Overview

URLhltszx.xyz/
IP 148.66.5.58 (Hong Kong)
ASN#45753 Netsec Limited
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-08-30 22:11:50 UTC
StatusLoading report..
IDS alerts0
Blocklist alert6
urlquery alerts No alerts detected
Tags None

Domain Summary (14)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
hltszx.xyz (22) 0 2022-08-30 08:09:30 UTC 2022-08-30 11:25:11 UTC 148.66.5.58 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-08-30 13:55:21 UTC 34.120.237.76
s.yimg.jp (4) 11015 2012-10-25 03:38:43 UTC 2022-08-30 10:43:50 UTC 182.22.16.123
firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2022-08-30 13:03:36 UTC 143.204.55.27
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-08-30 04:25:59 UTC 34.117.237.239
sdk.51.la (1) 88367 2021-03-08 16:03:51 UTC 2022-08-30 11:00:25 UTC 47.253.50.2
logql.yahoo.co.jp (1) 47364 2014-07-15 23:21:06 UTC 2022-08-30 17:01:59 UTC 183.79.217.124
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-08-30 04:28:52 UTC 143.204.55.110
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-08-30 20:00:24 UTC 93.184.220.29
pvtag.yahoo.co.jp (1) 72217 2017-09-30 06:15:15 UTC 2022-08-30 17:01:59 UTC 182.22.16.123
mempf.yahoo.co.jp (1) 81347 2017-08-29 13:49:46 UTC 2022-08-30 17:01:59 UTC 183.79.219.252
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-08-30 04:23:29 UTC 23.36.76.226
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-08-30 04:28:52 UTC 52.88.220.109
collect-v6.51.la (1) 91421 2021-03-08 16:03:54 UTC 2022-08-30 19:29:33 UTC 103.143.19.103

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-08-30 2 hltszx.xyz/ Yahoo! Inc
2022-08-30 2 hltszx.xyz/ Yahoo! Inc
2022-08-30 2 hltszx.xyz/ Yahoo! Inc
2022-08-30 2 hltszx.xyz/ Yahoo! Inc
2022-08-30 2 hltszx.xyz/ Yahoo! Inc
2022-08-30 2 hltszx.xyz/ Yahoo! Inc

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 148.66.5.58
Date UQ / IDS / BL URL IP
2022-09-13 10:15:18 +0000 0 - 0 - 17 www.mmfg.cn/ 148.66.5.58
2022-09-13 09:01:20 +0000 0 - 0 - 20 mmfg.cn/ 148.66.5.58
2022-08-30 23:29:27 +0000 0 - 0 - 27 www.harar.cn/ 148.66.5.58
2022-08-30 23:05:22 +0000 0 - 0 - 20 harar.cn/ 148.66.5.58
2022-08-30 22:11:50 +0000 0 - 0 - 6 hltszx.xyz/ 148.66.5.58


Last 5 reports on ASN: Netsec Limited
Date UQ / IDS / BL URL IP
2023-03-23 07:36:35 +0000 0 - 1 - 0 www.itkongjie.xyz/address.zip 148.66.31.154
2023-03-23 05:47:48 +0000 0 - 0 - 2 216.118.244.98/ 216.118.244.98
2023-03-22 07:43:57 +0000 0 - 1 - 0 un.aidehao71676.xyz/ 148.66.24.18
2023-03-21 11:56:31 +0000 0 - 1 - 0 intelligence.hk/wp-content/themes/dhl/NewDHL/ (...) 148.66.54.2
2023-03-21 11:32:56 +0000 0 - 1 - 0 intelligence.hk/wp-content/themes/dhl/NewDHL/ (...) 148.66.54.2


Last 1 reports on domain: hltszx.xyz
Date UQ / IDS / BL URL IP
2022-08-30 22:11:50 +0000 0 - 0 - 6 hltszx.xyz/ 148.66.5.58


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-13 22:17:32 +0000 0 - 0 - 37 www.zkfxr.xyz/ 148.66.5.61
2022-09-13 10:15:18 +0000 0 - 0 - 17 www.mmfg.cn/ 148.66.5.58
2022-09-13 09:51:59 +0000 0 - 0 - 37 www.zkfxr.xyz/ 148.66.5.61
2022-09-11 06:34:33 +0000 0 - 0 - 22 www.taqiong.cn/ 148.66.5.59
2022-09-10 21:34:36 +0000 0 - 0 - 41 yahoo-jp.fifa1.cc/ 148.66.5.59

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 117) - SHA256: 10ecdce970d2afa8f7025e7fa25c9ac25df0d69772200ac6512fcb567e22794a
< script src = "https://pvtag.yahoo.co.jp/t?f=2079370884&p=jp&domain=login.yahoo.co.jp&js=1&rnd=1661897497064" > < /script>


HTTP Transactions (48)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ECE269E8B9BE8A5839D75C1343823D68B96930C593C2E3E8D522999176EE3149"
Last-Modified: Mon, 29 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5910
Expires: Tue, 30 Aug 2022 23:50:04 GMT
Date: Tue, 30 Aug 2022 22:11:34 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 21:19:21 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZKpMqHKJsdzD0ML89U9XX5Nnzjxa3JQWkHUpgTAL0ZkKOusC-odRxA==
Age: 3133


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 29 Aug 2022 22:35:59 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Sjl_gNijU6TS2lznPi17rspVbISxif8eO39kprotx8q3VF8cbTJ6dQ==
age: 84936
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 30 Aug 2022 22:11:34 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 30 Aug 2022 21:17:12 GMT
Expires: Tue, 30 Aug 2022 21:28:24 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lYoHWyboM6woJqHiMKrN3OGD1-yq7flXMS0s69GqNoUUomluJfUGsA==
Age: 3263


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4172
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 22:11:35 GMT
Last-Modified: Tue, 30 Aug 2022 21:02:03 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /js-sdk-pro.min.js HTTP/1.1 
Host: sdk.51.la
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/

search
                                         47.253.50.2
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: openresty
Date: Tue, 30 Aug 2022 22:11:35 GMT
Last-Modified: Fri, 15 Jul 2022 04:05:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"62d0e7a4-861a"
Cache-Control: max-age=1296000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (34110)
Size:   12853
Md5:    29243483fe441404931c046d27be80a6
Sha1:   92a0c68b0169eff0addb8cc05a53f6e009d41d47
Sha256: 4865f22b0a68c6a0a6c2d3cbedb9a190ffbea105c4f1e2a5806172919456f3b1
                                        
                                            GET /static/file_sp/items12-min.css HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 690
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (690), with no line terminators
Size:   690
Md5:    1aee3620d7a0370093894d27e44dacf4
Sha1:   72057f3ed2600c9f6a8c43783f947e788b70d19c
Sha256: 7fc74f76d38f5ec1a3b8700f2b419012e441b371a1e91bac6745e4b433e4b671

Alerts:
  Blocklists:
    - openphish: Yahoo! Inc
                                        
                                            GET / HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Set-Cookie: Token_ID=446504720643578000
Content-Length: 41067
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (16853)
Size:   41067
Md5:    0502ed697db4e02a95c9fc0336941c87
Sha1:   ff1d089041991d75c2f8238416e83f97943120c8
Sha256: 2baaacc529e3627bfe6d7923ac546fddaa29da622c262f7c5bde8f419f72bdd7
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NvtNhFhs1bB7bWeXjNKLKA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.88.220.109
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kxUlsdUEEwUwUNXsJCtBslf8yJg=

                                        
                                            GET /static/main/jquery.cookie.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 3121
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   3121
Md5:    d5528dde0006c78be04817327c2f9b6f
Sha1:   31e1bcc4cf805a2c2fee21f48ded1e598f64a2a8
Sha256: b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8
                                        
                                            GET /static/file_sp/login-min.css HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 38343
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (26401)
Size:   38343
Md5:    1abd2fda6a383d11d48c686bb8a2bc30
Sha1:   c3e07b949cfdd950de35486bcc7404dda2483f29
Sha256: 989c61ddad78e4812ae5c49c1d1b97c3d4a4188c256fd867afbfb4ea86a2f820

Alerts:
  Blocklists:
    - openphish: Yahoo! Inc
                                        
                                            GET /static/file_sp/ytag.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 23465
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (23465), with no line terminators
Size:   23465
Md5:    507a6b80908724b35a83e4731cc9e9bf
Sha1:   cc18f8545badd64f2c8bc6e363a7c6a7be43ec5a
Sha256: fcb5ee7a8fcec48a11b7adf420332a9ff2cf49f99558795d6b7b810618573e35
                                        
                                            GET /static/file_sp/tag.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 37537
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (37537), with no line terminators
Size:   37537
Md5:    830cee037cbd2937feb368104dc9a35f
Sha1:   5584dfe88cc570b7dc894072c8eb896ed58d7b5d
Sha256: 3ea1d47e294e438851d775f2eca7352b4d03cf662e3ad9410f18bae663a380e5
                                        
                                            GET /static/file_sp/ya-1.4.4.min.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 79850
Connection: keep-alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64100), with no line terminators
Size:   79850
Md5:    a2b11a9db80a1836f4283823e27f2f1c
Sha1:   4f9c4f4abf8829814f3c8f13d866745411fefa64
Sha256: 39d1a6a062ca07736e48cccd120fad151fdd7210ae241634958f3164ade83f32
                                        
                                            GET /static/file_sp/rapidjp-1.0.0.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 52717
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   52717
Md5:    aafa41176bf48760465500789f35e862
Sha1:   99c4bd6c8d53c4ce2e41ef7c2fd71b649fab7061
Sha256: 8fc22298b6c758c2a601cedae1718b0c01463af2e7b13859a85cb6bcdca2720a
                                        
                                            GET /static/file_sp/offer HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /static/main/jquery-1.9.1.min.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 92629
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32089)
Size:   92629
Md5:    397754ba49e9e0cf4e7c190da78dda05
Sha1:   ae49e56999d82802727455f0ba83b63acd90a22b
Sha256: c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
                                        
                                            GET /static/file_sp/t HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /static/file_sp/mempf.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 8481
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (8481), with no line terminators
Size:   8481
Md5:    9c5288bdc07a00ca800840b9bc6b9738
Sha1:   386f58f025a4346dfc6e669ea95d55543aff2236
Sha256: 2c698446b847e62e4990866efdeb15fc61e7d6cbcdf0edf7141d96dd585c71c7

Alerts:
  Blocklists:
    - openphish: Yahoo! Inc
                                        
                                            GET /static/file_sp/yjbfp.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 4033
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4033), with no line terminators
Size:   4033
Md5:    b1bef4a7cc37bf40b5ffa9adb6c578f4
Sha1:   054625c8cc78c0222aa80449cf26ccde623f5bbe
Sha256: 8571293a7cd686e1eda501350e8c7e2b2175eb7ca67b0bf58a72a90fa5ad75ee
                                        
                                            GET /static/file_sp/b HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - openphish: Yahoo! Inc
                                        
                                            GET /login/js_err?err=TypeError___can%27t_access_property_%22value%22,_s.getElementsByName(...)[0]_is_undefined&stack=e.exports%3C@http://hltszx.xyz/static/file_sp/login-min.js:29:25890_@http://hltszx.xyz/static/file_sp/login-min.js:29:28154_n@http://hltszx.xyz/static/file_sp/login-min.js:1:116_@http://hltszx.xyz/static/file_sp/login-min.js:1:386_@http://hltszx.xyz/static/file_sp/login-min.js:1:756_n@http://hltszx.xyz/static/file_sp/login-min.js:1:116_@http://hltszx.xyz/static/file_sp/login-min.js:1:187_@http://hltszx.xyz/static/file_sp/login-min.js:1:192_&v=3.5.29&t=1661897496837 HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000; __vtins__JkLvrTo6hUVygBmi=%7B%22sid%22%3A%20%22b28b0009-4846-5d3e-bb2e-53ec7c2d6e91%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201661899296792%2C%20%22ct%22%3A%201661897496792%7D; __51uvsct__JkLvrTo6hUVygBmi=1; __51vcke__JkLvrTo6hUVygBmi=9aade3f8-263b-5ea7-8b48-1c96f7df92f6; __51vuft__JkLvrTo6hUVygBmi=1661897496796

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /login/js_err?err=TypeError___can%27t_access_property_%22init%22,_YAHOO.JP.idpf.Login_is_undefined&stack=@http://hltszx.xyz/:281:1_&v=3.5.29&t=1661897496840 HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000; __vtins__JkLvrTo6hUVygBmi=%7B%22sid%22%3A%20%22b28b0009-4846-5d3e-bb2e-53ec7c2d6e91%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201661899296792%2C%20%22ct%22%3A%201661897496792%7D; __51uvsct__JkLvrTo6hUVygBmi=1; __51vcke__JkLvrTo6hUVygBmi=9aade3f8-263b-5ea7-8b48-1c96f7df92f6; __51vuft__JkLvrTo6hUVygBmi=1661897496796

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /static/file_sp/offer HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000; __vtins__JkLvrTo6hUVygBmi=%7B%22sid%22%3A%20%22b28b0009-4846-5d3e-bb2e-53ec7c2d6e91%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201661899296792%2C%20%22ct%22%3A%201661897496792%7D; __51uvsct__JkLvrTo6hUVygBmi=1; __51vcke__JkLvrTo6hUVygBmi=9aade3f8-263b-5ea7-8b48-1c96f7df92f6; __51vuft__JkLvrTo6hUVygBmi=1661897496796

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Tue, 30 Aug 2022 23:24:52 GMT
Date: Tue, 30 Aug 2022 22:11:37 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Tue, 30 Aug 2022 23:24:52 GMT
Date: Tue, 30 Aug 2022 22:11:37 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Tue, 30 Aug 2022 23:24:52 GMT
Date: Tue, 30 Aug 2022 22:11:37 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Tue, 30 Aug 2022 23:24:52 GMT
Date: Tue, 30 Aug 2022 22:11:37 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4955929-0b9f-4215-9599-dffe8c74c90c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8909
x-amzn-requestid: 2c4357d3-5c22-465a-a65a-e281d87c5305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTxZGYEIAMFeZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c666f-36b5010a793ab9c87182a895;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:10:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Y3cwsCGFKFQYWkxG96XsjTJMrCMccbdhjRvbB04PCNF2YupDcEcng==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:33:49 GMT
age: 52668
etag: "143f7bb98f57f8e6189e73e75a9fc93d29548962"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8909
Md5:    feb433a0823cccb81dc4c5fa13ba4ed2
Sha1:   143f7bb98f57f8e6189e73e75a9fc93d29548962
Sha256: 09a5ddc32918b441b6d3ce3eed211d674d3844db6770e06bb3fecb86cc85771a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19e4053-4c42-4436-ba83-5e76fd16f5a4.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10056
x-amzn-requestid: 2eb7bbf2-47ad-4f80-98e8-ecb45e98961b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xguh2H_woAMFXnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6309c472-7dda060b4e7c81262aef3421;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 07:14:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1cunCq4Z1J-oQSmTlcAtgfXO0A4_XpHKl2UHpRCbf75--3eHEIgZGQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 11:39:46 GMT
age: 37911
etag: "110f2eecf72c6b89f250ebefeff5ef664dc2f3f6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10056
Md5:    0502c5060f29d82fd10f9f79459e2ce0
Sha1:   110f2eecf72c6b89f250ebefeff5ef664dc2f3f6
Sha256: f722656c432bbec2baa63b6edc4116c1996850462864456105d9fea9c3bc7ff4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10672
x-amzn-requestid: 9044b578-ffc7-4890-a16f-bf6d5e242f46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTWcEUnoAMF_UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c65c2-4397932f1417f6ab2463c4b0;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:07:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uc8twk9uXve3wFxTvsZa_sg-aduiVBxXjTvOdqBc_BZmgw4BldMyHQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:15:20 GMT
age: 53777
etag: "bf1d4347e1641da5aebe6ae438c0431232ae6242"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10672
Md5:    9f9132960db725a095b0db1773dc6f69
Sha1:   bf1d4347e1641da5aebe6ae438c0431232ae6242
Sha256: 0e0b84df674d48517a04819604deb555c904518f093784691de4914b6ddb9e9d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9980
x-amzn-requestid: b9f6b930-9c47-41b9-879d-ce239e39f033
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTMGHlNoAMFuoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d324d-72ea52c010dff34438bbca28;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:40:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fHSa3fGJD-E4daWDZyyKGaErPw9YBbAwJ2uQ2dxbxl2UJCXXDRykag==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:45:04 GMT
age: 1593
etag: "0c122f15422cab7ee3461e8fa657183ae54adcc5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9980
Md5:    82bc1c69018845280d29653d6b2d6f8d
Sha1:   0c122f15422cab7ee3461e8fa657183ae54adcc5
Sha256: e221638eff281c27ef4656f76e64963718186285c57e50a8958bd3065e662674
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8478
x-amzn-requestid: 8ae5ce3f-0d58-412b-84f1-579c5cf21fd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTWIH5JoAMFh9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d328d-7bb707102a3acb0320585b52;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:33 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: G0y5MCu_U2IUMTrWxPmyUefwSkF5tcEWpPh7sZ-Bn_1lXZv12tlpgQ==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:57:58 GMT
age: 819
etag: "b2866f84f93b73d97e9aecfa2293ff47131b6d67"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8478
Md5:    87425d52d274ccbc12298aa7a47395f2
Sha1:   b2866f84f93b73d97e9aecfa2293ff47131b6d67
Sha256: 2284c74b04493c7a67907b2477bac252832f3550c6a7e57c221abefc45a12549
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5925
x-amzn-requestid: 15e5a8fd-8a14-486d-9e83-7da3dafd1713
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpSfZEEooAMFbeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d312f-05652d4e06746e8b4f4be29b;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:35:43 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: bYTWcGb1-aWdEhGox1If7F0NpZ0JDobDMZK6l0J7a2tb9_ejGKDiDQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:45:09 GMT
age: 1588
etag: "ec2a4baf0a21c1738a541d89756cccd6f3bef5fd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5925
Md5:    91310bc1fb5ae0efa502a9bafe046399
Sha1:   ec2a4baf0a21c1738a541d89756cccd6f3bef5fd
Sha256: 5fe0511116c6bd2d6e668c69764905c3a5c93fa23a4dc207b0f4b1604783ceb6
                                        
                                            POST /v6/collect?dt=4 HTTP/1.1 
Host: collect-v6.51.la
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 278
Origin: http://hltszx.xyz
Connection: keep-alive
Referer: http://hltszx.xyz/

search
                                         103.143.19.103
HTTP/1.1 200
                                        
Server: CloudWAF
Date: Tue, 30 Aug 2022 22:11:37 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=c597a1964bf0bfc9160; path=/ HWWAFSESTIME=1661897496221; path=/
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://hltszx.xyz
Access-Control-Allow-Credentials: true

                                        
                                            GET /c/logo/f/2.0/yj_r_34_2x.png HTTP/1.1 
Host: s.yimg.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hltszx.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         182.22.16.123
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 30 Aug 2022 22:10:35 GMT
vary: Accept-Encoding
last-modified: Tue, 25 Jan 2022 00:33:06 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
age: 62
content-length: 3332
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 272 x 68, 8-bit/color RGBA, non-interlaced\012- data
Size:   3332
Md5:    a14562a0e774e4e215f3ea1ca06a3783
Sha1:   a9f74acb6db567303eea965c735f78ba310acc39
Sha256: 6ab6b873df94ae00092ec36013666f53d90bfd4ce4bbd016f55f80103d46ea2a
                                        
                                            GET /images/login/sp/img/theme/1.3.0/ico_palette.png HTTP/1.1 
Host: s.yimg.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hltszx.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         182.22.16.123
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 512
date: Tue, 30 Aug 2022 22:05:18 GMT
last-modified: Tue, 25 Jan 2022 16:32:38 GMT
accept-ranges: bytes
server: ATS
cache-control: public, max-age=600
age: 379
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 36 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   512
Md5:    3317faacc4448db11396bf7c4a6c2a84
Sha1:   b9c58ea39a08c0ad2d163bf77995851f62e1e13a
Sha256: 9bdc87263763478099797018ae7f0ea332b466a7324bb67a08f83090856d5fb1
                                        
                                            GET /images/login/sp/img/login/1.0.0/loading.png HTTP/1.1 
Host: s.yimg.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hltszx.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         182.22.16.123
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 890
date: Tue, 30 Aug 2022 22:04:11 GMT
last-modified: Tue, 25 Jan 2022 16:32:35 GMT
accept-ranges: bytes
server: ATS
cache-control: public, max-age=600
age: 446
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   890
Md5:    435a18c552d6110c4ed2a184da24fc08
Sha1:   3966d6dbe2e6640f759b555e70b0b21ef69146d5
Sha256: e6138d8cc3c8d3b339a2790496a7c54f496fde3eebffe8647e6e40c2ca150f6b
                                        
                                            GET /v2/offer?position=id_signin_announce_sp&webview=0&service=xyz&callback=YAHOO.JP.mempf.service.callback&t=1661897496862 HTTP/1.1 
Host: mempf.yahoo.co.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hltszx.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         183.79.219.252
HTTP/2 403 Forbidden
content-type: text/html
                                        
date: Tue, 30 Aug 2022 22:11:37 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Size:   14275
Md5:    e986e7a04549f3bef16fe1bb24e61acd
Sha1:   b3ec35460824fae12cf6342ae42d27597ec94fb7
Sha256: e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
                                        
                                            POST /v1/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2079370884&yhlCT=2&yhlBTMS=1661897496884&yhlClientVer=3.25.1&yhlRnd=9rmw6F7ZsaoWjSFdl7gquzhw&yhlCompressed=0 HTTP/1.1 
Host: logql.yahoo.co.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2473
Origin: http://hltszx.xyz
Connection: keep-alive
Referer: http://hltszx.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         183.79.217.124
HTTP/2 403 Forbidden
content-type: text/html
                                        
date: Tue, 30 Aug 2022 22:11:37 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Size:   14275
Md5:    e986e7a04549f3bef16fe1bb24e61acd
Sha1:   b3ec35460824fae12cf6342ae42d27597ec94fb7
Sha256: e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
                                        
                                            GET /t?f=2079370884&p=jp&domain=login.yahoo.co.jp&js=1&rnd=1661897497064 HTTP/1.1 
Host: pvtag.yahoo.co.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hltszx.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         182.22.16.123
HTTP/2 403 Forbidden
content-type: text/html
                                        
date: Tue, 30 Aug 2022 22:11:38 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Size:   14275
Md5:    e986e7a04549f3bef16fe1bb24e61acd
Sha1:   b3ec35460824fae12cf6342ae42d27597ec94fb7
Sha256: e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
                                        
                                            GET /static/file_sp/t HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000; __vtins__JkLvrTo6hUVygBmi=%7B%22sid%22%3A%20%22b28b0009-4846-5d3e-bb2e-53ec7c2d6e91%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201661899296792%2C%20%22ct%22%3A%201661897496792%7D; __51uvsct__JkLvrTo6hUVygBmi=1; __51vcke__JkLvrTo6hUVygBmi=9aade3f8-263b-5ea7-8b48-1c96f7df92f6; __51vuft__JkLvrTo6hUVygBmi=1661897496796

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /static/file_sp/b HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000; __vtins__JkLvrTo6hUVygBmi=%7B%22sid%22%3A%20%22b28b0009-4846-5d3e-bb2e-53ec7c2d6e91%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201661899296792%2C%20%22ct%22%3A%201661897496792%7D; __51uvsct__JkLvrTo6hUVygBmi=1; __51vcke__JkLvrTo6hUVygBmi=9aade3f8-263b-5ea7-8b48-1c96f7df92f6; __51vuft__JkLvrTo6hUVygBmi=1661897496796

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000; __vtins__JkLvrTo6hUVygBmi=%7B%22sid%22%3A%20%22b28b0009-4846-5d3e-bb2e-53ec7c2d6e91%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201661899296792%2C%20%22ct%22%3A%201661897496792%7D; __51uvsct__JkLvrTo6hUVygBmi=1; __51vcke__JkLvrTo6hUVygBmi=9aade3f8-263b-5ea7-8b48-1c96f7df92f6; __51vuft__JkLvrTo6hUVygBmi=1661897496796

search
                                         148.66.5.58
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - openphish: Yahoo! Inc
                                        
                                            GET /images/ipn/wcb/y129.png HTTP/1.1 
Host: s.yimg.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hltszx.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         182.22.16.123
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 733
date: Tue, 30 Aug 2022 22:07:38 GMT
last-modified: Tue, 25 Jan 2022 16:02:25 GMT
accept-ranges: bytes
server: ATS
cache-control: public, max-age=600
age: 241
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 129 x 129, 8-bit colormap, non-interlaced\012- data
Size:   733
Md5:    f6326bd3a4f4c86ca36cd09090986a71
Sha1:   6cbdfffa3973150af329079950fd7a4ab21456dd
Sha256: 53922e96636419bde24c1c34515ff060f31ad07c32b90c382399e7d8215b55b8
                                        
                                            GET /static/file_sp/tmual-2.11.0.min.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 81030
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /static/file_sp/login-min.js HTTP/1.1 
Host: hltszx.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hltszx.xyz/
Cookie: Token_ID=446504720643578000

search
                                         148.66.5.58
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 118243
Connection: keep-alive


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: Yahoo! Inc