Report - 3865dtzyx.saexhibits.com/zhishi

Report Overview

Submitted URL
3865dtzyx.saexhibits.com/zhishi
IP
104.21.13.71
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-04 09:22:06
Access
public
Website Title
14 games casino entretenimento -
Final URL
3865dtzyx.saexhibits.com/zhishi
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ovistore.net	unknown	2024-03-27	2015-05-10	2023-07-27	7.0 kB	723 kB	188.114.97.1
cdn.http	unknown	unknown	No data	No data	453 B	0 B	0.0.0.0
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-03	431 B	99 kB	142.250.74.72
3865dtzyx.saexhibits.com	unknown	unknown	No data	No data	6.2 kB	203 kB	172.67.155.12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	cdn.http	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	3865dtzyx.saexhibits.com/template/news/005/static/js/jquery.min.js	86 kB	2023-03-07	2024-05-18
Pretty URL 3865dtzyx.saexhibits.com/template/news/005/static/js/jquery.min.js IP 172.67.155.12 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-18 07:03:19 Times Seen393744 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	3865dtzyx.saexhibits.com/template/news/005/static/js/js.js	24 kB	2023-10-29	2024-05-04
Pretty URL 3865dtzyx.saexhibits.com/template/news/005/static/js/js.js IP 172.67.155.12 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-29 05:39:47 Last Seen2024-05-04 11:22:12 Times Seen6 Hash 0c619c09d194708aa1be2de7b5adc51e c3b191f6620a5ac76f093d16ed8fb8d4791a4fd1 2700238e232f26e9e28125c158e347e2e1755ffa8c0501251a55176a07e299c8 Loading...

	3865dtzyx.saexhibits.com/khuyen.js	884 B	2024-05-04	2024-05-04
Pretty URL 3865dtzyx.saexhibits.com/khuyen.js IP 172.67.155.12 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 05:17:33 Last Seen2024-05-04 11:22:12 Times Seen2 Hash d043f4ca865782de7f5401ba478638b2 642c7cf09b9a236ad001b521c1364160982a9627 7cc761a4c7e690a71bd41b7ce15c05e637f76ea7b04132685ad7ceeb7f1de8bf Loading...

	www.googletagmanager.com/gtag/js?id=G-CM25FDLKCD	292 kB	2024-05-04	2024-05-04
Pretty URL www.googletagmanager.com/gtag/js?id=G-CM25FDLKCD IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 11:22:12 Last Seen2024-05-04 11:22:12 Times Seen2 Hash 65408d70878278c1afd21001b5fabe07 92964478e79c7b6279aa219db96183e6ed254299 e8946ef707e4c02d0737d8185f462b162e0269a59cc50713c556424ec93976c6 Loading...

	3865dtzyx.saexhibits.com/zhishi	157 B	2023-10-29	2024-05-04
Pretty URL 3865dtzyx.saexhibits.com/zhishi IP 172.67.155.12 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-29 05:39:47 Last Seen2024-05-04 11:22:12 Times Seen2 Hash 8c5c77ed1d2c218ac48f0c5138be5f98 0f8cb83d83ab4563b70bdc10e85ad4b56f2f9dae 83a3c3da7bf8d225d1c1e305d35658ffbb1e7d494dae9ecd991f2e68b8c76cec Loading...

HTTP Transactions (29)

URL IP Response Size

www.googletagmanager.com/gtag/js?id=G-CM25FDLKCD

142.250.74.72

200 OK

99 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-CM25FDLKCD
IP
142.250.74.72:443
ASN
#15169 GOOGLE

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5955)
Size
99 kB (98835 bytes)
Hash
65408d70878278c1afd21001b5fabe07
92964478e79c7b6279aa219db96183e6ed254299
e8946ef707e4c02d0737d8185f462b162e0269a59cc50713c556424ec93976c6

HTTP Headers

GET /gtag/js?id=G-CM25FDLKCD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 09:21:40 GMT
expires: Sat, 04 May 2024 09:21:40 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 98835
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

3865dtzyx.saexhibits.com/template/news/005/static/picture/logo-new.webp

172.67.155.12

200 OK

1.2 kB

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/picture/logo-new.webp
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
RIFF (little-endian) data, Web/P image
Size
1.2 kB (1244 bytes)
Hash
15e40da6802e6b5bd26238e9c7a5ef16
a644d7d6d381926114e762a242ec5c84d8ac8a73
25a8b086ca067869d49f280da351024b2c147255ca58987c05a3cd34354bb124

HTTP Headers

GET /template/news/005/static/picture/logo-new.webp HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/webp
content-length: 1244
last-modified: Tue, 22 Aug 2023 02:41:13 GMT
etag: "64e42049-4dc"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3mQLXAYlokdEek3%2FA0hjOnNOjKfueLqw57U0%2B5dLJ6xoQS2QNugescoJijPRwmul6kcsZy2POqcedFve8B3pJENP3qN9XkpdTNWq1wgjwiHYMJ4KEjXap1QcOxZOS0sOHDw9bmCo3R3FMuY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c026dc156b4-OSL
alt-svc: h3=":443"; ma=86400

3865dtzyx.saexhibits.com/template/news/005/static/picture/com.king.candycrushsaga-icon.webp

172.67.155.12

200 OK

2.2 kB

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/picture/com.king.candycrushsaga-icon.webp
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp
Size
2.2 kB (2200 bytes)
Hash
344538ec3c43cb37069d1d0d0855611a
7846d84327c313a47e520f7523c44d5b94fb14be
947fd66f7a8f300719f736700c9aab567126d8a3340f7eea9bf4de751f62ac32

HTTP Headers

GET /template/news/005/static/picture/com.king.candycrushsaga-icon.webp HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/webp
content-length: 2200
last-modified: Tue, 22 Aug 2023 02:43:21 GMT
etag: "64e420c9-898"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pj9o4t7IXk4Y9vkaBBDfmsrIwhm1CE10La9GV8p7bV83pQbOA6AMepGaQYbz24uUUcN6XAGM2nWWy5gIQ7PW%2BflbqDzCzWEa7VQP95PU0Qa56XvFKkCQY3aRoA1rWH997%2BvA3POna9no0k0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c026dc656b4-OSL
alt-svc: h3=":443"; ma=86400

3865dtzyx.saexhibits.com/image/icon_close_2x.png

172.67.155.12

200 OK

2.0 kB

URL GET HTTP/3
3865dtzyx.saexhibits.com/image/icon_close_2x.png
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
PNG image data, 128 x 132, 4-bit colormap, non-interlaced
Size
2.0 kB (1985 bytes)
Hash
e51f0c2c488234041c0f240d4cfce4ea
1ba55758c89ef998630e2a3ab601c7d318c6875d
0415c1594203cee0f86555464a21d31ed704178d1f8546cd819e856746d40445

HTTP Headers

GET /image/icon_close_2x.png HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/png
content-length: 1985
last-modified: Sat, 13 Apr 2024 13:44:26 GMT
etag: "661a8c3a-7c1"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bc0JyWyTxp8zdO%2FpRoUfVTuEdEiz6TcFkj3gznxSNvbPMN7%2Fe1k2B746vp1R075eIkuApW21iPpyxu2Z0tdajS5eVL8tToEn4bXgFmJ%2B4uRPofOKWgQWZk2vK1JPLznMvPV5NMglt0xZF4g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c027dd156b4-OSL
alt-svc: h3=":443"; ma=86400

ovistore.net/data/games/images/images_games_394.jpg

188.114.97.1

200 OK

35 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_394.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
PNG image data, 338 x 206, 8-bit colormap, non-interlaced
Size
35 kB (34932 bytes)
Hash
a3edef508170b1c8c47df4ffffb3a6de
78c5dbcacb549d7888867072d4f2f57b3b1c8ded
b6b37c69091058ec68ca1d1ff3f5fdcb5b36b8268c1c9f1515544c5aa814372b

HTTP Headers

GET /data/games/images/images_games_394.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/jpeg
content-length: 34932
last-modified: Fri, 08 Dec 2023 02:09:46 GMT
etag: "65727aea-8874"
expires: Mon, 03 Jun 2024 07:23:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 7074
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6aHOb%2BC50hL0gW13LFefTFtsoDGHIPlcq%2B8nlBeCm6Z0ZCqL4wfSoBTIhuWP7ve4ZXGLglT%2FVUvPzXpiOaFLd7AoEJdftCkdsBhf84gzg5LGygy6YPPrYIyomc1Lcs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c057dfa568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games156.webp

188.114.97.1

200 OK

20 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games156.webp
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 242x242, Scaling: [none]x[none], YUV color, decoders should clamp
Size
20 kB (19682 bytes)
Hash
8880202448170a1fd80b9061fa3a9603
b2584d4e2cf051feceea180df98c6e26d89251d3
2c9b0c7b183cf93552ba363780c59fb8f8c2ef52807aea1192970af908863154

HTTP Headers

GET /data/games/images/images_games156.webp HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/webp
content-length: 19682
last-modified: Sat, 13 Aug 2022 15:31:04 GMT
etag: "62f7c3b8-4ce2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1777
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aoln%2B9D2Z3M%2ByTZNBhkxibnNLhUFo30xWh9nB0Jrkj%2BAsc7IZE1bHMpkK3y%2BnJD3aHgRE1d36oX9UydrQDdC5fQVsBCxkQDUmjsuV3LjxjbUpeFNGRxyl%2BQcWSCA1%2BU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c058e01568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_385.jpg

188.114.97.1

200 OK

38 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_385.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 500x300, components 3
Size
38 kB (37452 bytes)
Hash
1c2bbc4c889ce05be7999f349fc0e691
06badcd131259db249aee500f0173f4a356d168d
7c83a94d6bf8e42c49ac37a6d1c9f24d5a9976a5debac8204fcbc9e965f8f6dd

HTTP Headers

GET /data/games/images/images_games_385.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/jpeg
content-length: 37452
last-modified: Fri, 08 Dec 2023 02:09:46 GMT
etag: "65727aea-924c"
expires: Mon, 03 Jun 2024 07:58:10 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 5010
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uyV4O2j%2BpJq96b1IEQRPJ9JJypcoHxWnEUYJPF0KPr9i4Jye1ZaP5WdhiFyb9jqsPMV5rcJ5Y7glOjaw7YG%2BD5MpGNpKrI1VMDUObozINs37v5CPP8Wu%2BYLTz4sW0s0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c058e0b568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_113.jpg

188.114.97.1

200 OK

70 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_113.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
PNG image data, 500 x 300, 8-bit colormap, non-interlaced
Size
70 kB (70242 bytes)
Hash
30d589e47576e2b57fcbd11ea38d8431
b7cda571869a2f4880521929f091b78d04745fac
2f6b93736a262136ae492e8cf3cac87a6b19bf6c89e5b4cbdfe837d8f15782d4

HTTP Headers

GET /data/games/images/images_games_113.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/jpeg
content-length: 70242
last-modified: Fri, 08 Dec 2023 02:09:46 GMT
etag: "65727aea-11262"
expires: Fri, 31 May 2024 18:05:42 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 227758
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xfMu%2FMQIdTgpP%2Fk9l%2F8r94Y%2F9CzeVojundyz%2FnxXhDh0TvJzigdjSjHFzi7R5IVsX3qhWyhIaGO4MWgAnmE%2BhYEVSJworcytgJzcIqthlf5uxh%2BoB%2Fcpn1kNxI8XjVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c059e22568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_192.jpg

188.114.97.1

200 OK

60 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_192.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
JPEG image data, baseline, precision 8, 287x200, components 3
Size
60 kB (60419 bytes)
Hash
a64cdffe32caa80368a33ef228cd8ac4
d45da084662cd77d02f8b92ffe7abeb24c956dba
492f10ce8d825d7724505a18b9510174e88affb40ab5243d4b6ac98c6c23f75c

HTTP Headers

GET /data/games/images/images_games_192.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/jpeg
content-length: 60419
last-modified: Fri, 08 Dec 2023 01:50:44 GMT
etag: "65727674-ec03"
expires: Mon, 03 Jun 2024 05:37:33 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 13447
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qmKnmH%2FMAwexlWEAyx1rHPt%2FBkhVkD1g6Y2xYYi2h2PfQBIKg083nwfSB%2FruEyv97%2FLEw2ElAL%2BngBfNlNvk6vKj1qs8Bu8FYnp0Iei6PFL6gUohDyeEa1H%2FB36aaQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ae2b568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

3865dtzyx.saexhibits.com/template/news/005/static/image/bg1.jpg

172.67.155.12

200 OK

1.5 kB

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/image/bg1.jpg
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 188x188, components 3
Size
1.5 kB (1503 bytes)
Hash
75ad65075e773c7580f0751ac9c16151
3855390ead783e1ae009e6b7da254ab9b52b4c6a
b4aadff95b198ce34775551854c6bb7f8005696bef536e78d9afb7a31440598d

HTTP Headers

GET /template/news/005/static/image/bg1.jpg HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/template/news/005/static/css/style.css
Cookie: _ga_CM25FDLKCD=GS1.1.1714814500.1.0.1714814500.0.0.0; _ga=GA1.1.1926123250.1714814501
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/jpeg
content-length: 1503
last-modified: Tue, 22 Aug 2023 02:41:23 GMT
etag: "64e42053-5df"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=duwF0gA3E0uG4uT19Hof1Iy470XAMfWxBX9Nk4HyEPPocc%2Bg95NTugF6cafwWPh1J6ADCndTv1FNbY8kbz%2F3C0lEI1CL2kDeI7sF7sV8ElzjuuabjB2ObeZq5dLeCDvfOG54%2FhGB4KyEAxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c04f8aa56b4-OSL
alt-svc: h3=":443"; ma=86400

3865dtzyx.saexhibits.com/template/news/005/static/image/download_bg.png

172.67.155.12

200 OK

505 B

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/image/download_bg.png
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
PNG image data, 98 x 39, 8-bit/color RGBA, non-interlaced
Size
505 B (505 bytes)
Hash
45b3bf6f132d6f4af7df40ae1813794d
e7652a23888207a728773dbfb7f97617cde5ceaa
a61667f2ab873bd937471e4d5c01136a7d74acdf29a3d07096b5f47c66b9d845

HTTP Headers

GET /template/news/005/static/image/download_bg.png HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/template/news/005/static/css/style.css
Cookie: _ga_CM25FDLKCD=GS1.1.1714814500.1.0.1714814500.0.0.0; _ga=GA1.1.1926123250.1714814501
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/png
content-length: 505
last-modified: Tue, 22 Aug 2023 02:41:25 GMT
etag: "64e42055-1f9"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VZjYsK7gtUJaSdaG1hSxGgTT4vBieJOiOQMGTCd28oJczq2B%2FEmeOFZVapyMSEl44vuTDDff7fVgjECE3w9elciA7LarWsdF3ClVxq4c6NFBd03Mq5AIE13C6iKmEmPl8pCHy6wZtvpnFmI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c0508bd56b4-OSL
alt-svc: h3=":443"; ma=86400

3865dtzyx.saexhibits.com/template/news/005/static/image/bg-stripe.png

172.67.155.12

200 OK

881 B

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/image/bg-stripe.png
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
PNG image data, 60 x 49, 8-bit/color RGBA, non-interlaced
Size
881 B (881 bytes)
Hash
015b431e7e20535d209e9b06e5228037
c4ae380478232650eb8043d3a3be840c18a7aa99
a46ed694884e91c5a14f1e12d8cdeae49d20a8de9a6a7027fcb2803f9b64bfe2

HTTP Headers

GET /template/news/005/static/image/bg-stripe.png HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/template/news/005/static/css/style.css
Cookie: _ga_CM25FDLKCD=GS1.1.1714814500.1.0.1714814500.0.0.0; _ga=GA1.1.1926123250.1714814501
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/png
content-length: 881
last-modified: Tue, 22 Aug 2023 02:41:24 GMT
etag: "64e42054-371"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eA5uZuNFoCX%2FVINh9ZDSIlLmLOQv5xQ%2BaZbt%2B1SsOrnJz%2FkUFfFMluxQcB4qi2aJ3Nm38nEQpQ%2BAbW9wMI3ETtjsuxw926wujwxQxRt7RfRTIh%2BmzcfnzWbIMS6V%2BDKMvbJFjO0RxOgs6tU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c0518c156b4-OSL
alt-svc: h3=":443"; ma=86400

ovistore.net/data/games/images/images_games_190.jpg

188.114.97.1

200 OK

129 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_190.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
PNG image data, 287 x 200, 8-bit/color RGB, non-interlaced
Size
129 kB (128774 bytes)
Hash
67cf9d13f86d65df9fa6f590954339bd
f5987ffc4575e45fbadf51033a29e3af97cab3f6
25ed1cb1c1cd0f43ef5530a5fbed49428b350634d35b39a487bb0c43ded12a82

HTTP Headers

GET /data/games/images/images_games_190.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: image/jpeg
content-length: 128774
last-modified: Fri, 08 Dec 2023 01:50:44 GMT
etag: "65727674-1f706"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2T9fumVlz6yIJmhfP3nt0oI0gI%2BtdVMW8vjj4IG60yLo0BH2NMMrmB%2ByoZxzLTk2kdUh8O45885ZKmIcRATeVS0rvDCdlNuwb1PLc7fZwNhcksjM1OBvPkj%2FwEbGVy8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c02fb95568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

3865dtzyx.saexhibits.com/template/news/005/static/picture/4.5.webp

172.67.155.12

200 OK

782 B

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/picture/4.5.webp
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
RIFF (little-endian) data, Web/P image
Size
782 B (782 bytes)
Hash
a2dbafb57044627e720caa450459cc38
954d981069ef9505810796194042272dca7a97bb
a944afb14efd23e256617d2b98e3f7511c8f4fdcd127ea5add566ea768c2987d

HTTP Headers

GET /template/news/005/static/picture/4.5.webp HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Cookie: _ga_CM25FDLKCD=GS1.1.1714814500.1.0.1714814500.0.0.0; _ga=GA1.1.1926123250.1714814501
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/webp
content-length: 782
last-modified: Tue, 22 Aug 2023 02:43:22 GMT
etag: "64e420ca-30e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1yq%2BKTBwEg6sQbw%2FlDhTDFwSlgWPnorjm%2FfNapw6Bdvge0cV30cKGgHjZ0VwUBvzDsVdBYKxKGM21AlFtHRysJM5LWeVlzCB1lS7Z3IaKU6j%2FgyBgo6%2B8YtCuOhgI%2FdkgV17NoHYlTcAiB4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05792356b4-OSL
alt-svc: h3=":443"; ma=86400

ovistore.net/data/games/images/images_games47.webp

188.114.97.1

200 OK

12 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games47.webp
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 242x242, Scaling: [none]x[none], YUV color, decoders should clamp
Size
12 kB (11464 bytes)
Hash
5706ef33719a49454ea83e3124b69d6f
4609577807ac5de74b63dd36b508d87a99ba4804
0afa35d0df931a2f4e7dc0ad4bdbbeb5002d52addba981d58969e74fb5e2b57b

HTTP Headers

GET /data/games/images/images_games47.webp HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/webp
content-length: 11464
last-modified: Sat, 13 Aug 2022 15:36:50 GMT
etag: "62f7c512-2cc8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hHcCCKW%2B9ujCnyz%2BM0WdFHQchfThAQQ%2Fh23Y1fsUeCP74qbHMAFPwLJsUAnPax1gF%2FsBQDpS7FLPeQY3bFTqlY6QchwXmTAh8CkAN1MhSeGz32jd1wx4gDv8HZtrGHc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c058e10568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_290.jpg

188.114.97.1

200 OK

29 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_290.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x300, components 3
Size
29 kB (28659 bytes)
Hash
a8376168a8957a88d5dda4e998be77be
e25d4b7d0b26cdeec592de3de1b11386013f7703
ee00cfcdae7ec2c7ecbf8497ed44ccb592ed4987c6f814232bedf689602b00b7

HTTP Headers

GET /data/games/images/images_games_290.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/jpeg
content-length: 28659
last-modified: Fri, 08 Dec 2023 02:09:46 GMT
etag: "65727aea-6ff3"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nWSIyNgDNzCOMfUMNJDy5Eo%2BZX8MI%2FY6FrSmX5WqFHtl0r707JSoNPGscqyIP1M9laVbL77NnayT9fT9gqoSLYq36rr87J810heknM4XRCeKQBG9wp44vbyCzzXho0A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ae2e568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games349.webp

188.114.97.1

200 OK

32 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games349.webp
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 485x485, Scaling: [none]x[none], YUV color, decoders should clamp
Size
32 kB (31808 bytes)
Hash
96ff60ed1af45db655c16ca815db5d60
923cd549fa1c1ae91f4363af7c137969c3a690fb
9ddda45ca0b9571620f335a3de3f603806e836efbc41938d7afba50b19c9dc25

HTTP Headers

GET /data/games/images/images_games349.webp HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/webp
content-length: 31808
last-modified: Sat, 13 Aug 2022 15:36:50 GMT
etag: "62f7c512-7c40"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kw%2B%2FPnqMX%2FYPoQ%2FHT5%2FdMw2StkhyADswOb1sDZ4JDY7QKcFYmz5QfkhlNpyQr7XwOj2C80dIE2Q9gBsMoGkT%2FjOvjI%2BqSixSthVM7QIHDzKYCLbXf0pm6C0faBe05Xg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ae34568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games207.webp

188.114.97.1

200 OK

11 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games207.webp
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 242x242, Scaling: [none]x[none], YUV color, decoders should clamp
Size
11 kB (11372 bytes)
Hash
5d059ecdb60b58235704c9d0e77bf3ed
7a21c9539933cc3c2b3631ffc65986f3b10a003e
3796d6fe96dcbbc393d5b8002e27616532c7242596269f9977195dbca3734c6b

HTTP Headers

GET /data/games/images/images_games207.webp HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/webp
content-length: 11372
last-modified: Sat, 13 Aug 2022 15:31:04 GMT
etag: "62f7c3b8-2c6c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wzTfsebN5woNXp%2BrHfpofKj8qINwf5cSqVH%2FXgvCsAbV40q78hYH5Ku9GiBz9GJiYRAglER5x13dhs8J%2BWLcavugaGQhnkDuF1UyZuPhQeuDJkZSmg%2F1BOsszZzdCcE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ee7b568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_62.jpg

188.114.97.1

200 OK

25 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_62.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 500x300, components 3
Size
25 kB (25165 bytes)
Hash
37ba30fad87665a4e6fc481a270de200
935a7f873e2855fec47e869d9a658afcfa22b92a
c949a4d92aebc8475bca2cd3d3bd0eec6db47ec98fc1a9d39da5e34c8f7c96a8

HTTP Headers

GET /data/games/images/images_games_62.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/jpeg
content-length: 25165
last-modified: Fri, 08 Dec 2023 02:09:46 GMT
etag: "65727aea-624d"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NdM4uDAJ6CI86WXppS0jviTJXKZz2f3IxMEE%2FyIUm%2BSKpVPklqZOlIUWZ3T%2B3dd62C%2Fg3eV8z7cFcNVEpaKV%2BUypVsBsxSSXuQvXUW2jegAGkF2zsyWJ9SjbfnBHXek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ae2f568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_32.jpg

188.114.97.1

200 OK

65 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_32.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
PNG image data, 500 x 300, 8-bit colormap, non-interlaced
Size
65 kB (64759 bytes)
Hash
0eed3394e51e786c4e6e10a7a0cc978d
b495907624612d2c232a179bd035b3260ee95c6a
0b1c7b3787c699400a3e026e1dbeda5ce251d78cf36296034490d94dba1279e7

HTTP Headers

GET /data/games/images/images_games_32.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/jpeg
content-length: 64759
last-modified: Fri, 08 Dec 2023 03:04:24 GMT
etag: "657287b8-fcf7"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c2TlR%2FpEH%2FHXECj5kAI%2FsYXRWCAhbxxAzKXldOwwo0QubOLm0btZU6KMLIKHNZks2WzmrdBYNSGkp2EwVEp6HWtuOOXUBloRKkt3grfrfMUEjFbyTE9J2G3LX%2BxuTHQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ae2d568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_257.jpg

188.114.97.1

200 OK

19 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_257.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 500x300, components 3
Size
19 kB (19252 bytes)
Hash
ba59dcf0e017f46f4d56c161e6bb99a8
56942852a387f69d75f2188036954cd0fc87abd1
1dad08e873e7e23668d0a1212d53e52e073f23a13eb542bb006b3b05be19eeeb

HTTP Headers

GET /data/games/images/images_games_257.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/jpeg
content-length: 19252
last-modified: Fri, 08 Dec 2023 02:09:46 GMT
etag: "65727aea-4b34"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g8opzNeA4361gqCgU5637g8hJwDHdovIZWWwOL13YBnnCBJPIWNV4J1bHSO5Sq%2BkyJGq%2F2SaqMsZQrVbJTcCJ6FQQous5A%2F1sChc0fwWTersu%2F2%2B5L%2BfBsLPRRGTKKw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ee72568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_424.jpg

188.114.97.1

200 OK

58 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_424.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
PNG image data, 500 x 300, 8-bit colormap, non-interlaced
Size
58 kB (57880 bytes)
Hash
e75b0281f9db6c526a47f9e760aadd6d
a1f5cc005afd774d3d9da8d107f50e597fd9c870
23ecf1499554935f4ccd2a02b2e1549b964d69abec383dc4e7383945787ae4c9

HTTP Headers

GET /data/games/images/images_games_424.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/jpeg
content-length: 57880
last-modified: Fri, 08 Dec 2023 02:09:46 GMT
etag: "65727aea-e218"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A5EktxOMiz6dW7QNuUUdQl0vZBndPNMPGeOV9HpeSijXD3gJuyc%2B37q%2F3k1BUY9hwjsb7jsUJlXTUfGeN9y0XquOydsCWYMKGEkbxhqiTwsmQkjDhYcXHhiK%2BZ9n4To%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c059e23568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ovistore.net/data/games/images/images_games_23.jpg

188.114.97.1

200 OK

111 kB

URL GET HTTP/2
ovistore.net/data/games/images/images_games_23.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerLet's Encrypt
Subjectovistore.net
Fingerprint43:CC:35:73:88:2A:48:99:06:05:14:04:5F:20:E9:42:07:74:85:3B
ValidityWed, 03 Apr 2024 02:30:24 GMT - Tue, 02 Jul 2024 02:30:23 GMT

File type
PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced
Size
111 kB (110683 bytes)
Hash
aea0496b9f03fd25e96cb6ebe34acddb
b0d46e0ccec13659f0b2e46eed62f542df5ca7ed
76b33718e0f8d8d06b7b72737df75673f94ca37da612f98ceba7da1997112c4e

HTTP Headers

GET /data/games/images/images_games_23.jpg HTTP/1.1
Host: ovistore.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:41 GMT
content-type: image/jpeg
content-length: 110683
last-modified: Fri, 08 Dec 2023 03:04:24 GMT
etag: "657287b8-1b05b"
expires: Mon, 03 Jun 2024 09:21:40 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qAECNpblggxnrSKgai3Zr4YGMbVNaeHtTRn0oE5fMdkNoKbcEmm7s7H8cahyzy0ej5P5gUyjtzi921CN9N97tYvQYH2yCOrYRFJS02Ni2TeI52HYwny9rJ%2BEgsr0Ybc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c05ee78568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

3865dtzyx.saexhibits.com/template/news/005/static/js/js.js

172.67.155.12

200 OK

24 kB

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/js/js.js
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
JavaScript source, ASCII text, with very long lines (24085), with no line terminators
Size
24 kB (24085 bytes)
Hash
0c619c09d194708aa1be2de7b5adc51e
c3b191f6620a5ac76f093d16ed8fb8d4791a4fd1
2700238e232f26e9e28125c158e347e2e1755ffa8c0501251a55176a07e299c8

HTTP Headers

GET /template/news/005/static/js/js.js HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: application/javascript
last-modified: Tue, 22 Aug 2023 02:41:25 GMT
vary: Accept-Encoding
etag: W/"64e42055-5e15"
expires: Sat, 04 May 2024 21:21:40 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZTyn7VebXjXIGlbdt0a%2B7%2BS2%2BPWFUmvy0Lmzvgb1t7UZON5GWWYxK1OYvyGBQoDmi%2FEbHK1EzlkIGcZDk2RYOgvZ6HxqD5pVz6XWF84Vz2IRIbUaxEJgSQ60znu31auvzgrPprLmn1%2FTUV8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76c027dcd56b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

3865dtzyx.saexhibits.com/zhishi

172.67.155.12

200 OK

34 kB

URL User Request GET HTTP/2
3865dtzyx.saexhibits.com/zhishi
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type

Size
34 kB (34535 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /zhishi HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QMnt%2BJw0AIZoEZmfaxtnR5nr5mUkbxDatMmvM07rUKqRY0mxt1TqlR2ZMNc%2BYjHX1Vvkvt1l%2FmjOOTCgOhnnyZOLJ8bsJyEM913oGyG4zdPBRZGLdRC14yg498HfRKhLd93hSZtr0WM1J1U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76bfe6a470b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

3865dtzyx.saexhibits.com/template/news/005/static/js/jquery.min.js

172.67.155.12

200 OK

86 kB

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/js/jquery.min.js
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
86 kB (85578 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /template/news/005/static/js/jquery.min.js HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: application/javascript
last-modified: Tue, 22 Aug 2023 02:41:25 GMT
vary: Accept-Encoding
etag: W/"64e42055-14e4a"
expires: Sat, 04 May 2024 21:21:40 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I1Vbl6lcULfpkaHQPJNQRTNltwIx%2Fx3ISbxcjFBDC6BsCIwYrlMUT4LdfVuCe4pV%2FBsv3E2RbMKsPx0CUkkl6wDImm1tsxCNLWkp0H2tiH%2B5k%2FfKSZkNqMDCPKR21hjnd9EslFLgaM0TgB0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76c027dcb56b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

3865dtzyx.saexhibits.com/khuyen.js

172.67.155.12

200 OK

884 B

URL GET HTTP/3
3865dtzyx.saexhibits.com/khuyen.js
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
JavaScript source, ASCII text, with very long lines (945), with no line terminators
Size
884 B (884 bytes)
Hash
59d914e36e636dc4bac87f5ec7854d72
cc5f01e71ae0419ea553ac1a52571db7c89d318b
46d61c0dc403589876c6d30b41cb91f4742bfa9662d101c75a9aad42f831c0f8

HTTP Headers

GET /khuyen.js HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: application/javascript
last-modified: Sat, 13 Apr 2024 13:46:42 GMT
etag: W/"661a8cc2-374"
expires: Sat, 04 May 2024 21:21:40 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UoBPotcwkAXhCBeWED%2Bl%2FSx%2B70Cf3DdcZ85HBWZS44bUk8FPAYEdmNRjjGi1%2FyyWOVICbnFjj5i%2BmKRs4rXUbzAJ8%2BEf5ELk15AXo6fDGlSkyjNwqKTAQmtLLkySzUVYX74AQVE3u6wXmBs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e76c027dd356b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdn.http//3865dtzyx.saexhibits.com//favicon.ico

0.0.0.0

0 B

URL GET
cdn.http//3865dtzyx.saexhibits.com//favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://3865dtzyx.saexhibits.com/zhishi

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET //3865dtzyx.saexhibits.com//favicon.ico HTTP/1.1
Host: cdn.http
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

3865dtzyx.saexhibits.com/template/news/005/static/css/style.css

172.67.155.12

200 OK

40 kB

URL GET HTTP/3
3865dtzyx.saexhibits.com/template/news/005/static/css/style.css
IP
172.67.155.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://3865dtzyx.saexhibits.com/zhishi
Certificate
IssuerGoogle Trust Services LLC
Subjectsaexhibits.com
Fingerprint4F:86:0E:35:45:97:33:6B:C1:51:F6:63:1D:DD:EA:4A:FE:13:A5:F3
ValidityWed, 03 Apr 2024 09:12:59 GMT - Tue, 02 Jul 2024 09:12:58 GMT

File type
ASCII text, with very long lines (40020), with no line terminators
Size
40 kB (40020 bytes)
Hash
77b73e8c69e7fbe57527c36727911578
385a6d96f953e344995c86f420d6ea4ed6b6544a
fbc6d583d99888a45cb2ab6774062ba3a2aea3708d0c876da5ffdff6cdfb00b3

HTTP Headers

GET /template/news/005/static/css/style.css HTTP/1.1
Host: 3865dtzyx.saexhibits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3865dtzyx.saexhibits.com/zhishi
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 09:21:40 GMT
content-type: text/css
last-modified: Tue, 22 Aug 2023 02:43:34 GMT
vary: Accept-Encoding
etag: W/"64e420d6-9c54"
expires: Sat, 04 May 2024 21:21:40 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zjKGa%2F7PbF8tH3MfBD8kYoRSQClWIY92l8tdhKSylgHT2ezMR03LEfED4fcf1IQjE3Irid1QDTMifYL4L3ojTejtnnM1N7EMUqHQMnbQ%2BKRv3wlFAOPg6727buCX4W7AKViHbnuICxdyF84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e76c025db756b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers