urlquery - report: mjurr.923a6.yy.wy5532.com/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-12-01 17:12:49 UTC	34.117.237.239
img-getpocket.cdn.mozilla.net (7)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
ocsp.sca1b.amazontrust.com (1)	1015	2017-03-03 15:20:51 UTC	2019-03-27 04:05:54 UTC	143.204.42.165
simplewebanalysis.com (1)	0	2022-02-25 04:06:25 UTC	2022-12-01 17:27:02 UTC	18.185.190.54	Unknown ranking
professionalswebcheck.com (1)	0	2022-04-01 22:47:29 UTC	2022-12-01 16:05:44 UTC	18.185.190.54	Unknown ranking
r3.o.lencr.org (7)	344	No data	No data	23.36.77.32
mjurr.923a6.yy.wy5532.com (3)	0	No data	No data	207.244.67.214	Unknown ranking
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-12-01 17:14:08 UTC	34.102.187.140
click-v4.expmdiadi.com (1)	0	No data	No data	198.134.116.17	Unknown ranking
ln.gamesrevenue.com (1)	117740	2017-01-29 20:27:07 UTC	2022-12-01 16:07:42 UTC	5.161.79.44
ocsp.digicert.com (4)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
supanimegames.com (13)	0	2022-01-10 09:10:44 UTC	2022-12-01 14:08:27 UTC	188.114.96.1	Unknown ranking
e1.o.lencr.org (2)	6159	No data	No data	23.36.77.32
mc.yandex.ru (4)	2672	2012-05-21 09:38:30 UTC	2022-12-01 17:45:12 UTC	87.250.251.119
gracelessbrief.com (2)	0	2022-11-28 11:12:50 UTC	2022-12-01 03:00:50 UTC	192.243.61.227	Unknown ranking
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	54.187.71.185
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191

Scan Date	Severity	Indicator	Comment
2022-12-02	2	mjurr.923a6.yy.wy5532.com/	Malware

Date	UQ / IDS / BL	URL	IP
2023-02-05 22:36:29 +0000	0 - 0 - 1	www.oberoihotels.co/	199.115.115.116
2023-02-02 00:45:04 +0000	0 - 0 - 3	uyclvmqe.tt.wy5532.com/	199.115.115.116
2023-01-24 08:54:19 +0000	0 - 0 - 1	simuladordeempresa.com/wp-content/new.exe	199.115.115.116
2023-01-20 14:50:55 +0000	0 - 0 - 2	1rer.38c43.aw.wy5532.com/	199.115.115.116
2023-01-19 12:05:13 +0000	0 - 2 - 1	iuyuyt.22e5e.tk.wy5532.com/	199.115.115.116

Date	UQ / IDS / BL	URL	IP
2023-02-08 08:56:51 +0000	0 - 0 - 3	jqckxyb.com/	199.115.115.102
2023-02-08 07:09:52 +0000	0 - 2 - 7	ehsudfr.gov.wy5532.com/	199.115.115.102
2023-02-08 06:20:35 +0000	0 - 0 - 3	rubriqueassumaladie.com/	199.115.116.43
2023-02-08 06:08:12 +0000	0 - 1 - 0	12kbps.xyz/repo/vir/others/windowspolicepro.exe	162.210.199.85
2023-02-08 05:10:11 +0000	0 - 0 - 5	devicesecurity.uk/Login.php	23.82.12.30

Date	UQ / IDS / BL	URL	IP
2023-02-08 10:46:56 +0000	0 - 2 - 6	govyty.59b61.ev.wy5532.com/	185.107.56.198
2023-02-08 09:24:48 +0000	0 - 0 - 4	ooburdv.wy5532.com/	172.93.103.102
2023-02-08 08:43:17 +0000	0 - 2 - 7	lkljk.8c061.vo.wy5532.com/	172.93.103.102
2023-02-08 07:09:52 +0000	0 - 2 - 7	ehsudfr.gov.wy5532.com/	199.115.115.102
2023-02-08 06:33:13 +0000	0 - 0 - 1	8b23f.ymgjhj.wy5532.com/	185.107.56.197

Date	UQ / IDS / BL	URL	IP
2023-01-15 21:33:34 +0000	0 - 0 - 6	www.emurom.net/es/emulacion/nintendo-roms/det (...)	51.15.62.143
2023-01-15 20:52:02 +0000	0 - 0 - 15	kyliehill7.blogspot.com/2022/09/sekaran-and-b (...)	142.250.74.161
2023-01-07 06:23:40 +0000	0 - 0 - 1	supanimegames.com/common/tr/ce/land_ce_300520 (...)	104.21.31.221
2022-12-09 04:48:54 +0000	0 - 0 - 25	elaina.bloggplatsen.seelaina.bloggplatsen.se/	188.126.64.122
2022-12-03 18:51:04 +0000	0 - 0 - 3	2tty.584ce.wh.wy5532.com/	37.48.65.152

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2380 Expires: Fri, 02 Dec 2022 02:58:45 GMT Date: Fri, 02 Dec 2022 02:19:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3bbb845b153026fc5332dd4506585b57 Sha1: 3cad200fac28fd00f34ce6ef79373e661e188743 Sha256: 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 420 Cache-Control: max-age=116347 Date: Fri, 02 Dec 2022 02:19:05 GMT Etag: "63888270-1d7" Expires: Sat, 03 Dec 2022 10:38:12 GMT Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT Server: ECS (ska/F708) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 0c748388899e8a8d3680355da2ea5020 Sha1: 903c620cd137613daafb0da0508c37b2f4a67212 Sha256: 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
GET / HTTP/1.1 Host: mjurr.923a6.yy.wy5532.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Cookie: sid=42d5714a-71d5-11ed-bdce-63864994bac4 Upgrade-Insecure-Requests: 1	URL: mjurr.923a6.yy.wy5532.com/ FQDN: mjurr.923a6.yy.wy5532.com IP: 207.244.67.214 HASH: e5e00cff3f6c7ad2e776a309bf9f7bd466e7702675d4083f91b0d7506b8ee201 207.244.67.214 HTTP/1.1 200 OK content-type: text/html; charset=utf-8 accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile cache-control: max-age=0, private, must-revalidate connection: close content-length: 486 date: Fri, 02 Dec 2022 02:19:05 GMT server: nginx --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (486), with no line terminators Size: 486 Md5: 53f915462b20c5095ea4fba67d2d0581 Sha1: 02cab94029fea0a2cf9be3ccdade3f882d2a712a Sha256: e5e00cff3f6c7ad2e776a309bf9f7bd466e7702675d4083f91b0d7506b8ee201 Alerts: Blocklists: - fortinet: Malware
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 02 Dec 2022 01:19:50 GMT cache-control: public,max-age=3600 age: 3555 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 30db107dcf4380cef05efea409c2e6a3 Sha1: 96e6a306fbc07299aba64e5c14e2bfca35872fa9 Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7843 Expires: Fri, 02 Dec 2022 04:29:49 GMT Date: Fri, 02 Dec 2022 02:19:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55b4c61a1e99001307750e3647fe1102 Sha1: 7559f9f6770b7d3f45b723167062096312641e08 Sha256: 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: hwHBe0QmiNzFM0QOzyXKl3u9hm2G+rdjfMrGbQX3igjBRn3gQSRb4JX93xjiJs4DUIv7gO7LlAo= x-amz-request-id: 0N5T1924E036P0JJ content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 02 Dec 2022 01:46:31 GMT age: 1955 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 02 Dec 2022 02:19:06 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /favicon.ico HTTP/1.1 Host: mjurr.923a6.yy.wy5532.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://mjurr.923a6.yy.wy5532.com/ Cookie: sid=42d5714a-71d5-11ed-bdce-63864994bac4	URL: mjurr.923a6.yy.wy5532.com/favicon.ico FQDN: mjurr.923a6.yy.wy5532.com IP: 207.244.67.214 HASH: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9 207.244.67.214 HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate connection: close content-length: 9 date: Fri, 02 Dec 2022 02:19:05 GMT server: nginx --- Additional Info --- Magic: ASCII text, with no line terminators Size: 9 Md5: d8f4a1993546cc4b850cde3599e27aec Sha1: 094b763b4cfcc0b05e5d040581cd513c3ca08067 Sha256: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 02 Dec 2022 02:11:15 GMT cache-control: public,max-age=3600 age: 471 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 416 Cache-Control: max-age=111279 Date: Fri, 02 Dec 2022 02:19:06 GMT Etag: "63886ea9-1d7" Expires: Sat, 03 Dec 2022 09:13:45 GMT Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT Server: ECS (ska/F708) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 1f88399f3fdd89dbb9ca1229cb67143a Sha1: 325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3 Sha256: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2OTk1NDc0NSwiaWF0IjoxNjY5OTQ3NTQ1LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc21kZ3NmczRuZnVzcjY5MmsxMzgxb2IiLCJuYmYiOjE2Njk5NDc1NDUsInRzIjoxNjY5OTQ3NTQ1OTIwNzg2fQ.HmjUD_TNapxoi1vrYdNrlosFSmy6yKJ-3N_E8o_aKn4&sid=42d5714a-71d5-11ed-bdce-63864994bac4 HTTP/1.1 Host: mjurr.923a6.yy.wy5532.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://mjurr.923a6.yy.wy5532.com/ Cookie: sid=42d5714a-71d5-11ed-bdce-63864994bac4 Upgrade-Insecure-Requests: 1	URL: mjurr.923a6.yy.wy5532.com/?ch=1&js=eyJhbGciOiJIUzI1NiIs (...) FQDN: mjurr.923a6.yy.wy5532.com IP: 207.244.67.214 HASH: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47 207.244.67.214 HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate connection: close content-length: 11 date: Fri, 02 Dec 2022 02:19:06 GMT location: http://click-v4.expmdiadi.com/click?i=apfn8Bgcmdw_0 server: nginx set-cookie: sid=42d5714a-71d5-11ed-bdce-63864994bac4; path=/; domain=.wy5532.com; expires=Wed, 20 Dec 2090 05:33:13 GMT; max-age=2147483647; HttpOnly --- Additional Info --- Magic: ASCII text, with no line terminators Size: 11 Md5: 32682312d17c7cbf18e73594f5570319 Sha1: 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: AOgkQD5jV2LVhcbWVpXMlw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.187.71.185 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.187.71.185 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: b+iqJXzavIpOg4h3hUqbGwKxaek= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=apfn8Bgcmdw_0 HTTP/1.1 Host: click-v4.expmdiadi.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://mjurr.923a6.yy.wy5532.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: click-v4.expmdiadi.com/click?i=apfn8Bgcmdw_0 FQDN: click-v4.expmdiadi.com IP: 198.134.116.17 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.134.116.17 HTTP/1.1 302 Found Cache-Control: no-store Content-Length: 0 Age: 0 Connection: keep-alive Location: https://gracelessbrief.com/twh5yffg?key=131c3c32be0edd4d7fb964bdde74c4d2&psid=wy5532.com Pragma: no-cache --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 445684a354fcec7174db0c5359eb97ad0d700f9d375bbd817a831c70ce02f04a 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "445684A354FCEC7174DB0C5359EB97AD0D700F9D375BBD817A831C70CE02F04A" Last-Modified: Tue, 29 Nov 2022 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4502 Expires: Fri, 02 Dec 2022 03:34:09 GMT Date: Fri, 02 Dec 2022 02:19:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 755df20cc1c2e1a3d11e35c272be0970 Sha1: e373c6058bd09935bc8d8fa9f56a3d468a990fb3 Sha256: 445684a354fcec7174db0c5359eb97ad0d700f9d375bbd817a831c70ce02f04a
GET /twh5yffg?key=131c3c32be0edd4d7fb964bdde74c4d2&psid=wy5532.com HTTP/1.1 Host: gracelessbrief.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://mjurr.923a6.yy.wy5532.com/ Connection: keep-alive Cookie: u_pl=17886678; pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: gracelessbrief.com/twh5yffg?key=131c3c32be0edd4d7fb964b (...) FQDN: gracelessbrief.com IP: 192.243.61.227 HASH: b9ae27767e886b5041c6a18c1d33d49a4b68d0f830784cb3c1f0b1ae35633388 192.243.61.227 HTTP/1.1 200 OK Content-Type: text/html Server: nginx/1.22.0 Date: Fri, 02 Dec 2022 02:19:08 GMT Transfer-Encoding: chunked Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Set-Cookie: u_pl=17886678,16719801; expires=Sat, 03 Dec 2022 02:19:08 GMT ain=eyJhbGciOiJIUzI1NiJ9.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.KqYsdBP7X8dkTcso8rrqmNVmNCJ0ayG1R9BMsMmEgF8; expires=Fri, 02 Dec 2022 02:20:08 GMT Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 051d22c8b5b885927402a989fdd2847e Strict-Transport-Security: max-age=0; includeSubdomains Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (321) Size: 2414 Md5: 6a3602b446bfea9b8984295efcbac89b Sha1: f3240245b69b8166c3aacfac8ecfa09d5c26e1f5 Sha256: b9ae27767e886b5041c6a18c1d33d49a4b68d0f830784cb3c1f0b1ae35633388
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16806 Expires: Fri, 02 Dec 2022 06:59:14 GMT Date: Fri, 02 Dec 2022 02:19:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16806 Expires: Fri, 02 Dec 2022 06:59:14 GMT Date: Fri, 02 Dec 2022 02:19:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16806 Expires: Fri, 02 Dec 2022 06:59:14 GMT Date: Fri, 02 Dec 2022 02:19:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 2942 x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGeoGFYoAMFWgA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:49:56 GMT age: 16152 etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 2942 Md5: b47431190f34eccf0a6efb98e2a32b7d Sha1: 9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704 Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F356e23df-cb76-452a-b299-da5410086837.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e9087e7fce332289d67d4d5646d0233c2f2d871cc88dc1c51d5ea1e9f2fb5abd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 15495 x-amzn-requestid: 977cdbce-3a9c-4006-a5a1-5c4c82bd4a94 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfHDIFxzIAMFzEw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891ee0-4b2cb3a16ca745537a8caf8c;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: KnOx0PJ8BR9OoAzXfuWk_Je_yawqzY4isC0hYTZRvJ74YiVs8jqyIQ== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 22:25:42 GMT age: 14006 etag: "f799dfd89a4f5a452dc837b8616549f578fb4184" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 15495 Md5: 82ea44d6cb116fb1f5752ce9bb87e345 Sha1: f799dfd89a4f5a452dc837b8616549f578fb4184 Sha256: e9087e7fce332289d67d4d5646d0233c2f2d871cc88dc1c51d5ea1e9f2fb5abd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6174 x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cZ0iyH2WoAMFQdg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0 x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 07:20:09 GMT age: 68339 etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6174 Md5: b986f9fcbeca91ed5c8d58fbfaf47d19 Sha1: 6e6c8bd2bce144cc4da1cd7be375b046b60dca79 Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8863 x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cdG14HBNIAMFdWg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg== via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 07:43:11 GMT age: 66957 etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8863 Md5: 156e9ea97b774cbd8361072e4041b6c8 Sha1: fc71ae3cae92ed6011904bb2367f23bf4e69fab4 Sha256: 58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10270 x-amzn-requestid: ac2d2825-2ec4-435e-9921-3ea6524df1dc x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfG1nEvYoAMFliA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891e8a-4419423112b5723e3dba46ea;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:37:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 2ihxuuXiECC4oX11t_vswhnLF0UpqDuboPLkrhpWwp-vfCR5pxGGxw== via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:53:50 GMT age: 15918 etag: "2cb4edc6b161c6d2d5b47aa498ae54e677966466" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10270 Md5: 4c7113338bc3310b13d23ca415c177e2 Sha1: 2cb4edc6b161c6d2d5b47aa498ae54e677966466 Sha256: 3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F092f8542-1ed2-47c2-82aa-d5ef970a77ca.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 26e8b042c0bbef2c7f93f77451563cf6e12af282251ef864652574be2b2c5b15 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3711 x-amzn-requestid: 68772438-16c4-40ab-a40e-860425d8301c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGyhHVsIAMFmsQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891e76-21d27db6708228002e738938;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:54 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: JOCSKxy4WUDbS22Gd9BlyN1gmcDsDNlNWnT57KITGlNwfOe_Iaco9g== via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:48:59 GMT age: 16209 etag: "6c56f4015305eff04a99cec9758cd40bf4e5f704" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3711 Md5: 89e1a735e16f55c78fa75ae434294029 Sha1: 6c56f4015305eff04a99cec9758cd40bf4e5f704 Sha256: 26e8b042c0bbef2c7f93f77451563cf6e12af282251ef864652574be2b2c5b15
GET /twh5yffg?pst=1669947608&rmtc=t&uuid=&pii=&in=false&refer=http%3A%2F%2Fmjurr.923a6.yy.wy5532.com%2F&key=131c3c32be0edd4d7fb964bdde74c4d2&shu=0a12fc8dc9dec702e5e680b992b4beba9a9e7690456c69d33aa245ba819ca034c30c30f2f4256d40b37776e181a2a5f71a4996c240db18f05da5ec7c406d8454b8b10d60240952db480d3949e6512ea0b4f944e4&fr=0&sw2=1280&sh2=939&sw3=1280&sh3=176&sw4=1280&sh4=939&sw5=1280&sh5=1024&sw6=1280&sh6=1024&sw7=1280&sh7=1002 HTTP/1.1 Host: gracelessbrief.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://gracelessbrief.com/twh5yffg?key=9ca601a9f47c735df76d5ca46fa26a66&submetric=16719801 Cookie: u_pl=17886678,16719801; pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; ain=eyJhbGciOiJIUzI1NiJ9.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.KqYsdBP7X8dkTcso8rrqmNVmNCJ0ayG1R9BMsMmEgF8; cjs=t Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin	URL: gracelessbrief.com/twh5yffg?pst=1669947608&rmtc=t&uuid= (...) FQDN: gracelessbrief.com IP: 192.243.61.227 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 192.243.61.227 HTTP/1.1 302 Found Content-Type: text/html Server: nginx/1.22.0 Date: Fri, 02 Dec 2022 02:19:08 GMT Content-Length: 0 Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Location: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Set-Cookie: iprca706d6452f0a2f79a599aaf0e4ca65b8=2270707; expires=Sat, 03 Dec 2022 02:19:08 GMT uncs=2; expires=Sat, 03 Dec 2022 02:19:08 GMT uncs28=2; expires=Sat, 03 Dec 2022 02:19:08 GMT Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 935bbd06aa2cb47d77a77a95bf742381 Strict-Transport-Security: max-age=0; includeSubdomains --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 0af88ba172074d73bc08f447bd802b024cc14ad793e65c81966190554364a7db 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2212 Cache-Control: max-age=160583 Date: Fri, 02 Dec 2022 02:19:08 GMT Etag: "6389283f-117" Expires: Sat, 03 Dec 2022 22:55:31 GMT Last-Modified: Thu, 01 Dec 2022 22:18:39 GMT Server: ECS (amb/6BA7) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: 5eca1876e56305eb5fd280e617f1b3f7 Sha1: 98fee2a1511f8e843c1b51c0df1a1c83f6cf3973 Sha256: 0af88ba172074d73bc08f447bd802b024cc14ad793e65c81966190554364a7db
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 0af88ba172074d73bc08f447bd802b024cc14ad793e65c81966190554364a7db 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2212 Cache-Control: max-age=160583 Date: Fri, 02 Dec 2022 02:19:08 GMT Etag: "6389283f-117" Expires: Sat, 03 Dec 2022 22:55:31 GMT Last-Modified: Thu, 01 Dec 2022 22:18:39 GMT Server: ECS (ska/F708) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: 5eca1876e56305eb5fd280e617f1b3f7 Sha1: 98fee2a1511f8e843c1b51c0df1a1c83f6cf3973 Sha256: 0af88ba172074d73bc08f447bd802b024cc14ad793e65c81966190554364a7db
GET /common/tr/ce/land_ce_300520_na_en/image/notice.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: 9f791fa05194d8417e6d68995973bb43babe3b0704cb4c7011dbb63c69eec028 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 23707 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-5c9b" cache-control: max-age=14400 cf-cache-status: HIT age: 879 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XsxMJC68BQFsGHnv6CfJsT66yv3KlwkDjRUiXB7hyjcC9kHe1bmB%2BAej5jTp9Jjubuhv53V5qncK0up6n4dglbD5eEW4k64nrmzGAKra3GqMYCNfRlE0txB9TapuAl81pIxXcw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d969b515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 1920 x 115, 8-bit colormap, non-interlaced\012- data Size: 23707 Md5: 3cf58bc7ec31b37ba73eeed2e20922dd Sha1: ef0020a4afa74f34bf7496d8ab04171b69e19f26 Sha256: 9f791fa05194d8417e6d68995973bb43babe3b0704cb4c7011dbb63c69eec028
GET /common/tr/ce/land_ce_300520_na_en/image/logo.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: 0f56b6c137e245f0b3d6af93e8f3ae48c15ff33e29e36df20530f40abeee8ee3 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 4794 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-12ba" cache-control: max-age=14400 cf-cache-status: HIT age: 879 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SpdkehJpF3SHLDSNKYjiKf3bMoSWg0VKqZKPfoGMj%2Fe9BQzGiiHq%2FamTaFkIf0YrF036zXS5w%2FN%2BWZpjaEgHGwicNFxfXNyh%2FmvpERZNebOe5UGm2t19Xvv7%2B4Yxz%2FQ%2FopnG2w%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d96ab515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 291 x 93, 8-bit colormap, non-interlaced\012- data Size: 4794 Md5: d2ce778778e09563ac9eb50b06b2d6fb Sha1: 79ee65334aa4e0f3d8fe45fa29dba31e4f9d979e Sha256: 0f56b6c137e245f0b3d6af93e8f3ae48c15ff33e29e36df20530f40abeee8ee3
GET /common/tr/ce/land_ce_300520_na_en/image/n1.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: 2e0719b37a163591cfd41f5d16af5881c10363db67a3a3c69d4aa6d0e4d07fac 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 3979 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-f8b" cache-control: max-age=14400 cf-cache-status: HIT age: 1796 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HOnjsLl4in018OIn8BBsKR8GgtxAQNVqKBlqT9rIuxgOMPVCtfmY%2BvH2gOYJgAdYPcZPG499Cn00lJ2U10uQIoIZfwB2kEUxsFOv38JlaX%2BNF5AKHJLwcl5X07K17Gqk2AFP%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d96db515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 321 x 70, 8-bit colormap, non-interlaced\012- data Size: 3979 Md5: 6620042f764faeabe7cc1cfb38ff601c Sha1: 877812b21435579792db6aac1b56fde6cda905a2 Sha256: 2e0719b37a163591cfd41f5d16af5881c10363db67a3a3c69d4aa6d0e4d07fac
GET /common/tr/ce/land_ce_300520_na_en/image/n2.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: fe7ceed78142de7e4b88367e1e2eeb9d499a804f133b2800270a246b252abe0f 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 3126 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-c36" cache-control: max-age=14400 cf-cache-status: HIT age: 591 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vUMPm7se05EWk%2FeBR7%2BtT0ZgN6Xwc%2FKo3eXtj846tZ2GsfFxmQtqeEecu4qO%2F1iijjOI0oKXgKUbQpfSNkuYtlSeS3ZSk7pVNIbBTD5q0AibsZPazJZNFq3tMWMdd6mzHitiEA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d970b515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 321 x 70, 8-bit colormap, non-interlaced\012- data Size: 3126 Md5: cf90c3ff9f0490f4d07c3b4f6d2f2a28 Sha1: e1b55d2deeb10a2660c776b6ae65b0623f96c7a5 Sha256: fe7ceed78142de7e4b88367e1e2eeb9d499a804f133b2800270a246b252abe0f
GET /common/tr/ce/land_ce_300520_na_en/image/card1.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: fa8a6f284a1cabd4e57be38602f0833a67460e4abd9eb087b85d9e0c57bd0032 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 75556 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-12724" cache-control: max-age=14400 cf-cache-status: HIT age: 880 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GJtPz6AtkbY%2BTUt6iHinMpmfdJ6ecZ81PvQ87CGOaG3ZUu%2BvZDyrZ8%2BmmSwvoKTTJadK3P3FegCTL%2BAZxPuBMf4r8ZCjpPO37rGk99yDXRQGRqBSulArXan%2FQvILLfbuqA%2FNYQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d96bb515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 354 x 607, 8-bit colormap, non-interlaced\012- data Size: 75556 Md5: e35b87a58183c9d6050dd668f192bbf7 Sha1: 1c8ae327fd1fde27dc19400b653d1e23f9dbf73e Sha256: fa8a6f284a1cabd4e57be38602f0833a67460e4abd9eb087b85d9e0c57bd0032
GET /common/tr/ce/land_ce_300520_na_en/image/n3.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: f9f14555016459f6f23714a23c1d9f8126fd698102fac67240324c0cb07b6ec0 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 4391 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-1127" cache-control: max-age=14400 cf-cache-status: HIT age: 591 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IwunCC2uCsLONfMFJvxtOLz1L%2BNlbKZGYrZBP5pu26Dm9WxdAiMUtD2Sg4Qma0IMyxUifV%2FLqDy%2FIwbk0W%2Bmu%2BrhRTKlhZZu97Ekid7doC37mAZUN5TXJ%2FojsRvNJrONIG6lFQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374e973b515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 321 x 70, 8-bit colormap, non-interlaced\012- data Size: 4391 Md5: fc317e9bd9f72a1a5ba533ff7b075308 Sha1: d45cb010a1858c7ab98453deaec177b0f7ec2a1a Sha256: f9f14555016459f6f23714a23c1d9f8126fd698102fac67240324c0cb07b6ec0
GET /common/tr/ce/land_ce_300520_na_en/image/card2.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: 08762ec4d73be8c26aba0c720410abcf204514f2d96a78956f008087a0481894 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 73161 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-11dc9" cache-control: max-age=14400 cf-cache-status: HIT age: 879 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iTP37XNOKB6zC%2B%2BwcNVgErBi6NrmqZp5hIkBLuRzbv8izdEeKgcD%2FfqnY5ucg1NBz8HXWTCXjiLWt4iStxuDxB7WXRoqatwg0bMOhyygYfKnCry4GnpiDVWfYWW4Tp3HmHcjEw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d96fb515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 354 x 607, 8-bit colormap, non-interlaced\012- data Size: 73161 Md5: c35c1130835c4890905a1545b31cbd81 Sha1: 3ea153adfc6a29a18e6b9b81a44be24eefb888fc Sha256: 08762ec4d73be8c26aba0c720410abcf204514f2d96a78956f008087a0481894
GET /common/tr/ce/land_ce_300520_na_en/image/card3.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: 95ab81627a772612d51e5fd9b0b0cec1131d2343ec107695fd5cf147234f2d13 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 70719 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-1143f" cache-control: max-age=14400 cf-cache-status: HIT age: 880 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivMJfyYhY72wVmW8Ba%2BylykDBwSXPa1N005pX2j7ld36SPNqzJ6uuREgocyYMhA%2BWiTx6yHIp22iaz4Lj4GojU51Lye%2BSbcSEOL5m9L8DCoE7vKy115lUSyVYORqBq1A8k%2Bxqg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d971b515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 354 x 607, 8-bit colormap, non-interlaced\012- data Size: 70719 Md5: 24e3ba1facc039348864b88bd2c6a368 Sha1: 8d45419064713a6014e1beabc988a115cef31ac5 Sha256: 95ab81627a772612d51e5fd9b0b0cec1131d2343ec107695fd5cf147234f2d13
GET /common/tr/ce/land_ce_300520_na_en/image/card4.png HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/ima (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: e5cad0062c33fa9b127ce49c05fd6dc46452c014905ab90ed65051d4cccd37ff 188.114.96.1 HTTP/2 200 OK content-type: image/png date: Fri, 02 Dec 2022 02:19:08 GMT content-length: 75470 last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: "5f5657d7-126ce" cache-control: max-age=14400 cf-cache-status: HIT age: 879 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dc3F6xFk4u14o4spJK7We4MbwHmBA%2B3ptkuyzRNSKF47ypYCGRj9kCtWvAwIArxr%2BsCbR5MZS1JQiikYKGdDSdobd4DDxhUc2TtqQklH%2Fby6PCTcDvhxJFBqrhu0klYR6iLjdw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374e979b515-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 354 x 607, 8-bit colormap, non-interlaced\012- data Size: 75470 Md5: 0f0dec893890c919db2c71f3de1f79bf Sha1: b2c9715eb4e6ef216f2c422496d56c11653b761e Sha256: e5cad0062c33fa9b127ce49c05fd6dc46452c014905ab90ed65051d4cccd37ff
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 8c1741571fe717f1754c9ce05367bb703a3a283da715a6d5ddcd88d62196bf0e 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "8C1741571FE717F1754C9CE05367BB703A3A283DA715A6D5DDCD88D62196BF0E" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3756 Expires: Fri, 02 Dec 2022 03:21:45 GMT Date: Fri, 02 Dec 2022 02:19:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6317b73716aa51fe3fd5312f8461c428 Sha1: 7b38f023d55a52fcf0f8aca328deff4ef2b13b33 Sha256: 8c1741571fe717f1754c9ce05367bb703a3a283da715a6d5ddcd88d62196bf0e
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 85d83403d3ea99fe317c5d6f01254c18fa1590ac801b66a0bee364838255299f 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 346 ETag: "85D83403D3EA99FE317C5D6F01254C18FA1590AC801B66A0BEE364838255299F" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2232 Expires: Fri, 02 Dec 2022 02:56:21 GMT Date: Fri, 02 Dec 2022 02:19:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 346 Md5: ce6584d7cce4780b6f629d76a15c42fc Sha1: ec92eccf2955cfdc0046d9ec149313251109fea4 Sha256: 85d83403d3ea99fe317c5d6f01254c18fa1590ac801b66a0bee364838255299f
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 85d83403d3ea99fe317c5d6f01254c18fa1590ac801b66a0bee364838255299f 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 346 ETag: "85D83403D3EA99FE317C5D6F01254C18FA1590AC801B66A0BEE364838255299F" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2232 Expires: Fri, 02 Dec 2022 02:56:21 GMT Date: Fri, 02 Dec 2022 02:19:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 346 Md5: ce6584d7cce4780b6f629d76a15c42fc Sha1: ec92eccf2955cfdc0046d9ec149313251109fea4 Sha256: 85d83403d3ea99fe317c5d6f01254c18fa1590ac801b66a0bee364838255299f
GET /px1.js HTTP/1.1 Host: ln.gamesrevenue.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ln.gamesrevenue.com/px1.js FQDN: ln.gamesrevenue.com IP: 5.161.79.44 HASH: 1a62fca476c0115dd6a3e0c3030767825f7c5a45c045ab85d18600ce05eb9a5b 5.161.79.44 HTTP/2 200 OK content-type: application/javascript server: nginx date: Fri, 02 Dec 2022 02:19:09 GMT last-modified: Thu, 01 Dec 2022 11:50:26 GMT etag: W/"63889502-3c9d" content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 4004 Md5: 04d004644febfe30636cb2c0f6909564 Sha1: 666ce0601115bd16a3d1b1d689d8a48220dc7f66 Sha256: 1a62fca476c0115dd6a3e0c3030767825f7c5a45c045ab85d18600ce05eb9a5b
GET /common/tr/ce/land_ce_300520_na_en/css/main.css HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/css (...) FQDN: supanimegames.com IP: 188.114.96.1 HASH: 0b5f50f1137db847d1ec9760e28bae239e4684c76f263f74e13c218d45505f02 188.114.96.1 HTTP/2 200 OK content-type: text/css date: Fri, 02 Dec 2022 02:19:08 GMT last-modified: Mon, 07 Sep 2020 15:55:03 GMT etag: W/"5f5657d7-99f" cache-control: max-age=14400 cf-cache-status: HIT age: 880 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SVm9JQvIJV4AQO2SGWaAwBFUSG4Pt02fSdJ2aS7o93PccamkK6Edzfs4LdL1xshhx9C59yCUhhHTAf1X4CMvJ0Pxpi1ZhL0QlMdA1%2Fyea43XSX0ljQ9PXt8Bd9RzFucEKWLP0w%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d962b515-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 1561 Md5: e4271c2ed0a6339b8e0c69542b1d0957 Sha1: b7ea00748485b8aac14c55b3eb5d57767f9f1077 Sha256: 0b5f50f1137db847d1ec9760e28bae239e4684c76f263f74e13c218d45505f02
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 143.204.42.165 HASH: eddc54420a811685bfd0c2c14dd13340c9380b529bf1bb8c0426baa0375a67f2 143.204.42.165 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=126922 Date: Fri, 02 Dec 2022 02:19:09 GMT Etag: "6388ac95-1d7" Expires: Sat, 03 Dec 2022 13:34:31 GMT Last-Modified: Thu, 01 Dec 2022 13:31:01 GMT Server: ECS (bsa/EB24) X-Cache: Miss from cloudfront Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: eRm2DOywIyhpZ_cxQldAK-wXwUcYFmV0p2F94X6Xtjm5S6YRm0mRAg== Age: 210 --- Additional Info --- Magic: data Size: 471 Md5: f60f02a95664f3be8fd0b4e614010c6a Sha1: bb83d56ac8ae98bff5e9954dffc7f2035b47f63f Sha256: eddc54420a811685bfd0c2c14dd13340c9380b529bf1bb8c0426baa0375a67f2
GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: mc.yandex.ru/metrika/tag.js FQDN: mc.yandex.ru IP: 87.250.251.119 HASH: 2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8 87.250.251.119 HTTP/2 200 OK content-type: application/javascript content-length: 73266 date: Fri, 02 Dec 2022 02:19:09 GMT access-control-allow-origin: * etag: "6388ac0c-11e32" expires: Fri, 02 Dec 2022 03:19:09 GMT last-modified: Thu, 01 Dec 2022 16:28:44 GMT cache-control: max-age=3600 content-encoding: br strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 (with BOM) text, with very long lines (586) Size: 73266 Md5: a4567a1e52f99c2b3870f58375ec8cac Sha1: dbfc795e71fc19f7e45e8637abc4ac770f639a48 Sha256: 2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8
GET /px.gif?akey=42c6f09dc9e74035608496705631ef5d HTTP/1.1 Host: simplewebanalysis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: simplewebanalysis.com/px.gif?akey=42c6f09dc9e7403560849 (...) FQDN: simplewebanalysis.com IP: 18.185.190.54 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 18.185.190.54 HTTP/2 307 Temporary Redirect content-type: image/gif date: Fri, 02 Dec 2022 02:19:09 GMT content-length: 0 location: https://professionalswebcheck.com/dbs?uuid=e3b4e9cd-2db0-43b8-8945-8aeedbed4ab0&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsgIjM3IjoxNjY5OTQ3NTQ5fSwiYWNjbCI6eyAiMjAsMSI6MTY2OTk0NzU0OX19.ysEMPPPbGLp0DqqsnLM4dGklQ_u1HCxmu7VgAu2M0NM server: nginx/1.17.6 set-cookie: uid_id2=e3b4e9cd-2db0-43b8-8945-8aeedbed4ab0:2:1; expires=Mon, 29 Nov 2032 02:19:09 GMT; secure; SameSite=None ak=37,1669947549; expires=Thu, 02 Mar 2023 02:19:09 GMT; secure; SameSite=None acl=20,1,1669947549; expires=Thu, 02 Mar 2023 02:19:09 GMT; secure; SameSite=None expires: Fri, 02 Dec 2022 02:19:09 GMT cache-control: max-age=0, : no-cache X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/metrika/advert.gif FQDN: mc.yandex.ru IP: 87.250.251.119 HASH: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 87.250.251.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Fri, 02 Dec 2022 02:19:10 GMT access-control-allow-origin: * etag: "6388ac0c-2b" expires: Fri, 02 Dec 2022 03:19:10 GMT accept-ranges: bytes last-modified: Thu, 01 Dec 2022 16:28:44 GMT cache-control: max-age=3600 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: df3e567d6f16d040326c7a0ea29a4f41 Sha1: ea7df583983133b62712b5e73bffbcd45cc53736 Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/57021556/1?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI%3D%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1050%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A459985117873%3Ahid%3A656534411%3Az%3A0%3Ai%3A20221202021908%3Aet%3A1669947548%3Ac%3A1%3Arn%3A77135827%3Arqn%3A1%3Au%3A1669947548587061071%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C50%2C265%2C0%2C209%2C0%2C%2C478%2C0%2C%2C%2C%2C1044%3Aco%3A0%3Ans%3A1669947546690%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669947548%3At%3AEmpire&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://supanimegames.com Referer: https://supanimegames.com/ Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/57021556/1?wmode=7&page-url=https%3A (...) FQDN: mc.yandex.ru IP: 87.250.251.119 HASH: 379dc0aa7b0a91f390f64a4a49b13801c2ab9199e1d6e4720cdc3b5e46496024 87.250.251.119 HTTP/2 200 OK content-type: application/json; charset=utf-8 content-length: 400 date: Fri, 02 Dec 2022 02:19:10 GMT x-content-type-options: nosniff access-control-allow-origin: https://supanimegames.com access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Fri, 02-Dec-2022 02:19:10 GMT last-modified: Fri, 02-Dec-2022 02:19:10 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (400), with no line terminators Size: 400 Md5: 3724142883372d8d98067a55a403d2a5 Sha1: 0efca7277e3f2b69ae9c5ea1691dd9818ef0a4ae Sha256: 379dc0aa7b0a91f390f64a4a49b13801c2ab9199e1d6e4720cdc3b5e46496024
GET /dbs?uuid=e3b4e9cd-2db0-43b8-8945-8aeedbed4ab0&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsgIjM3IjoxNjY5OTQ3NTQ5fSwiYWNjbCI6eyAiMjAsMSI6MTY2OTk0NzU0OX19.ysEMPPPbGLp0DqqsnLM4dGklQ_u1HCxmu7VgAu2M0NM HTTP/1.1 Host: professionalswebcheck.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://supanimegames.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: professionalswebcheck.com/dbs?uuid=e3b4e9cd-2db0-43b8-8 (...) FQDN: professionalswebcheck.com IP: 18.185.190.54 HASH: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c 18.185.190.54 HTTP/2 200 OK content-type: image/gif date: Fri, 02 Dec 2022 02:19:10 GMT content-length: 7 server: nginx/1.17.6 set-cookie: uid_id2=e3b4e9cd-2db0-43b8-8945-8aeedbed4ab0:2:1; expires=Mon, 29 Nov 2032 02:19:10 GMT; secure; SameSite=None ak=37,1669947549; expires=Thu, 02 Mar 2023 02:19:10 GMT; secure; SameSite=None acl=20,1,1669947549; expires=Thu, 02 Mar 2023 02:19:10 GMT; secure; SameSite=None expires: Fri, 02 Dec 2022 02:19:10 GMT cache-control: max-age=0, : no-cache X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 7 Md5: 132d6af1b46048b45cf86cdee7991d31 Sha1: eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7591 x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGgMFRZIAMFl7g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:48:51 GMT age: 16224 etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7591 Md5: d147ccb10bda82b153a596c3c967cd6a Sha1: ffd0763f997e71a8c1458523fc17cafe8849dfdf Sha256: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
GET /common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://gracelessbrief.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1 (...) FQDN: supanimegames.com IP: 188.114.96.1 188.114.96.1 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Fri, 02 Dec 2022 02:19:08 GMT cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pDhktrrbNLs1923iz0HXkIMxQHBxVJ%2FvepgG51Z0hFHvmmpWd2w2Wl0B1m1bjZgnXzyyTN2sIp6txC4oHt3l%2B0JbBzE5ghboF87Iu1A1%2BzM4XyXix1nerpeNOIDCJBWB5Jo8HA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 77309372d87cb515-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /watch/57021556?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI%3D%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1050%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A459985117873%3Ahid%3A656534411%3Az%3A0%3Ai%3A20221202021908%3Aet%3A1669947548%3Ac%3A1%3Arn%3A77135827%3Arqn%3A1%3Au%3A1669947548587061071%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C50%2C265%2C0%2C209%2C0%2C%2C478%2C0%2C%2C%2C%2C1044%3Aco%3A0%3Ans%3A1669947546690%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669947548%3At%3AEmpire&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://supanimegames.com Connection: keep-alive Referer: https://supanimegames.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/57021556?wmode=7&page-url=https%3A%2 (...) FQDN: mc.yandex.ru IP: 87.250.251.119 87.250.251.119 HTTP/2 302 Found location: /watch/57021556/1?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI%3D%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1050%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A459985117873%3Ahid%3A656534411%3Az%3A0%3Ai%3A20221202021908%3Aet%3A1669947548%3Ac%3A1%3Arn%3A77135827%3Arqn%3A1%3Au%3A1669947548587061071%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C50%2C265%2C0%2C209%2C0%2C%2C478%2C0%2C%2C%2C%2C1044%3Aco%3A0%3Ans%3A1669947546690%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669947548%3At%3AEmpire&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 date: Fri, 02 Dec 2022 02:19:10 GMT access-control-allow-origin: https://supanimegames.com set-cookie: yabs-sid=2219662171669947550; Path=/; SameSite=None; Secure i=D3tJ90Pgjx/CSRONCkEnhhly+x1PAFdyU18GsUo+LoehMdIFyWBMUM7Gk2MTGOP/4EHZGQYp73xtb8Tu63db1EtyY00=; Expires=Mon, 29-Nov-2032 02:18:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=5685263761669947550; Expires=Sat, 02-Dec-2023 02:19:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=5685263761669947550; Expires=Sat, 02-Dec-2023 02:19:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1701483550.yc.1669947550#1701483550.yrts.1669947550#1701483550.yrtsi.1669947550; Expires=Sat, 02-Dec-2023 02:19:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Fri, 02-Dec-2022 02:19:10 GMT last-modified: Fri, 02-Dec-2022 02:19:10 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info ---
GET /awpx_click.js?v=005 HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/awpx_click.js?v=005 FQDN: supanimegames.com IP: 188.114.96.1 188.114.96.1 HTTP/2 200 OK content-type: application/javascript date: Fri, 02 Dec 2022 02:19:08 GMT last-modified: Mon, 22 Aug 2022 12:36:02 GMT etag: W/"63037832-5cb" cache-control: max-age=14400 cf-cache-status: HIT age: 2318 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PRwBL9DMNnT1TMoj2e74t6Gv9mjze2kCWcf22S9AfgSi18QAHf6hBktV%2BRlacTGYBAujwWYBUbTZ0dWitDed3MqPeUevoEZoc4Lh8fT7TpJamksVH%2BAlwTElNwGCC8TZWdRTjQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d968b515-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /common/tr/ce/land_ce_300520_na_en/libs/jq.js HTTP/1.1 Host: supanimegames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: supanimegames.com/common/tr/ce/land_ce_300520_na_en/lib (...) FQDN: supanimegames.com IP: 188.114.96.1 188.114.96.1 HTTP/2 200 OK content-type: application/javascript date: Fri, 02 Dec 2022 02:19:08 GMT last-modified: Thu, 15 Jul 2021 12:31:47 GMT etag: W/"60f02ab3-15851" cache-control: max-age=14400 cf-cache-status: HIT age: 879 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cAOF%2B9q0isBOdIalRDcfpgk6DSNJuBV%2B7RMgYiIktsLwhPVEEdX3SORMg7FSXTY5m5%2FApaPGS%2B41GlL3Wl4ZFoCr3yJDW4IDb5CKWZHl8%2FKE3NEcNRB2Ukf%2FjScJiwotEdZL3w%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 77309374d964b515-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 420 

                                        
                                            
Cache-Control: max-age=116347 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:05 GMT 

                                        
                                            
Etag: "63888270-1d7" 

                                        
                                            
Expires: Sat, 03 Dec 2022 10:38:12 GMT 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT 

                                        
                                            
Server: ECS (ska/F708) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    0c748388899e8a8d3680355da2ea5020

                                                Sha1:   903c620cd137613daafb0da0508c37b2f4a67212

                                                Sha256: 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 02 Dec 2022 01:19:50 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 3555 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    30db107dcf4380cef05efea409c2e6a3

                                                Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9

                                                Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: hwHBe0QmiNzFM0QOzyXKl3u9hm2G+rdjfMrGbQX3igjBRn3gQSRb4JX93xjiJs4DUIv7gO7LlAo= 

                                        
                                            
x-amz-request-id: 0N5T1924E036P0JJ 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 02 Dec 2022 01:46:31 GMT 

                                        
                                            
age: 1955 

                                        
                                            
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                        
                                            
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: mjurr.923a6.yy.wy5532.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://mjurr.923a6.yy.wy5532.com/ 

                                        
                                            
Cookie: sid=42d5714a-71d5-11ed-bdce-63864994bac4

                                         207.244.67.214

                                        
                                            HTTP/1.1 404 Not Found

                                        

                                        
                                            
cache-control: max-age=0, private, must-revalidate 

                                        
                                            
connection: close 

                                        
                                            
content-length: 9 

                                        
                                            
date: Fri, 02 Dec 2022 02:19:05 GMT 

                                        
                                            
server: nginx 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   9

                                                Md5:    d8f4a1993546cc4b850cde3599e27aec

                                                Sha1:   094b763b4cfcc0b05e5d040581cd513c3ca08067

                                                Sha256: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 416 

                                        
                                            
Cache-Control: max-age=111279 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:06 GMT 

                                        
                                            
Etag: "63886ea9-1d7" 

                                        
                                            
Expires: Sat, 03 Dec 2022 09:13:45 GMT 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT 

                                        
                                            
Server: ECS (ska/F708) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    1f88399f3fdd89dbb9ca1229cb67143a

                                                Sha1:   325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3

                                                Sha256: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: AOgkQD5jV2LVhcbWVpXMlw== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         54.187.71.185

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: b+iqJXzavIpOg4h3hUqbGwKxaek= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "445684A354FCEC7174DB0C5359EB97AD0D700F9D375BBD817A831C70CE02F04A" 

                                        
                                            
Last-Modified: Tue, 29 Nov 2022 23:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4502 

                                        
                                            
Expires: Fri, 02 Dec 2022 03:34:09 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    755df20cc1c2e1a3d11e35c272be0970

                                                Sha1:   e373c6058bd09935bc8d8fa9f56a3d468a990fb3

                                                Sha256: 445684a354fcec7174db0c5359eb97ad0d700f9d375bbd817a831c70ce02f04a

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=16806 

                                        
                                            
Expires: Fri, 02 Dec 2022 06:59:14 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    ecab83d593cc540b02689be5be7abc8a

                                                Sha1:   81cda579b7b9b22332b85266b0126585f3d3f73f

                                                Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=16806 

                                        
                                            
Expires: Fri, 02 Dec 2022 06:59:14 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    ecab83d593cc540b02689be5be7abc8a

                                                Sha1:   81cda579b7b9b22332b85266b0126585f3d3f73f

                                                Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F356e23df-cb76-452a-b299-da5410086837.png HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 15495 

                                        
                                            
x-amzn-requestid: 977cdbce-3a9c-4006-a5a1-5c4c82bd4a94 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cfHDIFxzIAMFzEw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63891ee0-4b2cb3a16ca745537a8caf8c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: KnOx0PJ8BR9OoAzXfuWk_Je_yawqzY4isC0hYTZRvJ74YiVs8jqyIQ== 

                                        
                                            
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 22:25:42 GMT 

                                        
                                            
age: 14006 

                                        
                                            
etag: "f799dfd89a4f5a452dc837b8616549f578fb4184" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   15495

                                                Md5:    82ea44d6cb116fb1f5752ce9bb87e345

                                                Sha1:   f799dfd89a4f5a452dc837b8616549f578fb4184

                                                Sha256: e9087e7fce332289d67d4d5646d0233c2f2d871cc88dc1c51d5ea1e9f2fb5abd

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8863 

                                        
                                            
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cdG14HBNIAMFdWg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg== 

                                        
                                            
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 07:43:11 GMT 

                                        
                                            
age: 66957 

                                        
                                            
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8863

                                                Md5:    156e9ea97b774cbd8361072e4041b6c8

                                                Sha1:   fc71ae3cae92ed6011904bb2367f23bf4e69fab4

                                                Sha256: 58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F092f8542-1ed2-47c2-82aa-d5ef970a77ca.png HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 3711 

                                        
                                            
x-amzn-requestid: 68772438-16c4-40ab-a40e-860425d8301c 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cfGyhHVsIAMFmsQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63891e76-21d27db6708228002e738938;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:54 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: JOCSKxy4WUDbS22Gd9BlyN1gmcDsDNlNWnT57KITGlNwfOe_Iaco9g== 

                                        
                                            
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 21:48:59 GMT 

                                        
                                            
age: 16209 

                                        
                                            
etag: "6c56f4015305eff04a99cec9758cd40bf4e5f704" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   3711

                                                Md5:    89e1a735e16f55c78fa75ae434294029

                                                Sha1:   6c56f4015305eff04a99cec9758cd40bf4e5f704

                                                Sha256: 26e8b042c0bbef2c7f93f77451563cf6e12af282251ef864652574be2b2c5b15

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 2212 

                                        
                                            
Cache-Control: max-age=160583 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
Etag: "6389283f-117" 

                                        
                                            
Expires: Sat, 03 Dec 2022 22:55:31 GMT 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 22:18:39 GMT 

                                        
                                            
Server: ECS (amb/6BA7) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 279 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   279

                                                Md5:    5eca1876e56305eb5fd280e617f1b3f7

                                                Sha1:   98fee2a1511f8e843c1b51c0df1a1c83f6cf3973

                                                Sha256: 0af88ba172074d73bc08f447bd802b024cc14ad793e65c81966190554364a7db

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/image/notice.png HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         188.114.96.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
content-length: 23707 

                                        
                                            
last-modified: Mon, 07 Sep 2020 15:55:03 GMT 

                                        
                                            
etag: "5f5657d7-5c9b" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 879 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XsxMJC68BQFsGHnv6CfJsT66yv3KlwkDjRUiXB7hyjcC9kHe1bmB%2BAej5jTp9Jjubuhv53V5qncK0up6n4dglbD5eEW4k64nrmzGAKra3GqMYCNfRlE0txB9TapuAl81pIxXcw%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 77309374d969b515-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 1920 x 115, 8-bit colormap, non-interlaced\012- data

                                                Size:   23707

                                                Md5:    3cf58bc7ec31b37ba73eeed2e20922dd

                                                Sha1:   ef0020a4afa74f34bf7496d8ab04171b69e19f26

                                                Sha256: 9f791fa05194d8417e6d68995973bb43babe3b0704cb4c7011dbb63c69eec028

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/image/n1.png HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         188.114.96.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
content-length: 3979 

                                        
                                            
last-modified: Mon, 07 Sep 2020 15:55:03 GMT 

                                        
                                            
etag: "5f5657d7-f8b" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 1796 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HOnjsLl4in018OIn8BBsKR8GgtxAQNVqKBlqT9rIuxgOMPVCtfmY%2BvH2gOYJgAdYPcZPG499Cn00lJ2U10uQIoIZfwB2kEUxsFOv38JlaX%2BNF5AKHJLwcl5X07K17Gqk2AFP%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 77309374d96db515-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 321 x 70, 8-bit colormap, non-interlaced\012- data

                                                Size:   3979

                                                Md5:    6620042f764faeabe7cc1cfb38ff601c

                                                Sha1:   877812b21435579792db6aac1b56fde6cda905a2

                                                Sha256: 2e0719b37a163591cfd41f5d16af5881c10363db67a3a3c69d4aa6d0e4d07fac

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/image/card1.png HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         188.114.96.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
content-length: 75556 

                                        
                                            
last-modified: Mon, 07 Sep 2020 15:55:03 GMT 

                                        
                                            
etag: "5f5657d7-12724" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 880 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GJtPz6AtkbY%2BTUt6iHinMpmfdJ6ecZ81PvQ87CGOaG3ZUu%2BvZDyrZ8%2BmmSwvoKTTJadK3P3FegCTL%2BAZxPuBMf4r8ZCjpPO37rGk99yDXRQGRqBSulArXan%2FQvILLfbuqA%2FNYQ%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 77309374d96bb515-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 354 x 607, 8-bit colormap, non-interlaced\012- data

                                                Size:   75556

                                                Md5:    e35b87a58183c9d6050dd668f192bbf7

                                                Sha1:   1c8ae327fd1fde27dc19400b653d1e23f9dbf73e

                                                Sha256: fa8a6f284a1cabd4e57be38602f0833a67460e4abd9eb087b85d9e0c57bd0032

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/image/card2.png HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         188.114.96.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
content-length: 73161 

                                        
                                            
last-modified: Mon, 07 Sep 2020 15:55:03 GMT 

                                        
                                            
etag: "5f5657d7-11dc9" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 879 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iTP37XNOKB6zC%2B%2BwcNVgErBi6NrmqZp5hIkBLuRzbv8izdEeKgcD%2FfqnY5ucg1NBz8HXWTCXjiLWt4iStxuDxB7WXRoqatwg0bMOhyygYfKnCry4GnpiDVWfYWW4Tp3HmHcjEw%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 77309374d96fb515-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 354 x 607, 8-bit colormap, non-interlaced\012- data

                                                Size:   73161

                                                Md5:    c35c1130835c4890905a1545b31cbd81

                                                Sha1:   3ea153adfc6a29a18e6b9b81a44be24eefb888fc

                                                Sha256: 08762ec4d73be8c26aba0c720410abcf204514f2d96a78956f008087a0481894

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/image/card4.png HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         188.114.96.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
content-length: 75470 

                                        
                                            
last-modified: Mon, 07 Sep 2020 15:55:03 GMT 

                                        
                                            
etag: "5f5657d7-126ce" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 879 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dc3F6xFk4u14o4spJK7We4MbwHmBA%2B3ptkuyzRNSKF47ypYCGRj9kCtWvAwIArxr%2BsCbR5MZS1JQiikYKGdDSdobd4DDxhUc2TtqQklH%2Fby6PCTcDvhxJFBqrhu0klYR6iLjdw%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 77309374e979b515-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 354 x 607, 8-bit colormap, non-interlaced\012- data

                                                Size:   75470

                                                Md5:    0f0dec893890c919db2c71f3de1f79bf

                                                Sha1:   b2c9715eb4e6ef216f2c422496d56c11653b761e

                                                Sha256: e5cad0062c33fa9b127ce49c05fd6dc46452c014905ab90ed65051d4cccd37ff

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: e1.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 346 

                                        
                                            
ETag: "85D83403D3EA99FE317C5D6F01254C18FA1590AC801B66A0BEE364838255299F" 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2232 

                                        
                                            
Expires: Fri, 02 Dec 2022 02:56:21 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:09 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   346

                                                Md5:    ce6584d7cce4780b6f629d76a15c42fc

                                                Sha1:   ec92eccf2955cfdc0046d9ec149313251109fea4

                                                Sha256: 85d83403d3ea99fe317c5d6f01254c18fa1590ac801b66a0bee364838255299f

                                        
                                            GET /px1.js HTTP/1.1 

                                        
                                            
Host: ln.gamesrevenue.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         5.161.79.44

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 02 Dec 2022 02:19:09 GMT 

                                        
                                            
last-modified: Thu, 01 Dec 2022 11:50:26 GMT 

                                        
                                            
etag: W/"63889502-3c9d" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   4004

                                                Md5:    04d004644febfe30636cb2c0f6909564

                                                Sha1:   666ce0601115bd16a3d1b1d689d8a48220dc7f66

                                                Sha256: 1a62fca476c0115dd6a3e0c3030767825f7c5a45c045ab85d18600ce05eb9a5b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sca1b.amazontrust.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         143.204.42.165

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Content-Length: 471 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Cache-Control: max-age=126922 

                                        
                                            
Date: Fri, 02 Dec 2022 02:19:09 GMT 

                                        
                                            
Etag: "6388ac95-1d7" 

                                        
                                            
Expires: Sat, 03 Dec 2022 13:34:31 GMT 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 13:31:01 GMT 

                                        
                                            
Server: ECS (bsa/EB24) 

                                        
                                            
X-Cache: Miss from cloudfront 

                                        
                                            
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: eRm2DOywIyhpZ_cxQldAK-wXwUcYFmV0p2F94X6Xtjm5S6YRm0mRAg== 

                                        
                                            
Age: 210 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    f60f02a95664f3be8fd0b4e614010c6a

                                                Sha1:   bb83d56ac8ae98bff5e9954dffc7f2035b47f63f

                                                Sha256: eddc54420a811685bfd0c2c14dd13340c9380b529bf1bb8c0426baa0375a67f2

                                        
                                            GET /px.gif?akey=42c6f09dc9e74035608496705631ef5d HTTP/1.1 

                                        
                                            
Host: simplewebanalysis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         18.185.190.54

                                        
                                            HTTP/2 307 Temporary Redirect 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
date: Fri, 02 Dec 2022 02:19:09 GMT 

                                        
                                            
content-length: 0 

                                        
                                            
location: https://professionalswebcheck.com/dbs?uuid=e3b4e9cd-2db0-43b8-8945-8aeedbed4ab0&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjoyLCJhY3VzIjoxLCJhY2kiOnsgIjM3IjoxNjY5OTQ3NTQ5fSwiYWNjbCI6eyAiMjAsMSI6MTY2OTk0NzU0OX19.ysEMPPPbGLp0DqqsnLM4dGklQ_u1HCxmu7VgAu2M0NM 

                                        
                                            
server: nginx/1.17.6 

                                        
                                            
set-cookie: uid_id2=e3b4e9cd-2db0-43b8-8945-8aeedbed4ab0:2:1; expires=Mon, 29 Nov 2032 02:19:09 GMT; secure; SameSite=None
ak=37,1669947549; expires=Thu, 02 Mar 2023 02:19:09 GMT; secure; SameSite=None
acl=20,1,1669947549; expires=Thu, 02 Mar 2023 02:19:09 GMT; secure; SameSite=None 

                                        
                                            
expires: Fri, 02 Dec 2022 02:19:09 GMT 

                                        
                                            
cache-control: max-age=0, : no-cache 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /watch/57021556/1?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI%3D%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1050%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A459985117873%3Ahid%3A656534411%3Az%3A0%3Ai%3A20221202021908%3Aet%3A1669947548%3Ac%3A1%3Arn%3A77135827%3Arqn%3A1%3Au%3A1669947548587061071%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C50%2C265%2C0%2C209%2C0%2C%2C478%2C0%2C%2C%2C%2C1044%3Aco%3A0%3Ans%3A1669947546690%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669947548%3At%3AEmpire&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://supanimegames.com 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         87.250.251.119

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json; charset=utf-8

                                        

                                        
                                            
content-length: 400 

                                        
                                            
date: Fri, 02 Dec 2022 02:19:10 GMT 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
access-control-allow-origin: https://supanimegames.com 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
pragma: no-cache 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
expires: Fri, 02-Dec-2022 02:19:10 GMT 

                                        
                                            
last-modified: Fri, 02-Dec-2022 02:19:10 GMT 

                                        
                                            
cache-control: private, no-cache, no-store, must-revalidate, max-age=0 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (400), with no line terminators

                                                Size:   400

                                                Md5:    3724142883372d8d98067a55a403d2a5

                                                Sha1:   0efca7277e3f2b69ae9c5ea1691dd9818ef0a4ae

                                                Sha256: 379dc0aa7b0a91f390f64a4a49b13801c2ab9199e1d6e4720cdc3b5e46496024

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7591 

                                        
                                            
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cfGgMFRZIAMFl7g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA== 

                                        
                                            
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 21:48:51 GMT 

                                        
                                            
age: 16224 

                                        
                                            
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7591

                                                Md5:    d147ccb10bda82b153a596c3c967cd6a

                                                Sha1:   ffd0763f997e71a8c1458523fc17cafe8849dfdf

                                                Sha256: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971

                                        
                                            GET /watch/57021556?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI%3D%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1050%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A459985117873%3Ahid%3A656534411%3Az%3A0%3Ai%3A20221202021908%3Aet%3A1669947548%3Ac%3A1%3Arn%3A77135827%3Arqn%3A1%3Au%3A1669947548587061071%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C50%2C265%2C0%2C209%2C0%2C%2C478%2C0%2C%2C%2C%2C1044%3Aco%3A0%3Ans%3A1669947546690%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669947548%3At%3AEmpire&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://supanimegames.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         87.250.251.119

                                        
                                            HTTP/2 302 Found

                                        

                                        
                                            
location: /watch/57021556/1?wmode=7&page-url=https%3A%2F%2Fsupanimegames.com%2Fcommon%2Ftr%2Fce%2Fland_ce_300520_na_en%2F%3Fp1%3Dhttps%3A%2F%2Fclick.hooligapps.com%26pid%3D3%26offer_id%3D12%26ref_id%3DVjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI%3D%26sub1%3Dpu_remnant%26sub2%3D16719801&page-ref=https%3A%2F%2Fgracelessbrief.com%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1050%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A459985117873%3Ahid%3A656534411%3Az%3A0%3Ai%3A20221202021908%3Aet%3A1669947548%3Ac%3A1%3Arn%3A77135827%3Arqn%3A1%3Au%3A1669947548587061071%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C50%2C265%2C0%2C209%2C0%2C%2C478%2C0%2C%2C%2C%2C1044%3Aco%3A0%3Ans%3A1669947546690%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669947548%3At%3AEmpire&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 

                                        
                                            
date: Fri, 02 Dec 2022 02:19:10 GMT 

                                        
                                            
access-control-allow-origin: https://supanimegames.com 

                                        
                                            
set-cookie: yabs-sid=2219662171669947550; Path=/; SameSite=None; Secure
i=D3tJ90Pgjx/CSRONCkEnhhly+x1PAFdyU18GsUo+LoehMdIFyWBMUM7Gk2MTGOP/4EHZGQYp73xtb8Tu63db1EtyY00=; Expires=Mon, 29-Nov-2032 02:18:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5685263761669947550; Expires=Sat, 02-Dec-2023 02:19:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5685263761669947550; Expires=Sat, 02-Dec-2023 02:19:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1701483550.yc.1669947550#1701483550.yrts.1669947550#1701483550.yrtsi.1669947550; Expires=Sat, 02-Dec-2023 02:19:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
pragma: no-cache 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
expires: Fri, 02-Dec-2022 02:19:10 GMT 

                                        
                                            
last-modified: Fri, 02-Dec-2022 02:19:10 GMT 

                                        
                                            
cache-control: private, no-cache, no-store, must-revalidate, max-age=0 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /common/tr/ce/land_ce_300520_na_en/libs/jq.js HTTP/1.1 

                                        
                                            
Host: supanimegames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://supanimegames.com/common/tr/ce/land_ce_300520_na_en/?p1=https://click.hooligapps.com&pid=3&offer_id=12&ref_id=VjN8MTY3MTk4MDF8MjI3MDcwN3w5MDc1MzQ1N3wxNjY5OTQ3NTQ4fDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMHw5MS45MC40Mi4xNTR8Mnxwc3ViPXd5NTUzMi5jb218c2g9MGExMmZjOGRjOWRlYzcwMmU1ZTY4MGI5OTJiNGJlYmE5YTllNzY5MDQ1NmM2OWQzM2FhMjQ1YmE4MTljYTAzNGMzMGMzMGYyZjQyNTZkNDBiMzc3NzZlMTgxYTJhNWY3MWE0OTk2YzI0MGRiMThmMDVkYTVlYzdjNDA2ZDg0NTRiOGIxMGQ2MDI0MDk1MmRiNDgwZDM5NDllNjUxMmVhMGI0Zjk0NGU0fGxzPTN8b3R2PWF8MDNiZjgyZGFhZmYxOTEwNWE3NzExM2JjYTA4OGIwYTI=&sub1=pu_remnant&sub2=16719801 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         188.114.96.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
date: Fri, 02 Dec 2022 02:19:08 GMT 

                                        
                                            
last-modified: Thu, 15 Jul 2021 12:31:47 GMT 

                                        
                                            
etag: W/"60f02ab3-15851" 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 879 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cAOF%2B9q0isBOdIalRDcfpgk6DSNJuBV%2B7RMgYiIktsLwhPVEEdX3SORMg7FSXTY5m5%2FApaPGS%2B41GlL3Wl4ZFoCr3yJDW4IDb5CKWZHl8%2FKE3NEcNRB2Ukf%2FjScJiwotEdZL3w%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 77309374d964b515-OSL 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	mjurr.923a6.yy.wy5532.com/
IP	199.115.115.116 (United States)
ASN	#30633 LEASEWEB-USA-WDC
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-02 02:19:17 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (17)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.115.115.116

Last 5 reports on ASN: LEASEWEB-USA-WDC

Last 5 reports on domain: wy5532.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (52)

Overview

Domain Summary (17)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.115.115.116

Last 5 reports on ASN: LEASEWEB-USA-WDC

Last 5 reports on domain: wy5532.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (52)

Network Intrusion Detection Systems