Overview

URL fencerjiji.xyz/
IP163.44.171.215
ASN
Location Japan
Report completed2018-07-13 02:07:42 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-07-13 02:07:09 CEST 2  163.44.171.215 Client IP ET INFO Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 163.44.171.215


Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2018-09-24 12:26:21 +0200
0 - 0 - 2 theipgenerators.com/apps.exe 162.241.234.99
2018-09-24 12:25:41 +0200
0 - 0 - 1 20482.xc.gongnou.com/xiaz/%E3%80%8A%E4%BE%A0% (...) 114.55.188.114
2018-09-24 12:25:37 +0200
0 - 2 - 1 wgarstit.a3y6.top/4a3580515e846949665fa0b9dce (...) 163.171.140.206
2018-09-24 12:25:09 +0200
0 - 0 - 4 nveeusa.com/nan 198.54.115.24
2018-09-24 12:24:58 +0200
0 - 0 - 1 20361.xc.gongnou.com/xiaz 114.55.188.114
2018-09-24 12:24:20 +0200
0 - 0 - 6 www.belesciyiz.com/images/logos.gif?59d61=735938 142.93.104.55
2018-09-24 12:24:14 +0200
0 - 0 - 22 https://blog.52yt.top/wp-admin/user/Ameli-enl (...) 35.229.134.230
2018-09-24 12:23:02 +0200
0 - 3 - 0 infosamui.de/ 145.239.227.35
2018-09-24 12:22:15 +0200
0 - 0 - 1 https://www.hostingcloud.download/Csh4Z4ev.wasm 212.32.255.138
2018-09-24 12:22:08 +0200
0 - 0 - 1 https://www.jshosting.review/SkSoR5IJ.wasm 212.32.255.3

No other reports on domain: fencerjiji.xyz



JavaScript

Executed Scripts (51)


Executed Evals (0)


Executed Writes (15)

#1 JavaScript::Write (size: 633, repeated: 1) - SHA256: 333a9d8376f2be18c2422608de0c532f2659b74656fde2fd6d05955730f0b284

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-3976456274951860"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180709/r20180604/zrt_lookup.html#" > < /iframe><script>google_pub_vars=window.parent['google_sv_map']['aswift_0'];google_iframe_start_time=new Date().getTime();google_async_iframe_id="aswift_0";</script > < script > window.google_process_slots = function() {
    window.google_sa_impl({
        iframeWin: window,
        pubWin: window.parent
    });
}; < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20180709 / r20180604 / show_ads_impl.js "></script></body></html>
                                    

#2 JavaScript::Write (size: 429, repeated: 1) - SHA256: a9e2d50d3bd63a9a8d5c8463e564595980601128dfbc183bf83a15e0e65dde07

                                        < !doctype html > < html > < body > < script > google_pub_vars = window.parent['google_sv_map']['aswift_1'];
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_1"; < /script><script>window.google_process_slots=function(){window.google_sa_impl({iframeWin: window, pubWin: window.parent});};</script > < script src = "https://pagead2.googlesyndication.com/pagead/js/r20180709/r20180604/show_ads_impl.js" > < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 429, repeated: 1) - SHA256: 38c0a1e5e782b20d2bbee84ca2b158dc00bce22d332b6010826709a6a2b35316

                                        < !doctype html > < html > < body > < script > google_pub_vars = window.parent['google_sv_map']['aswift_2'];
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_2"; < /script><script>window.google_process_slots=function(){window.google_sa_impl({iframeWin: window, pubWin: window.parent});};</script > < script src = "https://pagead2.googlesyndication.com/pagead/js/r20180709/r20180604/show_ads_impl.js" > < /script></body > < /html>
                                    

#4 JavaScript::Write (size: 429, repeated: 1) - SHA256: b676a7be2a6d5dd01e8c5f4deff9961f5a8c3a438e42341bbb817a9c004b7520

                                        < !doctype html > < html > < body > < script > google_pub_vars = window.parent['google_sv_map']['aswift_3'];
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_3"; < /script><script>window.google_process_slots=function(){window.google_sa_impl({iframeWin: window, pubWin: window.parent});};</script > < script src = "https://pagead2.googlesyndication.com/pagead/js/r20180709/r20180604/show_ads_impl.js" > < /script></body > < /html>
                                    

#5 JavaScript::Write (size: 429, repeated: 1) - SHA256: 51ade12ef8a3adeba31e5d6714b51407478a74d31018de7f65de610925add77c

                                        < !doctype html > < html > < body > < script > google_pub_vars = window.parent['google_sv_map']['aswift_4'];
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_4"; < /script><script>window.google_process_slots=function(){window.google_sa_impl({iframeWin: window, pubWin: window.parent});};</script > < script src = "https://pagead2.googlesyndication.com/pagead/js/r20180709/r20180604/show_ads_impl.js" > < /script></body > < /html>
                                    

#6 JavaScript::Write (size: 13276, repeated: 1) - SHA256: d5549fd443302c7e91d8f86ce41e16c8e61b4cb047b0bcc27ecc4e1d13fc1cb3

                                        < !doctype html > < html > < head > < script >
    var google_casm = []; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < script > (function() {
    var aa = "function" == typeof Object.create ? Object.create : function(a) {
            var b = function() {};
            b.prototype = a;
            return new b
        },
        n;
    if ("function" == typeof Object.setPrototypeOf) n = Object.setPrototypeOf;
    else {
        var p;
        a: {
            var ba = {
                    a: !0
                },
                q = {};
            try {
                q.__proto__ = ba;
                p = q.a;
                break a
            } catch (a) {}
            p = !1
        }
        n = p ? function(a, b) {
            a.__proto__ = b;
            if (a.__proto__ !== b) throw new TypeError(a + " is not extensible");
            return a
        } : null
    }
    var t = n,
        u = this,
        ca = function(a, b) {
            a = a.split(".");
            var c = u;
            a[0] in c || "undefined" == typeof c.execScript || c.execScript("var " + a[0]);
            for (var d; a.length && (d = a.shift());) a.length || void 0 === b ? c[d] && c[d] !== Object.prototype[d] ? c = c[d] : c = c[d] = {} : c[d] = b
        },
        v = Date.now || function() {
            return +new Date
        };
    var w = document,
        da = window;
    var ea = Array.prototype.indexOf ? function(a, b) {
            return Array.prototype.indexOf.call(a, b, void 0)
        } : function(a, b) {
            if ("string" == typeof a) return "string" == typeof b && 1 == b.length ? a.indexOf(b, 0) : -1;
            for (var c = 0; c < a.length; c++)
                if (c in a && a[c] === b) return c;
            return -1
        },
        fa = Array.prototype.forEach ? function(a, b) {
            Array.prototype.forEach.call(a, b, void 0)
        } : function(a, b) {
            for (var c = a.length, d = "string" == typeof a ? a.split("") : a, e = 0; e < c; e++) e in d && b.call(void 0, d[e], e, a)
        };
    var y = function(a) {
        y[" "](a);
        return a
    };
    y[" "] = function() {};
    var A = function(a) {
            try {
                var b;
                if (b = !!a && null != a.location.href) a: {
                    try {
                        y(a.foo);
                        b = !0;
                        break a
                    } catch (c) {}
                    b = !1
                }
                return b
            } catch (c) {
                return !1
            }
        },
        ha = function(a, b) {
            if (a)
                for (var c in a) Object.prototype.hasOwnProperty.call(a, c) && b.call(void 0, a[c], c, a)
        };
    var B = function(a, b, c) {
            a.addEventListener ? a.addEventListener(b, c, void 0) : a.attachEvent && a.attachEvent("on" + b, c)
        },
        C = function(a, b, c) {
            a.removeEventListener ? a.removeEventListener(b, c, void 0) : a.detachEvent && a.detachEvent("on" + b, c)
        };
    var ia = function(a, b) {
        var c = !1,
            d = !1;
        d = void 0 === d ? !1 : d;
        c = void 0 === c ? !1 : c;
        a.google_image_requests || (a.google_image_requests = []);
        var e = a.document.createElement("img");
        if (c) {
            var f = function() {
                if (c) {
                    var b = a.google_image_requests,
                        d = ea(b, e);
                    0 <= d && Array.prototype.splice.call(b, d, 1)
                }
                C(e, "load", f);
                C(e, "error", f)
            };
            B(e, "load", f);
            B(e, "error", f)
        }
        d && (e.referrerPolicy = "no-referrer");
        e.src = b;
        a.google_image_requests.push(e)
    };
    var ka;
    ka = /^true$/.test("");
    var la = !!window.google_async_iframe_id,
        D = la && window.parent || window;
    var E = function(a) {
            return {
                visible: 1,
                hidden: 2,
                prerender: 3,
                preview: 4,
                unloaded: 5
            }[a.visibilityState || a.webkitVisibilityState || a.mozVisibilityState || ""] || 0
        },
        ma = function(a) {
            var b;
            a.visibilityState ? b = "visibilitychange" : a.mozVisibilityState ? b = "mozvisibilitychange" : a.webkitVisibilityState && (b = "webkitvisibilitychange");
            return b
        };
    var F = null,
        G = !1,
        I = function() {
            this.g = w;
            this.o = da;
            this.j = !1;
            this.h = this.l = null;
            this.i = [];
            this.m = [];
            G ? this.h = v() : 3 == E(this.g) ? (this.h = v(), na(this)) : H(this)
        },
        H = function(a) {
            if (!a.j) {
                a.j = !0;
                for (var b = 0; b < a.i.length; ++b) a.u.apply(a, a.i[b]);
                a.i = [];
                for (b = 0; b < a.m.length; ++b) a.o.setTimeout(a.m[b], 0);
                a.m = []
            }
        },
        na = function(a) {
            var b = function() {
                if (3 != E(a.g)) {
                    H(a);
                    var b = ma(a.g);
                    b && a.l && C(a.g, b, a.l)
                }
            };
            F && (b = F("di::vch", b));
            a.l = b;
            var c = ma(a.g);
            c && B(a.g, c, b)
        };
    I.prototype.u = function(a) {
        this.o.rvdt = this.h ? v() - this.h : 0;
        ia(this.o, a)
    };
    I.g = void 0;
    I.h = function() {
        return I.g ? I.g : I.g = new I
    };
    var J = function(a, b, c) {
        c = void 0 === c ? {} : c;
        this.error = a;
        this.context = b.context;
        this.line = b.line || -1;
        this.msg = b.message || "";
        this.file = b.file || "";
        this.id = b.id || "jserror";
        this.meta = c
    };
    var oa = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
        pa = function(a, b) {
            this.g = a;
            this.h = b
        },
        qa = function(a, b) {
            this.url = a;
            this.s = !!b;
            this.depth = null
        };
    var K = function() {
            this.i = "&";
            this.j = !1;
            this.h = {};
            this.l = 0;
            this.g = []
        },
        ra = function(a, b) {
            var c = {};
            c[a] = b;
            return [c]
        },
        ta = function(a, b, c, d, e) {
            var f = [];
            ha(a, function(a, g) {
                (a = sa(a, b, c, d, e)) && f.push(g + "=" + a)
            });
            return f.join(b)
        },
        sa = function(a, b, c, d, e) {
            if (null == a) return "";
            b = b || "&";
            c = c || ",$";
            "string" == typeof c && (c = c.split(""));
            if (a instanceof Array) {
                if (d = d || 0, d < c.length) {
                    for (var f = [], h = 0; h < a.length; h++) f.push(sa(a[h], b, c, d + 1, e));
                    return f.join(c[d])
                }
            } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(ta(a, b, c, d, e + 1)) : "...";
            return encodeURIComponent(String(a))
        },
        L = function(a, b, c, d) {
            a.g.push(b);
            a.h[b] = ra(c, d)
        },
        va = function(a, b, c, d) {
            b = b + "//" + c + d;
            var e = ua(a) - d.length;
            if (0 > e) return "";
            a.g.sort(function(a, b) {
                return a - b
            });
            d = null;
            c = "";
            for (var f = 0; f < a.g.length; f++)
                for (var h = a.g[f], g = a.h[h], k = 0; k < g.length; k++) {
                    if (!e) {
                        d = null == d ? h : d;
                        break
                    }
                    var l = ta(g[k], a.i, ",$");
                    if (l) {
                        l = c + l;
                        if (e >= l.length) {
                            e -= l.length;
                            b += l;
                            c = a.i;
                            break
                        } else a.j && (c = e, l[c - 1] == a.i && --c, b += l.substr(0, c), c = a.i, e = 0);
                        d = null == d ? h : d
                    }
                }
            a = "";
            null != d && (a = c + "trn=" + d);
            return b + a
        },
        ua = function(a) {
            var b = 1,
                c;
            for (c in a.h) b = c.length > b ? c.length : b;
            return 3997 - b - a.i.length - 1
        };
    var wa = function(a, b, c, d) {
        if (Math.random() < (d || a.g)) try {
            if (c instanceof K) var e = c;
            else e = new K, ha(c, function(a, b) {
                var c = e,
                    d = c.l++;
                a = ra(b, a);
                c.g.push(d);
                c.h[d] = a
            });
            var f = va(e, a.j, a.h, a.i + b + "&");
            f && ia(u, f)
        } catch (h) {}
    };
    var M = null;
    var xa = function() {
            var a = u.performance;
            return a && a.now && a.timing ? Math.floor(a.now() + a.timing.navigationStart) : v()
        },
        ya = function() {
            var a = void 0 === a ? u : a;
            return (a = a.performance) && a.now ? a.now() : null
        };
    var za = function(a, b, c) {
        this.label = a;
        this.type = b;
        this.value = c;
        this.duration = 0;
        this.uniqueId = this.label + "_" + this.type + "_" + Math.random();
        this.slotId = void 0
    };
    var N = u.performance,
        Aa = !!(N && N.mark && N.measure && N.clearMarks),
        O = function(a) {
            var b = !1,
                c;
            return function() {
                b || (c = a(), b = !0);
                return c
            }
        }(function() {
            var a;
            if (a = Aa) {
                var b;
                if (null === M) {
                    M = "";
                    try {
                        a = "";
                        try {
                            a = u.top.location.hash
                        } catch (c) {
                            a = u.location.hash
                        }
                        a && (M = (b = a.match(/\bdeid=([\d,]+)/)) ? b[1] : "")
                    } catch (c) {}
                }
                b = M;
                a = !!b.indexOf && 0 <= b.indexOf("1337")
            }
            return a
        }),
        Ba = function() {
            var a = P;
            this.h = [];
            this.i = a || u;
            var b = null;
            a && (a.google_js_reporting_queue = a.google_js_reporting_queue || [], this.h = a.google_js_reporting_queue, b = a.google_measure_js_timing);
            this.g = O() || (null != b ? b : 1 > Math.random())
        },
        Ca = function(a) {
            a && N && O() && (N.clearMarks("goog_" + a.uniqueId + "_start"), N.clearMarks("goog_" + a.uniqueId + "_end"))
        };
    Ba.prototype.start = function(a, b) {
        if (!this.g) return null;
        var c = ya() || xa();
        a = new za(a, b, c);
        b = "goog_" + a.uniqueId + "_start";
        N && O() && N.mark(b);
        return a
    };
    var R = function() {
        var a = Q;
        this.h = Da;
        this.j = this.i;
        this.g = void 0 === a ? null : a
    };
    R.prototype.pinger = function() {
        return this.h
    };
    var Ea = function(a, b, c, d, e) {
            try {
                if (a.g && a.g.g) {
                    var f = a.g.start(b.toString(), 3);
                    var h = c();
                    var g = a.g;
                    c = f;
                    if (g.g && "number" == typeof c.value) {
                        var k = ya() || xa();
                        c.duration = k - c.value;
                        var l = "goog_" + c.uniqueId + "_end";
                        N && O() && N.mark(l);
                        g.g && g.h.push(c)
                    }
                } else h = c()
            } catch (m) {
                g = !0;
                try {
                    Ca(f), g = (e || a.j).call(a, b, new S(T(m), m.fileName, m.lineNumber), void 0, d)
                } catch (x) {
                    a.i(217, x)
                }
                if (!g) throw m;
            }
            return h
        },
        Ga = function(a, b, c, d, e) {
            var f = Fa;
            return function(h) {
                for (var g = [], k = 0; k < arguments.length; ++k) g[k] = arguments[k];
                return Ea(f, a, function() {
                    return b.apply(c, g)
                }, d, e)
            }
        };
    R.prototype.i = function(a, b, c, d, e) {
        e = e || "jserror";
        try {
            var f = new K;
            f.j = !0;
            L(f, 1, "context", a);
            b.error && b.meta && b.id || (b = new S(T(b), b.fileName, b.lineNumber));
            b.msg && L(f, 2, "msg", b.msg.substring(0, 512));
            b.file && L(f, 3, "file", b.file);
            0 < b.line && L(f, 4, "line", b.line);
            var h = b.meta || {};
            if (d) try {
                d(h)
            } catch (V) {}
            b = [h];
            f.g.push(5);
            f.h[5] = b;
            d = u;
            b = [];
            h = null;
            do {
                var g = d;
                if (A(g)) {
                    var k = g.location.href;
                    h = g.document && g.document.referrer || null
                } else k = h, h = null;
                b.push(new qa(k || ""));
                try {
                    d = g.parent
                } catch (V) {
                    d = null
                }
            } while (d && g != d);
            k = 0;
            for (var l = b.length - 1; k <= l; ++k) b[k].depth = l - k;
            g = u;
            if (g.location && g.location.ancestorOrigins && g.location.ancestorOrigins.length == b.length - 1) for (l = 1; l < b.length; ++l) {
                var m = b[l];
                m.url || (m.url = g.location.ancestorOrigins[l - 1] || "", m.s = !0)
            }
            var x = new qa(u.location.href, !1);
            g = null;
            var W = b.length - 1;
            for (m = W; 0 <= m; --m) {
                var r = b[m];
                !g && oa.test(r.url) && (g = r);
                if (r.url && !r.s) {
                    x = r;
                    break
                }
            }
            r = null;
            var Ja = b.length && b[W].url;
            0 != x.depth && Ja && (r = b[W]);
            var z = new pa(x, r);
            z.h && L(f, 6, "top", z.h.url || "");
            L(f, 7, "url", z.g.url || "");
            wa(this.h, e, f, c)
        } catch (V) {
            try {
                wa(this.h, e, {
                    context: "ecmserr",
                    rctx: a,
                    msg: T(V),
                    url: z && z.g.url
                }, c)
            } catch (Ka) {}
        }
        return !0
    };
    var T = function(a) {
            var b = a.toString();
            a.name && -1 == b.indexOf(a.name) && (b += ": " + a.name);
            a.message && -1 == b.indexOf(a.message) && (b += ": " + a.message);
            if (a.stack) {
                a = a.stack;
                var c = b;
                try {
                    -1 == a.indexOf(c) && (a = c + "\n" + a);
                    for (var d; a != d;) d = a, a = a.replace(/((https?:\/..*\/)[^\/:]*:\d+(?:.|\n)*)\2/, "$1");
                    b = a.replace(/\n */g, "\n")
                } catch (e) {
                    b = c
                }
            }
            return b
        },
        S = function(a, b, c) {
            J.call(this, Error(a), {
                message: a,
                file: void 0 === b ? "" : b,
                line: void 0 === c ? -1 : c
            })
        },
        U = S;
    U.prototype = aa(J.prototype);
    U.prototype.constructor = U;
    if (t) t(U, J);
    else
        for (var X in J)
            if ("prototype" != X)
                if (Object.defineProperties) {
                    var Ha = Object.getOwnPropertyDescriptor(J, X);
                    Ha && Object.defineProperty(U, X, Ha)
                } else U[X] = J[X];
    U.v = J.prototype;
    var Da, Fa;
    if (la && !A(D)) {
        var Y = "." + w.domain;
        try {
            for (; 2 < Y.split(".").length && !A(D);) w.domain = Y = Y.substr(Y.indexOf(".") + 1), D = window.parent
        } catch (a) {}
        A(D) || (D = window)
    }
    var P = D,
        Q = new Ba,
        Ia = function() {
            if (!P.google_measure_js_timing) {
                var a = Q;
                a.g = !1;
                a.h != a.i.google_js_reporting_queue && (O() && fa(a.h, Ca), a.h.length = 0)
            }
        };
    Da = new function() {
        var a = void 0 === a ? da : a;
        this.j = "http:" === a.location.protocol ? "http:" : "https:";
        this.h = "pagead2.googlesyndication.com";
        this.i = "/pagead/gen_204?id=";
        this.g = .01
    };
    Fa = new R;
    "complete" == P.document.readyState ? Ia() : Q.g && B(P, "load", function() {
        Ia()
    });
    var Z = function(a, b, c, d, e) {
        return Ga(a, b, c, d, e)
    };
    F = Z;
    G = ka;
    ca("vu", Z("vu", function(a) {
        a = a.replace("&amp;", "&");
        var b = /(google|doubleclick).*\/pagead\/adview/.test(a),
            c = I.h();
        if (b) {
            b = "&vis=" + E(c.g);
            var d = a.indexOf("&adurl");
            a = -1 == d ? a + b : a.substring(0, d) + b + a.substring(d)
        }
        c.j ? c.u(a) : c.i.push([a])
    }));
    ca("vv", Z("vv", function() {
        G && H(I.h())
    }));
}).call(this); < /script><script>vu("https:/ / googleads.g.doubleclick.net / pagead / adview ? ai\ x3dCoTMBM - 1 HW - jsKIGp6gT58JigB8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM5NzY0NTYyNzQ5NTE4NjDIAQmpAtu - bsJPAIU - qAMBqgSdAU_QvAYDOasiOIQ5mLy6pS119NomOgbGBEXgtake8IzjOdua5I2rWP7LCTjt9RMKhxTFvP1sP - h6gEb3xky7ToE5ilg7mJMDr86QhBo_PSgZKKn5uJba8DqztYmYYCo6 - DMV0 - QjsQ96RNmlYryY1Jpxd4grzYLw7YD66hK6FFt88WM4oq1kVgfZ9agjZ81F7L7pWEAi2 - uz65gUfQiABqzMprSS0qbyJaAGIagHpr4bqAfZyxuoB8_MG9gHANIIBwiA4YAQEAE\ x26sigh\ x3d922ZogJ8PZA ")</script><script src='https://track.adform.net/adfscript/?bn=23124652;rtbwp=W0ftMwAKNmgKmpSBAAY4ea_n4rFbHaPCpkqRRw;rtbdata=R9Mdx73pibRXLLLV7WYmh6ADPMcTIO24ueX9p69tx8vbqJF4_6bfEXGSX0P4P2FHcxbmbM--l2WngpPplqFeX3GKpaUYrJ-jV2a9zkVvcEmWcnpnDlV3gCf8QNAgzq93t4ps1u4uW_YJfZcER1h2u3LKO70OaRj3YExKtp5I8pCMG571-RAP01mW2YwF9-FHNtLjTV2fk2zesP603w4fAAhD__nd7qgc5a8dQqvNPWxkdbOCESWHQgZVH_GjgPZ3SS3F3v8p3-v0Hyza077o7-FBboVeNKvP0;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CoTMBM-1HW-jsKIGp6gT58JigB8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM5NzY0NTYyNzQ5NTE4NjDIAQmpAtu-bsJPAIU-qAMBqgSdAU_QvAYDOasiOIQ5mLy6pS119NomOgbGBEXgtake8IzjOdua5I2rWP7LCTjt9RMKhxTFvP1sP-h6gEb3xky7ToE5ilg7mJMDr86QhBo_PSgZKKn5uJba8DqztYmYYCo6-DMV0-QjsQ96RNmlYryY1Jpxd4grzYLw7YD66hK6FFt88WM4oq1kVgfZ9agjZ81F7L7pWEAi2-uz65gUfQiABqzMprSS0qbyJaAGIagHpr4bqAfZyxuoB8_MG9gHANIIBwiA4YAQEAE&num=1&sig=AOD64_3vuK66oxzENg2FtkqSCHtsAHmwcw&client=ca-pub-3976456274951860&adurl='></script><script src="
https: //tpc.googlesyndication.com/pagead/js/r20180709/r20110914/client/ext/m_window_focus_non_hydra.js" async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCoTMBM-1HW-jsKIGp6gT58JigB8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM5NzY0NTYyNzQ5NTE4NjDIAQmpAtu-bsJPAIU-qAMBqgSdAU_QvAYDOasiOIQ5mLy6pS119NomOgbGBEXgtake8IzjOdua5I2rWP7LCTjt9RMKhxTFvP1sP-h6gEb3xky7ToE5ilg7mJMDr86QhBo_PSgZKKn5uJba8DqztYmYYCo6-DMV0-QjsQ96RNmlYryY1Jpxd4grzYLw7YD66hK6FFt88WM4oq1kVgfZ9agjZ81F7L7pWEAi2-uz65gUfQiABqzMprSS0qbyJaAGIagHpr4bqAfZyxuoB8_MG9gHANIIBwiA4YAQEAE\x26sigh\x3dYBADdFro_zU","M-1HW8OnKJWP6gTHvaSABQ","CKjSppnkmtwCFYGUmgodeTgGdA",true,false,false,0,true);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180709/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BOk8xM-1HW-jsKIGp6gT58JigBwC-0LiF5QIAABABOAHIAQmgBiHSCAcIgOGAEBAB','',78720088,true,'ud\x3d1\x26la\x3d0\x26alp\x3dai\x26alh\x3d1247713354\x26',3,'','//pagead2.googlesyndication.com/activeview?avi\x3dBOk8xM-1HW-jsKIGp6gT58JigBwC-0LiF5QIAABABOAHIAQmgBiHSCAcIgOGAEBAB','');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20180709/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,null,null,null,null,null,null,0]);</script><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CKjSppnkmtwCFYGUmgodeTgGdA"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB9SURBVBjTbVCBDcAwCNIP+P/atSJSkxm3aooUifiPZJxidYG6xU1guryIIDrdFeiiiFSn+3vGQjf3TBR3v60JKZkAlm7KbfIQtF5uWvQUSu5elAckV3pYF29vyXILYXJJ63ZmPFvSDdXLwcHaM3tSQoweG3Nx+/8qSY2d7wMvpAWCe+kobgAAAABJRU5ErkJggg==') !important"></div></body></html>
                                    

#7 JavaScript::Write (size: 86, repeated: 1) - SHA256: be5784110ba3e20cd4589ef94a0c65ebea058d3362262da625744b0b1d5d71d9

                                        < div id = "+ADFP1x"
style = "width:160px;height:600px;" > < /div><i style="display:none"></i >
                                    

#8 JavaScript::Write (size: 1386, repeated: 1) - SHA256: 9ece0fc6cf8a12b06e00201ca9d398bed00dcc5f03bc0d44cca149b06f10a92d

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "312"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&amp;output=html&amp;h=280&amp;twa=1&amp;slotname=9955687788&amp;adk=2607616512&amp;adf=807048394&amp;w=312&amp;fwrn=4&amp;fwrnh=100&amp;lmt=1531438419&amp;loeid=40993911&amp;guci=1.2.0.0.2.2.0&amp;format=312x280&amp;url=https%3A%2F%2Ffencerjiji.xyz%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;rh=280&amp;rw=312&amp;wgl=0&amp;adsid=NT&amp;dt=1531440434237&amp;bpp=64&amp;fdt=72&amp;idt=440&amp;shv=r20180709&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;correlator=3687382496268&amp;frm=20&amp;pv=2&amp;ga_vid=861282280.1531440433&amp;ga_sid=1531440435&amp;ga_hid=1087621879&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=828&amp;ady=290&amp;biw=1159&amp;bih=737&amp;scr_x=0&amp;scr_y=0&amp;eid=368226401%2C40993901%2C21061122&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=1808&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=1040&amp;bc=1&amp;ifi=1&amp;dtd=467"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#9 JavaScript::Write (size: 1409, repeated: 1) - SHA256: ade10bd0a6bae3896c1755813be7ab4dd9fe4db7ecf256984f1aa59e6477f54a

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "259"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&amp;output=html&amp;h=600&amp;twa=1&amp;slotname=4515179913&amp;adk=78720088&amp;adf=807048394&amp;w=259&amp;fwrn=4&amp;fwrnh=100&amp;lmt=1531438419&amp;loeid=40993911&amp;guci=1.2.0.0.2.2.0&amp;format=259x600&amp;url=https%3A%2F%2Ffencerjiji.xyz%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;rh=600&amp;rw=259&amp;wgl=0&amp;adsid=NT&amp;dt=1531440434916&amp;bpp=32&amp;fdt=38&amp;idt=200&amp;shv=r20180709&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=312x280&amp;correlator=3687382496268&amp;frm=20&amp;pv=1&amp;ga_vid=861282280.1531440433&amp;ga_sid=1531440435&amp;ga_hid=1087621879&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=900&amp;ady=1468&amp;biw=1159&amp;bih=737&amp;scr_x=0&amp;scr_y=0&amp;eid=368226401%2C40993901%2C21061122&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=1808&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=1040&amp;bc=1&amp;ifi=2&amp;dtd=225"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#10 JavaScript::Write (size: 1419, repeated: 1) - SHA256: 2b05f753b60bd6993a17f7083390179654a9073196716a7adb31a45c50558faa

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "259"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&amp;output=html&amp;h=600&amp;twa=1&amp;slotname=4515179913&amp;adk=78720088&amp;adf=807048394&amp;w=259&amp;fwrn=4&amp;fwrnh=100&amp;lmt=1531438419&amp;loeid=40993911&amp;guci=1.2.0.0.2.2.0&amp;format=259x600&amp;url=https%3A%2F%2Ffencerjiji.xyz%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;rh=600&amp;rw=259&amp;wgl=0&amp;adsid=NT&amp;dt=1531440435149&amp;bpp=10&amp;fdt=54&amp;idt=365&amp;shv=r20180709&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=312x280%2C259x600&amp;correlator=3687382496268&amp;frm=20&amp;pv=1&amp;ga_vid=861282280.1531440433&amp;ga_sid=1531440435&amp;ga_hid=1087621879&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=900&amp;ady=2083&amp;biw=1159&amp;bih=737&amp;scr_x=0&amp;scr_y=0&amp;eid=368226401%2C40993901%2C21061122&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=1808&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=1040&amp;bc=1&amp;ifi=3&amp;dtd=438"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#11 JavaScript::Write (size: 1399, repeated: 1) - SHA256: a7eb4ac80857b37c56132a3e0c754d834d7091d744f366465b3e0cbca75a77a2

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&amp;output=html&amp;adk=1812271804&amp;adf=807048394&amp;lmt=1531438419&amp;loeid=40993911&amp;plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C26%3A32768%2C30%3A1048576&amp;guci=1.2.0.0.2.2.0&amp;format=0x0&amp;url=https%3A%2F%2Ffencerjiji.xyz%2F&amp;ea=0&amp;flash=10.0.45&amp;pra=5&amp;wgl=0&amp;adsid=NT&amp;dt=1531440435933&amp;bpp=636&amp;fdt=639&amp;idt=893&amp;shv=r20180709&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=312x280%2C259x600%2C259x600%2C336x280&amp;correlator=3687382496268&amp;frm=20&amp;pv=1&amp;ga_vid=861282280.1531440433&amp;ga_sid=1531440435&amp;ga_hid=1087621879&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1159&amp;bih=737&amp;scr_x=0&amp;scr_y=0&amp;eid=368226401%2C40993901%2C21061122&amp;oid=3&amp;rx=0&amp;eae=6&amp;fc=1808&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cr%7C&amp;abl=CS&amp;ppjl=f&amp;fu=1040&amp;bc=1&amp;ifi=4&amp;dtd=919"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#12 JavaScript::Write (size: 1363, repeated: 1) - SHA256: 892989641d2c64e6767540f3ce009c1a453bdd1d30be7c53c8011c613e6fa48b

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
width = "336"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&amp;output=html&amp;h=280&amp;slotname=5473038361&amp;adk=4215386827&amp;adf=807048394&amp;w=336&amp;lmt=1531438419&amp;loeid=40993911&amp;guci=1.2.0.0.2.2.0&amp;format=336x280&amp;url=https%3A%2F%2Ffencerjiji.xyz%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1531440435933&amp;bpp=6&amp;fdt=31&amp;idt=235&amp;shv=r20180709&amp;cbv=r20180604&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=312x280%2C259x600%2C259x600&amp;correlator=3687382496268&amp;frm=20&amp;pv=1&amp;ga_vid=861282280.1531440433&amp;ga_sid=1531440435&amp;ga_hid=1087621879&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=208&amp;ady=3058&amp;biw=1159&amp;bih=737&amp;scr_x=0&amp;scr_y=0&amp;eid=368226401%2C40993901%2C21061122&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=1808&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=f&amp;pfx=0&amp;fu=1040&amp;bc=1&amp;ifi=4&amp;dtd=263"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#13 JavaScript::Write (size: 118, repeated: 1) - SHA256: 6617c9185278e5f98c4021a7f7d9f09c980b807e4b5437aa33f8947c389c0074

                                        < script id = "gpt-impl-0.3410338634752551"
src = "https://securepubads.g.doubleclick.net/gpt/pubads_impl_231.js" > < /script>
                                    

#14 JavaScript::Write (size: 105, repeated: 1) - SHA256: 4c622e185a176efda9a069b3c67bf0aea415663052a3f277bc9af6e654b5ff73

                                        < script type = "text/javascript"
src = "https://s1.adform.net/stoat/610/s1.adform.net/bootstrap.js" > < /script>
                                    

#15 JavaScript::Write (size: 1461, repeated: 1) - SHA256: 0c7db84086d7b3a4fbf1e5f9170a81b0d3bc9c888838ae04e2f34f6a0fac72dc

                                        < script type = "text/javascript"
src = "https://track.adform.net/adfserve/?CC=1&bn=23124652;rtbwp=W0ftMwAKNmgKmpSBAAY4ea_n4rFbHaPCpkqRRw;rtbdata=R9Mdx73pibRXLLLV7WYmh6ADPMcTIO24ueX9p69tx8vbqJF4_6bfEXGSX0P4P2FHcxbmbM--l2WngpPplqFeX3GKpaUYrJ-jV2a9zkVvcEmWcnpnDlV3gCf8QNAgzq93t4ps1u4uW_YJfZcER1h2u3LKO70OaRj3YExKtp5I8pCMG571-RAP01mW2YwF9-FHNtLjTV2fk2zesP603w4fAAhD__nd7qgc5a8dQqvNPWxkdbOCESWHQgZVH_GjgPZ3SS3F3v8p3-v0Hyza077o7-FBboVeNKvP0;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CoTMBM-1HW-jsKIGp6gT58JigB8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM5NzY0NTYyNzQ5NTE4NjDIAQmpAtu-bsJPAIU-qAMBqgSdAU_QvAYDOasiOIQ5mLy6pS119NomOgbGBEXgtake8IzjOdua5I2rWP7LCTjt9RMKhxTFvP1sP-h6gEb3xky7ToE5ilg7mJMDr86QhBo_PSgZKKn5uJba8DqztYmYYCo6-DMV0-QjsQ96RNmlYryY1Jpxd4grzYLw7YD66hK6FFt88WM4oq1kVgfZ9agjZ81F7L7pWEAi2-uz65gUfQiABqzMprSS0qbyJaAGIagHpr4bqAfZyxuoB8_MG9gHANIIBwiA4YAQEAE&num=1&sig=AOD64_3vuK66oxzENg2FtkqSCHtsAHmwcw&client=ca-pub-3976456274951860&adurl=;js=1;adfxid=1x;4183;set=en-US|en-US|1176X885|10.0452|150|600|24|8|3|7|1;fd=0|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-3976456274951860%26output%3dhtml%26h%3d600%26twa%3d1%26slotname%3d4515179913%26adk%3d78720088%26adf%3d807048394%26w%3d259%26fwrn%3d4%26fwrnh%3d100%26lmt%3d1531438419%26loeid%3d40993911%26guci%3d1.2.0.0.2.2.0%26format%3d259x600%26url%3dhttps%253A%252F%252Ffencerjiji.xyz%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26rh%3d600%26" > < /script>
                                    


HTTP Transactions (80)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         163.44.171.215
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:08 GMT
Content-Length: 178
Connection: keep-alive
Location: https://fencerjiji.xyz/


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.107
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "A0886A9B73C9F31A08692FFABAC986A647B169D59E3FBAE7641ADBBC5E2F8798"
Last-Modified: Thu, 12 Jul 2018 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Fri, 13 Jul 2018 12:07:09 GMT
Date: Fri, 13 Jul 2018 00:07:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    70e4ad4882b9de72598850881508a49f
Sha1:   40d358e20575f2fdbb0f3e2e8b32769b30d058be
Sha256: a0886a9b73c9f31a08692ffabac986a647b169d59e3fbae7641adbbc5e2f8798
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.122
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Thu, 12 Jul 2018 00:27:22 GMT
Etag: "8bc63f0891fd85d9dda0e67e774a3b068f713400"
Content-Length: 1396
Cache-Control: public, no-transform, must-revalidate, max-age=16549
Expires: Fri, 13 Jul 2018 04:42:58 GMT
Date: Fri, 13 Jul 2018 00:07:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1396
Md5:    09a979d6e171ab2849e3fd3b5cf847ca
Sha1:   8bc63f0891fd85d9dda0e67e774a3b068f713400
Sha256: dcb77e08e9058039ea7470349ac8c0f9abe11170f190b55f0e6c7e7ca16be9a5
                                        
                                            GET / HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:09 GMT
Content-Length: 6523
Connection: keep-alive
X-Powered-By: PHP/7.0.12
Link: <https://fencerjiji.xyz/index.php?rest_route=/>; rel="https://api.w.org/"
Last-Modified: Thu, 12 Jul 2018 23:33:39 GMT
Expires: Fri, 13 Jul 2018 00:33:39 GMT
Pragma: public
Cache-Control: max-age=1590, public
Etag: "22468cd6a6bbd627afd2356b31c69a97"
Content-Encoding: gzip
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6523
Md5:    22468cd6a6bbd627afd2356b31c69a97
Sha1:   131eb850dee65f090d4c1431c7aabbdc9df0e2a9
Sha256: 7b12639211f9f43779ceefe7c3de118b7439f511a5e34482d54cdc2de80828da
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.107
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "B29DFB16DF600C75897C3C98F1722EEF7BB11E266E646F0E509E797C30C559F1"
Last-Modified: Thu, 12 Jul 2018 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11549
Expires: Fri, 13 Jul 2018 03:19:38 GMT
Date: Fri, 13 Jul 2018 00:07:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    0ea4035788dd85a70e0dd778a7c6af16
Sha1:   35fd415d422705c79a9e2c51c841fb7f0c3ce06b
Sha256: b29dfb16df600c75897c3c98f1722eef7bb11e266e646f0e509e797c30c559f1
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Jul 2018 00:07:09 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    992c0f3100539dd976cadef533c02fbe
Sha1:   bee7e89aff8ca46c5cd837c9c171adc69d0a3949
Sha256: b0332c5aa95ff96c2d9a3bcad5f45a81b5048911b9ff8fb69559f4de41ef6fce
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Jul 2018 00:07:09 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Jul 2018 00:07:09 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    2f14ca6279410a8aa47234e7f762d41a
Sha1:   7dcca3bdcafea8cb60f1baf797d87663d0baeaab
Sha256: eefd0c62f244d0eaf097b89bc27d87b3eec35e98153b1c871694c39f487f247c
                                        
                                            GET /jquery.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         205.185.208.52
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Fri, 13 Jul 2018 00:07:09 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 38845
Last-Modified: Fri, 24 Oct 2014 00:16:08 GMT
Server: nginx
Vary: Accept-Encoding
Etag: W/"54499a48-1764d"
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
X-HW: 1531440429.dop005.sk1.t,1531440429.cds030.sk1.shn,1531440429.dop005.sk1.t,1531440429.cds006.sk1.c


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38845
Md5:    a7ce2c02f25a34d44b804e152e28a0d6
Sha1:   36888d5ddcca230e452d049409f9f09bbf0f1121
Sha256: 80b8444c9543adcdd2b4c36998504400a0c350c8ec8fe422508efe56f2f3f7d2
                                        
                                            GET /wp-content/themes/ad-medium-template2%28pc%29/style.css HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:09 GMT
Content-Length: 7131
Connection: keep-alive
Last-Modified: Wed, 25 Apr 2018 04:31:33 GMT
Etag: "140fdf-1bdb-56aa4beeacb90"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  UTF-8 Unicode C program text
Size:   7131
Md5:    c8fdfb793badae8fe3292dbdd3e28211
Sha1:   45a7a7e8f7bc2477e87552ab992f409cea1ae151
Sha256: 65c801bbe992ecb2f1fbff8949381692d39aec9ad3ac483d1e81a3073e251779
                                        
                                            GET /gtag/js?id=UA-112679565-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         216.58.211.8
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 13 Jul 2018 00:07:10 GMT
Expires: Fri, 13 Jul 2018 00:07:10 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25190
Md5:    fe44979333e19a08d80d82eb027bdf3d
Sha1:   67364e0c8557744019de552e66c3f5f73203acd5
Sha256: 9578da8b53303a5dd2f8707f7d58810ba6ba06418f70b13c49ad3e70b929e856
                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/72-featured-200x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 7498
Last-Modified: Wed, 25 Apr 2018 04:31:36 GMT
Connection: keep-alive
Etag: "5ae004a8-1d4a"
Expires: Fri, 20 Jul 2018 00:07:10 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7498
Md5:    370642692ef0ebef59a9c404215a07f3
Sha1:   137c65cd03fb1e64474a8a4bec93ea23e50f477a
Sha256: 304718d1ddb59842a533f6f367508cec328d133b02d3f83f6e962000f68dfc4e
                                        
                                            GET /tag/js/gpt.js HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Date: Fri, 13 Jul 2018 00:07:10 GMT
Expires: Fri, 13 Jul 2018 00:07:10 GMT
Cache-Control: private, max-age=900, stale-while-revalidate=3600
Etag: "5 / 834 of 1000 / last-modified: 1531433151"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   7870
Md5:    ee1d1f9f195fbbd935507bb3761f07fb
Sha1:   7c623b0fec84141f5d7977db958e1ebebb41d1f0
Sha256: 1d11f8374d04fba829b5d6e08ecbe10eaa42d96e055a88d0b5753655404420bf
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Fri, 13 Jul 2018 00:07:10 GMT
Expires: Fri, 13 Jul 2018 00:07:10 GMT
Cache-Control: private, max-age=3600
Etag: 965552171605571536
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27511
Md5:    a6d5060fb5fb6f1f135b0f3c67d07483
Sha1:   a2ac227de1901040d372637ea24ac54a0477abe9
Sha256: 20c6f9f3574a7ea02bc4210b608df07ee4b76963259050a11641d4305336c38c
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.7 HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 11721
Connection: keep-alive
Last-Modified: Wed, 25 Apr 2018 04:31:38 GMT
Etag: "823a8-2dc9-56aa4bf2c8800"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   11721
Md5:    a7c259ac67b3b4002dc8ac4a09765b9d
Sha1:   95a56d0d0fa8b38105324ddeae45afb36d19f1b9
Sha256: 3d8e94fed6cc8ea56ee5ec6174efb68cb7197d2e729149cb43e85505bf175779
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 10 Jul 2018 17:29:45 GMT
Etag: 90E57743F8F9BA5CA631B08EC03F095B993D16E1
X-OCSP-Responder-ID: rmdccaocsp32
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=407527
Expires: Tue, 17 Jul 2018 17:19:17 GMT
Date: Fri, 13 Jul 2018 00:07:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    589339143d14f1b541a9843779b69343
Sha1:   90e57743f8f9ba5ca631b08ec03f095b993d16e1
Sha256: fc776aba9e46bd9743a953817f07c022a0e157048606d3dbc4367ee4b538b0c9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 08 Jul 2018 22:51:21 GMT
Etag: A901264DF7AE7302AEE57E32687A649CBEBD7F17
X-OCSP-Responder-ID: rmdccaocsp19
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=254101
Expires: Sun, 15 Jul 2018 22:42:11 GMT
Date: Fri, 13 Jul 2018 00:07:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    1baeb059a7ca9162b0532fcb5d4042c8
Sha1:   a901264df7ae7302aee57e32687a649cbebd7f17
Sha256: 44653fab612c7f906e6f616a3ff659c5b6eba19ff0f908f6cef5c2ba662d6325
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.11
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 08 Jul 2018 22:51:21 GMT
Etag: A0D281AAC018C84B67C7DC52834E6CFE90BCF91B
X-OCSP-Responder-ID: rmdccaocsp31
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=254023
Expires: Sun, 15 Jul 2018 22:40:53 GMT
Date: Fri, 13 Jul 2018 00:07:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9a2663fc385d6a7750361832372ac408
Sha1:   a0d281aac018c84b67c7dc52834e6cfe90bcf91b
Sha256: 5f456e82897e2da8ae64e00ba4bf4b794b45b309857417058118d936ed5148bd
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.9.2 HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 14092
Connection: keep-alive
Last-Modified: Wed, 25 Apr 2018 04:31:28 GMT
Etag: "120d37-370c-56aa4be953119"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   14092
Md5:    a3a6b23cdbf1ac2316226ab23bc609ad
Sha1:   e5a6219afd67c7720580624a3d3047b5908aeecd
Sha256: 04b3e67d05f53167e48b314d1914722b31bb326362dbbbb6c94cf795fbbda19d
                                        
                                            GET /wp-content/themes/ad-medium-template2%28pc%29/favicon.ico HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 4286
Last-Modified: Wed, 25 Apr 2018 04:31:33 GMT
Connection: keep-alive
Etag: "5ae004a5-10be"
Expires: Fri, 20 Jul 2018 00:07:10 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   4286
Md5:    a88ff9cb2f24b2cdbee511c0c5be799d
Sha1:   c22879bc38cb4fd372b54daa16a98dd1a0677d74
Sha256: 4eae95008aa938ed23f022386d6b4255058e9ce8b1910f927778ba4d577548f8
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.2 HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 1606
Connection: keep-alive
Last-Modified: Wed, 25 Apr 2018 04:31:28 GMT
Etag: "120d36-646-56aa4be952d31"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   1606
Md5:    7d5d92ddcbe33c91355c20a1d35e7a95
Sha1:   1843e6911072990d2193279a299c9f70523ed553
Sha256: e291f67dc3e643bfde7604e48a75e17298a3868ebc0c4554b9e8c17355fd6115
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 10056
Connection: keep-alive
Last-Modified: Wed, 25 Apr 2018 04:31:38 GMT
Etag: "c3a6c-2748-56aa4bf327b77"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   10056
Md5:    7121994eec5320fbe6586463bf9651c2
Sha1:   90532aff6d4121954254cdf04994d834f7ec169b
Sha256: 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
                                        
                                            GET /wp-content/themes/ad-medium-template2%28pc%29/images/logo.png HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 17379
Last-Modified: Wed, 25 Apr 2018 04:31:33 GMT
Connection: keep-alive
Etag: "5ae004a5-43e3"
Expires: Fri, 20 Jul 2018 00:07:10 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 445 x 204, 8-bit/color RGBA, non-interlaced
Size:   17379
Md5:    826959ec8bf4497b373af0ee03113b6c
Sha1:   4712a4820fafcf8db9d9474434ea1d715993adab
Sha256: 4527377db6c581fac96af40697b7f03e8b9941ed84b717bcc42230b8d9399683
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=4.9.7 HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 1398
Connection: keep-alive
Last-Modified: Wed, 25 Apr 2018 04:31:38 GMT
Etag: "823a5-576-56aa4bf2c6ca8"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1398
Md5:    5a03f97cc479b9f5d7efdaccec31bc17
Sha1:   54518be91b7c5d4b139e032d23ffae568cc7e9fd
Sha256: dcb5e540e62fc85857254a1066afb6a7e8999279c6d4c583eef855d39f9289c0
                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/113-featured-200x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 9816
Last-Modified: Wed, 25 Apr 2018 04:31:36 GMT
Connection: keep-alive
Etag: "5ae004a8-2658"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   9816
Md5:    3d97480621c2e3f3f458f78848970515
Sha1:   8b47e57b536a362dd5cd8b1fbc56e1fd3ece9e83
Sha256: aeb8c4dd80ff2ce5df2f416da794f4868a5ea890e6996f2a0f37ae08553313c1
                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/116-featured-200x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 8298
Last-Modified: Wed, 25 Apr 2018 04:31:36 GMT
Connection: keep-alive
Etag: "5ae004a8-206a"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   8298
Md5:    a50d100178c521d03ef25fce8267605b
Sha1:   bad0c7254048f6d00491532c7833fb726258db82
Sha256: bbf41562fe2fbd5cb7fdf9f1de806fc7f900a5622c181e8498bbaec8b0ccc36d
                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/139-featured-200x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 12558
Last-Modified: Wed, 25 Apr 2018 04:31:36 GMT
Connection: keep-alive
Etag: "5ae004a8-310e"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   12558
Md5:    f191deeae85a537b76537309c07bb6a4
Sha1:   63c2e7a1c2133bdd4d046bcb7a92fd9face3fe29
Sha256: 0aa279794b6af927406929203b24e13a6a1d182d63127817bab9b91678af4fdc
                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/124-featured-200x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 7962
Last-Modified: Wed, 25 Apr 2018 04:31:36 GMT
Connection: keep-alive
Etag: "5ae004a8-1f1a"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7962
Md5:    85e0617d729b507ac18590094c48fac2
Sha1:   b9826c3936a83f89e3ac7b1cfb267118cc40c9ba
Sha256: 6e499b069c0f98b97ec848a64d0ec69f593d4f825f2af0dd03287bc6eb4e6359
                                        
                                            GET /t/299/904/a1299904.js HTTP/1.1 
Host: js.rush-member.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         153.254.173.30
HTTP/1.1 403 Forbidden
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   93
Md5:    181b0a6ac6bd475978ef013e0c605d4e
Sha1:   5a40d5ed221b41a4f3e09290dc467be25fdc5bad
Sha256: ec9b5828dfebdfd7fa8d5e26a4263fd98e04a60dd09f6662093d4420506d9443
                                        
                                            GET /wp-content/uploads/2018/06/IMG_0083-1024x768-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 7174
Last-Modified: Tue, 05 Jun 2018 08:07:19 GMT
Connection: keep-alive
Etag: "5b1644b7-1c06"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7174
Md5:    bbd5c95bde2a8b9978d2a3ccf9451623
Sha1:   c990463e306ddb18c8fc088c6956a17700279694
Sha256: c5ad4f00193f804c7e7a609c23fd470f4cc606e68c0c43a32db8859f2b5e7050
                                        
                                            GET /wp-content/uploads/2018/06/download-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 6938
Last-Modified: Tue, 05 Jun 2018 08:01:39 GMT
Connection: keep-alive
Etag: "5b164363-1b1a"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   6938
Md5:    f2cb3975b0d811cf2ed865c8ae568821
Sha1:   465853a141f24aed5ac82839a61814c8071f1119
Sha256: 7f6e7ba0da2e23f1be91bfe77efb615a988d9b2f228ee9def47a38fd7e50d224
                                        
                                            GET /wp-content/uploads/2018/06/images-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 4842
Last-Modified: Tue, 05 Jun 2018 07:59:39 GMT
Connection: keep-alive
Etag: "5b1642eb-12ea"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   4842
Md5:    bb4a84df4f277dd6cbcf764cff03aac7
Sha1:   1b62cad06a802493eb18008df6f14a99ef219f60
Sha256: 2af7c4ae61e765be5b96edcfa0b7c2044b65eacb2d0d2a948dbfe70f5e3c2e28
                                        
                                            GET /t/299/905/a1299905.js HTTP/1.1 
Host: js.rush-member.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         153.254.173.30
HTTP/1.1 403 Forbidden
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   93
Md5:    181b0a6ac6bd475978ef013e0c605d4e
Sha1:   5a40d5ed221b41a4f3e09290dc467be25fdc5bad
Sha256: ec9b5828dfebdfd7fa8d5e26a4263fd98e04a60dd09f6662093d4420506d9443
                                        
                                            GET /wp-content/uploads/2018/06/mig-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 8654
Last-Modified: Tue, 05 Jun 2018 07:49:39 GMT
Connection: keep-alive
Etag: "5b164093-21ce"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   8654
Md5:    6363500edf0b82e2efcdcd943214bba7
Sha1:   efc7ab72c8e0372a0102fef53855cc1d487360b5
Sha256: f32cd4f390433ed6377197c00c70ab244b93022b33dd4a413dd4355c5bd1eae1
                                        
                                            GET /t/281/950/a1281950.js HTTP/1.1 
Host: js.rush-member.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         153.254.173.30
HTTP/1.1 403 Forbidden
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   93
Md5:    181b0a6ac6bd475978ef013e0c605d4e
Sha1:   5a40d5ed221b41a4f3e09290dc467be25fdc5bad
Sha256: ec9b5828dfebdfd7fa8d5e26a4263fd98e04a60dd09f6662093d4420506d9443
                                        
                                            GET /wp-content/uploads/2018/06/727002.3a2afc-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 5822
Last-Modified: Tue, 05 Jun 2018 07:48:32 GMT
Connection: keep-alive
Etag: "5b164050-16be"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   5822
Md5:    75a92fbed54e168c97dae29ab318ecf7
Sha1:   98e6b023f5a904fca250815c064c4ba81bf25c4c
Sha256: 55105955c39f8bf9fd84d7dfc857a6ee827482e0c8b55bd380e4409b3a50af13
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:10 GMT
Content-Length: 97184
Connection: keep-alive
Last-Modified: Wed, 25 Apr 2018 04:31:38 GMT
Etag: "c3a72-17ba0-56aa4bf32f490"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   97184
Md5:    8610f03fe77640dee8c4cc924e060f12
Sha1:   076524186dbbdd4c41afbbd6b260d9e46a095811
Sha256: fc48d1d80ece71a79a7b39877f4104d49d3da6c3665cf6dc203000fb7df4447e
                                        
                                            GET /wp-content/uploads/2018/06/fc84b0c3-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 2366
Last-Modified: Tue, 05 Jun 2018 07:47:12 GMT
Connection: keep-alive
Etag: "5b164000-93e"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   2366
Md5:    9515101c6992911154244e685ad1b81b
Sha1:   a8067636469eb1989c21c5294bed44ce78c1b002
Sha256: 986fde84837cba69c1b88fe1c902ca66313d4721bc32bdb43fe7117b58088f12
                                        
                                            GET /wp-content/uploads/2018/06/1025-odaibahalloween-hashimotokanna-1-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 6088
Last-Modified: Tue, 05 Jun 2018 07:43:04 GMT
Connection: keep-alive
Etag: "5b163f08-17c8"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   6088
Md5:    515758300803e12dff30080b421281d6
Sha1:   64f5d6a6a53b9fb51fd7f5ad6fcd186c0680e3df
Sha256: f179a34b99480ba957a3be23d908fe4d8a4cb6c21d98c685969964b87f70c697
                                        
                                            GET /wp-content/uploads/2018/06/Catch-2-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 7072
Last-Modified: Tue, 05 Jun 2018 07:46:01 GMT
Connection: keep-alive
Etag: "5b163fb9-1ba0"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7072
Md5:    351bf09fe08b60f60f15eef2ff17a2a9
Sha1:   79b164bdbbef5c10a6f558cdb7653694cfe3b597
Sha256: 02322643a237eb1238fb217700d58e8f1414fa0e15d38dbfda62fc56d9b545d0
                                        
                                            GET /wp-content/uploads/2018/06/maxresdefault-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 7827
Last-Modified: Tue, 05 Jun 2018 07:44:28 GMT
Connection: keep-alive
Etag: "5b163f5c-1e93"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7827
Md5:    0493bedb095d20252e524e5f31c985e0
Sha1:   6a25136c397bb09b95fc8b73f65266737a33b5e4
Sha256: 98ce23062974ecd956a9c646de8ea664424315bee2b464b0eb92d01ce1f7de55
                                        
                                            GET /wp-content/uploads/2018/06/dsc0193-150x150.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:11 GMT
Content-Length: 9140
Last-Modified: Tue, 05 Jun 2018 07:42:11 GMT
Connection: keep-alive
Etag: "5b163ed3-23b4"
Expires: Fri, 20 Jul 2018 00:07:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   9140
Md5:    448c60d2e569db667962a81e03d60ec6
Sha1:   5367c98c4ae2c0c524f83fd6d56804ce2fd84e79
Sha256: bab1deef7fd5a678a1c6b0a914b8ce169c7a624ded35d42d86758338edd83c60
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 12 Jul 2018 23:22:10 GMT
Expires: Fri, 13 Jul 2018 01:22:10 GMT
Last-Modified: Fri, 18 May 2018 01:10:24 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14386
Cache-Control: public, max-age=7200
Age: 2702
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14386
Md5:    b3de885583a477d4e31568948d6bebd7
Sha1:   2ce8d853244dde551c41d5207d6f71c567bde8c6
Sha256: e1bb5aa555a0d875e2a67884ceaa0629e08994a8aabadc2fac5b6915793dbf75
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Jul 2018 00:07:13 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fcf1b779992a595f6b42174cb66a6841
Sha1:   2d97af80218a9b1fea39ea8fee6499f0384ccfff
Sha256: 297be678b8dc5e0c019f401fe239200c3ac5da7f7e3269613fe5b1f5385ca393
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Jul 2018 00:07:13 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    cd891a2fd55768ed53c1c2a290c24bff
Sha1:   ba5bf4ad0d9ea4bc47d26b51186fcb6cb5b53ec3
Sha256: aece412e565b264f5e38b68a3e262b103ecfe1b8a10c214136d5a49076b472d2
                                        
                                            GET /adsid/integrator.js?domain=fencerjiji.xyz HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Jul 2018 00:07:13 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /r/collect?v=1&_v=j68&a=1087621879&t=pageview&_s=1&dl=https%3A%2F%2Ffencerjiji.xyz%2F&ul=en-us&de=UTF-8&dt=%E6%99%82%E4%BA%8B%E3%83%8D%E3%82%BF%E3%83%95%E3%82%A7%E3%83%B3%E3%82%B5%E3%83%BC&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=IEBAAUQ~&jid=363964793&gjid=117549937&cid=861282280.1531440433&tid=UA-112679565-1&_gid=1491027259.1531440433&_r=1&gtm=u6t&z=1039711111 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Jul 2018 00:07:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /adsid/integrator.js?domain=fencerjiji.xyz HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Fri, 13 Jul 2018 00:07:13 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /gpt/pubads_impl_231.js HTTP/1.1 
Host: securepubads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Date: Fri, 13 Jul 2018 00:07:13 GMT
Expires: Fri, 13 Jul 2018 00:07:13 GMT
Cache-Control: private, immutable, max-age=31536000
Last-Modified: Fri, 06 Jul 2018 21:28:59 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   62603
Md5:    7e4b8ab9318697e251cb53a4b79a3002
Sha1:   c299b4328dfd102447d2acd41bdb460d3428b459
Sha256: 3e235d49514807ecc8e6934db1f080c2a968896cb18005ad71835c67d8dbde10
                                        
                                            GET /wp-content/themes/ad-medium-template2%28pc%29/images/bg.jpg HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/wp-content/themes/ad-medium-template2%28pc%29/style.css
Cookie: _ga=GA1.2.861282280.1531440433; _gid=GA1.2.1491027259.1531440433; _gat_gtag_UA_112679565_1=1

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:13 GMT
Content-Length: 5440
Last-Modified: Wed, 25 Apr 2018 04:31:33 GMT
Connection: keep-alive
Etag: "5ae004a5-1540"
Expires: Fri, 20 Jul 2018 00:07:13 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data
Size:   5440
Md5:    a0be07ab39977eecbba6c223a2898b3a
Sha1:   872e273fc7fde653f17e914b30e79d2ea2daf555
Sha256: 09dd7269b81689fd1c0fb048f471f02f3c1b4d2026249e894f9744b431f193e9
                                        
                                            GET /t/299/904/a1299904.js HTTP/1.1 
Host: js.rush-member.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         153.254.173.30
HTTP/1.1 403 Forbidden
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   93
Md5:    181b0a6ac6bd475978ef013e0c605d4e
Sha1:   5a40d5ed221b41a4f3e09290dc467be25fdc5bad
Sha256: ec9b5828dfebdfd7fa8d5e26a4263fd98e04a60dd09f6662093d4420506d9443
                                        
                                            GET /pub-config/r20160913/ca-pub-3976456274951860.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Fri, 13 Jul 2018 00:07:14 GMT
Expires: Fri, 13 Jul 2018 12:07:14 GMT
Cache-Control: public, max-age=43200
Last-Modified: Wed, 11 Jul 2018 21:33:45 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /pagead/js/r20180709/r20180604/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Fri, 13 Jul 2018 00:07:14 GMT
Expires: Fri, 13 Jul 2018 00:07:14 GMT
Cache-Control: private, max-age=1209600
Etag: 9433656437105135997
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   70336
Md5:    12fb2540298b203e6b4fcb45ab4f7b1c
Sha1:   37a7b1e10975b138361f8a439e14b60c3219da59
Sha256: 87fcfb32c0aec18709e838bf135cb4988ce10ab6bc608cbac6962816a56062a1
                                        
                                            GET /pagead/html/r20180709/r20180604/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 10 Jul 2018 18:31:27 GMT
Expires: Tue, 24 Jul 2018 18:31:27 GMT
Etag: 4726315756816018096
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6958
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 192947
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6958
Md5:    10e890f6add5412ceb6551110efc6a5a
Sha1:   2931281ad4cc4612fc4f51d293476b6447d24df0
Sha256: 7b9de2bf9579846089a25c5cc861e2de3e7b91f3867e528478a7badb2f6da1f0
                                        
                                            GET /pagead/js/r20180709/r20180604/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 12 Jul 2018 00:05:16 GMT
Expires: Thu, 26 Jul 2018 00:05:16 GMT
Etag: 12353362456419765373
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26250
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 86518
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26250
Md5:    3c7bd1bef16fe2907d77b536d3b74776
Sha1:   254f61d087d3bef116efd300a9b64ead2a5e057a
Sha256: 5b6ed6f69f01b208a23346c6c49cec2211bc9d41630165f63bad27a9e22cf33f
                                        
                                            GET /pagead/ads?client=ca-pub-3976456274951860&output=html&h=280&twa=1&slotname=9955687788&adk=2607616512&adf=807048394&w=312&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=312x280&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=280&rw=312&wgl=0&adsid=NT&dt=1531440434237&bpp=64&fdt=72&idt=440&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&correlator=3687382496268&frm=20&pv=2&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=828&ady=290&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=1&dtd=467 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Jul 2018 00:07:15 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Jul-2018 00:22:15 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Fri, 13 Jul 2018 00:07:15 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   381
Md5:    961981e6c6cb15f629382c85dd6266e2
Sha1:   23e40ebfbf7f2744afd88ed8dede4da8d3727256
Sha256: da437b59a3b0046592129e5fc69c4782ba589730657e747f184d0a85ff252f6a
                                        
                                            GET /pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440435149&bpp=10&fdt=54&idt=365&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280%2C259x600&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=2083&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=3&dtd=438 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Jul 2018 00:07:15 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Jul-2018 00:22:15 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Fri, 13 Jul 2018 00:07:15 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   383
Md5:    818a3cb0014813a7412d9ea62d176e6e
Sha1:   ea8b21eae10f6f63dd449d4c53ec8353e9f6b93b
Sha256: 417ae32ffec35514bf1f78528d6a3041c8401344760d005b05b10cc285b10568
                                        
                                            GET /pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Jul 2018 00:07:15 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Jul-2018 00:22:15 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Fri, 13 Jul 2018 00:07:15 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6480
Md5:    766ff5c43e17db698cc263585cd95027
Sha1:   18b57bc845c4b625f795fcb176f68821b0a3c13a
Sha256: bf627c6404507b0713fe647bf88eaa1225e1665e5fa470c989c47c26b9096341
                                        
                                            GET /pagead/adview?ai=CoTMBM-1HW-jsKIGp6gT58JigB8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM5NzY0NTYyNzQ5NTE4NjDIAQmpAtu-bsJPAIU-qAMBqgSdAU_QvAYDOasiOIQ5mLy6pS119NomOgbGBEXgtake8IzjOdua5I2rWP7LCTjt9RMKhxTFvP1sP-h6gEb3xky7ToE5ilg7mJMDr86QhBo_PSgZKKn5uJba8DqztYmYYCo6-DMV0-QjsQ96RNmlYryY1Jpxd4grzYLw7YD66hK6FFt88WM4oq1kVgfZ9agjZ81F7L7pWEAi2-uz65gUfQiABqzMprSS0qbyJaAGIagHpr4bqAfZyxuoB8_MG9gHANIIBwiA4YAQEAE&sigh=922ZogJ8PZA&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Jul 2018 00:07:15 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlnuS3GyfnCSSSphTYUb0CWGlOs2izpa6XjbVeHMNd-zBCB4KO6WoqUro7J; expires=Sun, 12-Jul-2020 00:07:15 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Expires: Fri, 13 Jul 2018 00:07:15 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=158696
Date: Fri, 13 Jul 2018 00:07:15 GMT
Etag: "5b47a8ff-1d7"
Expires: Sat, 14 Jul 2018 20:04:04 GMT
Last-Modified: Thu, 12 Jul 2018 19:16:15 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4c1e1b68d60a76617ade30e0e6ccb77f
Sha1:   99b7d95be261fa2ffc08a10e275b9a759e785c4b
Sha256: 1b418a9dd39027e425c147e7d497ae754e234c86836b2e21d8d41ceb2f0b47bc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=164752
Date: Fri, 13 Jul 2018 00:07:15 GMT
Etag: "5b479f8e-1d7"
Expires: Sat, 14 Jul 2018 21:25:59 GMT
Last-Modified: Thu, 12 Jul 2018 18:35:58 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c8c48330e862abd00636d4c0e6b7b359
Sha1:   ea7c5d49e27c73a1c2579bc2b7c4cf380b88d649
Sha256: 66de1c573f1d6a9fd7dcd0630f5f9f90114471a3ae2f03cdae2cf97e14f50293
                                        
                                            GET /t/299/905/a1299905.js HTTP/1.1 
Host: js.rush-member.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         153.254.173.30
HTTP/1.1 403 Forbidden
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   93
Md5:    181b0a6ac6bd475978ef013e0c605d4e
Sha1:   5a40d5ed221b41a4f3e09290dc467be25fdc5bad
Sha256: ec9b5828dfebdfd7fa8d5e26a4263fd98e04a60dd09f6662093d4420506d9443
                                        
                                            GET /adfscript/?bn=23124652;rtbwp=W0ftMwAKNmgKmpSBAAY4ea_n4rFbHaPCpkqRRw;rtbdata=R9Mdx73pibRXLLLV7WYmh6ADPMcTIO24ueX9p69tx8vbqJF4_6bfEXGSX0P4P2FHcxbmbM--l2WngpPplqFeX3GKpaUYrJ-jV2a9zkVvcEmWcnpnDlV3gCf8QNAgzq93t4ps1u4uW_YJfZcER1h2u3LKO70OaRj3YExKtp5I8pCMG571-RAP01mW2YwF9-FHNtLjTV2fk2zesP603w4fAAhD__nd7qgc5a8dQqvNPWxkdbOCESWHQgZVH_GjgPZ3SS3F3v8p3-v0Hyza077o7-FBboVeNKvP0;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CoTMBM-1HW-jsKIGp6gT58JigB8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM5NzY0NTYyNzQ5NTE4NjDIAQmpAtu-bsJPAIU-qAMBqgSdAU_QvAYDOasiOIQ5mLy6pS119NomOgbGBEXgtake8IzjOdua5I2rWP7LCTjt9RMKhxTFvP1sP-h6gEb3xky7ToE5ilg7mJMDr86QhBo_PSgZKKn5uJba8DqztYmYYCo6-DMV0-QjsQ96RNmlYryY1Jpxd4grzYLw7YD66hK6FFt88WM4oq1kVgfZ9agjZ81F7L7pWEAi2-uz65gUfQiABqzMprSS0qbyJaAGIagHpr4bqAfZyxuoB8_MG9gHANIIBwiA4YAQEAE&num=1&sig=AOD64_3vuK66oxzENg2FtkqSCHtsAHmwcw&client=ca-pub-3976456274951860&adurl= HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225

                                         
                                         37.157.4.39
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:16 GMT
Content-Length: 1678
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: C=1; expires=Mon, 13-Aug-2018 00:07:16 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   1678
Md5:    3e00904e27484337f9a6e91e2413e68a
Sha1:   320c7068f17d6e84a9760d1de964adc6741e1dd1
Sha256: ed739e847dbd3f0d867bbddf0d10163140edee2c857b248987b606a4627f4ee9
                                        
                                            GET /pagead/ads?client=ca-pub-3976456274951860&output=html&h=280&slotname=5473038361&adk=4215386827&adf=807048394&w=336&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=336x280&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1531440435933&bpp=6&fdt=31&idt=235&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280%2C259x600%2C259x600&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=208&ady=3058&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=4&dtd=263 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/
Cookie: IDE=AHWqTUlnuS3GyfnCSSSphTYUb0CWGlOs2izpa6XjbVeHMNd-zBCB4KO6WoqUro7J

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Jul 2018 00:07:16 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   384
Md5:    529c1c535c3d118c73b94dcfd46a0a0c
Sha1:   caaa7e9e7e633da51890290b7c517aaf58cd5546
Sha256: 9ae734225a40e69b43018b1f4c25c31e82dd8564235dce177368da81e064a17f
                                        
                                            GET /stoat/610/s1.adform.net/bootstrap.js HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225

                                         
                                         37.157.5.72
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Tue, 03 Jul 2018 08:03:04 GMT
Cache-Control: public, max-age=100000
Expires: Sat, 14 Jul 2018 03:50:21 GMT
X-Cache-Status: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14077
Md5:    7c3b89c535f4cb3bc19b9fae7d7c03bc
Sha1:   5bf6b1647d291cb26394a94e446247ec1fa3dce1
Sha256: 3d2a58cc4521b1a65893adfb5b85fcd58cd6eb965ba0314921ca9154a4c1f823
                                        
                                            GET /adfserve/?CC=1&bn=23124652;rtbwp=W0ftMwAKNmgKmpSBAAY4ea_n4rFbHaPCpkqRRw;rtbdata=R9Mdx73pibRXLLLV7WYmh6ADPMcTIO24ueX9p69tx8vbqJF4_6bfEXGSX0P4P2FHcxbmbM--l2WngpPplqFeX3GKpaUYrJ-jV2a9zkVvcEmWcnpnDlV3gCf8QNAgzq93t4ps1u4uW_YJfZcER1h2u3LKO70OaRj3YExKtp5I8pCMG571-RAP01mW2YwF9-FHNtLjTV2fk2zesP603w4fAAhD__nd7qgc5a8dQqvNPWxkdbOCESWHQgZVH_GjgPZ3SS3F3v8p3-v0Hyza077o7-FBboVeNKvP0;nofp=1;click=https://adclick.g.doubleclick.net/aclk?sa=L&ai=CoTMBM-1HW-jsKIGp6gT58JigB8XHn71NvtC4heUCwI23ARABIABgw9ykhZgYggEXY2EtcHViLTM5NzY0NTYyNzQ5NTE4NjDIAQmpAtu-bsJPAIU-qAMBqgSdAU_QvAYDOasiOIQ5mLy6pS119NomOgbGBEXgtake8IzjOdua5I2rWP7LCTjt9RMKhxTFvP1sP-h6gEb3xky7ToE5ilg7mJMDr86QhBo_PSgZKKn5uJba8DqztYmYYCo6-DMV0-QjsQ96RNmlYryY1Jpxd4grzYLw7YD66hK6FFt88WM4oq1kVgfZ9agjZ81F7L7pWEAi2-uz65gUfQiABqzMprSS0qbyJaAGIagHpr4bqAfZyxuoB8_MG9gHANIIBwiA4YAQEAE&num=1&sig=AOD64_3vuK66oxzENg2FtkqSCHtsAHmwcw&client=ca-pub-3976456274951860&adurl=;js=1;adfxid=1x;4183;set=en-US|en-US|1176X885|10.0452|150|600|24|8|3|7|1;fd=0|0&CREFURL=https%3a%2f%2fgoogleads.g.doubleclick.net%2fpagead%2fads%3fclient%3dca-pub-3976456274951860%26output%3dhtml%26h%3d600%26twa%3d1%26slotname%3d4515179913%26adk%3d78720088%26adf%3d807048394%26w%3d259%26fwrn%3d4%26fwrnh%3d100%26lmt%3d1531438419%26loeid%3d40993911%26guci%3d1.2.0.0.2.2.0%26format%3d259x600%26url%3dhttps%253A%252F%252Ffencerjiji.xyz%252F%26ea%3d0%26flash%3d10.0.45%26fwr%3d0%26rh%3d600%26 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225
Cookie: C=1

                                         
                                         37.157.4.39
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:16 GMT
Content-Length: 2966
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: cid=5184034661876331394,0,0,0,0; expires=Tue, 11-Sep-2018 00:07:16 GMT; path=/ uid=5184034661876331394; domain=adform.net; expires=Tue, 11-Sep-2018 00:07:16 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   2966
Md5:    97b9b8c97fa80a085e1251847f7366b5
Sha1:   1340bfee168dcf227c09257dd369579b30a653de
Sha256: 7823a8148f3a8406eb62ff20dfb98a72f856a0626a345c97d9abd18f5063475f
                                        
                                            GET /t/281/950/a1281950.js HTTP/1.1 
Host: js.rush-member.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/

                                         
                                         153.254.173.30
HTTP/1.1 403 Forbidden
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   93
Md5:    181b0a6ac6bd475978ef013e0c605d4e
Sha1:   5a40d5ed221b41a4f3e09290dc467be25fdc5bad
Sha256: ec9b5828dfebdfd7fa8d5e26a4263fd98e04a60dd09f6662093d4420506d9443
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Jul 2018 00:07:16 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    814671e1dda70fbbfe3e01fbd9ac96b7
Sha1:   0cf15383302010a92ee1cef85e9a8d3e9bb2f2a1
Sha256: 123aa87e9c843ab865e26e0c1a4d7bad0e86e4d9d0b42ddc5a6995dbf950c475
                                        
                                            GET /pagead/js/r20180709/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 09 Jul 2018 23:10:30 GMT
Expires: Mon, 23 Jul 2018 23:10:30 GMT
Etag: 5903713065555871374
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1431
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 262606
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1431
Md5:    4263ddf4355bcae9ebcf7ec597797147
Sha1:   a676633bf7c22fcac9fc4bc1880d914e90e084c1
Sha256: 88f47af3515103276c32539d70d1e5b216bf488968928c3b891c53ff49215151
                                        
                                            GET /pagead/js/r20180709/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 12 Jul 2018 10:03:07 GMT
Expires: Thu, 26 Jul 2018 10:03:07 GMT
Etag: 9944366705485990115
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26035
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 50649
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26035
Md5:    b047b6ad6fc5a8a19b683838c05fc49b
Sha1:   fbb722897ddbe0a46a52bfc7e8b7b671c0d6b0a0
Sha256: 3637cf93d4fca836d1e16f280c6a4e1f5517586c45df5e1c142f3c4e69d0606f
                                        
                                            GET /stoat/610/s1.adform.net/load/v/0.0.155/e/0gBBwAA/i/8IG-xAAAACAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225
Cookie: uid=5184034661876331394

                                         
                                         37.157.5.72
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Tue, 03 Jul 2018 08:03:04 GMT
Cache-Control: public, max-age=100000
Expires: Sat, 14 Jul 2018 03:53:56 GMT
X-Cache-Status: EXPIRED
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35426
Md5:    ec78fc9f2375094a9280fff588687ba0
Sha1:   d9834615c768dc68cb8458cebc62f44422d9651c
Sha256: e7550524b5ae213f795432b10f8e40cf4461cb5bd0ecde800bbfcf7e8568f75e
                                        
                                            GET /pagead/ads?client=ca-pub-3976456274951860&output=html&adk=1812271804&adf=807048394&lmt=1531438419&loeid=40993911&plat=1%3A1081352%2C2%3A1081352%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C26%3A32768%2C30%3A1048576&guci=1.2.0.0.2.2.0&format=0x0&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&pra=5&wgl=0&adsid=NT&dt=1531440435933&bpp=636&fdt=639&idt=893&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280%2C259x600%2C259x600%2C336x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=6&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cr%7C&abl=CS&ppjl=f&fu=1040&bc=1&ifi=4&dtd=919 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/
Cookie: IDE=AHWqTUlnuS3GyfnCSSSphTYUb0CWGlOs2izpa6XjbVeHMNd-zBCB4KO6WoqUro7J

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Fri, 13 Jul 2018 00:07:17 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   467
Md5:    8f3284b85e9910b6121d08d7698f164a
Sha1:   53ec017714e7f58f4ae659dc9b8b490ce70abf61
Sha256: 0da4d28a46e9040006ebc0ea40739d7b3ef729fd8064aad108149ca99b833530
                                        
                                            GET /activeview?avi=BOk8xM-1HW-jsKIGp6gT58JigBwC-0LiF5QIAABABOAHIAQmgBiHSCAcIgOGAEBAB&r=pv&id=osdim&ti=1&uc=0&tgt=nf&cl=0&v=r20180709 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Fri, 13 Jul 2018 00:07:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /csimpr/?bn=23124652&csi=9OLEYtbfJs4I0ZbPx1UVLzB4yEXYfZItjKZJ4tUsQDvnVDmP_egaq-kXxPdTkxyH0 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225
Cookie: C=1; cid=5184034661876331394,0,0,0,0; uid=5184034661876331394

                                         
                                         37.157.4.39
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /Banners/25238773/25238773.jpg?bv=2 HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225
Cookie: uid=5184034661876331394

                                         
                                         37.157.5.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:17 GMT
Content-Length: 71166
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 06 Jun 2018 11:03:28 GMT
Etag: "5b17bf80-115fe"
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=604800
Strict-Transport-Security: max-age=0
X-Cache-Status: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   71166
Md5:    cddb26a17daa874098b95df352a9d4a0
Sha1:   c45c9f49f5958d5054584a8ad1cd7ba8cdc917d1
Sha256: 9e337d7f3a228f911eb95bcfdc864e88e6f400a29ac0c7c8142ff0c8d549fdbc
                                        
                                            GET /wp-content/plugins/contact-form-7/images/ajax-loader.gif HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fencerjiji.xyz/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.2
Cookie: _ga=GA1.2.861282280.1531440433; _gid=GA1.2.1491027259.1531440433; _gat_gtag_UA_112679565_1=1

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:17 GMT
Content-Length: 847
Last-Modified: Wed, 25 Apr 2018 04:31:28 GMT
Connection: keep-alive
Etag: "5ae004a0-34f"
Expires: Fri, 20 Jul 2018 00:07:17 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   847
Md5:    af962b37779a443a77ab836b3b7a93f5
Sha1:   cad7feb11183c71b87470e11e022b16ecdcc7ac9
Sha256: 65b72e15d975f67fbd1cb126d57772c06c21fa016e5651b6ce213b26ce0e6877
                                        
                                            GET /pagead/js/r20180709/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 12 Jul 2018 21:43:03 GMT
Expires: Thu, 26 Jul 2018 21:43:03 GMT
Etag: 12203368232420338792
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3669
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 8654
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3669
Md5:    32a5ef33f8102ba0e7aed277ab63454a
Sha1:   1b97e6087ca5baed3d14d9cbe26ecc3fdc325722
Sha256: c1ddfbc4e4eddb3ea522ccb72a58e956033ecce01b4b6195f5da114d73e58edf
                                        
                                            GET /index.php?rest_route=/contact-form-7/v1/contact-forms/101/refill HTTP/1.1 
Host: fencerjiji.xyz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: https://fencerjiji.xyz/
Cookie: _ga=GA1.2.861282280.1531440433; _gid=GA1.2.1491027259.1531440433; _gat_gtag_UA_112679565_1=1

                                         
                                         163.44.171.215
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:17 GMT
Content-Length: 2
Connection: keep-alive
X-Powered-By: PHP/7.0.12
X-Robots-Tag: noindex
Link: <https://fencerjiji.xyz/index.php?rest_route=/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages
Access-Control-Allow-Headers: Authorization, Content-Type
Allow: GET


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    d751713988987e9331980363e24189ce
Sha1:   97d170e1550eee4afc0af065b78cda302a97674c
Sha256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        
                                            GET /serving/unload/?version=15&unload=5184034661876331394@@23124652,943925824437131641,0|0|0|0|0|0|0|0|0||0|1|1|5b47ed33000a36680a9a948174063879_1|||1|0|0|| HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225
Cookie: C=1; cid=5184034661876331394,0,0,0,0; uid=5184034661876331394

                                         
                                         37.157.4.39
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /serving/unload/?version=15&unload=5184034661876331394@@23124652,943925824437131641,0|0|0|0|0|0|0|0|0||0|1|1|5b47ed33000a36680a9a948174063879_1|||1|0|0|| HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3976456274951860&output=html&h=600&twa=1&slotname=4515179913&adk=78720088&adf=807048394&w=259&fwrn=4&fwrnh=100&lmt=1531438419&loeid=40993911&guci=1.2.0.0.2.2.0&format=259x600&url=https%3A%2F%2Ffencerjiji.xyz%2F&ea=0&flash=10.0.45&fwr=0&rh=600&rw=259&wgl=0&adsid=NT&dt=1531440434916&bpp=32&fdt=38&idt=200&shv=r20180709&cbv=r20180604&saldr=aa&abxe=1&prev_fmts=312x280&correlator=3687382496268&frm=20&pv=1&ga_vid=861282280.1531440433&ga_sid=1531440435&ga_hid=1087621879&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=900&ady=1468&biw=1159&bih=737&scr_x=0&scr_y=0&eid=368226401%2C40993901%2C21061122&oid=3&rx=0&eae=4&fc=1808&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=f&pfx=0&fu=1040&bc=1&ifi=2&dtd=225
Cookie: C=1; cid=5184034661876331394,0,0,0,0; uid=5184034661876331394

                                         
                                         37.157.4.39
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 13 Jul 2018 00:07:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015