Report - hydrahd.sh

Report Overview

Visited public
2025-05-06 16:08:02
Tags
URL
hydrahd.sh
Finishing URL
hydrahd.sh/
IP / ASN
172.67.201.25
#13335 CLOUDFLARENET
Title
HydraHD - Watch Movies and Series in High Definition

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	unknown	No data	No data	409 B	91 kB	142.250.178.42
www.googletagmanager.com	75	unknown	No data	No data	401 B	324 kB	142.250.74.168
x3os.com	unknown	unknown	No data	No data	523 B	805 B	139.45.196.64
image.tmdb.org	17757	unknown	No data	No data	7.7 kB	6.7 MB	138.199.36.9
cdn.jsdelivr.net	439	unknown	No data	No data	823 B	174 kB	151.101.193.229
hydrahd.sh	unknown	unknown	No data	No data	4.8 kB	393 kB	104.21.66.45
cdnjs.cloudflare.com	235	unknown	No data	No data	1.4 kB	251 kB	104.17.25.14
paupsoborofoow.net	unknown	unknown	No data	No data	382 B	104 kB	104.21.50.180

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-06	medium	paupsoborofoow.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	From	Size	First Seen	Last Seen
	cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js	ScriptElement	154 kB	2025-03-20	2025-05-09
Pretty URL cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-20 00:24 Last Seen2025-05-09 04:38 Times Seen457 Hash 750b7e1509868702d0abedc196e7884c 75754999460b5d7130bc6d77248b9e15cfdfad6b 517e6bfba591ce6dd983f04b92e80ccb1d29f50e769f47d1aa07bf659ab31419 Loading...

	hydrahd.sh/	ScriptElement	3.7 kB	2025-03-09	2025-05-08
Pretty URL hydrahd.sh/ IP 104.21.66.45 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-09 17:21 Last Seen2025-05-08 22:58 Times Seen12 Hash 4032f04d97b3136c42c9d71c16e041fa 57e199ebc927beb0540fc8f5092c47b10cbac9b9 85b1b6b31c8be6bfb645edf9dfc0127e3a21755639b3a1a833b825284b151b09 Loading...

	www.googletagmanager.com/gtag/js?id=G-FSSR5RWVV3	ScriptElement	323 kB	2025-05-06	2025-05-06
Pretty URL www.googletagmanager.com/gtag/js?id=G-FSSR5RWVV3 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-06 16:08 Last Seen2025-05-06 16:08 Times Seen1 Hash cfc577c5bbc31f9460b8f44c6ca6cf68 befc7afe3592ae9d7f83c57bf370580f4a07f27b edb6b1a69393c08b2f5bc1e96ce09d7c3e7ec4a7e304a4735417217ac6ed10dd Loading...

	paupsoborofoow.net/tag.min.js	ScriptElement	103 kB	2025-05-06	2025-05-08
Pretty URL paupsoborofoow.net/tag.min.js IP 104.21.50.180 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-06 16:08 Last Seen2025-05-08 09:44 Times Seen14 Hash 99d0ead03405dbc98535a0d6a3ae0d7c 12e9c4eed00c7bd5f87136c813de48fb0e62f8eb 2d0dd887d9b04d613c456c6863bba2c4e74323eee1af5b16c77ae4fe82a79ead Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js	ScriptElement	90 kB	2023-03-26	2025-05-08
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js IP 142.250.178.42 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 04:59 Last Seen2025-05-08 23:04 Times Seen7457 Hash 641dd14370106e992d352166f5a07e99 eda46747c71d38a880bee44f9a439c3858bb8f99 a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af Loading...

	cdnjs.cloudflare.com/ajax/libs/Swiper/6.4.5/swiper-bundle.min.js	ScriptElement	140 kB	2023-03-07	2025-05-08
Pretty URL cdnjs.cloudflare.com/ajax/libs/Swiper/6.4.5/swiper-bundle.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:40 Last Seen2025-05-08 22:58 Times Seen124 Hash 6f58af87fc5b0cbd1565f351e2100baa 7e4298d37286d378590b16260baf31fe845158da 9134d7339572e8528974863492e41962d0eb10362053f83305e49bb4a7e8f280 Loading...

	hydrahd.sh/	ScriptElement	850 B	2024-12-18	2025-05-08
Pretty URL hydrahd.sh/ IP 104.21.66.45 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-18 18:31 Last Seen2025-05-08 22:58 Times Seen16 Hash f65efffefb2f67a493f292c369a76cdb f3a8c0e2952767315587be58f32e3f36341666da 00d656dd1a2705dded13c9f474b930ea287429c581669eec91a9e456f8ebd98f Loading...

	hydrahd.sh/	ScriptElement	153 B	2025-04-29	2025-05-08
Pretty URL hydrahd.sh/ IP 104.21.66.45 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-29 21:14 Last Seen2025-05-08 22:58 Times Seen10 Hash 35e8f51b6c2ea88d8d8c16fc8a10d46f 6139c70485cc7f6ae065bd34b1ba8d8ef9ef917a 57edcf165aeb6185766ff3916656b94d1b724ee835a539ae63f2e7d1ab23382a Loading...

	hydrahd.sh/	ScriptElement	564 B	2024-04-30	2025-05-08
Pretty URL hydrahd.sh/ IP 104.21.66.45 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-30 22:42 Last Seen2025-05-08 22:58 Times Seen33 Hash 887c6876783164da80633a5870003ed8 0dfd9c1bce41c94c4e46dd407faed7d694c0d20e c979701eb5c1a24e0cd26f86ca2f17772c15645c1a9beef6c99d7aaadee48b24 Loading...

	hydrahd.sh/assets/all.js?v=1.2.5	ScriptElement	7.0 kB	2025-04-29	2025-05-08
Pretty URL hydrahd.sh/assets/all.js?v=1.2.5 IP 104.21.66.45 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-29 21:14 Last Seen2025-05-08 22:58 Times Seen10 Hash cb51242b7afb80164f884354d5ef0308 d35a904a5629f44ae666136de9eb5bc24b87c859 c5e34b1fb2b41fe91cf5697be2c19a6805c0294a8508b6b0f640c68568bc228b Loading...

	hydrahd.sh/	ScriptElement	198 B	2025-04-29	2025-05-08
Pretty URL hydrahd.sh/ IP 104.21.66.45 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-29 21:14 Last Seen2025-05-08 22:58 Times Seen10 Hash 7af1cb2bb3a4996be028b0e4f5b79bc8 05ace771c5a969e77970959137d1a3e9c97f1c24 0132f000901200c50a24950fd931de5a82947a64c1e5375295253dcb9cf33cb1 Loading...

HTTP Transactions (37)

URL IP Response Size

x3os.com/5/9258380/?oo=1&js_build=iclick-v1.1133.0&dmn=paupsoborofoow.net&tt=2&ix=0

139.45.196.64

204 No Content

0 B

URL POST
x3os.com/5/9258380/?oo=1&js_build=iclick-v1.1133.0&dmn=paupsoborofoow.net&tt=2&ix=0
IP
139.45.196.64:443
ASN
#9002 RETN Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectx3os.com
Fingerprint50:C0:EA:5D:F8:E5:56:73:E2:8F:35:76:0A:C7:E0:08:49:F5:FD:AB
ValidityTue, 22 Apr 2025 14:19:12 GMT - Mon, 21 Jul 2025 14:19:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /5/9258380/?oo=1&js_build=iclick-v1.1133.0&dmn=paupsoborofoow.net&tt=2&ix=0 HTTP/1.1
Host: x3os.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2511
Origin: https://hydrahd.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
server: nginx
date: Tue, 06 May 2025 16:07:31 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://hydrahd.sh
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/xwuSAZHLsalFcOut36SDvBPDhZO.png

138.199.36.9

200 OK

38 kB

URL GET
image.tmdb.org/t/p/w342/xwuSAZHLsalFcOut36SDvBPDhZO.png
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image
Size
38 kB (37970 bytes)
Hash
b7b3c852f5be46c8bde74f42376f4552
766a0460078cf43c3502aa0c280e1c3c4e186a2b
a56322df47bf984ae2792a530087eeb840eda9c1e68d4f8b85da5a389ae1ad5f

HTTP Headers

GET /t/p/w342/xwuSAZHLsalFcOut36SDvBPDhZO.png HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:51 GMT
content-type: image/webp
content-length: 37970
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 06:58:56 GMT
perma-cache: MISS
x-bo-server: LA-289
x-downloadsize: 51755
x-bo-origindownloadtime: 337
x-bo-compressionratio: 26.64%
x-bo-processingtime: 13
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 06:58:57
cdn-edgestorageid: 1047
cdn-requestid: 921579593a8531d84595870c88c24ea6
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css

151.101.193.229

200 OK

18 kB

URL GET
cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://hydrahd.sh/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT

File type
ASCII text, with very long lines (18199)
Size
18 kB (18454 bytes)
Hash
2a1dc9ac6fde65e0796bef83a8e57dfd
4210c1743d816399f7c0b9f8365fabbb2e991009
ef7ee2f59686b2f281d608185071fe95f5fd27f252842e628113877e15b7d24a

HTTP Headers

GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 11.2.6
x-jsd-version-type: version
etag: W/"4816-QhDBdD2BY5n3wLn4Nl+ruy6ZEAk"
content-encoding: br
accept-ranges: bytes
date: Tue, 06 May 2025 16:07:29 GMT
age: 18812
x-served-by: cache-fra-eddf8230090-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4472
X-Firefox-Spdy: h2

hydrahd.sh/themes/placeholder.jpg

104.21.66.45

200 OK

1.5 kB

URL GET
hydrahd.sh/themes/placeholder.jpg
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 180x273, components 3
Size
1.5 kB (1491 bytes)
Hash
929d612a7d53a95fa1256bbd9e496b02
53ddb5054c7d169f411152b3b768a65bf948d483
bc5a2f8848ab097f58bf715501e73888c21fd72356ad39cb26b1878745905559

HTTP Headers

GET /themes/placeholder.jpg HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: image/jpeg
content-length: 1491
referrer-policy: same-origin
last-modified: Fri, 22 Dec 2023 14:11:55 GMT
accept-ranges: bytes
cache-control: public, max-age=1209600
age: 1042424
cf-cache-status: HIT
cf-ray: 93b9bb16eef15687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ez7V2mNoq7wrZ0XmSfZ5K2FhFBDVjpqOSuyflS%2BiiiyvqrbeiEowtGxPWnUH%2FpZyEH%2BF9UfCuB5%2F9CK%2FMfjJtBO7igI02BktrS5lkeDD%2FeSC%2BLbwtPCIVj1YLbNN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4636&min_rtt=4018&rtt_var=1359&sent=56&recv=85&lost=0&retrans=0&sent_bytes=5985&recv_bytes=6743&delivery_rate=2347&cwnd=12000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=251&x=16"

image.tmdb.org/t/p/w342/xgpzUUc2MMLez7p2wFX0yvhw1Vc.png

138.199.36.9

200 OK

4.9 kB

URL GET
image.tmdb.org/t/p/w342/xgpzUUc2MMLez7p2wFX0yvhw1Vc.png
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.9 kB (4904 bytes)
Hash
0b55aa15a57213bfc8119709e3a02942
9b99715155b8d7af98f99a29fdcf556a62684ab9
06aa4d3c21e24a164118fa32d9ba77d5f19ce135e83a7b5915de44ac83215ef8

HTTP Headers

GET /t/p/w342/xgpzUUc2MMLez7p2wFX0yvhw1Vc.png HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:34 GMT
content-type: image/webp
content-length: 4904
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Mon, 21 Apr 2025 18:53:41 GMT
perma-cache: MISS
x-bo-server: LA-290
x-downloadsize: 7106
x-bo-origindownloadtime: 1098
x-bo-compressionratio: 30.99%
x-bo-processingtime: 3
x-bo-version: 1.0.26
cdn-proxyver: 1.23
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/21/2025 18:53:42
cdn-edgestorageid: 722
cdn-requestid: 0f6228f46f4a2c9212167c380cca93ce
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
X-Firefox-Spdy: h2

hydrahd.sh/fav-192.png

104.21.66.45

200 OK

7.1 kB

URL GET
hydrahd.sh/fav-192.png
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
7.1 kB (7095 bytes)
Hash
f30e09b86e182e263667a5d867894879
7acc08f6449133e0a26cae18b97c8049633d25fd
e2439ea059b8875a870c946b48c3164434bc4c308331a36e9f32f35de6ecf5a8

HTTP Headers

GET /fav-192.png HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: image/png
content-length: 7095
referrer-policy: same-origin
last-modified: Tue, 27 Feb 2024 08:28:31 GMT
accept-ranges: bytes
cache-control: public, max-age=1209600
age: 1042424
cf-cache-status: HIT
cf-ray: 93b9bb16deef5687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o6HqIee65QMFxSQ2jQPNgU1%2FOZPN3FX6gNOIkpRejhEcsAEqN0GzTMIIenlsE3NSOTptrdF%2B51deGa4YDtqwfvX232znYq9subUFUVQO8kvZkMCDXmhvFu%2BbV4Qw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4636&min_rtt=4018&rtt_var=1359&sent=68&recv=85&lost=0&retrans=0&sent_bytes=17985&recv_bytes=6743&delivery_rate=2347&cwnd=12000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=255&x=16"

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

104.17.25.14

200 OK

77 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hydrahd.sh
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93b9bb1a3886b515-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 283298
expires: Sun, 26 Apr 2026 16:07:29 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KC1ONpARhT2vad9H42wdrf4vk8njngidNbPURV87zphhRApdIFTw6ol4OLu5CcnpJcjf4caUgXN9nSt%2FxTKuZ2JDfvzN2ACxmnik0pH73a6NGECT2m%2BIKAo7U7rFaTHBCEPvHKca"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/hqcexYHbiTBfDIdDWxrxPtVndBX.jpg

138.199.36.9

200 OK

38 kB

URL GET
image.tmdb.org/t/p/w342/hqcexYHbiTBfDIdDWxrxPtVndBX.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp
Size
38 kB (38002 bytes)
Hash
61565df7f2461e2485f6df537ff38423
e8e9fdf5283e4628261eaf3799bc7bcdf2b6eb21
c2f2ace0e672cae817f00c6f87166c9bb4343ec484362cf1ff15fb25c9641a44

HTTP Headers

GET /t/p/w342/hqcexYHbiTBfDIdDWxrxPtVndBX.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 38002
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 09 Apr 2025 23:03:50 GMT
perma-cache: MISS
x-bo-server: LA-295
x-downloadsize: 49121
x-bo-origindownloadtime: 798
x-bo-compressionratio: 22.64%
x-bo-processingtime: 12
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/09/2025 23:03:51
cdn-edgestorageid: 1076
cdn-requestid: 9acc633329469a32e16fe17f7557cbb3
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

hydrahd.sh/assets/old.css

104.21.66.45

200 OK

98 kB

URL GET
hydrahd.sh/assets/old.css
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
ASCII text, with very long lines (65308), with CRLF line terminators
Size
98 kB (98311 bytes)
Hash
e366ad4733d952d96d422bebe2e80c1a
de141a84cd9af48e93a25654a5506ed6ea0f6c53
5e5937b2ceed6be25a8db4efad440b4fdb05a36c245f8a32addfe882d1853c77

HTTP Headers

GET /assets/old.css HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: text/css
referrer-policy: same-origin
x-content-type-options: nosniff
last-modified: Mon, 26 Feb 2024 15:01:15 GMT
age: 2219
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 93b9bb16ceeb5687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=htGg9S3l4rM%2BoKvE5injKu%2F2O221IKO7lFlVndtPlsMwwUB9vSOS3szAmefUGpvyO4ofPoVhjorCfCItjS3pnSnMezbRWkPDxXFio7E6xL9cvqDSd%2FGHrWQUOtDk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4636&min_rtt=4018&rtt_var=1359&sent=63&recv=85&lost=0&retrans=0&sent_bytes=13290&recv_bytes=6743&delivery_rate=2347&cwnd=12000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=253&x=16"

paupsoborofoow.net/tag.min.js

104.21.50.180

200 OK

103 kB

URL GET
paupsoborofoow.net/tag.min.js
IP
104.21.50.180:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjectpaupsoborofoow.net
FingerprintBB:AB:82:1F:E9:CA:54:E5:11:30:EC:4D:A7:12:04:8F:33:BE:0C:B5
ValidityMon, 31 Mar 2025 22:57:38 GMT - Sun, 29 Jun 2025 23:55:55 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
103 kB (102563 bytes)
Hash
99d0ead03405dbc98535a0d6a3ae0d7c
12e9c4eed00c7bd5f87136c813de48fb0e62f8eb
2d0dd887d9b04d613c456c6863bba2c4e74323eee1af5b16c77ae4fe82a79ead

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tag.min.js HTTP/1.1
Host: paupsoborofoow.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: application/javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-trace-id: 5ce4ae0956648a9c533fec0a86a5a787
cache-control: public, max-age=600, s-maxage=1800
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
content-encoding: gzip
age: 1183
cf-cache-status: HIT
last-modified: Tue, 06 May 2025 15:47:46 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rRSVwus72K1W9nuMWX4vWMeCZ4P8vw3azCDcneO8yLAnrvPY2Q34kOB%2BVrcvCHR4Qgti60PANdJeJFtPSNwHf00NWRrtI28XRvGNu5zxKce5%2FkeBMa1UsiV1oS26T7JwwHYuYE0%3D"}]}
cf-ray: 93b9bb1b4df95691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/9dKfToAs8Tecgh0FMgP8upyIlTx.png

138.199.36.9

200 OK

15 kB

URL GET
image.tmdb.org/t/p/w342/9dKfToAs8Tecgh0FMgP8upyIlTx.png
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image
Size
15 kB (15090 bytes)
Hash
b886b685f313053ebbb7e6d1487f53a6
69b34c1e916769d0c7d3cb0859fe9844aa92247c
292783e701be770b866db6e36ada4b43211275b7cca03f0778719693ca864d26

HTTP Headers

GET /t/p/w342/9dKfToAs8Tecgh0FMgP8upyIlTx.png HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:45 GMT
content-type: image/webp
content-length: 15090
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Fri, 02 May 2025 08:38:54 GMT
perma-cache: MISS
x-bo-server: LA-294
x-downloadsize: 17972
x-bo-origindownloadtime: 297
x-bo-compressionratio: 16.04%
x-bo-processingtime: 6
x-bo-version: 1.0.26
cdn-proxyver: 1.27
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 05/02/2025 08:38:54
cdn-edgestorageid: 1047
cdn-requestid: 9255966ebb7fa3435a3bfacecadc4fa0
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

hydrahd.sh/

104.21.66.45

200 OK

243 kB

URL User Request GET
hydrahd.sh/
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
HTML document, ASCII text, with very long lines (512), with CRLF line terminators
Size
243 kB (242739 bytes)
Hash
8c9ccc9dcf0eef39bc023a06fa3539ad
420585dd0ee9eba20d6ab84ec066d85b68770a48
8d2f1d7df301d7279e0b3f669f86e5f938b5cae2c6ae4ec811528d824b43dc37

HTTP Headers

GET / HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:28 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1PqgwkTkywKS6qQFrbL4DAlLvYaQbEOEQAHlxqBp5wQfdxXThRBauJ8x%2Bw4ZK%2FZZDGMAzw38%2FJ71eXaOE4EmZB22LJ2s67u0UaXt0WPh5HvJFIyUPl1HS7WFVK6Y"}]}
content-encoding: br
set-cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12; HttpOnly; Secure; Path=/
cf-ray: 93b9bb132b2fb4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/qWTfHG8KdXwr0bqypYbNZLenh0J.jpg

138.199.36.9

200 OK

13 kB

URL GET
image.tmdb.org/t/p/w342/qWTfHG8KdXwr0bqypYbNZLenh0J.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp
Size
13 kB (13338 bytes)
Hash
27a82aee41e4975fce12cd3b8ff73261
de6de676a37001a80309b8576051a0926aa3bc19
4f55b2b47ddc8370763a35e173751a67b707f0210926e1c9254f5c28d81aa676

HTTP Headers

GET /t/p/w342/qWTfHG8KdXwr0bqypYbNZLenh0J.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 13338
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "68051b19-341a"
last-modified: Sun, 20 Apr 2025 16:04:41 GMT
cdn-storageserver: NY-753
cdn-requestpullsuccess: True
cdn-fileserver: 703
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/20/2025 16:35:11
cdn-edgestorageid: 1054
cdn-requestid: 3874ae8a5014658c772e2789e62ab2b6
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/4pRZulxWOr3iVKT5q2tVOWPCMA9.jpg

138.199.36.9

200 OK

27 kB

URL GET
image.tmdb.org/t/p/w342/4pRZulxWOr3iVKT5q2tVOWPCMA9.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp
Size
27 kB (26596 bytes)
Hash
ecc2ceba25c5af114ad0042bcde9a654
0f2a7976a94dc317f15dcdd34783d88057899c0f
9c0e6fc68afc7e9471f36a2f6b314a5f362d127efaaad5bf73d1a409699995cb

HTTP Headers

GET /t/p/w342/4pRZulxWOr3iVKT5q2tVOWPCMA9.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 26596
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "681028aa-67e4"
last-modified: Tue, 29 Apr 2025 01:17:30 GMT
cdn-storageserver: NY-753
cdn-requestpullsuccess: True
cdn-fileserver: 678
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/29/2025 10:37:48
cdn-edgestorageid: 865
cdn-requestid: 1784359a9920039c2e19c3b0f9565bd4
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

hydrahd.sh/assets/main.css?v=2.3

104.21.66.45

200 OK

7.5 kB

URL GET
hydrahd.sh/assets/main.css?v=2.3
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
ASCII text, with very long lines (599)
Size
7.5 kB (7547 bytes)
Hash
73f328146d8b7df53955188e776cc1d3
2679357ce89197758a6f21c6950bcee14f374a93
0154c97ba6bc99697b94caff9d621ac9385b7d0dc4cf76cf78b6d94daa781771

HTTP Headers

GET /assets/main.css?v=2.3 HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: text/css
referrer-policy: same-origin
x-content-type-options: nosniff
last-modified: Fri, 06 Dec 2024 22:04:26 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6232
content-encoding: br
cf-ray: 93b9bb16ceea5687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6dYCEoEAe%2BpZi1XaD1LnAcb4oy0ipYaMl3rN8NG2F0CUHoNOGOy9FTDQg3Z97zRQufB%2BRpZr4y6tnQI2%2F8qFiKtsY09ibh%2FazwB7MAo4YXiuEiv2HeDGJq6qrA5u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4636&min_rtt=4018&rtt_var=1359&sent=68&recv=85&lost=0&retrans=0&sent_bytes=17985&recv_bytes=6743&delivery_rate=2347&cwnd=12000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=254&x=16"

image.tmdb.org/t/p/w342/nkUqSWsy1pfXjqta8UTNEA4FwcX.png

138.199.36.9

200 OK

7.5 kB

URL GET
image.tmdb.org/t/p/w342/nkUqSWsy1pfXjqta8UTNEA4FwcX.png
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image
Size
7.5 kB (7478 bytes)
Hash
d8bc3260318aa7107c3f162d8cf6f83e
6ad6b2c50f196cb93e7e2dadcdec24add6d1d9ea
be9691a726f68bda3bba1a60b50f8278ce53ac91cfb2a52d59f55674338be191

HTTP Headers

GET /t/p/w342/nkUqSWsy1pfXjqta8UTNEA4FwcX.png HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 7478
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "680f4579-1d36"
last-modified: Mon, 28 Apr 2025 09:08:09 GMT
cdn-storageserver: NY-833
cdn-requestpullsuccess: True
cdn-fileserver: 832
perma-cache: HIT
cdn-proxyver: 1.27
cdn-requestpullcode: 200
cdn-cachedat: 05/03/2025 20:36:33
cdn-edgestorageid: 1048
cdn-requestid: 4be248e23727548e90d621b93f8eb1e1
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
accept-ranges: bytes
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.25.14

200 OK

31 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT

File type
ASCII text, with very long lines (30837)
Size
31 kB (31000 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hydrahd.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: text/css; charset=utf-8
content-length: 5631
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93b9bb16f9aeb515-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 282704
expires: Sun, 26 Apr 2026 16:07:29 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NPZNWKZ7NZ6Qaod6gb8oxEBRsfFkSmu766OQnJLyH8a00NrTnp8uHztAl31kztVapIv1VmkJosDDiQ3FIetg%2BIk6mL7OujB1B9orN78HePjEwG8MTwtHImRCkLu%2FKj5NF3StDHnL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original/ajztm40qDPqMONaSJhQ2PaNe2Xd.jpg

138.199.36.9

200 OK

1.5 MB

URL GET
image.tmdb.org/t/p/original/ajztm40qDPqMONaSJhQ2PaNe2Xd.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 3000x1688, Scaling: [none]x[none], YUV color, decoders should clamp
Size
1.5 MB (1494828 bytes)
Hash
060657f27f211d873f8ba28e966a2ba3
b9c506f08a0ad7176dc1fe59b70ad7080c2f7534
ba183d53da80f60bd4e3f411961063a245f2c177eaee51c5cba89858c7db770f

HTTP Headers

GET /t/p/original/ajztm40qDPqMONaSJhQ2PaNe2Xd.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:51 GMT
content-type: image/webp
content-length: 1494828
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67edf15d-16cf2c"
last-modified: Thu, 03 Apr 2025 02:24:29 GMT
cdn-storageserver: NY-753
cdn-requestpullsuccess: True
cdn-fileserver: 914
perma-cache: HIT
cdn-proxyver: 1.27
cdn-requestpullcode: 200
cdn-cachedat: 05/05/2025 14:11:37
cdn-edgestorageid: 864
cdn-requestid: 17952a22d485875b9cfaf5f2ca005085
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js

142.250.178.42

200 OK

90 kB

URL GET
ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js
IP
142.250.178.42:443
ASN
#15169 GOOGLE

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67
ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
90 kB (89795 bytes)
Hash
641dd14370106e992d352166f5a07e99
eda46747c71d38a880bee44f9a439c3858bb8f99
a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af

HTTP Headers

GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31154
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 May 2025 18:22:21 GMT
expires: Fri, 01 May 2026 18:22:21 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 423908
last-modified: Tue, 04 Apr 2023 03:27:01 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hydrahd.sh/fav-192.png

104.21.66.45

200 OK

7.1 kB

URL GET
hydrahd.sh/fav-192.png
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
7.1 kB (7095 bytes)
Hash
f30e09b86e182e263667a5d867894879
7acc08f6449133e0a26cae18b97c8049633d25fd
e2439ea059b8875a870c946b48c3164434bc4c308331a36e9f32f35de6ecf5a8

HTTP Headers

GET /fav-192.png HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: image/png
content-length: 7095
referrer-policy: same-origin
last-modified: Tue, 27 Feb 2024 08:28:31 GMT
accept-ranges: bytes
cache-control: public, max-age=1209600
age: 1042425
cf-cache-status: HIT
cf-ray: 93b9bb1bff465687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vsyt3n1GcQPtZS%2BwLikV2YgDalUP1mGJfQS%2BdM%2BYe%2F0aYvi4U8tyW3hCgJprG2TQJAOR%2FuS%2F6pEaCIQmS1jRLYahiAbDa5QiBNwge7OcKYJWr63KvjWDhpvCXXNp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4953&min_rtt=4003&rtt_var=1252&sent=97&recv=91&lost=0&retrans=0&sent_bytes=45495&recv_bytes=7527&delivery_rate=463906&cwnd=48000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=1067&x=16"

image.tmdb.org/t/p/w342/r46leE6PSzLR3pnVzaxx5Q30yUF.jpg

138.199.36.9

200 OK

26 kB

URL GET
image.tmdb.org/t/p/w342/r46leE6PSzLR3pnVzaxx5Q30yUF.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp
Size
26 kB (25638 bytes)
Hash
4497bfa42f6a77c30fe5a70029f9cc78
b441aa267a87bd446a51d1c5a82d83cf5c3b8698
50df3e2e3c8cdcc0aff36f434486941844aa047e2c00d13ecc6189f9b653bc45

HTTP Headers

GET /t/p/w342/r46leE6PSzLR3pnVzaxx5Q30yUF.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 25638
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6801a997-6426"
last-modified: Fri, 18 Apr 2025 01:23:35 GMT
cdn-storageserver: NY-833
cdn-requestpullsuccess: True
cdn-fileserver: 792
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/24/2025 05:43:30
cdn-edgestorageid: 874
cdn-requestid: 5eb04bfd1c22ed65682254ec38901fb2
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original/segpvueoaTyzZcgTTNr4QMvefqe.jpg

138.199.36.9

200 OK

382 kB

URL GET
image.tmdb.org/t/p/original/segpvueoaTyzZcgTTNr4QMvefqe.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 3840x2160, Scaling: [none]x[none], YUV color, decoders should clamp
Size
382 kB (381974 bytes)
Hash
7275fb09b0da02ec5a786a44652579a6
0e022990e468e6b808de8f9a9def9f8d84303b52
bc2f40ba43049562e8dcd256a1f1176d33945687718d455caa9bf6ce39aaf905

HTTP Headers

GET /t/p/original/segpvueoaTyzZcgTTNr4QMvefqe.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:56 GMT
content-type: image/webp
content-length: 381974
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Fri, 25 Apr 2025 06:32:32 GMT
perma-cache: MISS
x-bo-server: LA-290
x-downloadsize: 962315
x-bo-origindownloadtime: 681
x-bo-compressionratio: 60.31%
x-bo-processingtime: 369
x-bo-version: 1.0.26
cdn-proxyver: 1.23
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/25/2025 06:32:34
cdn-edgestorageid: 865
cdn-requestid: 7078fcdb88580a060b902728e8ec5c51
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original/uDgy6hyPd82kOHh6I95FLtLnj6p.jpg

138.199.36.9

200 OK

795 kB

URL GET
image.tmdb.org/t/p/original/uDgy6hyPd82kOHh6I95FLtLnj6p.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 3840x2160, Scaling: [none]x[none], YUV color, decoders should clamp
Size
795 kB (794746 bytes)
Hash
bb3d8917410723fa05f5d3c60d73e729
e0c654bea9cd472fe8e0e4bc02de1f0cd00cabee
bcdce6d130873c356044fd994488d9e4653f69c20f824648339a7933e5cf5392

HTTP Headers

GET /t/p/original/uDgy6hyPd82kOHh6I95FLtLnj6p.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:40 GMT
content-type: image/webp
content-length: 794746
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 04:35:29 GMT
perma-cache: MISS
x-bo-server: LA-291
x-downloadsize: 921331
x-bo-origindownloadtime: 14915
x-bo-compressionratio: 13.74%
x-bo-processingtime: 1208
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 04:35:45
cdn-edgestorageid: 860
cdn-requestid: 89974edc8ecf69482802a30254e2ae94
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/msYtgZbEo8tAOJ37T50kgqulpKf.png

138.199.36.9

200 OK

7.4 kB

URL GET
image.tmdb.org/t/p/w342/msYtgZbEo8tAOJ37T50kgqulpKf.png
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
PNG image data, 342 x 72, 8-bit gray+alpha, non-interlaced
Size
7.4 kB (7426 bytes)
Hash
837b8c35e9338bc68181805677c98cdf
a98199bb93f0a62f043d621843b931937b17cb90
f35312655df8fbe57b2cda8a7ab43d4f4f2ce68db8e6ec80e31171dbc138db96

HTTP Headers

GET /t/p/w342/msYtgZbEo8tAOJ37T50kgqulpKf.png HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:40 GMT
content-type: image/webp
content-length: 7426
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 04:11:06 GMT
perma-cache: MISS
x-bo-server: LA-291
x-downloadsize: 7426
x-bo-origindownloadtime: 487
x-bo-compressionratio: 0%
x-bo-processingtime: 27
x-bo-version: 1.0.26
x-bo-processing-error: 104
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 04:11:06
cdn-edgestorageid: 1047
cdn-requestid: f65e09ce391d8de8b24fbd61b7cb08dc
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 2
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/qammxyQhPXaXqEnPWMmnkllGrI7.png

138.199.36.9

200 OK

34 kB

URL GET
image.tmdb.org/t/p/w342/qammxyQhPXaXqEnPWMmnkllGrI7.png
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image
Size
34 kB (34436 bytes)
Hash
be4fa4b4931fde1e78ddb191568d6425
efb99f75fa7a6212d9b890ee5eeb4e3f5a4d84ac
acd1efbb76923ca0d690252f12354f0d8053e3c258d745a6b12fbde4bd6b188e

HTTP Headers

GET /t/p/w342/qammxyQhPXaXqEnPWMmnkllGrI7.png HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:56 GMT
content-type: image/webp
content-length: 34436
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "680c8374-8684"
last-modified: Sat, 26 Apr 2025 06:55:48 GMT
cdn-storageserver: NY-673
cdn-requestpullsuccess: True
cdn-fileserver: 916
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/26/2025 06:55:56
cdn-edgestorageid: 865
cdn-requestid: cf37ed343f400307d0389a7da517084b
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-FSSR5RWVV3

142.250.74.168

200 OK

323 kB

URL GET
www.googletagmanager.com/gtag/js?id=G-FSSR5RWVV3
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01
ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT

File type
JavaScript source, ASCII text, with very long lines (6125)
Size
323 kB (322748 bytes)
Hash
cfc577c5bbc31f9460b8f44c6ca6cf68
befc7afe3592ae9d7f83c57bf370580f4a07f27b
edb6b1a69393c08b2f5bc1e96ce09d7c3e7ec4a7e304a4735417217ac6ed10dd

HTTP Headers

GET /gtag/js?id=G-FSSR5RWVV3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 May 2025 16:07:29 GMT
expires: Tue, 06 May 2025 16:07:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1072:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1072:0
report-to: {"group":"ascgcycc:1072:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1072:0"}],}
server: Google Tag Manager
content-length: 113742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hydrahd.sh/assets/all.js?v=1.2.5

104.21.66.45

200 OK

7.0 kB

URL GET
hydrahd.sh/assets/all.js?v=1.2.5
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
7.0 kB (7010 bytes)
Hash
cb51242b7afb80164f884354d5ef0308
d35a904a5629f44ae666136de9eb5bc24b87c859
c5e34b1fb2b41fe91cf5697be2c19a6805c0294a8508b6b0f640c68568bc228b

HTTP Headers

GET /assets/all.js?v=1.2.5 HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: text/javascript
referrer-policy: same-origin
x-content-type-options: nosniff
last-modified: Wed, 23 Apr 2025 13:08:31 GMT
age: 2851
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 93b9bb16eef25687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hJDMU%2FZqeBq9COsmFWDOuoYr5tMioeNdnMgql8IWHf%2BtKvJzLnGZrGFxCwMdABwQS1Zzb%2BACM3bVQftIx1i1Q2ZrrSX56oQXXYNDBhqq2AqmQ3fCRQCGcmY1FthU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4636&min_rtt=4018&rtt_var=1359&sent=68&recv=85&lost=0&retrans=0&sent_bytes=17985&recv_bytes=6743&delivery_rate=2347&cwnd=12000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=256&x=16"

image.tmdb.org/t/p/w342/7VJKex6eL8KwWc37YYHnvpsZPsV.jpg

138.199.36.9

200 OK

33 kB

URL GET
image.tmdb.org/t/p/w342/7VJKex6eL8KwWc37YYHnvpsZPsV.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp
Size
33 kB (32736 bytes)
Hash
0433ea28f39eaae68e3e8a8f066d0ad5
f10dcc7b79852b442727669a4e3bd583e8e6fa93
e30ea388259228463f3d2b7af46125690893b218b7d77072de74a480c1e9a304

HTTP Headers

GET /t/p/w342/7VJKex6eL8KwWc37YYHnvpsZPsV.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 32736
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67fc7821-7fe0"
last-modified: Mon, 14 Apr 2025 02:51:13 GMT
cdn-storageserver: NY-673
cdn-requestpullsuccess: True
cdn-fileserver: 915
perma-cache: HIT
cdn-proxyver: 1.22
cdn-requestpullcode: 200
cdn-cachedat: 04/14/2025 07:55:19
cdn-edgestorageid: 864
cdn-requestid: eb5e582097d99ea3b2df77599e689a1c
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

hydrahd.sh/fav-180.png

104.21.66.45

200 OK

6.3 kB

URL GET
hydrahd.sh/fav-180.png
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
6.3 kB (6330 bytes)
Hash
d92cdcd83eb9f173267db3450f79f149
8c56dac3280e625fa11b5fbe06284c7d9aa185b5
5291bd1f2e5eb6cc29007a2080a92fe58836c5ed5a558a478d3bd430eff671d5

HTTP Headers

GET /fav-180.png HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: image/png
content-length: 6330
referrer-policy: same-origin
last-modified: Tue, 27 Feb 2024 08:28:27 GMT
cache-control: public, max-age=1209600
cf-cache-status: HIT
age: 1042424
accept-ranges: bytes
cf-ray: 93b9bb1bff455687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=quKF6O8md5Q9UhmbsJ5J0G5Y7%2B5yVbi8tu%2BQuYkl51k%2F2%2BuqO%2F4axY90eft0kq2atsoIoG0sSHyjcIiFR2zwtV0g3C1iUGIJRd2oiPAS6jSFcXqKdAHsjQIfgeU3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4676&min_rtt=2738&rtt_var=1492&sent=104&recv=92&lost=0&retrans=0&sent_bytes=53442&recv_bytes=7572&delivery_rate=501182&cwnd=48000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=1070&x=16"

image.tmdb.org/t/p/original/rthMuZfFv4fqEU4JVbgSW9wQ8rs.jpg

138.199.36.9

200 OK

2.6 MB

URL GET
image.tmdb.org/t/p/original/rthMuZfFv4fqEU4JVbgSW9wQ8rs.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 3840x2160, Scaling: [none]x[none], YUV color, decoders should clamp
Size
2.6 MB (2622612 bytes)
Hash
5e9e03599d31efdf55595010869a662e
bcda46bc331e22044e325d3ebd12c491d6fb3346
d4dbca802a21f493911156a5bb161b3e099c7ff28070fa50dcdd6029d392d475

HTTP Headers

GET /t/p/original/rthMuZfFv4fqEU4JVbgSW9wQ8rs.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 2622612
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Thu, 10 Apr 2025 19:37:04 GMT
perma-cache: MISS
x-bo-server: LA-296
x-downloadsize: 2875767
x-bo-origindownloadtime: 1763
x-bo-compressionratio: 8.8%
x-bo-processingtime: 1600
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/10/2025 19:37:08
cdn-edgestorageid: 1047
cdn-requestid: 8ee9f9b5ce2ba552cc3a8158c378f5b6
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w342/nhcNm2u8iCL6BbrZmRMUxvHJNor.jpg

138.199.36.9

200 OK

39 kB

URL GET
image.tmdb.org/t/p/w342/nhcNm2u8iCL6BbrZmRMUxvHJNor.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp
Size
39 kB (38594 bytes)
Hash
f6b3149823d7aeca772f0696ac84898e
6a3cd3c9fdc1a986a8865d81a709a19351a6125a
4c7a1a7a32a5b9c442e3adef68aa63882534eb142522d424840699dd0d8fd377

HTTP Headers

GET /t/p/w342/nhcNm2u8iCL6BbrZmRMUxvHJNor.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:30 GMT
content-type: image/webp
content-length: 38594
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Wed, 02 Apr 2025 08:25:05 GMT
perma-cache: MISS
x-bo-server: LA-290
x-downloadsize: 45533
x-bo-origindownloadtime: 342
x-bo-compressionratio: 15.24%
x-bo-processingtime: 19
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/02/2025 08:25:05
cdn-edgestorageid: 864
cdn-requestid: 0dd08c454530d9f006d6f531372a9f5e
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original/cJvUJEEQ86LSjl4gFLkYpdCJC96.jpg

138.199.36.9

200 OK

705 kB

URL GET
image.tmdb.org/t/p/original/cJvUJEEQ86LSjl4gFLkYpdCJC96.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 3840x2160, Scaling: [none]x[none], YUV color, decoders should clamp
Size
705 kB (705064 bytes)
Hash
b772a4e758b414c13ab65e467b2826c5
2326dcb3a3855db064b51c2085dc210dfeeb5760
b5d50f552d17c23c3274c2eaf24cd2db9a24a40cfe8078340924b0c1d4b538fa

HTTP Headers

GET /t/p/original/cJvUJEEQ86LSjl4gFLkYpdCJC96.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:34 GMT
content-type: image/webp
content-length: 705064
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
last-modified: Sun, 06 Apr 2025 14:35:05 GMT
perma-cache: MISS
x-bo-server: LA-294
x-downloadsize: 1174165
x-bo-origindownloadtime: 389
x-bo-compressionratio: 39.95%
x-bo-processingtime: 466
x-bo-version: 1.0.26
cdn-proxyver: 1.22
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/06/2025 14:35:06
cdn-edgestorageid: 1049
cdn-requestid: 9cfc5f1ac5e07402868819f9de8cc067
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 1
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js

151.101.193.229

200 OK

154 kB

URL GET
cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://hydrahd.sh/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT

File type
JavaScript source, ASCII text, with very long lines (65281)
Size
154 kB (154008 bytes)
Hash
750b7e1509868702d0abedc196e7884c
75754999460b5d7130bc6d77248b9e15cfdfad6b
517e6bfba591ce6dd983f04b92e80ccb1d29f50e769f47d1aa07bf659ab31419

HTTP Headers

GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 11.2.6
x-jsd-version-type: version
etag: W/"25998-dXVJmUYLXXEwvG13JIueFc/frWs"
content-encoding: br
accept-ranges: bytes
date: Tue, 06 May 2025 16:07:29 GMT
age: 6813
x-served-by: cache-fra-etou8220075-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 43827
X-Firefox-Spdy: h2

image.tmdb.org/t/p/original/b6e5Nss2QNoQM4wJv2VppChswNP.jpg

138.199.36.9

200 OK

357 kB

URL GET
image.tmdb.org/t/p/original/b6e5Nss2QNoQM4wJv2VppChswNP.jpg
IP
138.199.36.9:443
ASN
#60068 Datacamp Limited

Requested by
https://hydrahd.sh/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
Fingerprint10:6F:2B:AC:40:A0:C6:7E:52:63:8A:A2:D9:53:8B:14:CC:B5:C4:87
ValidityMon, 31 Mar 2025 16:12:43 GMT - Sun, 29 Jun 2025 16:12:42 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 3000x1688, Scaling: [none]x[none], YUV color, decoders should clamp
Size
357 kB (357076 bytes)
Hash
2d7983c6bd7d77f28775e06cabd30d77
cbd4241f1deef12e4bc7a6b25327e33b5d9ed34d
a9037fa67c97a98e4513a53a54f6d9e38464ee76b4bde18b10d613f26c4b3acf

HTTP Headers

GET /t/p/original/b6e5Nss2QNoQM4wJv2VppChswNP.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:45 GMT
content-type: image/webp
content-length: 357076
server: BunnyCDN-DE1-1049
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "68140d1e-572d4"
last-modified: Fri, 02 May 2025 00:09:02 GMT
cdn-storageserver: NY-673
cdn-requestpullsuccess: True
cdn-fileserver: 922
perma-cache: HIT
cdn-proxyver: 1.27
cdn-requestpullcode: 200
cdn-cachedat: 05/02/2025 00:10:08
cdn-edgestorageid: 1075
cdn-requestid: fda98fceb41ae0abcbd6b27b78a1cab8
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

hydrahd.sh/themes/bigholder.png

104.21.66.45

200 OK

4.3 kB

URL GET
hydrahd.sh/themes/bigholder.png
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
PNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced
Size
4.3 kB (4271 bytes)
Hash
67a1805382bc8f356a57bb67b0edecc7
6a8fff61c2c63ff6249a9238f932b7fa24d41fa0
dc3d628349e53ebec5fa01a0315ded89bce87b3b68ba6197c7f218b9595d618d

HTTP Headers

GET /themes/bigholder.png HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: image/png
content-length: 4271
referrer-policy: same-origin
last-modified: Mon, 04 Mar 2024 17:21:20 GMT
cache-control: public, max-age=1209600
cf-cache-status: HIT
age: 1042425
accept-ranges: bytes
cf-ray: 93b9bb16deee5687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=seVkusDgNXPk630KUF9xkojDemxgXvVGLl8%2FSOxFIGcK9r7p1hTqPOPDgbhGw3VstQhj7wPRxUmbK6CHx5CLxDtUUYMZw%2BowXRO3RXIvhSNP8LdR5osxNfeGysjo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4636&min_rtt=4018&rtt_var=1359&sent=58&recv=85&lost=0&retrans=0&sent_bytes=8228&recv_bytes=6743&delivery_rate=2347&cwnd=12000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=252&x=16"

hydrahd.sh/themes/logoholder.png

104.21.66.45

200 OK

754 B

URL GET
hydrahd.sh/themes/logoholder.png
IP
104.21.66.45:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjecthydrahd.sh
Fingerprint09:32:01:04:13:A1:D5:B6:8B:31:1B:1D:43:7B:02:B6:90:69:25:57
ValidityFri, 18 Apr 2025 23:42:42 GMT - Fri, 18 Jul 2025 00:40:27 GMT

File type
PNG image data, 342 x 134, 8-bit/color RGBA, non-interlaced
Size
754 B (754 bytes)
Hash
1af949c7e7d9f612e79902e7fcb9ece4
9e10cb9cf890db4d65e82af5866e4fc8d6f16e45
3549b22743cb2f2b5e9553bc8361b067efbdb5dc23f65e9a0356d0e167500bcb

HTTP Headers

GET /themes/logoholder.png HTTP/1.1
Host: hydrahd.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hydrahd.sh/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7oq8kskms4gg56597ofldvvo12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: image/png
content-length: 754
referrer-policy: same-origin
last-modified: Mon, 09 Dec 2024 17:27:39 GMT
cache-control: public, max-age=1209600
cf-cache-status: HIT
age: 1042425
accept-ranges: bytes
cf-ray: 93b9bb16def05687-OSL
server: cloudflare
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Xdmh6fqxFPx09c2J5i1nGc810dAGYpnaYrPE3WrmyA8DxNB1RD3UoOSpiL3WZN8iEWgSVj%2BM6a67Ks9ToRraWUdcPr8OHqHwKHgwAVl7ZJ9FWJjrGff4ecT3dRq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4636&min_rtt=4018&rtt_var=1359&sent=68&recv=85&lost=0&retrans=0&sent_bytes=17985&recv_bytes=6743&delivery_rate=2347&cwnd=12000&unsent_bytes=0&cid=3f00ec0cd49989af&ts=254&x=16"

cdnjs.cloudflare.com/ajax/libs/Swiper/6.4.5/swiper-bundle.min.js

104.17.25.14

200 OK

140 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/Swiper/6.4.5/swiper-bundle.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hydrahd.sh/
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT

File type
JavaScript source, ASCII text, with very long lines (65279)
Size
140 kB (139826 bytes)
Hash
6f58af87fc5b0cbd1565f351e2100baa
7e4298d37286d378590b16260baf31fe845158da
9134d7339572e8528974863492e41962d0eb10362053f83305e49bb4a7e8f280

HTTP Headers

GET /ajax/libs/Swiper/6.4.5/swiper-bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 16:07:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 31990
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93b9bb171f4d569d-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fdcfa8c-22232"
last-modified: Fri, 18 Dec 2020 18:53:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 284101
expires: Sun, 26 Apr 2026 16:07:29 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FIcbePCo5%2FqdjuiBHmqvkDCsVaWEOtCdNiDqeTQ0AJAaHAdHPr2B3m850LTKWpswK2gcr4RFxwbaqjgWuhWujbiaO0sxkm8kDtwDnUMKc5QEjF5mNHPFCH0zsTKaJIwKwaaj%2Fiex"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML