anonymfile.com/img/logo-anon-warning.webp
200 OK 15 kB URL GET HTTP/2 anonymfile.com/img/logo-anon-warning.webp
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7b596f481388ac5ef6d74a15a351f6c3
6756e88c0b46cc981b7bbbdaf2ead77bd258a472
cd830cff1dfb9af2181dfe61645addbe21981954713fba54d5875a038e673972
GET /img/logo-anon-warning.webp HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
content-length: 15344
etag: "617d3713-3bf0"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
accept-ranges: bytes
date: Wed, 31 May 2023 07:42:38 GMT
expires: Wed, 31 May 2023 07:47:38 GMT
X-Firefox-Spdy: h2
anonymfile.com/img/main/footer.webp
200 OK 178 kB URL GET HTTP/2 anonymfile.com/img/main/footer.webp
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 178 kB (178070 bytes)
Hash 79ccb3a1b78412a1a530284f45ea7056
626d0494e1bd871e67ecffad44d04ac2343fb7e5
3d4e83b59664d7a779fa777d4ee0e17a1bc09302f9b9cde60815a3142256d8b8
GET /img/main/footer.webp HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
content-length: 178070
etag: "62f35b9c-2b796"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
accept-ranges: bytes
date: Wed, 31 May 2023 07:42:38 GMT
expires: Wed, 31 May 2023 07:47:38 GMT
X-Firefox-Spdy: h2
anonymfile.com/css/theme.min.css
200 OK 64 kB URL GET HTTP/2 anonymfile.com/css/theme.min.css
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 39b5b5383458ebd6836303b6984163e4
17fafe84d08e18a0cf47118d9fcda458dbe5f42a
abbbbd592baeea393e225167bbb79b1d590c9b53236ae0af1dd3ad59e96a9d6f
GET /css/theme.min.css HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:03 GMT
content-type: text/css
last-modified: Fri, 22 Oct 2021 08:15:50 GMT
vary: Accept-Encoding
etag: W/"61727336-921fb"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-encoding: br
cache-control: s-maxage=10
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
200 OK 30 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65370)
Hash 516f35ea42aa797b3b106a8f108edb88
9b1313b221c5d59835c31da0327f4273a2647174
9677264de392aeedd3b391fe53578415c87835405d14068380f9bf3970a48286
GET /ajax/libs/filepond/4.30.3/filepond.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 29707
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "615c7e96-740b"
last-modified: Tue, 05 Oct 2021 16:34:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 26563111
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yWuhbOKiCbtngJLBb%2Bx4EXDKJDGC0K%2BC%2F%2BVhxVRdrrcPZ9xkT%2BX1zuW7txWNL7bDVuxWV2VIUQ748SskSaspW0PrZzxJjcjCE54YlC9qzs%2Bg6Tf%2Fkz0mizOtE6AmL5SUTYYnOGn8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4bb94fb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css
200 OK 14 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65345)
Hash b94102c568b10816907c96d987fc156c
033d2cf8dc346fc5ae26677bb877155ecf3e72e3
81735261671cd094376ce5c6d31058c64fa70ad0f3b0798ffce2f2d8eeb7ab51
GET /ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: text/css; charset=utf-8
content-length: 14374
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61498362-3826"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1144054
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HgNSenbM3iVvzc3qucw8yx9oRCB%2FaLtag%2BZ9xrtYh3HXPvI4xl5cVx7mCebDRZSE6k5%2FHwQZxYYfOkBEQpKMXi015qZvshanbtq9i50GYPwV2FwXihjBU2u31gzIpFCGU5KuI05T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4bfdb20b39-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
200 OK 30 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/filepond/4.30.3/filepond.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65370)
Hash 516f35ea42aa797b3b106a8f108edb88
9b1313b221c5d59835c31da0327f4273a2647174
9677264de392aeedd3b391fe53578415c87835405d14068380f9bf3970a48286
GET /ajax/libs/filepond/4.30.3/filepond.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 29707
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "615c7e96-740b"
last-modified: Tue, 05 Oct 2021 16:34:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 26563111
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WryszBTr5yOXw1QaohXtrJEqBjNpgBNNuNHHujgjlr3lNwiSOoU8prTLjC%2FRzmphHHExosFEPbXdz2j49YGuu80OnQdOWMi1kvicXNXXQnPAPyzow6eqy4vdgBCKDma068Pg6TVY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4c2ddf0b39-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5920447
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CaPH4mCoVRLlA0CZKKrppXuvzNQBs81FdyEC6EXh1xJMCsDgl72aq%2FWQrTjdv1Y7MAOASiO4MRKS8AtEGMAWOvaPIqIi1BUn9UOQarplrQFWxwn%2BIDw6%2FR5xrVAHI5HgxrxhHPxE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4c5e080b39-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
200 OK 6.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (18706)
Hash 541aecc95a7faeef0fc27558070f3647
0ec7ca4778ba3ccb4d1b1688094720834fbe9ed3
f395875eb5d58c5128c434812cd0a53d438b11536f7fd1577077d8a5c612e1fd
GET /ajax/libs/popper.js/2.10.2/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 6037
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6155af49-1795"
last-modified: Thu, 30 Sep 2021 12:36:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 9077417
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DeKfPrt2%2FoimJHA0oDgXMV1xqt6JjDn0dfvgyu6y11flMI9a4iA1Ke7iF98aPM3IiOSh0HzHDYNfitJLrp7LM852LFZ1ifB1XeLrVXAvj27vjrV2Wa77ygA8E%2FmvoOoCuVAD11%2Bw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4c5e0d0b39-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
200 OK 3.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (10584)
Hash 27784b7376dd992368c71b6c5559f358
f86d2ac408c4de0d5281cf91d6ddfb93e5e5d2ff
11be927cda59c8b6019ebbea838285c5beaf21183ea4b83dbd4e4fbf9413ce4a
GET /ajax/libs/clipboard.js/2.0.8/clipboard.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 3000
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6049431e-29b4"
last-modified: Wed, 10 Mar 2021 22:07:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 15600543
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jPKyfDFRWEiICNCxwYtc56eSnSzZLT%2Fmxz92ocsSC%2F4v%2B1BaNNXNfiYveJh3YDAQjOAB6ZSfXNTaEn5m87%2BcRo52KtJWy7mz7AWDmbD%2BgW9eOpi%2FNVv1L%2BUj0A2OrNz2YSfYil0B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4c5e100b39-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
200 OK 15 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (58940)
Hash 259e416ef6833be43801b8b68a93b008
19080c3b817985336aab5e1ce6925c99803f2efd
70c3d690bdc5ce3b9a1527c46044989a3176e610882fa99f4523e75bc395bcce
GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 14584
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6161dfe3-38f8"
last-modified: Sat, 09 Oct 2021 18:30:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7308788
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9sHwYKXriu2ZMj121r4j7Ht%2Flo7lzIs1DT5j4gtSUaYlvEgVez9F6hXms1RVXbH79EymngNkPW%2FoBDIumMIB7p3m0oWbmQ1XN6G0duFh%2B0Wnz9eAGYBlx6q16HygnpuhHKsCuv73"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4c6956b4f4-OSL
alt-svc: h3=":443"; ma=86400
cdn.jsdelivr.net/npm/sweetalert2@11
200 OK 19 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/sweetalert2@11
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
File type ASCII text, with very long lines (43741)
Hash b77b911187acf7dbc43e51e5045b35aa
3b39df9072b502d7ea4d8312e915adb406b06c96
1e2d57894744e595312535ead1879d7de297311acd389e8d15ae8fd12aaf6b6f
GET /npm/sweetalert2@11 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 11.7.9
x-jsd-version-type: version
etag: W/"ffbe-OznfkHK1AtfqTYMS6RWttAawbJY"
content-encoding: br
accept-ranges: bytes
date: Wed, 31 May 2023 07:47:03 GMT
age: 29354
x-served-by: cache-fra-eddf8230029-FRA, cache-bma1679-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 19362
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
1.5 kB URL ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 5e3c44cb11adc0d84fda0c2428972898
635fdc1a25b20674a5317cb8110bb436e246fb9c
d563de8891f3aff4fd1cf647a0ac6ac5e1e0c86794cdbc98fb17a95b85c2a4f5
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 31 May 2023 07:47:03 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "5F9ADC9ADC101D7391C570FA7B914A5EFEA178C1"
Expires: Wed, 31 May 2023 18:00:00 GMT
Last-Modified: Wed, 31 May 2023 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2626
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cfd9b4dce29b518-OSL
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5920447
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KCE10cK%2FQPfZkq3r0wNX93giPiFEkjDbyV5Mevruz2ntvI50IG8ZWJ5E4aqBh1iyv3J324t7pdFV8xe70fNaHtunfT9RhxoWiJakTzdzj7Gz9ebRNY64S5kH25lJXqoJ%2FY1haZqq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4ddb7eb4f4-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5920448
expires: Mon, 20 May 2024 07:47:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VIhY3IXlP%2BpgnmYO9z2S8tvvSnr%2BzhwyfaAPSGJkIiuJPV4MxqpN76ziQ5Baq3PLPaOQD8rCURBoFJmzTs2W3ZgmdYNi1lwnfwHoeszwcQ0BK%2FW0EEKh7c45ySu2Bd1YU7886zKm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4e8c71b4f4-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
200 OK 6.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/2.10.2/umd/popper.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (18706)
Hash 541aecc95a7faeef0fc27558070f3647
0ec7ca4778ba3ccb4d1b1688094720834fbe9ed3
f395875eb5d58c5128c434812cd0a53d438b11536f7fd1577077d8a5c612e1fd
GET /ajax/libs/popper.js/2.10.2/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 6037
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6155af49-1795"
last-modified: Thu, 30 Sep 2021 12:36:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 9077418
expires: Mon, 20 May 2024 07:47:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tNFEugpX51CxZnHGcvno7J8BnN3B8Z9rZDHA1wYcbe3U2vLCIYbA3T5hfuCnQkWTaJlxSV40mv37buQLOpVf7SlQgJSm3nIudJm%2Bv2wl1M90UDzF2wIsIQ7Kg6YSPSC1OIj0pxcR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4eccbab4f4-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
200 OK 15 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (58940)
Hash 259e416ef6833be43801b8b68a93b008
19080c3b817985336aab5e1ce6925c99803f2efd
70c3d690bdc5ce3b9a1527c46044989a3176e610882fa99f4523e75bc395bcce
GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 14584
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6161dfe3-38f8"
last-modified: Sat, 09 Oct 2021 18:30:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7308789
expires: Mon, 20 May 2024 07:47:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RTrdhfnO5TE4mTlV9xFmX73G425MgEfyfopxcJDOK7yyBBkjDUVD1NbWa4kWD%2F2FbU8PgBemF4I74aLn%2FouHFY1cV1fFluxoosvCBqSXq5Yns1Y11pLdLXNYNJS7DNjVcLdJYCIN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4eece1b4f4-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
200 OK 3.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.8/clipboard.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (10584)
Hash 27784b7376dd992368c71b6c5559f358
f86d2ac408c4de0d5281cf91d6ddfb93e5e5d2ff
11be927cda59c8b6019ebbea838285c5beaf21183ea4b83dbd4e4fbf9413ce4a
GET /ajax/libs/clipboard.js/2.0.8/clipboard.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 3000
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6049431e-29b4"
last-modified: Wed, 10 Mar 2021 22:07:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 15600544
expires: Mon, 20 May 2024 07:47:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s1TbeqPkLoQVXdtL5PqFrev3jqSHq4YlTvOtf8czF%2FfulvupiHLu9OpGLKIyUcp8ApeULpKN1N4hiZH0trRh3LzHsPGqk1HbYEvEARA5cosLg2Ul0u58AqDUSAbf8vuYRKhhzmaw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4f2d65b4f4-OSL
alt-svc: h3=":443"; ma=86400
anonymfile.com/img/logo-anon-warning.png
200 OK 41 kB URL GET HTTP/2 anonymfile.com/img/logo-anon-warning.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Hash d52ea6ebcd0b10dcf112a9d6c43ceee0
641e5277e2e079f0e88e2899879fda8882e58d28
77cb73f16f049b51c0a81c12ed878e11efe3b9a71c632a3bdb647d963059532e
GET /img/logo-anon-warning.png HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:04 GMT
content-type: image/png
content-length: 40729
last-modified: Fri, 29 Oct 2021 10:50:56 GMT
vary: Accept-Encoding
etag: "617bd210-9f19"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: s-maxage=10
accept-ranges: bytes
X-Firefox-Spdy: h2
anonymfile.com/img/logo-anon-warning.png
200 OK 41 kB URL GET HTTP/2 anonymfile.com/img/logo-anon-warning.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Hash d52ea6ebcd0b10dcf112a9d6c43ceee0
641e5277e2e079f0e88e2899879fda8882e58d28
77cb73f16f049b51c0a81c12ed878e11efe3b9a71c632a3bdb647d963059532e
GET /img/logo-anon-warning.png HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:04 GMT
content-type: image/png
content-length: 40729
last-modified: Fri, 29 Oct 2021 10:50:56 GMT
vary: Accept-Encoding
etag: "617bd210-9f19"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: s-maxage=10
accept-ranges: bytes
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2
200 OK 123 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 122760, version 768.66\012- data
Size 123 kB (122760 bytes)
Hash d1bea16f470ff27ca26131a867131fda
c1e34985d239716f1f236b932f2ecf4fb4c167d2
57deb9ccde6d49564a916cc58a799d8ebd793c7aff69a7f3cce48cbfb0c48777
GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 122760
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "61498362-1df88"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1674697
expires: Mon, 20 May 2024 07:47:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XEFKde%2F%2BYD0H56lktwZXNCHNik7A2yrx1t%2FCW7CXa6WsAFL7YXRutj2qvOIcacBNhViE6X67LNhsEbI7%2BzaGYA3rv%2BLj1P1ag85GWUi6K%2BXZ1H8aVOyGGZGnIILF4qKx%2FN3qlzNz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b550dacb4f4-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2
200 OK 24 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23456, version 768.66\012- data
Hash e3e5eef95eb3652d939b8c86ecb47fac
ff36e7b2a956a05de0b94dbe7b1bf7e2d6d44cb2
445189de22489c06a549b75c8f8e95cc56639d4128cd72e76896b4d2a7c40ce2
GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 23456
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "61498362-5ba0"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5913529
expires: Mon, 20 May 2024 07:47:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6m1sHsBQMH4g04mze8ZIH9kXKKpwvKRotVr28zjU18Ri51IbY1sbjEPTN5hdLYqCxiohQUIO0EDs2%2FFR9NHza2r%2BUO3ZekBT9fst%2Bj0jUFBzBkHTpVom5cR%2FVBjrqOR%2BNPNwYh7x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b551db1b4f4-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2
200 OK 105 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 105264, version 768.66\012- data
Size 105 kB (105264 bytes)
Hash ef9332780500ea981e97dff51cc30669
4020ed1a099b98c421f09ceb9a92f4a1d8d5d9c8
ec372177b8e8df39d755e16551dfbbddcc53938ca52765fd730d0925885c964e
GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 105264
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "61498362-19b30"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1004344
expires: Mon, 20 May 2024 07:47:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5cIhLT1XtNtwvH%2Fs7uxgKucsJd1bEzEuSfVPUrPDwtvnNB5pTWHeuxYbd2UrIer9%2FznzdZqnWaow3qAYNSRrnw90X7pY7uBsfiI%2BaQsjzJAiYnwjmOhfsrp2HyOEuR7mEj%2FhYCEq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b551db6b4f4-OSL
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=5a68dc6e55b348e3a42e623dec9bd73f
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=5a68dc6e55b348e3a42e623dec9bd73f
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type JSON data\012- , ASCII text
Hash 93ffab623a7b70c1150536bd8efe20cd
4b35c850af573b24c025f11b5d9f6d70e379b3ca
6ec6b0207380083812a3599b89d90e3595b12fe999d6f3e240e96c89486ba0dc
GET /gid.js?userId=5a68dc6e55b348e3a42e623dec9bd73f HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5a68dc6e55b348e3a42e623dec9bd73f; expires=Thu, 30 May 2024 07:47:05 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibrapush.com/zone?pub=0&zone_id=5307590&is_mobile=false&domain=anonymfile.com&var=&ymid=&var_3=
200 OK 880 B URL GET HTTP/2 ibrapush.com/zone?pub=0&zone_id=5307590&is_mobile=false&domain=anonymfile.com&var=&ymid=&var_3=
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
File type JSON data\012- , ASCII text, with very long lines (879)
Hash 9a79eb532be05b25b171e663df059d41
a95d4b1aa942f0e3ceebf9e35d82f09903dc3f86
16b800016f6a5fdbc08640d372447ac8794feab17f688afbbd3131e381352ede
GET /zone?pub=0&zone_id=5307590&is_mobile=false&domain=anonymfile.com&var=&ymid=&var_3= HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: 98f4589861ce2ba2f5425709d478a2aa
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ibrapush.com/custom
200 OK 0 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
ibrapush.com/custom
200 OK 0 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
ibrapush.com/custom
200 OK 39 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 383
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 0fa50115ea9231dc30fd1485ecf4f2c5
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ibrapush.com/custom
200 OK 39 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 759
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: e20a81317bec47662c3324cfb688d618
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
nanouwho.com/1?z=5307589
200 OK 15 kB IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectnanouwho.com
Fingerprint17:8A:69:ED:47:86:DA:AC:CF:48:90:92:79:0C:F0:AC:0C:E8:8C:84
ValidityThu, 25 May 2023 04:38:28 GMT - Wed, 23 Aug 2023 04:38:27 GMT
File type ASCII text, with very long lines (38800)
Hash 778086fd0dd773ca3559cbafdc8ce8a6
26ef29efbab41795b00b20fb2e028195e25c20a2
b45b326a0991d2058f39766cc26e4737ba2ae37eb0bd81120ffa7fe3ac75b41c
GET /1?z=5307589 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: b3788b012e99c45fac50f6c3a1abf9e1
access-control-expose-headers: X-Sc
x-sc: wemiRCrmIEmEUSaks4SXoIsvUUH621pL9UYSvuhA_OiQnmafEvt-lfCK76fB1lVbOgHHeNxYN3NLh4m8vACFx67GJ1A=
set-cookie: scm=1; expires=Thu, 30 May 2024 07:47:05 GMT; secure; SameSite=None
OAID=483bc4a4145e4f3e838684e0cd2b272d; expires=Thu, 30 May 2024 07:47:05 GMT; secure; SameSite=None
oaidts=1685519225; expires=Thu, 30 May 2024 07:47:05 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash 3104c7c0e7b853922bb8c45059bf57ba
4b1cd9d66960651163288560d900969bc414a4c9
977da23ac49b81a4ee815691746d7cc64cdf11395ebfb2e94faa108b0a50f503
Analyzer Verdict Alert quad9 Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 498
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: 61d5371a76959638186676dbfe8eb318
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
nanouwho.com/9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=5a68dc6e55b348e3a42e623dec9bd73f
200 OK 0 B URL POST HTTP/2 nanouwho.com/9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=5a68dc6e55b348e3a42e623dec9bd73f
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectnanouwho.com
Fingerprint17:8A:69:ED:47:86:DA:AC:CF:48:90:92:79:0C:F0:AC:0C:E8:8C:84
ValidityThu, 25 May 2023 04:38:28 GMT - Wed, 23 Aug 2023 04:38:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=5a68dc6e55b348e3a42e623dec9bd73f HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
nanouwho.com/9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=5a68dc6e55b348e3a42e623dec9bd73f
200 OK 2.7 kB URL POST HTTP/2 nanouwho.com/9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=5a68dc6e55b348e3a42e623dec9bd73f
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectnanouwho.com
Fingerprint17:8A:69:ED:47:86:DA:AC:CF:48:90:92:79:0C:F0:AC:0C:E8:8C:84
ValidityThu, 25 May 2023 04:38:28 GMT - Wed, 23 Aug 2023 04:38:27 GMT
File type JSON data\012- , ASCII text, with very long lines (6357), with no line terminators
Hash ae397a9af82f894340bffc08b15e3596
099e3f09b0447e74a93884e587baa3cb425b13f4
99c3c3c692bec5c5a38aa8683c721b9b0c06dee5c77656fe0ee1fdf1ef64b621
POST /9?z=5307589&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=5a68dc6e55b348e3a42e623dec9bd73f HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 111
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: scm=1; OAID=483bc4a4145e4f3e838684e0cd2b272d; oaidts=1685519225
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: 1b99bcb63ced5e5b28e9f9e8af838a6d
access-control-expose-headers: X-Sc
set-cookie: OAID=5a68dc6e55b348e3a42e623dec9bd73f; expires=Thu, 30 May 2024 07:47:05 GMT; secure; SameSite=None
oaidts=1685519225; expires=Thu, 30 May 2024 07:47:05 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
betotodilea.com/500/5307588?excludes=&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL GET HTTP/2 betotodilea.com/500/5307588?excludes=&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintC9:DD:16:90:AA:F5:63:38:44:6E:FD:CC:C1:67:99:9F:22:F6:67:66
ValidityWed, 05 Apr 2023 04:47:01 GMT - Tue, 04 Jul 2023 04:47:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5307588?excludes=&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash a450f53210ba1c053c5a4893c9e71c57
3d778e245fc7572e7d5198f3d8ba3aa951a30684
e951d9d88cbd91de7866d2d66ee7487408082844501abdc9a7f174409cba2521
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 31 May 2023 07:47:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 28 May 2023 03:49:40 GMT
Expires: Sun, 04 Jun 2023 03:49:39 GMT
Etag: "3d778e245fc7572e7d5198f3d8ba3aa951a30684"
Cache-Control: max-age=332511,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cfd9b5b0a831c0a-OSL
inklinkor.com/tag.min.js
200 OK 158 kB IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerGoogle Trust Services LLC
Subjectinklinkor.com
Fingerprint50:86:05:D7:10:B4:A7:0E:95:03:25:3B:B2:E1:7B:54:AE:B3:E7:A1
ValiditySat, 29 Apr 2023 04:39:03 GMT - Fri, 28 Jul 2023 04:39:02 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 158 kB (157502 bytes)
Hash f9fbff7a883f4518de85482c718e6548
65edcb5003ba68d04cfe1c2b2802aa2ff9343e43
39155909941a5a9a9d21be7e394cc0d9cab4fc4e689a5ff8819aabd6141913f6
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:05 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 53b56ba1a97ddc55c66cf7d636fdd517
cache-control: max-age=86400
last-modified: Mon, 29 May 2023 09:29:02 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Thu, 01 Jun 2023 06:16:22 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 5443
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YqBgRo1j3lmn2nF%2BNiV0qZ3ZQwXpENELXLG93V7j8aeRc7dRMXjZfljf1xg4LmfO2eX6q%2F3LqUELebh4sa9NxtXBVnV%2B9YCD7kGXBmYfnJ%2FBUUN86suUyXaplzRAG1Eg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cfd9b545e17b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL POST HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerSectigo Limited
Subjectfleraprt.com
FingerprintA4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9
ValidityMon, 09 Jan 2023 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1321
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 31 May 2023 07:47:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://anonymfile.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
200 OK 11 kB URL GET HTTP/2 offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash c203639f459b6e675afc744dd5393fc6
c83a0142c1a7f6a07c2dd360243197a27f560932
64b4e386658d3f5764261f576a4673eb506fcad5e38e69ef085723f8dab72263
GET /www/images/c203639f459b6e675afc744dd5393fc6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:06 GMT
content-type: image/jpeg
content-length: 10857
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6388849a-2a69"
expires: Wed, 31 May 2023 09:45:08 GMT
last-modified: Thu, 01 Dec 2022 10:40:26 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 79318
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cfd9b5c9fe6b4ee-OSL
X-Firefox-Spdy: h2
betotodilea.com/500/5307588?excludes=&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 1.5 kB URL GET HTTP/2 betotodilea.com/500/5307588?excludes=&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintC9:DD:16:90:AA:F5:63:38:44:6E:FD:CC:C1:67:99:9F:22:F6:67:66
ValidityWed, 05 Apr 2023 04:47:01 GMT - Tue, 04 Jul 2023 04:47:00 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash e1e577914df35cda0c0ef590bb822532
4ecdedb9b8bfe887fb9a494713aacfa2fd27fa11
b47712a9de5348bc17ea7e7e95a50665bb3c2d42f9611bde9d3f063925598df8
GET /500/5307588?excludes=&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: OAID=375b581fd1d740f89dadc38d85674fd5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: application/javascript
x-trace-id: 8b737a86ce337262aae2ab18ac64ad94
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://anonymfile.com
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=5a68dc6e55b348e3a42e623dec9bd73f; expires=Thu, 30 May 2024 07:47:06 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
unphionetor.com/fv.js?t=72747&cb=821514661
200 OK 2.2 kB URL GET HTTP/2 unphionetor.com/fv.js?t=72747&cb=821514661
IP
Requested by https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint4B:AB:04:0A:B6:60:F0:0A:CD:92:AC:93:15:79:CF:21:57:6D:1B:97
ValiditySat, 18 Mar 2023 19:00:29 GMT - Fri, 16 Jun 2023 19:00:28 GMT
File type ASCII text, with very long lines (5213), with no line terminators
Hash 563d777535ce88943a94a6be86f378c8
8753745424d367275e3fe55a5661fe51b1e1fb72
0f467a48a494f7f63968707dc43785b728d0c17f93c12937c1e5b12798f3a98a
GET /fv.js?t=72747&cb=821514661 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 284772f4c3a089f9748ab29bd520e76a
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
200 OK 98 kB URL GET HTTP/2 interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectinterbuzznews.com
FingerprintDA:B3:31:4B:83:FF:0A:17:76:49:8A:B6:78:63:17:E4:F5:34:DD:4F
ValiditySat, 15 Apr 2023 05:39:38 GMT - Fri, 14 Jul 2023 05:39:37 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (45040)
Hash 70ce63889910cb5b0726ae8f87591e50
961ba83d8f36bfcf1aaebf6c47923dcc28088d08
e574d3f7f81c935cbe2906f6e8a327dea85b45c1d5256cc24cae4b3908475e73
GET /?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
set-cookie: reverse=AiNq_rHOYDtwM6iyFqJD1LsVvsM_SREQULsMgkT55u0; expires=Wed, 31-May-2023 08:47:06 GMT; Max-Age=3600; path=/
OAID=6fd1a11105078630685bdd8836bac012; expires=Thu, 28-Oct-2077 15:34:12 GMT; Max-Age=1717141626; path=/
oaidts=1685519226; expires=Thu, 28-Oct-2077 15:34:12 GMT; Max-Age=1717141626; path=/
syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
interbuzznews.com/contents/s/0c/cb/a5/7a35a88364ca0e08803f4739c2/074349681663.png
200 OK 587 kB URL GET HTTP/2 interbuzznews.com/contents/s/0c/cb/a5/7a35a88364ca0e08803f4739c2/074349681663.png
IP
Requested by https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Certificate IssuerLet's Encrypt
Subjectinterbuzznews.com
FingerprintDA:B3:31:4B:83:FF:0A:17:76:49:8A:B6:78:63:17:E4:F5:34:DD:4F
ValiditySat, 15 Apr 2023 05:39:38 GMT - Fri, 14 Jul 2023 05:39:37 GMT
File type PNG image data, 900 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 587 kB (587207 bytes)
Hash 0ccba57a35a88364ca0e08803f4739c2
3ece0a205f0ee02bcbaa71e814e6e41a1171996c
7284ba69d9e546ca86a4ebf10232302677049fabafdb8d9cda6da598ca860825
GET /contents/s/0c/cb/a5/7a35a88364ca0e08803f4739c2/074349681663.png HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: image/png
content-length: 587207
last-modified: Fri, 14 Apr 2023 06:28:26 GMT
vary: Accept-Encoding
etag: "6438f28a-8f5c7"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
204 No Content 0 B URL POST HTTP/2 unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
IP
Requested by https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint4B:AB:04:0A:B6:60:F0:0A:CD:92:AC:93:15:79:CF:21:57:6D:1B:97
ValiditySat, 18 Mar 2023 19:00:29 GMT - Fri, 16 Jun 2023 19:00:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /vbl?t=72747&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interbuzznews.com
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
access-control-allow-origin: https://interbuzznews.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: bbbbf04268f5d6bac9874c8112ad209d
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibrapush.com/event
200 OK 0 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
ibrapush.com/event
200 OK 94 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
File type JSON data\012- , ASCII text
Hash 2d8987b118b121fb14f4176be6b93ae8
0f42bd4b3012d579d5f937f39821b39e25929fd5
e4a2fdef54923638efb51dfedb210f02429c2364bed0a9fe0bf6b130fae4341b
POST /event HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 2679
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: 86bfb478037558301c175808ca11850c
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=1bf1735bf23943a0bd37a58acf2e955d&zoneId=5307590&checkDuplicate=true&ymid=&var=
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?pub=0&userId=1bf1735bf23943a0bd37a58acf2e955d&zoneId=5307590&checkDuplicate=true&ymid=&var=
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type JSON data\012- , ASCII text
Hash 93ffab623a7b70c1150536bd8efe20cd
4b35c850af573b24c025f11b5d9f6d70e379b3ca
6ec6b0207380083812a3599b89d90e3595b12fe999d6f3e240e96c89486ba0dc
GET /gid.js?pub=0&userId=1bf1735bf23943a0bd37a58acf2e955d&zoneId=5307590&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Cookie: ID=5a68dc6e55b348e3a42e623dec9bd73f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:07 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5a68dc6e55b348e3a42e623dec9bd73f; expires=Thu, 30 May 2024 07:47:07 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibrapush.com/pfe/current/defaultSkin.min.js
200 OK 19 kB URL GET HTTP/2 ibrapush.com/pfe/current/defaultSkin.min.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 18d7f9cdf8cececa9acb9366eb878a4f
08cdcc747f5d191783dd258d060baf8e05cb6c3e
fef084b87169d9b60465bc7bf8028af6b67a2b2c8e1bd6c3cd3d3f98a378f9c9
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:07 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 12:46:17 GMT
etag: W/"6475f019-df63"
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash 40ded0ac66367cb83ef37f388a80b2dd
91330cd0e1fedae2332bcd98257ccfd44a97d320
750d7ebd55f30e6b16f582d7cda88a7c20ff0e94a336ea2363277d93d21c14ac
Analyzer Verdict Alert quad9 Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Content-Type: application/json
Content-Length: 498
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:07 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: 08c79d2b24a56dba25730ab18e5bc5bb
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
betotodilea.com/impression/bJORvgAMdzc1YiR8KYFjfFycZWOK-spa-a4dMNZ0E2y4pBJ27CXbt07XZ9ythn1yxsH0L0lf4AHwmZ8ERPPd6O5ASBEeyXZxwl8tpb5r6ljFn93hYed3PBgA3j8r9jW9Tt7QsLMsMJLrNz5u0SYlAnpJMEUUok0eYAbF6xxKzXO2VQWSp_UdjchEdLljY7SVAum4wbcVy5la7ScANzAuFqfjaO2vsQ1m_ITFZ3JUCVIf7X7AqMbl9ssbMInMuyydsLUTECRhtzxx7hB_AJlM8aw8l96QAsBk_MW1Elo-PJbt8gUNcI1ubML7AFuWdOxlzzGSQNROTTOi88B3yqgBTJUyL9zbYrtdIm5VmKfaynuy1q9WeHU6ig5pqscer695FVFpjJvLcfpyJDp1eLfoFzxEz2K2SHW5ZLXH_MTytbVvczzXW9ddvySxWbgL5iG4gIcWdGvfFrnzN_kjZ-zY2lqQA4S5TcrjYuYWQtEjC6eazkgEJtdiGZ0EVavAzWgg4d2JtFLraKCRw7erRIW-_tphMOTrIIsfgGYO9hnwdMEAFu6eson9LeDDw5V0gmt6ZSkSdtlIkUEvYNkL3EZYYw==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL GET HTTP/2 betotodilea.com/impression/bJORvgAMdzc1YiR8KYFjfFycZWOK-spa-a4dMNZ0E2y4pBJ27CXbt07XZ9ythn1yxsH0L0lf4AHwmZ8ERPPd6O5ASBEeyXZxwl8tpb5r6ljFn93hYed3PBgA3j8r9jW9Tt7QsLMsMJLrNz5u0SYlAnpJMEUUok0eYAbF6xxKzXO2VQWSp_UdjchEdLljY7SVAum4wbcVy5la7ScANzAuFqfjaO2vsQ1m_ITFZ3JUCVIf7X7AqMbl9ssbMInMuyydsLUTECRhtzxx7hB_AJlM8aw8l96QAsBk_MW1Elo-PJbt8gUNcI1ubML7AFuWdOxlzzGSQNROTTOi88B3yqgBTJUyL9zbYrtdIm5VmKfaynuy1q9WeHU6ig5pqscer695FVFpjJvLcfpyJDp1eLfoFzxEz2K2SHW5ZLXH_MTytbVvczzXW9ddvySxWbgL5iG4gIcWdGvfFrnzN_kjZ-zY2lqQA4S5TcrjYuYWQtEjC6eazkgEJtdiGZ0EVavAzWgg4d2JtFLraKCRw7erRIW-_tphMOTrIIsfgGYO9hnwdMEAFu6eson9LeDDw5V0gmt6ZSkSdtlIkUEvYNkL3EZYYw==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintC9:DD:16:90:AA:F5:63:38:44:6E:FD:CC:C1:67:99:9F:22:F6:67:66
ValidityWed, 05 Apr 2023 04:47:01 GMT - Tue, 04 Jul 2023 04:47:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/bJORvgAMdzc1YiR8KYFjfFycZWOK-spa-a4dMNZ0E2y4pBJ27CXbt07XZ9ythn1yxsH0L0lf4AHwmZ8ERPPd6O5ASBEeyXZxwl8tpb5r6ljFn93hYed3PBgA3j8r9jW9Tt7QsLMsMJLrNz5u0SYlAnpJMEUUok0eYAbF6xxKzXO2VQWSp_UdjchEdLljY7SVAum4wbcVy5la7ScANzAuFqfjaO2vsQ1m_ITFZ3JUCVIf7X7AqMbl9ssbMInMuyydsLUTECRhtzxx7hB_AJlM8aw8l96QAsBk_MW1Elo-PJbt8gUNcI1ubML7AFuWdOxlzzGSQNROTTOi88B3yqgBTJUyL9zbYrtdIm5VmKfaynuy1q9WeHU6ig5pqscer695FVFpjJvLcfpyJDp1eLfoFzxEz2K2SHW5ZLXH_MTytbVvczzXW9ddvySxWbgL5iG4gIcWdGvfFrnzN_kjZ-zY2lqQA4S5TcrjYuYWQtEjC6eazkgEJtdiGZ0EVavAzWgg4d2JtFLraKCRw7erRIW-_tphMOTrIIsfgGYO9hnwdMEAFu6eson9LeDDw5V0gmt6ZSkSdtlIkUEvYNkL3EZYYw==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: OAID=5a68dc6e55b348e3a42e623dec9bd73f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:10 GMT
content-type: image/gif
content-length: 43
x-trace-id: aed2130a1f81939846abcafc91793bee
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
betotodilea.com/500/5307588?excludes=16368911&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL OPTIONS HTTP/2 betotodilea.com/500/5307588?excludes=16368911&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintC9:DD:16:90:AA:F5:63:38:44:6E:FD:CC:C1:67:99:9F:22:F6:67:66
ValidityWed, 05 Apr 2023 04:47:01 GMT - Tue, 04 Jul 2023 04:47:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5307588?excludes=16368911&oaid=5a68dc6e55b348e3a42e623dec9bd73f&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:10 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
offerimage.com/www/images/7d763937692f59aea0578ffe58c10ee0.jpeg
200 OK 14 kB URL GET HTTP/2 offerimage.com/www/images/7d763937692f59aea0578ffe58c10ee0.jpeg
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 7d763937692f59aea0578ffe58c10ee0
b3a4cc4fd1a0d8319e59057e535b0b19f1a3b35b
2d7300c572db1683cbc8071be4bbaf31b00954193f6f82d453c99a7a58bd7620
GET /www/images/7d763937692f59aea0578ffe58c10ee0.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:11 GMT
content-type: image/jpeg
content-length: 13778
cache-control: max-age=86400
cf-bgj: h2pri
etag: "63888441-35d2"
expires: Wed, 31 May 2023 20:52:06 GMT
last-modified: Thu, 01 Dec 2022 10:38:57 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 39305
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cfd9b7aa925b4ee-OSL
X-Firefox-Spdy: h2
offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
200 OK 11 kB URL GET HTTP/2 offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash c203639f459b6e675afc744dd5393fc6
c83a0142c1a7f6a07c2dd360243197a27f560932
64b4e386658d3f5764261f576a4673eb506fcad5e38e69ef085723f8dab72263
GET /www/images/c203639f459b6e675afc744dd5393fc6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:11 GMT
content-type: image/jpeg
content-length: 10857
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6388849a-2a69"
expires: Wed, 31 May 2023 09:45:08 GMT
last-modified: Thu, 01 Dec 2022 10:40:26 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 79323
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cfd9b7b29dab4ee-OSL
X-Firefox-Spdy: h2
betotodilea.com/impression/00P63qcoMh_HQ0S-KQjMJgKcEGNtQkaaJKS4hqP_utTG09mZnbKDgIvdwGh-Gl4YTfexFw02IndnCzA1It-w0ENHkbsR7girkGhN92PreP5cR5NOi_EknJx8b6-YOciclEaM7PfH9zUiZi_f2SpTRA7NdYf_uS3ZXsnuxtNinSBj3i64p1fHQ1JgCf83gO2mS56CCfZgvTV0-_JQf2n5vFDUMQWDxvqnzLHDvR2hQBqQtWeIx0EBrqkyM91PoGInz6ovgWCpdNy5qTdjJ0jQTkxmnDQh4Q0nmlaKds-9dwgL2OLeiGrWdKBWUeORsezIq6DDB_pKz1BRyMeThtmlyQRnnSjEqmPVT3eytmMEWf-0NBGLpM8lBOpulq6X9WVrkaz7OunIDw1cdC20Kh_xbbB82rkbQYlO3qsc5vzz0dLpmz9lLZDt2FgE_-nUn161Ny72basVpTzGF68-XzBcOIBA4oIz8zH3fDbwvbQORMymGij0Kk_7Xd4mKjJRSdz972vPLTlx2UMMC8YeuyO4MOzUbVVV-pX9BfW7PrsppFKNRN348c7dpAnEQ1jxvoYVeMpIYq9T5SQ8kd8OGwjVEw==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL GET HTTP/2 betotodilea.com/impression/00P63qcoMh_HQ0S-KQjMJgKcEGNtQkaaJKS4hqP_utTG09mZnbKDgIvdwGh-Gl4YTfexFw02IndnCzA1It-w0ENHkbsR7girkGhN92PreP5cR5NOi_EknJx8b6-YOciclEaM7PfH9zUiZi_f2SpTRA7NdYf_uS3ZXsnuxtNinSBj3i64p1fHQ1JgCf83gO2mS56CCfZgvTV0-_JQf2n5vFDUMQWDxvqnzLHDvR2hQBqQtWeIx0EBrqkyM91PoGInz6ovgWCpdNy5qTdjJ0jQTkxmnDQh4Q0nmlaKds-9dwgL2OLeiGrWdKBWUeORsezIq6DDB_pKz1BRyMeThtmlyQRnnSjEqmPVT3eytmMEWf-0NBGLpM8lBOpulq6X9WVrkaz7OunIDw1cdC20Kh_xbbB82rkbQYlO3qsc5vzz0dLpmz9lLZDt2FgE_-nUn161Ny72basVpTzGF68-XzBcOIBA4oIz8zH3fDbwvbQORMymGij0Kk_7Xd4mKjJRSdz972vPLTlx2UMMC8YeuyO4MOzUbVVV-pX9BfW7PrsppFKNRN348c7dpAnEQ1jxvoYVeMpIYq9T5SQ8kd8OGwjVEw==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintC9:DD:16:90:AA:F5:63:38:44:6E:FD:CC:C1:67:99:9F:22:F6:67:66
ValidityWed, 05 Apr 2023 04:47:01 GMT - Tue, 04 Jul 2023 04:47:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/00P63qcoMh_HQ0S-KQjMJgKcEGNtQkaaJKS4hqP_utTG09mZnbKDgIvdwGh-Gl4YTfexFw02IndnCzA1It-w0ENHkbsR7girkGhN92PreP5cR5NOi_EknJx8b6-YOciclEaM7PfH9zUiZi_f2SpTRA7NdYf_uS3ZXsnuxtNinSBj3i64p1fHQ1JgCf83gO2mS56CCfZgvTV0-_JQf2n5vFDUMQWDxvqnzLHDvR2hQBqQtWeIx0EBrqkyM91PoGInz6ovgWCpdNy5qTdjJ0jQTkxmnDQh4Q0nmlaKds-9dwgL2OLeiGrWdKBWUeORsezIq6DDB_pKz1BRyMeThtmlyQRnnSjEqmPVT3eytmMEWf-0NBGLpM8lBOpulq6X9WVrkaz7OunIDw1cdC20Kh_xbbB82rkbQYlO3qsc5vzz0dLpmz9lLZDt2FgE_-nUn161Ny72basVpTzGF68-XzBcOIBA4oIz8zH3fDbwvbQORMymGij0Kk_7Xd4mKjJRSdz972vPLTlx2UMMC8YeuyO4MOzUbVVV-pX9BfW7PrsppFKNRN348c7dpAnEQ1jxvoYVeMpIYq9T5SQ8kd8OGwjVEw==?_z=5307588&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: OAID=5a68dc6e55b348e3a42e623dec9bd73f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:13 GMT
content-type: image/gif
content-length: 43
x-trace-id: f043e77e66b8c4389dc21215e95caf1d
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
offerimage.com/www/images/7d763937692f59aea0578ffe58c10ee0.jpeg
200 OK 14 kB URL GET HTTP/2 offerimage.com/www/images/7d763937692f59aea0578ffe58c10ee0.jpeg
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 7d763937692f59aea0578ffe58c10ee0
b3a4cc4fd1a0d8319e59057e535b0b19f1a3b35b
2d7300c572db1683cbc8071be4bbaf31b00954193f6f82d453c99a7a58bd7620
GET /www/images/7d763937692f59aea0578ffe58c10ee0.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:14 GMT
content-type: image/jpeg
content-length: 13778
cache-control: max-age=86400
cf-bgj: h2pri
etag: "63888441-35d2"
expires: Wed, 31 May 2023 20:52:06 GMT
last-modified: Thu, 01 Dec 2022 10:38:57 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 39308
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cfd9b8ddc8eb4ee-OSL
X-Firefox-Spdy: h2
ibrapush.com/pfe/current/universal.min.js?v=3.1.436
200 OK 103 kB URL GET HTTP/2 ibrapush.com/pfe/current/universal.min.js?v=3.1.436
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103271 bytes)
Hash 1b123fd41baea32c1eb585b61dfa974a
79e249b08f2d60b923a335f0bd061fd0e4156cf8
738289e65a303f6c32178e4a0783cd1bf807628e20e522e7d84e7e764ea49f67
GET /pfe/current/universal.min.js?v=3.1.436 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 12:46:17 GMT
etag: W/"6475f019-19367"
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
anonymfile.com/sw.js
404 Not Found 17 kB IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sw.js HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/yK4pg/bssngold.zip
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
date: Wed, 31 May 2023 07:47:06 GMT
x-page-speed: 1.13.35.2-0
cache-control: max-age=0, no-cache
content-encoding: br
X-Firefox-Spdy: h2
anonymfile.com/yK4pg/bssngold.zip
200 OK 16 kB URL User Request GET HTTP/2 anonymfile.com/yK4pg/bssngold.zip
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /yK4pg/bssngold.zip HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; expires=Wed, 31-May-2023 09:47:02 GMT; Max-Age=7200; path=/; samesite=lax
anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D; expires=Wed, 31-May-2023 09:47:02 GMT; Max-Age=7200; path=/; httponly; samesite=lax
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
date: Wed, 31 May 2023 07:47:02 GMT
x-page-speed: 1.13.35.2-0
cache-control: max-age=0, no-cache
content-encoding: br
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 18 kB IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerGoogle Trust Services LLC
Subject*.tzegilo.com
FingerprintDF:12:8C:B5:F2:22:D6:BE:72:F3:C6:9A:FA:DD:9E:1F:4E:58:63:1E
ValidityTue, 11 Apr 2023 10:11:54 GMT - Mon, 10 Jul 2023 10:11:53 GMT
File type ASCII text, with very long lines (17479), with no line terminators
Hash dd2f9f2bb1e1c74b905556d0a7bc5545
0c831c8c56da8167b9e2dfd1d3eb3288348da85d
63f957dde1ae04a83eaff7e442e693725562c4aa1062bc072b7509640ec4f663
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:59 GMT
etag: W/"646736cf-4447"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1185
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GVTGMUw817eQaW2l6nBQ8rWvorTYT4RNx%2BH0Zk9vHHRKoQKfKEcxMBe0ePo9aBkx6mUz2V%2FSp4gdQFNiRcWKy3WKBJD8RRf3qEuOKZ7Iy4Tk1tiSaqJ%2Bo8i%2Fffdlmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cfd9b594b9a7200-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
interbuzznews.com/contents/s/c7/23/ce/2ea2df06b6b6d5508aa22bb7de/01442556848691.png
200 OK 90 kB URL GET HTTP/2 interbuzznews.com/contents/s/c7/23/ce/2ea2df06b6b6d5508aa22bb7de/01442556848691.png
IP
Requested by https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Certificate IssuerLet's Encrypt
Subjectinterbuzznews.com
FingerprintDA:B3:31:4B:83:FF:0A:17:76:49:8A:B6:78:63:17:E4:F5:34:DD:4F
ValiditySat, 15 Apr 2023 05:39:38 GMT - Fri, 14 Jul 2023 05:39:37 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash c723ce2ea2df06b6b6d5508aa22bb7de
dff9bac1f8506128394c88b2071639656eaab989
035f183ca15e39a37edfbee4a5fa72a0fcc55488196709e24e4eea5ae9cdcc7b
GET /contents/s/c7/23/ce/2ea2df06b6b6d5508aa22bb7de/01442556848691.png HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: image/png
content-length: 90392
last-modified: Fri, 14 Apr 2023 06:28:26 GMT
vary: Accept-Encoding
etag: "6438f28a-16118"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
unpkg.com/filepond-plugin-file-validate-type/dist/filepond-plugin-file-validate-type.js
302 Found 7.4 kB URL GET HTTP/2 unpkg.com/filepond-plugin-file-validate-type/dist/filepond-plugin-file-validate-type.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /filepond-plugin-file-validate-type/dist/filepond-plugin-file-validate-type.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 31 May 2023 07:47:03 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01H1RC4GJGY31EH37HW20HDXD1-arn
cf-cache-status: HIT
age: 264
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cfd9b4c7a89b52d-OSL
X-Firefox-Spdy: h2
unpkg.com/filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js
200 OK 7.4 kB URL GET HTTP/2 unpkg.com/filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (7681), with no line terminators
Hash 08f31175f62c10c483860d2c746ae52f
2fee06ebf67f7722292add347fb09cf9b82901fb
3ae2cb56796f85af0afc8aced3abfeb9590a718d826451ee0c16caabec2e6755
GET /filepond-plugin-file-validate-type@1.2.8/dist/filepond-plugin-file-validate-type.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1d07-1hxUHKzrTl3rNdhkJwK4kJGou0I"
via: 1.1 fly.io
fly-request-id: 01G2PJZCDRWWWP671QTKZ7W61J-fra
cf-cache-status: HIT
age: 1810163
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cfd9b4ddc51b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/filepond/4.29.1/filepond.min.css
200 OK 17 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/filepond/4.29.1/filepond.min.css
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (17282)
Hash 8eec69af8b7514e7980a5934d329404c
1e176e95fe692683e6e59bb467ec89464b1672f6
a620ee6349399f7d71768f23b38e7fe17f45a89f853288b309c2723af4eadea5
GET /ajax/libs/filepond/4.29.1/filepond.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: text/css; charset=utf-8
content-length: 2934
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613afc53-b76"
last-modified: Fri, 10 Sep 2021 06:33:55 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 684756
expires: Mon, 20 May 2024 07:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AVun9td8fNT4Srj8SacKVqSVjvCrU8R2uaAMVWWp57Xv%2FFeNujvdujzcgdNeaKvkn5dn8rFfw7DOY2N%2FWvPCWGlpsAOLdwQkRu1LEuSY3P%2BqOEDiuUWuXSWB290RDrdnrlnOhNw8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cfd9b4b9939b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
anonymfile.com/sw.js
404 Not Found 17 kB IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sw.js HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
date: Wed, 31 May 2023 07:47:04 GMT
x-page-speed: 1.13.35.2-0
cache-control: max-age=0, no-cache
content-encoding: br
X-Firefox-Spdy: h2
betotodilea.com/400/5307588
200 OK 83 kB URL GET HTTP/2 betotodilea.com/400/5307588
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintC9:DD:16:90:AA:F5:63:38:44:6E:FD:CC:C1:67:99:9F:22:F6:67:66
ValidityWed, 05 Apr 2023 04:47:01 GMT - Tue, 04 Jul 2023 04:47:00 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 76c0ae6e0d45bb4cc2c5235f35156338
c69fb46a1d2fced90a3a9f2a8f5e0d8dd67a4a24
5910b83ecf6a7604e63a0055dfbbc8a2ce9cd2c5549bd36c188f98eb6dd96580
GET /400/5307588 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/javascript
x-trace-id: 309a17eb5205aa4febb6b63844dc841b
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=375b581fd1d740f89dadc38d85674fd5; expires=Thu, 30 May 2024 07:47:05 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
bedrapiona.com/5/5307591/?oo=1&js_build=iclick-1.548.0
200 OK 2.9 kB URL GET HTTP/2 bedrapiona.com/5/5307591/?oo=1&js_build=iclick-1.548.0
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectbedrapiona.com
Fingerprint82:43:A4:8F:DF:07:3B:BB:E1:E8:34:60:DF:BF:28:CC:1D:23:A6:76
ValidityMon, 22 May 2023 02:21:30 GMT - Sun, 20 Aug 2023 02:21:29 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3182), with no line terminators
Hash 0f59df2d24e7a833217af66050dfb9b0
00289528501660e6adcb019fb6cc0a8ab711698b
8c50c928edd5aa26a93b68b2849302a4078934cfff9d26c502a6d168e990c223
GET /5/5307591/?oo=1&js_build=iclick-1.548.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/json
x-trace-id: 268167d0a064076db06b8b642fec3e75
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://xobr219pa.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://anonymfile.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=5a68dc6e55b348e3a42e623dec9bd73f; expires=Thu, 30 May 2024 07:47:05 GMT; path=/; secure; SameSite=None
oaidts=1685519225; expires=Thu, 30 May 2024 07:47:05 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ibrapush.com/pfe/current/tag.min.js?z=5307590
200 OK 15 kB URL GET HTTP/2 ibrapush.com/pfe/current/tag.min.js?z=5307590
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectibrapush.com
Fingerprint5C:E4:27:10:05:70:7F:21:F2:AC:C6:2C:0A:3F:60:C7:0B:4E:F1:16
ValiditySun, 19 Mar 2023 06:06:04 GMT - Sat, 17 Jun 2023 06:06:03 GMT
File type C source, ASCII text, with very long lines (14679), with no line terminators
Hash dd1bd926c9d267f953b3631fa55c8597
1a37cc25c5dbeb4edd216419587df4c3f270adf0
6e021b2b21122242fa40175b8df6316a9386aa36454efd2c234e891258003d27
GET /pfe/current/tag.min.js?z=5307590 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 12:46:17 GMT
etag: W/"6475f019-3957"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
link: <https://my.rtmark.net>; rel=dns-prefetch;, <https://my.rtmark.net>; rel=preconnect
content-encoding: gzip
X-Firefox-Spdy: h2
nanouwho.com/27/a1c303148cbc70e3bffec28712a563c1
200 OK 414 kB URL GET HTTP/2 nanouwho.com/27/a1c303148cbc70e3bffec28712a563c1
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectnanouwho.com
Fingerprint17:8A:69:ED:47:86:DA:AC:CF:48:90:92:79:0C:F0:AC:0C:E8:8C:84
ValidityThu, 25 May 2023 04:38:28 GMT - Wed, 23 Aug 2023 04:38:27 GMT
File type ASCII text, with very long lines (65523)
Size 414 kB (413857 bytes)
Hash 4656ff6487f414a6c8cefd3550abe5ca
79f1424faca0b5beae0b613c4dea269a708e1bce
8180cd17e518fcf80c267d4ad1403f3717f3a1f2e62a4800aa2f10151544ce97
GET /27/a1c303148cbc70e3bffec28712a563c1 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: scm=1; OAID=483bc4a4145e4f3e838684e0cd2b272d; oaidts=1685519225
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:05 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: a56cc1ecb7eb3fa25753d0efeec52eb4
cache-control: max-age:290304000, public
last-modified: Tue, 30 May 2023 06:10:59 GMT
expires: Tue, 29 Jun 2083 06:10:59 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
nanouwho.com/11?rnd=948233492&z=5307589&b=17467054&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA==&ruid=76b96139-c7ef-4788-88ed-3447a7da0e81&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=111
200 OK 0 B URL GET HTTP/2 nanouwho.com/11?rnd=948233492&z=5307589&b=17467054&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA==&ruid=76b96139-c7ef-4788-88ed-3447a7da0e81&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=111
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectnanouwho.com
Fingerprint17:8A:69:ED:47:86:DA:AC:CF:48:90:92:79:0C:F0:AC:0C:E8:8C:84
ValidityThu, 25 May 2023 04:38:28 GMT - Wed, 23 Aug 2023 04:38:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /11?rnd=948233492&z=5307589&b=17467054&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA==&ruid=76b96139-c7ef-4788-88ed-3447a7da0e81&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonymfile.com%2FyK4pg%2Fbssngold.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=111 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonymfile.com
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Cookie: scm=1; OAID=5a68dc6e55b348e3a42e623dec9bd73f; oaidts=1685519225
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://anonymfile.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: 94d8d9abd004867ae52c79bc8265e739
access-control-expose-headers: X-Sc
set-cookie: OAID=5a68dc6e55b348e3a42e623dec9bd73f; expires=Thu, 30 May 2024 07:47:06 GMT; secure; SameSite=None
oaidts=1685519225; expires=Thu, 30 May 2024 07:47:06 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
unpkg.com/filepond-plugin-file-validate-size@2.2.8/dist/filepond-plugin-file-validate-size.js
200 OK 6.8 kB URL GET HTTP/2 unpkg.com/filepond-plugin-file-validate-size@2.2.8/dist/filepond-plugin-file-validate-size.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (6956), with no line terminators
Hash 2964c1b66e9c36689daebbdfbea84799
89393d72d187aa650719a0a32659362d8b8d096f
636574376dfe7d10656e8dcfb551d2be45602894de5bb718d1ffba3e5be3a6f3
GET /filepond-plugin-file-validate-size@2.2.8/dist/filepond-plugin-file-validate-size.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonymfile.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1a7f-mapzppsO4HAWL/eiqLcABeu0hWU"
via: 1.1 fly.io
fly-request-id: 01GJZ5C0MRVMZFWGTQD5XR207X-ams
cf-cache-status: HIT
age: 15878605
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cfd9b4ddc54b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
anonymfile.com/js/site.js
200 OK 9.4 kB URL GET HTTP/2 anonymfile.com/js/site.js
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type ASCII text, with very long lines (9669), with no line terminators
Hash 53fbd7ec3564e9eace6cc150441ae6e0
1b0179094541162f986581cf93561b24d78fab2c
9929e8ec1f73bb530fc9c9a350ca107e69e26d41a235dd766ec5d895591c68c1
GET /js/site.js HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 07:47:03 GMT
content-type: application/javascript
last-modified: Wed, 20 Oct 2021 12:30:18 GMT
vary: Accept-Encoding
etag: W/"61700bda-2487"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-encoding: br
cache-control: s-maxage=10
X-Firefox-Spdy: h2
anonymfile.com/pagespeed_static/js_defer.I4cHjq6EEP.js
200 OK 12 kB URL GET HTTP/2 anonymfile.com/pagespeed_static/js_defer.I4cHjq6EEP.js
IP
ASN #24940 Hetzner Online GmbH
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerLet's Encrypt
Subjectanonymfile.com
Fingerprint3E:29:1D:BE:AF:8A:4B:E6:8E:88:0B:77:60:E9:D6:73:5D:E2:24:33
ValiditySat, 08 Apr 2023 00:44:59 GMT - Fri, 07 Jul 2023 00:44:58 GMT
File type ASCII text, with very long lines (534)
Hash 2387078eae8410f7e540e3866bcb2fda
324d38dcb7f7bcb16b355b6afdbbc87bd089422d
59dbda86041a5f394b83391ffe0b939341aabb817fa60a6ea78c80f5835596b5
GET /pagespeed_static/js_defer.I4cHjq6EEP.js HTTP/1.1
Host: anonymfile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/yK4pg/bssngold.zip
Cookie: XSRF-TOKEN=eyJpdiI6InBvQlFYTzgyTGlGbWJYRjU4ajZIQWc9PSIsInZhbHVlIjoiUjN0TTY3MGFKUVp4b1ordjJwdDlHejUrdmFraCtESEFVU2JDY20wR1lDakw3ZmxBZGVKL0VCckQ0QWxXd0lRNEF2TG5LWHJTYWdIelRpNHhid0tRU2hwNkZIeUFjSU5FQVJ2M2tWMkxLMW11SjVSS3lxZ0VPVitQcW5QaHFDUisiLCJtYWMiOiJjZGVjNzkxMjhmYWU1OGJkNDY2YWVkNTYwZWFkNWUzNmM0MGJkNmM4NTE4NjdiYWY4ZGRmMmUxZTAwNWY2MDBiIiwidGFnIjoiIn0%3D; anonymfile_session=eyJpdiI6InpVVGttSldWdUFyK2NkVzlvS2hMd3c9PSIsInZhbHVlIjoiWDI1ZDZEdTJQQXlhTzg1SjAxT2NpTDh6ckZyQnBJY3QxRC81UzVmbVNsblkvU0FlQXFIVlROMzhPQU8vNTFqZENZSmdHWXZCSEFXa083enJPWVRIZTZneGpGa1huZ1hHOUV2eEVMLy9rSW9FN3V4R3p3WkZ2V2JtR1BOSThrbzEiLCJtYWMiOiI1MzEwMWU4MDkyOWMzYmUzNWUwYTQzMDIzNjExODkxNGE3MTYxNWE4N2I0ZmIyMTYwZGQ1MGJhNGRmYTIwNjNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript
vary: Accept-Encoding
x-content-type-options: nosniff
date: Wed, 31 May 2023 07:47:03 GMT
last-modified: Wed, 31 May 2023 07:47:03 GMT
cache-control: max-age=31536000
etag: W/"0"
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/filepond-plugin-file-validate-size/dist/filepond-plugin-file-validate-size.js
302 Found 6.8 kB URL GET HTTP/2 unpkg.com/filepond-plugin-file-validate-size/dist/filepond-plugin-file-validate-size.js
IP
Requested by https://anonymfile.com/yK4pg/bssngold.zip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /filepond-plugin-file-validate-size/dist/filepond-plugin-file-validate-size.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonymfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 31 May 2023 07:47:03 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /filepond-plugin-file-validate-size@2.2.8/dist/filepond-plugin-file-validate-size.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01H1RBY0153H5SG3RZZC9G3E0H-arn
cf-cache-status: HIT
age: 478
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cfd9b4c7a8ab52d-OSL
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=72747
204 No Content 0 B URL GET HTTP/2 unphionetor.com/vctx?t=72747
IP
Requested by https://interbuzznews.com/?l=qaLbO2jgqopK9Fh&cd_meta_crid=394803&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2011960113%26z%3D5307589%26b%3D17467054%26c%3D6848314%26var%3D%26d%3Dhttps%253A%252F%252Fm.lemon.partners%252FRedirect.aspx%253Fmid%253D169%2526sid%253D577%2526cid%253D%2524%257BSUBID%257D%2526pid%253D%257Bzoneid%257D%2526affid%253D200%26cln%3D1%26btp%3D7%26rb%3D1cYhauKnC-ns7drVmfWiqMPKYzK2-wQX_N3Z1_biDC_aAtXx9hK6Qy_HX7I_MV5SYHm-wZot2qJrB5l46KpQ3WxPv716e7vficIQB0hNrkqoZ74zjQPuBedL_e57UT1f4cZP0p-Z4HePjLVPqUoRPdouK39XQyMlL3QCPRD6I3V-RzJUaWpPFm2Wtal_ogDMEzoJ0kE-Vcgas1PsFVzC9xJcAeFhTX3ATAV0ZxNXFE--lA99Vx1kgCZOaIBiauxnDFO1jpz1YbdJeoFZcHrwhKF_ZoBCv1v8WMOQ_GWZ3RaJMfcrDhDeVuNYW05LDV9lzIIPOYfEot2UNEfzzlo13RFh0bP8H0e9oQfNQmKfGIMr8Nje8SwecYyPPMUJTXQR2vVqVugEHnz-XWT-WiRvXywxtPyRcLRM0POvTwHVRoIbZAtIeagMdbiCgHHqL33QE-xQDxzstaf9LA04thYF6b6jYaiBPE8reBC45AC19KRjcJuj44WfTiS8r9Gho1DVE6F7nJoINNpONlhjb3RiN5XDcGkkuZMDr5CvwrrROSZ1o2nhLcMV9jEgWQxlQ4f72WH-2HRK-_WIb49v-xh-pjPYoQjHfO26IEcn3jRuSkZFJptt21cym3OacyJX5kIUzgQYTc2F1xUcaTL4mEr85TyJ5MkOakU480kkbA%3D%3D%26bag%3Dwv7f7Jwi4qu-eB6W8RixTA%3D%3D%26ruid%3D76b96139-c7ef-4788-88ed-3447a7da0e81%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fanonymfile.com%252FyK4pg%252Fbssngold.zip%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint4B:AB:04:0A:B6:60:F0:0A:CD:92:AC:93:15:79:CF:21:57:6D:1B:97
ValiditySat, 18 Mar 2023 19:00:29 GMT - Fri, 16 Jun 2023 19:00:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vctx?t=72747 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interbuzznews.com
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Wed, 31 May 2023 07:47:06 GMT
access-control-allow-origin: https://interbuzznews.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 5c59ce1612a68681d06ce5b8980afca8
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
138.201.48.112
139.45.197.250
104.18.15.101
151.101.129.229
0.0.0.0