Report - thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

Report Overview

Submitted URL
thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php
IP
107.149.15.239
ASN
#54600 PEGTECHINC
Submitted
2023-02-08 05:44:02
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-13T05:09:19Z	359 B	1.9 kB	104.18.21.226
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
thebestofthenineties.com	unknown	2015-06-18T01:40:09Z	2023-03-09T15:05:49Z	5.4 kB	45 kB	107.149.15.239
n.sinaimg.cn	40343	2014-03-05T22:35:57Z	2023-03-13T08:59:07Z	2.8 kB	486 kB	23.36.76.217
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	60 kB	34.120.237.76
ziyuan.baidu.com	279679	2017-12-29T00:13:18Z	2020-01-10T23:45:35Z	390 B	1.4 kB	182.61.201.92
hm.baidu.com	8254	2012-05-26T10:38:45Z	2023-03-13T05:32:36Z	394 B	481 B	103.235.46.191
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.0 kB	5.3 kB	23.33.119.10
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	44.227.71.100

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-02-08 05:44:45	low	107.149.15.239	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
2023-02-08 05:44:45	low	107.149.15.239	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
2023-02-08 05:44:45	low	107.149.15.239	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-08	medium	thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php	Phishing
2023-02-08	medium	thebestofthenineties.com/include/dedeajax2.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php	254 B	2023-03-11	2023-03-29
Pretty URL thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php IP 107.149.15.239 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:42:10 Last Seen2023-03-29 23:19:55 Times Seen5 Hash a4439a6db1a66490b595a8df13eebf1a b225b6eee7eefc3f49e0676a35c9f5486753fa65 b0035d94e5b1c03acd04bd276b69ea5921fff2d7d1eded13b4b35e3971a576ab Loading...

	thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php	4.3 kB	2023-03-11	2023-03-13
Pretty URL thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php IP 107.149.15.239 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:42:10 Last Seen2023-03-13 19:30:44 Times Seen1 Hash 82a5cbfd61d8e6103a8d4b9054cc891b 0fe3c0cf21af755958bbb668e24973512ace721e 0df428a3e99717710468f17281606537cbd99b7eeea563e04c5593d9536433ec Loading...

		Size	First Seen	Last Seen
	#1 Eval - bbe77c1ade04563d49818ebb43670465	57 B	2023-03-11	2023-03-13
Pretty Observations First Seen2023-03-11 21:42:10 Last Seen2023-03-13 19:30:44 Times Seen1 Hash bbe77c1ade04563d49818ebb43670465 bf1c75ad9f4442c2474e49d9568f27de2db7d6c7 ce6b865fe40f26e8d8524a22a2ce74384e99cfd5264ad1d65d51e3e9e057099b Loading...

HTTP Transactions (41)

URL IP Response Size

r3.o.lencr.org/

23.33.119.10

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.10:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b7407cc102d62a5acd5e61f8a79bed36
c2f4890a62454e514962b55b7fc14228339c8e90
be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18460
Expires: Wed, 08 Feb 2023 10:51:31 GMT
Date: Wed, 08 Feb 2023 05:43:51 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.10

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.10:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7493
Expires: Wed, 08 Feb 2023 07:48:44 GMT
Date: Wed, 08 Feb 2023 05:43:51 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 05:34:12 GMT
content-type: application/json
age: 579
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.10

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.10:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15185
Expires: Wed, 08 Feb 2023 09:56:56 GMT
Date: Wed, 08 Feb 2023 05:43:51 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: ouIDvYOg21vI21G99jVIQl006S/5UJIQQo7h+nsnjvVjWjI0gxpQc4tUw6BAXilLm0XxcRIeiyE=
x-amz-request-id: FEJ4126R4T7G4KJF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 05:35:49 GMT
age: 482
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 05:43:51 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

107.149.15.239

200 OK

10 kB

URL HTTP/1.1
thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
data
Size
10 kB (9984 bytes)
Hash
b38b5ccb5c0f55b802779fa0167ea2a3
0bc74b70b9693b22e05f5bf57b36d0b661ca0120
4262a87daa2ef82efc6df7012902cb528c37ce048bf65ff6e48b455d3c4895c9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

NIDS	Severity	Alert
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3

HTTP Headers

GET /alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:51 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

thebestofthenineties.com/template/news/news01/style/cgcyz.css

107.149.15.239

200 OK

3.9 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/style/cgcyz.css
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
ISO-8859 text, with CRLF line terminators
Size
3.9 kB (3897 bytes)
Hash
23b8246b15dd12b7f7b0e16fa70b231d
fe7ff2da73bded14ba3e777ee463ee1f27e7f7bd
d489bc4ff07aa24e7f5afb6ea120d76c53eb15c03eb361e0539e6e71feb1475c

HTTP Headers

GET /template/news/news01/style/cgcyz.css HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: text/css
Last-Modified: Thu, 07 Sep 2017 05:35:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59b0daba-342f"
Expires: Wed, 08 Feb 2023 17:43:52 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

thebestofthenineties.com/include/dedeajax2.js

107.149.15.239

404 Not Found

33 B

URL HTTP/1.1
thebestofthenineties.com/include/dedeajax2.js
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with no line terminators
Size
33 B (33 bytes)
Hash
8874bf02e5b576488740e35ffac374d4
34818fe2fbf54312142e04cef4efb38f86cb4fc6
474e80e45aef5f25213fdfe4b976ec514f4a834eea0abfb65dd5b86e4b51e4d3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /include/dedeajax2.js HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 04:51:20 GMT
age: 3152
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

thebestofthenineties.com/template/news/news01/style/layout.css

107.149.15.239

200 OK

3.2 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/style/layout.css
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
ISO-8859 text, with CRLF line terminators
Size
3.2 kB (3159 bytes)
Hash
cca38da08074817ce6369ec4961b8158
bf8b4f736b72fdb5c15fa92e04ea65e7cab4d3f7
bc7c39531683ea52a1db0b8c1937a9195f57c60303084f750b756772e405f514

HTTP Headers

GET /template/news/news01/style/layout.css HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/template/news/news01/style/cgcyz.css

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: text/css
Last-Modified: Tue, 24 Jul 2012 01:34:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"500dfbb2-31ac"
Expires: Wed, 08 Feb 2023 17:43:52 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

r3.o.lencr.org/

23.33.119.10

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.10:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2457
Expires: Wed, 08 Feb 2023 06:24:49 GMT
Date: Wed, 08 Feb 2023 05:43:52 GMT
Connection: keep-alive

thebestofthenineties.com/template/news/news01/style/page.css

107.149.15.239

200 OK

5.1 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/style/page.css
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
ISO-8859 text, with CRLF line terminators
Size
5.1 kB (5078 bytes)
Hash
4d0ed87a7022ec7caf0cedcf3c31b241
e08eb7589ce141aa8540e6dacc1e2d6cc10aebf2
bdf2aa764fa2a8ddfde58d0bd2bc5fb54b30f844146e41a1820b562d0a713872

HTTP Headers

GET /template/news/news01/style/page.css HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/template/news/news01/style/cgcyz.css

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: text/css
Last-Modified: Tue, 24 Jul 2012 01:35:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"500dfbc4-4fb1"
Expires: Wed, 08 Feb 2023 17:43:52 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

thebestofthenineties.com/template/news/news01/images/foot_wljc.gif

107.149.15.239

200 OK

2.3 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/foot_wljc.gif
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
GIF image data, version 89a, 118 x 48\012- data
Size
2.3 kB (2341 bytes)
Hash
d4f9d169f5eae99f2001d6412690235e
4db11b5bac50b36131d5166dd23cc079bd341ae7
10249afca5a071a5db76bd305abd51baec480b234ec855034a75b8cbfc3cca5e

HTTP Headers

GET /template/news/news01/images/foot_wljc.gif HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/gif
Content-Length: 2341
Last-Modified: Sat, 25 Jun 2011 17:33:36 GMT
Connection: keep-alive
ETag: "4e061bf0-925"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

thebestofthenineties.com/template/news/news01/images/foot_beian.gif

107.149.15.239

200 OK

2.2 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/foot_beian.gif
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
GIF image data, version 89a, 118 x 48\012- data
Size
2.2 kB (2152 bytes)
Hash
6e5cd874bb01bb24a7d0fef33adf4958
806e5e88ef0fbf5c49b98acb759c80a99533534b
d979ad9b506e043b7375019eede3fe4613881561079013e543b60b535abca0c5

HTTP Headers

GET /template/news/news01/images/foot_beian.gif HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/gif
Content-Length: 2152
Last-Modified: Sat, 25 Jun 2011 17:33:36 GMT
Connection: keep-alive
ETag: "4e061bf0-868"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

thebestofthenineties.com/template/news/news01/images/foot_110.gif

107.149.15.239

200 OK

2.3 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/foot_110.gif
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
GIF image data, version 89a, 118 x 48\012- data
Size
2.3 kB (2332 bytes)
Hash
29e0a42f10c707735c1c9ee413d31f27
b65da8108d171256d1f6c0487167982157f57c37
ce720d8a8671655f9c5b4155afecf5e6d7c93322936ff496737e812e2041da34

HTTP Headers

GET /template/news/news01/images/foot_110.gif HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/gif
Content-Length: 2332
Last-Modified: Sat, 25 Jun 2011 17:33:36 GMT
Connection: keep-alive
ETag: "4e061bf0-91c"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

push.services.mozilla.com/

44.227.71.100

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.227.71.100:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QxS5mtXi6ZZdP492iFHfMA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kqx3TFRx9nAkXcQAAMXPCzJfp7w=

thebestofthenineties.com/template/news/news01/images/green_skin.png

107.149.15.239

200 OK

4.2 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/green_skin.png
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
PNG image data, 276 x 318, 8-bit/color RGBA, non-interlaced\012- data
Size
4.2 kB (4162 bytes)
Hash
a7905b07acae7fcaa6e3dc68e7267e10
168497797b6c39dc57401af350f664cf7cee8407
ec05ac467d250e71a3908ad2cd3cf0ba621b99d5c5268aa8cbdf756cf7f9bd42

HTTP Headers

GET /template/news/news01/images/green_skin.png HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/template/news/news01/style/cgcyz.css

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/png
Content-Length: 4162
Last-Modified: Sat, 25 Jun 2011 17:33:38 GMT
Connection: keep-alive
ETag: "4e061bf2-1042"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

thebestofthenineties.com/template/news/news01/images/boxoff.gif

107.149.15.239

200 OK

96 B

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/boxoff.gif
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
GIF image data, version 89a, 8 x 20\012- data
Size
96 B (96 bytes)
Hash
61e65a98d513a4352e9880a55183a32c
942db35383807b034a4f486e2bc254c343f90494
de08f7559d069a680601daf041152dc5fee7c39eb7b775c8d42c37f6e756d1c1

HTTP Headers

GET /template/news/news01/images/boxoff.gif HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/template/news/news01/style/page.css

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/gif
Content-Length: 96
Last-Modified: Sat, 25 Jun 2011 17:33:24 GMT
Connection: keep-alive
ETag: "4e061be4-60"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

thebestofthenineties.com/template/news/news01/images/foot_wm.gif

107.149.15.239

200 OK

5.2 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/foot_wm.gif
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
GIF image data, version 89a, 118 x 48\012- data
Size
5.2 kB (5183 bytes)
Hash
e7a5b28f2360165f878e49b79eaeb1c3
21ce45c40883be28e8f0e5a3004e42249c8d909d
11c4f42cdadcef92189e48e18e9002988d91466a7e76c6711210b605db9c502a

HTTP Headers

GET /template/news/news01/images/foot_wm.gif HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/gif
Content-Length: 5183
Last-Modified: Sat, 25 Jun 2011 17:33:38 GMT
Connection: keep-alive
ETag: "4e061bf2-143f"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

thebestofthenineties.com/template/news/news01/images/ico-2.gif

107.149.15.239

200 OK

50 B

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/ico-2.gif
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
GIF image data, version 89a, 3 x 3\012- data
Size
50 B (50 bytes)
Hash
2b2377c9daff8b34c55bb270d016cb23
ae50ac50405209163c62ffbc4555e998d0157602
8eaad20f0e957f43a6b6a9ffe595dfb2583e5d40216454f831513c75667f925b

HTTP Headers

GET /template/news/news01/images/ico-2.gif HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/template/news/news01/style/layout.css

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/gif
Content-Length: 50
Last-Modified: Sat, 25 Jun 2011 17:33:38 GMT
Connection: keep-alive
ETag: "4e061bf2-32"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

thebestofthenineties.com/template/news/news01/images/foot_jubao.gif

107.149.15.239

200 OK

2.1 kB

URL HTTP/1.1
thebestofthenineties.com/template/news/news01/images/foot_jubao.gif
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type
GIF image data, version 89a, 118 x 48\012- data
Size
2.1 kB (2064 bytes)
Hash
db848a9c16654c4d52e76ac0f775361d
4e262f223eaaf274db3b68b062f0492e40354626
3bfc502ea0410defe5db315d3c9f97e5f9346d7e7284b53f0d66662d73f6707d

HTTP Headers

GET /template/news/news01/images/foot_jubao.gif HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:52 GMT
Content-Type: image/gif
Content-Length: 2064
Last-Modified: Sat, 25 Jun 2011 17:33:36 GMT
Connection: keep-alive
ETag: "4e061bf0-810"
Expires: Fri, 10 Mar 2023 05:43:52 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

ocsp.globalsign.com/gsrsaovsslca2018

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
eafc0448d34ae50b6be5d2e532c864ed
eeca60a766fdf65395a2ac9a743d5b0c3089ede5
9a52191a7b22229ae26f331a61b6f6a5b7bfdae72c6db191a5b5c4e991648998

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 05:43:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 12 Feb 2023 03:29:42 GMT
ETag: "eeca60a766fdf65395a2ac9a743d5b0c3089ede5"
Last-Modified: Wed, 08 Feb 2023 03:29:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 207
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79620cddcf79b506-OSL

n.sinaimg.cn/news/transform/200/w600h400/20190110/6hnC-hrkkweh5037561.jpg

23.36.76.217

200 OK

20 kB

URL HTTP/1.1
n.sinaimg.cn/news/transform/200/w600h400/20190110/6hnC-hrkkweh5037561.jpg
IP
23.36.76.217:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Size
20 kB (19797 bytes)
Hash
cad7a5ffad09096246da660badd38fc9
6439ad232710e06f4a8276f351d87e0f8005fab7
8aed8228ad016d3ca78c33ada0b2a3b3c0d08885f957476bafe454f5ba00c376

HTTP Headers

GET /news/transform/200/w600h400/20190110/6hnC-hrkkweh5037561.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 19797
X-RequestId: b23fb710-2203-1910-4322-5cf3fc318844
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 06:40:52 GMT
X-Filesize: 19797
ETag: "cad7a5ffad09096246da660badd38fc9"
x-amz-meta-crc32: F55B305F
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
X-Via-SSL: ssl.96.sinag1.qxg.lb.sinanode.com
Edge-Copy-Time: 1647657802730
X-Via-CDN: f=Akamai,s=23.36.76.213,c=91.90.42.154;f=alicdn,s=cache1.se1,c=104.69.222.23;f=edge,s=cnc.guangzhou.union.45.nb.sinaedge.com,c=163.181.15.159;f=Edge,s=cnc.guangzhou.union.57,c=112.90.6.27
X-Via-Edge: 16476678033009f0fb5a32d7410ac3408a7b1
Ali-Swift-Global-Savetime: 1647667803
X-Swift-SaveTime: Tue, 04 Oct 2022 16:50:57 GMT
X-Swift-CacheTime: 14301546
Timing-Allow-Origin: *
EagleId: 2ff62c9516649022571392408e
Cache-Control: max-age=31536000
Date: Wed, 08 Feb 2023 05:43:53 GMT
X-Cache: TCP_MISS from a23-36-76-213.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
Connection: keep-alive
X-Cache-Remote: TCP_HIT from a104-69-222-23.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
Network_Info: NO_OSLO_50304
SERVED-FROM: ?:104.69.222.27

n.sinaimg.cn/news/transform/200/w600h400/20180329/6CKP-fyssmmc1235114.jpg

23.36.76.217

200 OK

35 kB

URL HTTP/1.1
n.sinaimg.cn/news/transform/200/w600h400/20180329/6CKP-fyssmmc1235114.jpg
IP
23.36.76.217:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Size
35 kB (34680 bytes)
Hash
73a47ca1c5198b3d30c92acf60b3af55
db73c1dd79f18315a908f42974c1b3572e4ba5dd
81b03c8f331efd1df216c2d7b9840972546176dd55101d182bbcb8c79670abb2

HTTP Headers

GET /news/transform/200/w600h400/20180329/6CKP-fyssmmc1235114.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 34680
X-RequestId: 6e21780c-2203-1707-4526-b0087553a151
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 06:39:52 GMT
X-Filesize: 34680
ETag: "73a47ca1c5198b3d30c92acf60b3af55"
x-amz-meta-crc32: 8F83643D
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
X-Via-SSL: ssl.22.sinag1.qxg.lb.sinanode.com
Edge-Copy-Time: 1647474326995
X-Via-CDN: f=Akamai,s=23.36.76.213,c=91.90.42.154;f=alicdn,s=cache2.se1,c=104.69.222.47;f=edge,s=cnc.guangzhou.union.46.nb.sinaedge.com,c=163.181.15.165;f=Edge,s=cnc.guangzhou.union.45,c=112.90.6.35
X-Via-Edge: 1647671759631a50fb5a32e7410ac102d7273
Ali-Swift-Global-Savetime: 1647671760
X-Swift-SaveTime: Tue, 04 Oct 2022 00:04:08 GMT
X-Swift-CacheTime: 14365912
Timing-Allow-Origin: *
EagleId: 2ff62c9616648418481792209e
Cache-Control: max-age=31536000
Date: Wed, 08 Feb 2023 05:43:53 GMT
X-Cache: TCP_MISS from a23-36-76-213.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
Connection: keep-alive
X-Cache-Remote: TCP_HIT from a104-69-222-39.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
Network_Info: RU_MOSCOW_208677, NO_OSLO_50304
SERVED-FROM: e:104.69.222.47

n.sinaimg.cn/front20220908ac/460/w720h540/20220908/4671-5b9952e8e05b27684b04a467cc81ae47.jpg

23.36.76.217

200 OK

162 kB

URL HTTP/2
n.sinaimg.cn/front20220908ac/460/w720h540/20220908/4671-5b9952e8e05b27684b04a467cc81ae47.jpg
IP
23.36.76.217:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x540, components 3\012- data
Size
162 kB (162216 bytes)
Hash
95126e390e547acb4e07c9a305240d95
530f1fe6f510618afcee3709fa1c588b42a657d6
782f01dd9f465092c375d18635240c7a9d4d91a38669c8eee9a22b9215e79d9b

HTTP Headers

GET /front20220908ac/460/w720h540/20220908/4671-5b9952e8e05b27684b04a467cc81ae47.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thebestofthenineties.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 162216
x-requestid: 2f6bc655-2211-0123-4216-28dee5e81b8d
x-requester: GRPS000000ANONYMOUSE
last-modified: Thu, 08 Sep 2022 03:15:46 GMT
x-filesize: 162216
etag: "95126e390e547acb4e07c9a305240d95"
x-amz-meta-crc32: 87446194
x-amz-meta-reqid: f5476b95-3072-4a92-a080-302755207eea
x-amz-meta-uploadlocation: /n.sinaimg.cn
x-amz-meta-height: 540
x-amz-meta-width: 720
access-control-allow-headers: Origin, Content-Type, Accept, Range, Content-Length
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
access-control-max-age: 31536000
access-control-allow-origin: *
edge-copy-time: 1667317336572
x-via-cdn: f=Akamai,s=23.36.76.213,c=91.90.42.154;f=alicdn,s=cache4.se1,c=104.69.222.55;f=edge,s=cmcc.guangzhou.union.100.nb.sinaedge.com,c=157.255.168.91;f=Edge,s=ctc.guangzhou.union.56,c=172.16.174.100
x-via-edge: 16674029067805ba8ff9d64ae10ac49352d10
ali-swift-global-savetime: 1667402906
x-swift-savetime: Sun, 11 Dec 2022 16:55:54 GMT
x-swift-cachetime: 28161152
timing-allow-origin: *
eagleid: 2ff62c9816756491886451304e
cache-control: max-age=31350138
date: Wed, 08 Feb 2023 05:43:53 GMT
x-cache: TCP_MISS from a23-36-76-213.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_HIT from a104-69-222-55.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
network_info: NO_OSLO_50304
served-from: ?:104.69.222.59
X-Firefox-Spdy: h2

n.sinaimg.cn/news/transform/200/w600h400/20190110/U_IW-hrkkweh5670445.jpg

23.36.76.217

200 OK

89 kB

URL HTTP/1.1
n.sinaimg.cn/news/transform/200/w600h400/20190110/U_IW-hrkkweh5670445.jpg
IP
23.36.76.217:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 600x400, components 3\012- data
Size
89 kB (88740 bytes)
Hash
c9f919768a781ac69e0cabc46c3af72b
e4851b0eb82e6ff12f8ed965809edaf697a499c6
afe303537cb0f81f32b2d6ce478967b59c3b5aa4918c4be19080dd16e8d066fa

HTTP Headers

GET /news/transform/200/w600h400/20190110/U_IW-hrkkweh5670445.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 88740
X-RequestId: 747ef68e-2204-1310-4525-28dee5e81b0a
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 06:40:52 GMT
X-Filesize: 88740
ETag: "c9f919768a781ac69e0cabc46c3af72b"
x-amz-meta-crc32: 16C200D2
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1649817926094
X-Via-CDN: f=Akamai,s=23.36.76.213,c=91.90.42.154;f=alicdn,s=cache3.se1,c=104.69.222.39;f=edge,s=cmcc.guangzhou.union.123.nb.sinaedge.com,c=163.181.15.173;f=Edge,s=ctc.guangzhou.union.183,c=172.16.174.100
X-Via-Edge: 1650275284420ad0fb5a364ae10ac7ed1c301
Ali-Swift-Global-Savetime: 1650275284
X-Swift-SaveTime: Thu, 27 Oct 2022 01:14:33 GMT
X-Swift-CacheTime: 14978011
Timing-Allow-Origin: *
EagleId: 2ff62c9716668332731235693e
Network_Info: FI_HELSINKI_24940, DE_FALKENSTEIN_24940, NO_OSLO_50304
Cache-Control: max-age=29454665
Date: Wed, 08 Feb 2023 05:43:53 GMT
X-Cache: TCP_MISS from a23-36-76-213.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
Connection: keep-alive
X-Cache-Remote: TCP_HIT from a104-69-222-39.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
SERVED-FROM: e:104.69.222.39

n.sinaimg.cn/spider20220818/199/w600h399/20220818/554a-e51b8ea4750d5dcbcf74551a115f58ed.jpg

23.36.76.217

200 OK

50 kB

URL HTTP/2
n.sinaimg.cn/spider20220818/199/w600h399/20220818/554a-e51b8ea4750d5dcbcf74551a115f58ed.jpg
IP
23.36.76.217:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Generated by Snipaste", baseline, precision 8, 600x399, components 3\012- data
Size
50 kB (50245 bytes)
Hash
7e652263f17e7dfc7e24439fa6d1ae6e
da7271567e0b770eca260f8e8d46c0e63ee94876
da7b06a8c44fb3e5e30085e729e2570613475077a2f6da970080967cc59d8fda

HTTP Headers

GET /spider20220818/199/w600h399/20220818/554a-e51b8ea4750d5dcbcf74551a115f58ed.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thebestofthenineties.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 50245
x-requestid: 17104da2-2208-1907-5248-047bcb4b7078
x-requester: GRPS000000ANONYMOUSE
last-modified: Thu, 18 Aug 2022 08:54:42 GMT
x-filesize: 50245
etag: "7e652263f17e7dfc7e24439fa6d1ae6e"
x-amz-meta-crc32: 0E1AB8FB
x-amz-meta-reqid: e0232bea-bb67-4c2b-9212-ffe6f3aa6e80
x-amz-meta-uploadlocation: /n.sinaimg.cn
x-amz-meta-height: 399
x-amz-meta-width: 600
access-control-allow-headers: Origin, Content-Type, Accept, Range, Content-Length
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
access-control-max-age: 31536000
access-control-allow-origin: *
edge-copy-time: 1660866768692
x-via-cdn: f=Akamai,s=23.36.76.213,c=91.90.42.154;f=alicdn,s=cache3.se1,c=104.69.222.46;f=edge,s=cnc.guangzhou.union.46.nb.sinaedge.com,c=120.241.4.146;f=Edge,s=cmcc.guangzhou.union.94,c=172.16.116.46
x-via-edge: 16608672195289204f1782e7410ac3cc7de46
ali-swift-global-savetime: 1660867219
x-swift-savetime: Mon, 19 Dec 2022 16:16:18 GMT
x-swift-cachetime: 20936641
timing-allow-origin: *
eagleid: 2ff62c9716714665781701462e
cache-control: max-age=29453188
date: Wed, 08 Feb 2023 05:43:53 GMT
x-cache: TCP_MISS from a23-36-76-213.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a104-69-222-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
network_info: NO_OSLO_50304, NO_OSLO_50304
served-from: e:104.69.222.46
X-Firefox-Spdy: h2

n.sinaimg.cn/news/transform/200/w600h400/20190110/PwZ7-hrkkweh5071084.jpg

23.36.76.217

200 OK

49 kB

URL HTTP/1.1
n.sinaimg.cn/news/transform/200/w600h400/20190110/PwZ7-hrkkweh5071084.jpg
IP
23.36.76.217:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 600x400, components 3\012- data
Size
49 kB (48599 bytes)
Hash
218535bd8d86bdcb4c23404e92eecf3f
b64c86e85588c1721c027067ce3e8f9ce26fd6b3
40b8fe260322c9c31fb6fd2190a89b7c95b917b7ec30c638050a2d19deb75840

HTTP Headers

GET /news/transform/200/w600h400/20190110/PwZ7-hrkkweh5071084.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 48599
X-RequestId: 6eef0ab2-2203-2011-3108-74eacb728b99
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 06:40:52 GMT
X-Filesize: 48599
ETag: "218535bd8d86bdcb4c23404e92eecf3f"
x-amz-meta-crc32: FC6CA9A5
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
X-Via-SSL: ssl.21.sinag1.ydxxg.lb.sinanode.com
Edge-Copy-Time: 1647747068931
X-Via-CDN: f=Akamai,s=23.36.76.213,c=91.90.42.154;f=alicdn,s=cache7.se1,c=104.69.222.23;f=edge,s=cmcc.beijing.union.138.nb.sinaedge.com,c=163.181.15.158;f=Edge,s=cmcc.beijing.union.138,c=221.179.175.138
X-Via-Edge: 16477470688769e0fb5a3dec1b3dd142396b9
Ali-Swift-Global-Savetime: 1647747069
X-Swift-SaveTime: Thu, 27 Oct 2022 01:14:33 GMT
X-Swift-CacheTime: 12449796
Timing-Allow-Origin: *
EagleId: 2ff62c9b16668332731233369e
Cache-Control: max-age=31536000
Date: Wed, 08 Feb 2023 05:43:53 GMT
X-Cache: TCP_MISS from a23-36-76-213.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
Connection: keep-alive
X-Cache-Remote: TCP_HIT from a104-69-222-30.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
Network_Info: RU_MOSCOW_15582, NO_OSLO_50304
SERVED-FROM: e:104.69.222.23

n.sinaimg.cn/spider20220819/247/w640h407/20220819/88d9-9f513e87df497768149010b39fcef0ac.jpg

23.36.76.217

200 OK

72 kB

URL HTTP/2
n.sinaimg.cn/spider20220819/247/w640h407/20220819/88d9-9f513e87df497768149010b39fcef0ac.jpg
IP
23.36.76.217:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x407, components 3\012- data
Size
72 kB (71600 bytes)
Hash
1a3693c92845d686c84e2f412256d87d
e907a6a5d0ab4ac232e6d2aee7860fe40ad03cea
7ae95505319ba734abc37e8aba1ab32dd4d201a4ab0eca152315e1f888a5d39d

HTTP Headers

GET /spider20220819/247/w640h407/20220819/88d9-9f513e87df497768149010b39fcef0ac.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thebestofthenineties.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 71600
x-requestid: 4487fdfd-2301-0910-2913-047bcb4b6b04
x-requester: GRPS000000ANONYMOUSE
last-modified: Thu, 18 Aug 2022 22:08:17 GMT
x-filesize: 71600
etag: "1a3693c92845d686c84e2f412256d87d"
x-amz-meta-crc32: 6B8F626B
x-amz-meta-reqid: 3730a730-9570-46be-b8b4-f770e7f49f6e
x-amz-meta-uploadlocation: /n.sinaimg.cn
x-amz-meta-height: 407
x-amz-meta-width: 640
access-control-allow-headers: Origin, Content-Type, Accept, Range, Content-Length
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
access-control-max-age: 31536000
access-control-allow-origin: *
edge-copy-time: 1673231353937
x-via-cdn: f=Akamai,s=23.36.76.213,c=91.90.42.154;f=alicdn,s=cache2.se1,c=104.69.222.15;f=edge,s=cmcc.guangzhou.union.99.nb.sinaedge.com,c=120.241.4.158;f=Edge,s=cnc.guangzhou.union.46,c=172.16.174.99
x-via-edge: 16741988508879e04f17863ae10ac4db9e8e9
ali-swift-global-savetime: 1674198850
x-swift-savetime: Wed, 08 Feb 2023 05:43:53 GMT
x-swift-cachetime: 29899817
timing-allow-origin: *
eagleid: 2ff62c9616758350337266930e
cache-control: max-age=29899835
date: Wed, 08 Feb 2023 05:43:53 GMT
x-cache: TCP_MISS from a23-36-76-213.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a104-69-222-15.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
network_info: NO_OSLO_50304
served-from: ?:104.69.222.19
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.10

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.10:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14217
Expires: Wed, 08 Feb 2023 09:40:50 GMT
Date: Wed, 08 Feb 2023 05:43:53 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.10

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.10:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14217
Expires: Wed, 08 Feb 2023 09:40:50 GMT
Date: Wed, 08 Feb 2023 05:43:53 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8703 bytes)
Hash
be9f475292d4b5b0502d4381ccdf455b
ecb943b48c822b086ea699d802f8f1bb5ee26651
ed22a5102709dc7a067107a6c0cde26931f7781065de9cee49e22de6b9086e31

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8703
x-amzn-requestid: 6456aa7d-11f7-4066-a833-9ac5312c0c24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7JGLTIAMFqdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c513-0679a75676cdc19251c81bdd;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DLVp9hiUjE2w5BiukFfUMALWxvcobbJcJRO-7CdXj3cy6rAdFhPRFQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:44:01 GMT
age: 28792
etag: "ecb943b48c822b086ea699d802f8f1bb5ee26651"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12256 bytes)
Hash
062e186a259eda97173695240a492c63
9b476a4ec219667f560b88199a3a4e4b0a93b579
d18570d3c4ada689b5c2a99b0783ce41c629bd125e6683cf225e01b7032f14a4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12256
x-amzn-requestid: 1b959eb9-cf69-414c-b57b-4a63277d709c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvgx-EhgoAMF2wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc7b3f-2c58e8ac2aee8a8f409a93a0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 03:10:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q5tAmSUsPHlKjkJSksZpvVrOAsduYKg0uuTlc03yvuhtO1BUKlHyuA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 08:21:04 GMT
age: 76969
etag: "9b476a4ec219667f560b88199a3a4e4b0a93b579"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6838 bytes)
Hash
4b327816bc2c6fd7291c75c693685d54
771070be61d0724b1c90ca86ea34c804bd7e501a
d45188239cacc7b228bc75ccc95afb48914aaa434c418cd5b786533e8b9cb983

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6838
x-amzn-requestid: 54fc5ae9-d37a-46cf-97e0-d05de1417cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7QEsCoAMFY1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-40de6212468fcd0e78a93708;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mgfr5wO7Bj5BVjKYY7O0c4ogLognfq09QrA9khZROr2CVyOWgKTz1g==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:53:56 GMT
age: 28197
etag: "771070be61d0724b1c90ca86ea34c804bd7e501a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8644 bytes)
Hash
726928e5de19ef978faebbe933c34008
bdaba3ed0c7efb65de88af96063d830683c8499b
c6d208fcee052da80de1bf2dcccbbc48853511b8888c4777799ee676abba51b5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8644
x-amzn-requestid: d6d71f42-f887-4ad0-a2b7-9073d3857b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjRHBFoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-57490f255d8d30a561fdcd3a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xU_uVO78ZQRKon3Cz-fVcHJuPEMMgzDsVuY8BXoKL6ntJwkl-SLeQA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:03 GMT
age: 28910
etag: "bdaba3ed0c7efb65de88af96063d830683c8499b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8532aa1-7280-445c-9c4c-b562d09929d0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10328 bytes)
Hash
1d2eccb9280b851aa1725df5681f6bbd
b4e2b14ee5bc9ee6c9c05666c34b2d1b6ec425b5
c64ece16f4c550feb05db1bccbf74b49d839e77fea31893d48a3f0c267939c92

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8532aa1-7280-445c-9c4c-b562d09929d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10328
x-amzn-requestid: 0b0b3fcd-416c-47ac-afa0-51be0ab85665
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PPlGGqoAMFxYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c596-219ee5023d71e4ce17d49233;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1uPNh-FvA8oI5ZuruNle0ATMPSsyl-_ZjLrUnPQJrogPVREc8wrHMQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:12:09 GMT
etag: "b4e2b14ee5bc9ee6c9c05666c34b2d1b6ec425b5"
content-type: image/jpeg
age: 27104
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6342 bytes)
Hash
d8a3fa4f1ec82d501942f9db3de2cb7d
b91c2aea7f2fb26131c8929b254c5596a1bb25ff
9d246eeab8ba04c775a03fd960c8859934a0accb737e845e89aba40bc573fdaa

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6342
x-amzn-requestid: b2b61a71-5326-4fc6-baba-7baad29cf7c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkbHfDIAMF5AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c482-5cc4028d01d05305637af317;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xc32O6lBfn7jYg9I3VlZ5FnR9YpJtU3DbYD_ozsf_-R_Ih1-2e1-CQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:10 GMT
age: 28903
etag: "b91c2aea7f2fb26131c8929b254c5596a1bb25ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ziyuan.baidu.com/image.gif

182.61.201.92

404 Not Found

649 B

URL HTTP/1.1
ziyuan.baidu.com/image.gif
IP
182.61.201.92:0
ASN
#38365 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
649 B (649 bytes)
Hash
e94a1258f9d0bf16071f434a469dadf8
159dcb3ea8d50e1fdfc356e1c31a13ce5702e572
82c94d8856c5f26de62d803ab4a9908d1838ec224cb1df8de982c54def57374b

HTTP Headers

GET /image.gif HTTP/1.1
Host: ziyuan.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thebestofthenineties.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 404 Not Found
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Wed, 08 Feb 2023 05:43:53 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx/1.8.0
Set-Cookie: PHPSESSID=svl2v5jg3spg13ei387u7qu8t7; path=/
BAIDUID=90F85A09967B4F4F172912CB810D5DD5:FG=1; expires=Thu, 08-Feb-24 05:43:53 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Strict-Transport-Security: max-age=2592000
Tracecode: 26337808380676717578020813
Vary: Accept-Encoding
X-Protected-By: OpenRASP
X-Request-Id: 801ae3fa6d9dc88e01ab2dac2c8ab11d
Transfer-Encoding: chunked

thebestofthenineties.com/favicon.ico

107.149.15.239

200 OK

0 B

URL HTTP/1.1
thebestofthenineties.com/favicon.ico
IP
107.149.15.239:0
ASN
#54600 PEGTECHINC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: thebestofthenineties.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thebestofthenineties.com/alfacgiapi/alfacgiapi/dc073942c3f2bee/login.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:43:54 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Tue, 30 Jul 2019 15:51:38 GMT
Connection: keep-alive
ETag: "5d40678a-0"
Accept-Ranges: bytes

hm.baidu.com/hm.js?9861e94f5585ce50c5386ca06f350689

103.235.46.191

200 OK

0 B

URL HTTP/1.1
hm.baidu.com/hm.js?9861e94f5585ce50c5386ca06f350689
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hm.js?9861e94f5585ce50c5386ca06f350689 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thebestofthenineties.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Wed, 08 Feb 2023 05:43:53 GMT
Etag: 45e28eedbea51ceef9be011d13a91749
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=341F810D8808DB40; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (41)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP