9 Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 496
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: b53ea6fbd71d05cbf91499ffe717be7d
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
nanouwho.com/1?z=5307589
15 kB IP
File type ASCII text, with very long lines (38800)
Hash 32ee94f650b828a7ae90826bad6d43cd
e77e877ac7dcea8c83480cfb01f538ea352fa014
6e59cd0d8003b02be8d723fa8fc2fa9465a4f1e3ca51632393d8075016b01e1f
GET /1?z=5307589 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:11 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: c9415ee7876385a7ac4f3d42b58a5472
access-control-expose-headers: X-Sc
x-sc: LHyXNxdA0q7NVq36umhlSbC29o3_Yv5qwLXT_BCUCrgH8WzITKUrDQqoMIRz03PSYMLwZmYAodj7MELLdX_G69cPYaI=
set-cookie: scm=1; expires=Wed, 29 May 2024 01:46:11 GMT; secure; SameSite=None
OAID=2bc5eb3b560a4c048ec1b24365606c79; expires=Wed, 29 May 2024 01:46:11 GMT; secure; SameSite=None
oaidts=1685411171; expires=Wed, 29 May 2024 01:46:11 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
nanouwho.com/9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=f507de1e9ceb443d874b5a8295049ced
0 B URL nanouwho.com/9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=f507de1e9ceb443d874b5a8295049ced
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=f507de1e9ceb443d874b5a8295049ced HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 30 May 2023 01:46:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
nanouwho.com/11?rnd=28064204&z=5307589&b=17467054&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=vtxEzNLbv9d-UzrQIYZMfwg_0ws0fA-H3-dDP9HxAEEaXYPRx8IsmgKGtvKH1F37znNrGSig6l8pw8Hwt29HrP7Y94po0XGHkm1vrRLK8rl_tR51O3z1ewghkmy0eX7equtplHgerxlFsq1sJYC_55rKdFsAOXC_9tn8xcav050w6h2tNL0YrlTok4nZ1v_1yDRnsHBs6v9Z_E468kfe0M0euL9DJSmHz-3VS2-ZiJK57mmwnK-4k5VHKlhWGbjGoP1Hst3-B7ezEbyqXsJqOYSz4ph_FETe6WmiF8-aKCQ_IaV1ZdzXdTa-nZ8PQaC6wrfQ4GsBpjMGvyv9CAiQzKRXf0RIzy2VFfvBZn6XGwf1RZR5HBxO8XGm_jFrOVKbvBU-sM4VRTKPdtg-r3WLLyoJI90BLTF5Ol71csnuJjqcBxDXOZR_khtB9IFThqzmmbyiRu_Nf2ChbALha9T7D1UY3J0v3M319zw_Mpm0KYAztiihdoKhG0zowTQ2uBQfPi3TkpiktbdQ3mUyeOfHbKRAeGsKKiBS_egtdPh2ZS3eIVVP4XalMXdfCgQLgzEYNtd6nxFcpMz7S5giRbiNRRu208Ekjtq5jx9NQVLSZ97PZea6H89UfO5RgnbbKR8fIivl9d4mN7UCPd3-ooS29xPheXAm3_5kQzglfw==&ruid=246c1074-df0b-42d6-8378-62c0a25f7be5&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=103
0 B URL nanouwho.com/11?rnd=28064204&z=5307589&b=17467054&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=vtxEzNLbv9d-UzrQIYZMfwg_0ws0fA-H3-dDP9HxAEEaXYPRx8IsmgKGtvKH1F37znNrGSig6l8pw8Hwt29HrP7Y94po0XGHkm1vrRLK8rl_tR51O3z1ewghkmy0eX7equtplHgerxlFsq1sJYC_55rKdFsAOXC_9tn8xcav050w6h2tNL0YrlTok4nZ1v_1yDRnsHBs6v9Z_E468kfe0M0euL9DJSmHz-3VS2-ZiJK57mmwnK-4k5VHKlhWGbjGoP1Hst3-B7ezEbyqXsJqOYSz4ph_FETe6WmiF8-aKCQ_IaV1ZdzXdTa-nZ8PQaC6wrfQ4GsBpjMGvyv9CAiQzKRXf0RIzy2VFfvBZn6XGwf1RZR5HBxO8XGm_jFrOVKbvBU-sM4VRTKPdtg-r3WLLyoJI90BLTF5Ol71csnuJjqcBxDXOZR_khtB9IFThqzmmbyiRu_Nf2ChbALha9T7D1UY3J0v3M319zw_Mpm0KYAztiihdoKhG0zowTQ2uBQfPi3TkpiktbdQ3mUyeOfHbKRAeGsKKiBS_egtdPh2ZS3eIVVP4XalMXdfCgQLgzEYNtd6nxFcpMz7S5giRbiNRRu208Ekjtq5jx9NQVLSZ97PZea6H89UfO5RgnbbKR8fIivl9d4mN7UCPd3-ooS29xPheXAm3_5kQzglfw==&ruid=246c1074-df0b-42d6-8378-62c0a25f7be5&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=103
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /11?rnd=28064204&z=5307589&b=17467054&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=vtxEzNLbv9d-UzrQIYZMfwg_0ws0fA-H3-dDP9HxAEEaXYPRx8IsmgKGtvKH1F37znNrGSig6l8pw8Hwt29HrP7Y94po0XGHkm1vrRLK8rl_tR51O3z1ewghkmy0eX7equtplHgerxlFsq1sJYC_55rKdFsAOXC_9tn8xcav050w6h2tNL0YrlTok4nZ1v_1yDRnsHBs6v9Z_E468kfe0M0euL9DJSmHz-3VS2-ZiJK57mmwnK-4k5VHKlhWGbjGoP1Hst3-B7ezEbyqXsJqOYSz4ph_FETe6WmiF8-aKCQ_IaV1ZdzXdTa-nZ8PQaC6wrfQ4GsBpjMGvyv9CAiQzKRXf0RIzy2VFfvBZn6XGwf1RZR5HBxO8XGm_jFrOVKbvBU-sM4VRTKPdtg-r3WLLyoJI90BLTF5Ol71csnuJjqcBxDXOZR_khtB9IFThqzmmbyiRu_Nf2ChbALha9T7D1UY3J0v3M319zw_Mpm0KYAztiihdoKhG0zowTQ2uBQfPi3TkpiktbdQ3mUyeOfHbKRAeGsKKiBS_egtdPh2ZS3eIVVP4XalMXdfCgQLgzEYNtd6nxFcpMz7S5giRbiNRRu208Ekjtq5jx9NQVLSZ97PZea6H89UfO5RgnbbKR8fIivl9d4mN7UCPd3-ooS29xPheXAm3_5kQzglfw==&ruid=246c1074-df0b-42d6-8378-62c0a25f7be5&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=103 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: scm=1; OAID=f507de1e9ceb443d874b5a8295049ced; oaidts=1685411171
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:12 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: a4f40fae051386c0105451f166de34f0
access-control-expose-headers: X-Sc
set-cookie: OAID=f507de1e9ceb443d874b5a8295049ced; expires=Wed, 29 May 2024 01:46:12 GMT; secure; SameSite=None
oaidts=1685411171; expires=Wed, 29 May 2024 01:46:12 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
offerimage.com/www/images/61e3e972c08bdf71568f820339ae5633.jpg
14 kB URL offerimage.com/www/images/61e3e972c08bdf71568f820339ae5633.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 61e3e972c08bdf71568f820339ae5633
62c5aa78c334ea2de454f1062468d390ca910b2e
120363ce44c7034d0080dfe237c7ff77cd6a727d6f2451c54727a73c3425c2c2
GET /www/images/61e3e972c08bdf71568f820339ae5633.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 30 May 2023 01:46:12 GMT
content-type: image/jpeg
content-length: 14137
cache-control: max-age=86400
cf-bgj: h2pri
etag: "64663d6c-3739"
expires: Tue, 30 May 2023 15:50:21 GMT
last-modified: Thu, 18 May 2023 14:59:56 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 35751
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf34d51fef61bfe-OSL
X-Firefox-Spdy: h2
unphionetor.com/fv.js?t=72747&cb=1721767485
2.2 kB URL unphionetor.com/fv.js?t=72747&cb=1721767485
IP
File type ASCII text, with very long lines (5213), with no line terminators
Hash 563d777535ce88943a94a6be86f378c8
8753745424d367275e3fe55a5661fe51b1e1fb72
0f467a48a494f7f63968707dc43785b728d0c17f93c12937c1e5b12798f3a98a
GET /fv.js?t=72747&cb=1721767485 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:12 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 8ebb136e91e4a20756a6bb276cfefdb3
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
interbuzznews.com/contents/s/c7/23/ce/2ea2df06b6b6d5508aa22bb7de/01442556848691.png
90 kB URL interbuzznews.com/contents/s/c7/23/ce/2ea2df06b6b6d5508aa22bb7de/01442556848691.png
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash c723ce2ea2df06b6b6d5508aa22bb7de
dff9bac1f8506128394c88b2071639656eaab989
035f183ca15e39a37edfbee4a5fa72a0fcc55488196709e24e4eea5ae9cdcc7b
GET /contents/s/c7/23/ce/2ea2df06b6b6d5508aa22bb7de/01442556848691.png HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D513391999%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3DvtxEzNLbv9d-UzrQIYZMfwg_0ws0fA-H3-dDP9HxAEEaXYPRx8IsmgKGtvKH1F37znNrGSig6l8pw8Hwt29HrP7Y94po0XGHkm1vrRLK8rl_tR51O3z1ewghkmy0eX7equtplHgerxlFsq1sJYC_55rKdFsAOXC_9tn8xcav050w6h2tNL0YrlTok4nZ1v_1yDRnsHBs6v9Z_E468kfe0M0euL9DJSmHz-3VS2-ZiJK57mmwnK-4k5VHKlhWGbjGoP1Hst3-B7ezEbyqXsJqOYSz4ph_FETe6WmiF8-aKCQ_IaV1ZdzXdTa-nZ8PQaC6wrfQ4GsBpjMGvyv9CAiQzKRXf0RIzy2VFfvBZn6XGwf1RZR5HBxO8XGm_jFrOVKbvBU-sM4VRTKPdtg-r3WLLyoJI90BLTF5Ol71csnuJjqcBxDXOZR_khtB9IFThqzmmbyiRu_Nf2ChbALha9T7D1UY3J0v3M319zw_Mpm0KYAztiihdoKhG0zowTQ2uBQfPi3TkpiktbdQ3mUyeOfHbKRAeGsKKiBS_egtdPh2ZS3eIVVP4XalMXdfCgQLgzEYNtd6nxFcpMz7S5giRbiNRRu208Ekjtq5jx9NQVLSZ97PZea6H89UfO5RgnbbKR8fIivl9d4mN7UCPd3-ooS29xPheXAm3_5kQzglfw%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D246c1074-df0b-42d6-8378-62c0a25f7be5%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252Fz83wg%252Fserver.exe%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:12 GMT
content-type: image/png
content-length: 90392
last-modified: Fri, 14 Apr 2023 06:28:26 GMT
vary: Accept-Encoding
etag: "6438f28a-16118"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D513391999%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3DvtxEzNLbv9d-UzrQIYZMfwg_0ws0fA-H3-dDP9HxAEEaXYPRx8IsmgKGtvKH1F37znNrGSig6l8pw8Hwt29HrP7Y94po0XGHkm1vrRLK8rl_tR51O3z1ewghkmy0eX7equtplHgerxlFsq1sJYC_55rKdFsAOXC_9tn8xcav050w6h2tNL0YrlTok4nZ1v_1yDRnsHBs6v9Z_E468kfe0M0euL9DJSmHz-3VS2-ZiJK57mmwnK-4k5VHKlhWGbjGoP1Hst3-B7ezEbyqXsJqOYSz4ph_FETe6WmiF8-aKCQ_IaV1ZdzXdTa-nZ8PQaC6wrfQ4GsBpjMGvyv9CAiQzKRXf0RIzy2VFfvBZn6XGwf1RZR5HBxO8XGm_jFrOVKbvBU-sM4VRTKPdtg-r3WLLyoJI90BLTF5Ol71csnuJjqcBxDXOZR_khtB9IFThqzmmbyiRu_Nf2ChbALha9T7D1UY3J0v3M319zw_Mpm0KYAztiihdoKhG0zowTQ2uBQfPi3TkpiktbdQ3mUyeOfHbKRAeGsKKiBS_egtdPh2ZS3eIVVP4XalMXdfCgQLgzEYNtd6nxFcpMz7S5giRbiNRRu208Ekjtq5jx9NQVLSZ97PZea6H89UfO5RgnbbKR8fIivl9d4mN7UCPd3-ooS29xPheXAm3_5kQzglfw%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D246c1074-df0b-42d6-8378-62c0a25f7be5%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252Fz83wg%252Fserver.exe%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
200 OK 594 kB URL GET HTTP/2 interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D513391999%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3DvtxEzNLbv9d-UzrQIYZMfwg_0ws0fA-H3-dDP9HxAEEaXYPRx8IsmgKGtvKH1F37znNrGSig6l8pw8Hwt29HrP7Y94po0XGHkm1vrRLK8rl_tR51O3z1ewghkmy0eX7equtplHgerxlFsq1sJYC_55rKdFsAOXC_9tn8xcav050w6h2tNL0YrlTok4nZ1v_1yDRnsHBs6v9Z_E468kfe0M0euL9DJSmHz-3VS2-ZiJK57mmwnK-4k5VHKlhWGbjGoP1Hst3-B7ezEbyqXsJqOYSz4ph_FETe6WmiF8-aKCQ_IaV1ZdzXdTa-nZ8PQaC6wrfQ4GsBpjMGvyv9CAiQzKRXf0RIzy2VFfvBZn6XGwf1RZR5HBxO8XGm_jFrOVKbvBU-sM4VRTKPdtg-r3WLLyoJI90BLTF5Ol71csnuJjqcBxDXOZR_khtB9IFThqzmmbyiRu_Nf2ChbALha9T7D1UY3J0v3M319zw_Mpm0KYAztiihdoKhG0zowTQ2uBQfPi3TkpiktbdQ3mUyeOfHbKRAeGsKKiBS_egtdPh2ZS3eIVVP4XalMXdfCgQLgzEYNtd6nxFcpMz7S5giRbiNRRu208Ekjtq5jx9NQVLSZ97PZea6H89UfO5RgnbbKR8fIivl9d4mN7UCPd3-ooS29xPheXAm3_5kQzglfw%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D246c1074-df0b-42d6-8378-62c0a25f7be5%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252Fz83wg%252Fserver.exe%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
IP
Requested by https://anonymfile.com/z83wg/server.exe
Certificate IssuerLet's Encrypt
Subjectinterbuzznews.com
FingerprintDA:B3:31:4B:83:FF:0A:17:76:49:8A:B6:78:63:17:E4:F5:34:DD:4F
ValiditySat, 15 Apr 2023 05:39:38 GMT - Fri, 14 Jul 2023 05:39:37 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (45040)
Size 594 kB (594355 bytes)
Hash b7e0d604532767efbe39d8fc62b0a167
612bd3aa06c96aeb7b4e06c0e648e0b2b185587e
00bd78e499f68aeb3daade3bace83150da2a0ad9f141f4d2dfd26c42ae0b089d
GET /?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D513391999%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3DvtxEzNLbv9d-UzrQIYZMfwg_0ws0fA-H3-dDP9HxAEEaXYPRx8IsmgKGtvKH1F37znNrGSig6l8pw8Hwt29HrP7Y94po0XGHkm1vrRLK8rl_tR51O3z1ewghkmy0eX7equtplHgerxlFsq1sJYC_55rKdFsAOXC_9tn8xcav050w6h2tNL0YrlTok4nZ1v_1yDRnsHBs6v9Z_E468kfe0M0euL9DJSmHz-3VS2-ZiJK57mmwnK-4k5VHKlhWGbjGoP1Hst3-B7ezEbyqXsJqOYSz4ph_FETe6WmiF8-aKCQ_IaV1ZdzXdTa-nZ8PQaC6wrfQ4GsBpjMGvyv9CAiQzKRXf0RIzy2VFfvBZn6XGwf1RZR5HBxO8XGm_jFrOVKbvBU-sM4VRTKPdtg-r3WLLyoJI90BLTF5Ol71csnuJjqcBxDXOZR_khtB9IFThqzmmbyiRu_Nf2ChbALha9T7D1UY3J0v3M319zw_Mpm0KYAztiihdoKhG0zowTQ2uBQfPi3TkpiktbdQ3mUyeOfHbKRAeGsKKiBS_egtdPh2ZS3eIVVP4XalMXdfCgQLgzEYNtd6nxFcpMz7S5giRbiNRRu208Ekjtq5jx9NQVLSZ97PZea6H89UfO5RgnbbKR8fIivl9d4mN7UCPd3-ooS29xPheXAm3_5kQzglfw%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D246c1074-df0b-42d6-8378-62c0a25f7be5%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252Fz83wg%252Fserver.exe%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:12 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.26
set-cookie: reverse=04nsS_bgYRF5JU0P231-kXJH2UFhFst0LbmSzQ6-ClQ; expires=Tue, 30-May-2023 02:46:12 GMT; Max-Age=3600; path=/
OAID=826fb8f52c95976897b27313571ace8e; expires=Tue, 26-Oct-2077 03:32:24 GMT; Max-Age=1717033572; path=/
oaidts=1685411172; expires=Tue, 26-Oct-2077 03:32:24 GMT; Max-Age=1717033572; path=/
syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
0 B URL unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /vbl?t=72747&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interbuzznews.com
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 30 May 2023 01:46:12 GMT
access-control-allow-origin: https://interbuzznews.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 722edbf18d06a6326d9f69101eac5588
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibrapush.com/event
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:13 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
ibrapush.com/event
94 B IP
File type JSON data\012- , ASCII text
Hash 911d84dc0e399cb90725210914ebea31
e4180cc07d873161b76ef20a23453d3c4b46cc91
d645272d7b3d591a4404dda4f0b9c6ed3bf7c9970f735db39a6e7d73f5223802
POST /event HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 2657
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:13 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: ac67853c7073bd5f7b7283d1e49df41a
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=107310da55d74012869fa0b4142d210e&zoneId=5307590&checkDuplicate=true&ymid=&var=
65 B URL my.rtmark.net/gid.js?pub=0&userId=107310da55d74012869fa0b4142d210e&zoneId=5307590&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash e7319ebfd20c111ff8f56ff6704d1a06
2c8737640749ab7145a5cae38cf2006a58b383a4
1addf4f3abb572751a9d7087763fc59364b5f41717c425e7e1e0a4e969d7f715
GET /gid.js?pub=0&userId=107310da55d74012869fa0b4142d210e&zoneId=5307590&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Cookie: ID=f507de1e9ceb443d874b5a8295049ced
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:13 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f507de1e9ceb443d874b5a8295049ced; expires=Wed, 29 May 2024 01:46:13 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://anonymfile.com/z83wg/server.exe
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash 0abaa06a8ae7c78eec6d2cab3cb9ebbe
70c31325dbefbe9d8236dae707512731ca45cb39
35a75dfc23fee542cabbf02d6875f114a851f521a95c8e8d389e445a4fb8f9ad
Analyzer Verdict Alert quad9 Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 496
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:13 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: ccaf4cdaa64773cee7089b6f0952a935
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ibrapush.com/custom
39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 378
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:13 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 032bc0ce2821d2c07a969597e3276dd1
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
betotodilea.com/impression/XKbqa9ncFbQ1qudPm8E8QRp4NKhYb8VJOOYmiYNjmJpkoTLwFKFEp2ImUVrVSFTAp7qOntGBRglMLxFSABRkeDvEu6iCyDTciBurYNSYEOp4nJ_PMHnsnmayBBNzte9aBxRtJ7uRxV6GH3-JhcwvafZVTaIcSwN21JxtxQoIHjS-qHpkJsOX87C5mFaSY-aHZ4Xx-0TnAD8w5Fejf50O7WucVwxWhFo1tflOew63bgGNtNIMdM0Ly4Bq-olR_WMfsN7jYlhltUQTjqaQNHcIUXAdK4_VSSkNMPNr4LEhjefuDP2sx3438DZLAwv71gd1UKpG-lHbrt6r1XH2p13C8fPMX0HF35JOKG4fA3WXctoJaSp9N9XxhIO8mCPahIpp_0RWJwK46pIquvCF2SrdTN5pIYUsZqCYYmUcbYL9JX-BGDBBSxUqCXqCINo9pXVSXOY69ANdXMuKknDyXGX649JR17bWRyeIti5z6ck5Tv5ycd8-G1O8zEr3kzJEvCKxCoPAmjEpYsprlg2boD0YQXmomiN6Kij3tAKiaAhiCzH_qcm_hEfTibRNx8fGWrkItzL1LZeyLXQpxN2v1ig1rQ==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
43 B URL betotodilea.com/impression/XKbqa9ncFbQ1qudPm8E8QRp4NKhYb8VJOOYmiYNjmJpkoTLwFKFEp2ImUVrVSFTAp7qOntGBRglMLxFSABRkeDvEu6iCyDTciBurYNSYEOp4nJ_PMHnsnmayBBNzte9aBxRtJ7uRxV6GH3-JhcwvafZVTaIcSwN21JxtxQoIHjS-qHpkJsOX87C5mFaSY-aHZ4Xx-0TnAD8w5Fejf50O7WucVwxWhFo1tflOew63bgGNtNIMdM0Ly4Bq-olR_WMfsN7jYlhltUQTjqaQNHcIUXAdK4_VSSkNMPNr4LEhjefuDP2sx3438DZLAwv71gd1UKpG-lHbrt6r1XH2p13C8fPMX0HF35JOKG4fA3WXctoJaSp9N9XxhIO8mCPahIpp_0RWJwK46pIquvCF2SrdTN5pIYUsZqCYYmUcbYL9JX-BGDBBSxUqCXqCINo9pXVSXOY69ANdXMuKknDyXGX649JR17bWRyeIti5z6ck5Tv5ycd8-G1O8zEr3kzJEvCKxCoPAmjEpYsprlg2boD0YQXmomiN6Kij3tAKiaAhiCzH_qcm_hEfTibRNx8fGWrkItzL1LZeyLXQpxN2v1ig1rQ==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/XKbqa9ncFbQ1qudPm8E8QRp4NKhYb8VJOOYmiYNjmJpkoTLwFKFEp2ImUVrVSFTAp7qOntGBRglMLxFSABRkeDvEu6iCyDTciBurYNSYEOp4nJ_PMHnsnmayBBNzte9aBxRtJ7uRxV6GH3-JhcwvafZVTaIcSwN21JxtxQoIHjS-qHpkJsOX87C5mFaSY-aHZ4Xx-0TnAD8w5Fejf50O7WucVwxWhFo1tflOew63bgGNtNIMdM0Ly4Bq-olR_WMfsN7jYlhltUQTjqaQNHcIUXAdK4_VSSkNMPNr4LEhjefuDP2sx3438DZLAwv71gd1UKpG-lHbrt6r1XH2p13C8fPMX0HF35JOKG4fA3WXctoJaSp9N9XxhIO8mCPahIpp_0RWJwK46pIquvCF2SrdTN5pIYUsZqCYYmUcbYL9JX-BGDBBSxUqCXqCINo9pXVSXOY69ANdXMuKknDyXGX649JR17bWRyeIti5z6ck5Tv5ycd8-G1O8zEr3kzJEvCKxCoPAmjEpYsprlg2boD0YQXmomiN6Kij3tAKiaAhiCzH_qcm_hEfTibRNx8fGWrkItzL1LZeyLXQpxN2v1ig1rQ==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: OAID=f507de1e9ceb443d874b5a8295049ced
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:16 GMT
content-type: image/gif
content-length: 43
x-trace-id: e13c46c7d23421c41ea285505651be16
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
betotodilea.com/500/5307588?excludes=17842968&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
0 B URL betotodilea.com/500/5307588?excludes=17842968&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5307588?excludes=17842968&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:16 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
betotodilea.com/500/5307588?excludes=17842968&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
15 kB URL betotodilea.com/500/5307588?excludes=17842968&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash 5e656bb2b3bd377a2847d1a0c9b65c96
32a907ef5eb6fb43e3a63407f9e633faa9510e30
3e8d20d97852a70f4959a1e14594c3fa9d8f0c3724b5568b1820f392ce6c26ec
GET /500/5307588?excludes=17842968&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: OAID=f507de1e9ceb443d874b5a8295049ced
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:16 GMT
content-type: application/javascript
x-trace-id: 5aed95530fbe2168af23940be1a1d2e0
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://anonymfile.com
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=f507de1e9ceb443d874b5a8295049ced; expires=Wed, 29 May 2024 01:46:16 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
offerimage.com/www/images/61e3e972c08bdf71568f820339ae5633.jpg
14 kB URL offerimage.com/www/images/61e3e972c08bdf71568f820339ae5633.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 61e3e972c08bdf71568f820339ae5633
62c5aa78c334ea2de454f1062468d390ca910b2e
120363ce44c7034d0080dfe237c7ff77cd6a727d6f2451c54727a73c3425c2c2
GET /www/images/61e3e972c08bdf71568f820339ae5633.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 30 May 2023 01:46:17 GMT
content-type: image/jpeg
content-length: 14137
cache-control: max-age=86400
cf-bgj: h2pri
etag: "64663d6c-3739"
expires: Tue, 30 May 2023 15:50:21 GMT
last-modified: Thu, 18 May 2023 14:59:56 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 35756
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf34d718f501bfe-OSL
X-Firefox-Spdy: h2
betotodilea.com/impression/uGi_hFNL2t8zYcU3lHfwz9DWjPIp7MlFRVEIWjj5ekPCi45ThOstIYTZLPNYKoA2nml0NYHN5xHJjo4Ld4zFryoMp1-yz9PDyQKzoiFMCWAs3t-DP2jEL5Pyb_VBal0M1ftcZTZbT-PeLLmNrsM_XUa5E4iwdMg-hz9HYpYrYkS54x2MxzHaAqsE0julS5APu_9eZFIbYPU3MhdGKLzIU9xyMKChp1UvmEn5FPr_WNNTl4Xda0dOb2UsnEQQAi0iA6Xk1ng7WbsXoGczkR8wuVtSj5WglcptINPf-TQBjD5x1lG_FLCDbo-c1_HcTe4aE_tluNnPlODyqjNQlrqqhze-kQf7dyB8lTVkq6RWRxdrNWWwB71GZ5HVbHieSJHXJN7E75RV61Zhne0msG1gdFSXhqBy5i0A0DbCklCg1frnDqKhU5ebBcCIXAXwJElpBrQzb8O90z2pTUBckRk8HaNcqV3M4DJdIY4-cS2NUa-rU74SUXcoGanDc2dh9vOk7MVgK6tApwgDTrrH3P5ensjtVbYlwxVI_m2ThP-28Y9_vb-NaXt8Aq1-XdlLXWQBkphs1dzfAXIQTmgavVIHlg==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
43 B URL betotodilea.com/impression/uGi_hFNL2t8zYcU3lHfwz9DWjPIp7MlFRVEIWjj5ekPCi45ThOstIYTZLPNYKoA2nml0NYHN5xHJjo4Ld4zFryoMp1-yz9PDyQKzoiFMCWAs3t-DP2jEL5Pyb_VBal0M1ftcZTZbT-PeLLmNrsM_XUa5E4iwdMg-hz9HYpYrYkS54x2MxzHaAqsE0julS5APu_9eZFIbYPU3MhdGKLzIU9xyMKChp1UvmEn5FPr_WNNTl4Xda0dOb2UsnEQQAi0iA6Xk1ng7WbsXoGczkR8wuVtSj5WglcptINPf-TQBjD5x1lG_FLCDbo-c1_HcTe4aE_tluNnPlODyqjNQlrqqhze-kQf7dyB8lTVkq6RWRxdrNWWwB71GZ5HVbHieSJHXJN7E75RV61Zhne0msG1gdFSXhqBy5i0A0DbCklCg1frnDqKhU5ebBcCIXAXwJElpBrQzb8O90z2pTUBckRk8HaNcqV3M4DJdIY4-cS2NUa-rU74SUXcoGanDc2dh9vOk7MVgK6tApwgDTrrH3P5ensjtVbYlwxVI_m2ThP-28Y9_vb-NaXt8Aq1-XdlLXWQBkphs1dzfAXIQTmgavVIHlg==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/uGi_hFNL2t8zYcU3lHfwz9DWjPIp7MlFRVEIWjj5ekPCi45ThOstIYTZLPNYKoA2nml0NYHN5xHJjo4Ld4zFryoMp1-yz9PDyQKzoiFMCWAs3t-DP2jEL5Pyb_VBal0M1ftcZTZbT-PeLLmNrsM_XUa5E4iwdMg-hz9HYpYrYkS54x2MxzHaAqsE0julS5APu_9eZFIbYPU3MhdGKLzIU9xyMKChp1UvmEn5FPr_WNNTl4Xda0dOb2UsnEQQAi0iA6Xk1ng7WbsXoGczkR8wuVtSj5WglcptINPf-TQBjD5x1lG_FLCDbo-c1_HcTe4aE_tluNnPlODyqjNQlrqqhze-kQf7dyB8lTVkq6RWRxdrNWWwB71GZ5HVbHieSJHXJN7E75RV61Zhne0msG1gdFSXhqBy5i0A0DbCklCg1frnDqKhU5ebBcCIXAXwJElpBrQzb8O90z2pTUBckRk8HaNcqV3M4DJdIY4-cS2NUa-rU74SUXcoGanDc2dh9vOk7MVgK6tApwgDTrrH3P5ensjtVbYlwxVI_m2ThP-28Y9_vb-NaXt8Aq1-XdlLXWQBkphs1dzfAXIQTmgavVIHlg==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: OAID=f507de1e9ceb443d874b5a8295049ced
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:19 GMT
content-type: image/gif
content-length: 43
x-trace-id: 5f1083e03cc5bea9d74f5a5160f89417
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
offerimage.com/www/images/7d763937692f59aea0578ffe58c10ee0.jpeg
200 OK 14 kB URL GET HTTP/2 offerimage.com/www/images/7d763937692f59aea0578ffe58c10ee0.jpeg
IP
Requested by https://anonymfile.com/z83wg/server.exe
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 7d763937692f59aea0578ffe58c10ee0
b3a4cc4fd1a0d8319e59057e535b0b19f1a3b35b
2d7300c572db1683cbc8071be4bbaf31b00954193f6f82d453c99a7a58bd7620
GET /www/images/7d763937692f59aea0578ffe58c10ee0.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 30 May 2023 01:46:20 GMT
content-type: image/jpeg
content-length: 13778
cache-control: max-age=86400
cf-bgj: h2pri
etag: "63888441-35d2"
expires: Tue, 30 May 2023 20:52:05 GMT
last-modified: Thu, 01 Dec 2022 10:38:57 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 17655
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf34d842b841bfe-OSL
X-Firefox-Spdy: h2
betotodilea.com/500/5307588?excludes=&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL OPTIONS HTTP/2 betotodilea.com/500/5307588?excludes=&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://anonymfile.com/z83wg/server.exe
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintC9:DD:16:90:AA:F5:63:38:44:6E:FD:CC:C1:67:99:9F:22:F6:67:66
ValidityWed, 05 Apr 2023 04:47:01 GMT - Tue, 04 Jul 2023 04:47:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5307588?excludes=&oaid=f507de1e9ceb443d874b5a8295049ced&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2Fz83wg%2Fserver.exe&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 01:46:12 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
138.201.48.112
139.45.197.237
104.17.24.14
172.67.22.216
0.0.0.0