Report - fwdnq.looksigned.top/

Report Overview

Submitted URL
fwdnq.looksigned.top/
IP
172.67.218.39
ASN
#13335 CLOUDFLARENET
Submitted
2023-01-30 18:45:17
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
fwdnq.looksigned.top	unknown	2023-01-06T11:53:16Z	2023-01-06T22:09:12Z	13 kB	657 kB	172.67.218.39
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	52.35.120.215
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	55 kB	34.120.237.76
static.mercdn.net	197302	2019-03-06T15:38:16Z	2023-03-13T05:58:17Z	8.8 kB	1.7 MB	199.232.214.131
ia.51.la	59607	2017-10-31T09:01:51Z	2023-03-13T05:35:03Z	2.3 kB	71 B	183.240.166.132
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	714 B	1.4 kB	216.58.211.3
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-13T05:09:19Z	722 B	3.8 kB	104.18.21.226
js.users.51.la	53024	2012-05-30T17:10:11Z	2023-03-13T05:36:53Z	366 B	2.7 kB	103.143.19.103

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-30 18:45:18	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-01-30 18:45:19	medium	Client IP	172.67.218.39	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-30	medium	fwdnq.looksigned.top/	Malware
2023-01-30	medium	fwdnq.looksigned.top/style/js/jquery.min.js	Malware
2023-01-30	medium	fwdnq.looksigned.top/	Malware
2023-01-30	medium	fwdnq.looksigned.top/style/js/webs.js	Malware
2023-01-30	medium	fwdnq.looksigned.top/style/js/ofi.min.js	Malware
2023-01-30	medium	fwdnq.looksigned.top/style/js/jscript_jquery-1.8.3.min.js	Malware
2023-01-30	medium	fwdnq.looksigned.top/style/js/banner_change.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	fwdnq.looksigned.top/	287 B	2023-03-07	2024-01-31
Pretty URL fwdnq.looksigned.top/ IP 172.67.218.39 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:38:57 Last Seen2024-01-31 03:21:20 Times Seen49 Hash a635aaa980fc21eebbc972f9514cddae 590af1419cf38b4439eb13e3505e51b52f4c7c12 ab432569baad6d7cd91bba20c31ca5e7d5b3184a1896752bc80dafbb814f6afc Loading...

	fwdnq.looksigned.top/	2.2 kB	2023-03-07	2024-01-25
Pretty URL fwdnq.looksigned.top/ IP 172.67.218.39 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:09 Last Seen2024-01-25 23:19:32 Times Seen125 Hash 5da36fefd08a21b99f9b3e2abdd4c85e 97391a91d1a3d419a1174fa3fd58de26bcacb60a 7702b1f0970ac977a0905a6e864a3d8af8fb6825904bfcc6bbd645452c618c15 Loading...

	js.users.51.la/21512729.js	4.9 kB	2023-03-12	2023-04-07
Pretty URL js.users.51.la/21512729.js IP 103.143.19.103 ASN #4837 CHINA UNICOM China169 Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 16:04:39 Last Seen2023-04-07 17:51:05 Times Seen6 Hash 58865e9edbffff016df9154667703a2d 0b123612afaae01169bd7ff2b6cfc6c8b198da0f 7eafab7c547ec8c214d5cbb84c86c12b433094454ec680d143e2e56a4a062528 Loading...

	fwdnq.looksigned.top/style/js/ofi.min.js	3.3 kB	2023-03-07	2024-04-18
Pretty URL fwdnq.looksigned.top/style/js/ofi.min.js IP 104.21.24.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:09 Last Seen2024-04-18 14:14:45 Times Seen638 Hash 82325c0d35b7a9c63a3eee37615659ce a3fb49f67fb27d5025f73f205c84e1ae0a9d9cd3 37217cfedb39356d2a0fd317e4a8ee87d225f4364e3afc7473ab5a8e7d97ec64 Loading...

	fwdnq.looksigned.top/style/js/jquery.min.js	87 kB	2023-03-07	2024-04-19
Pretty URL fwdnq.looksigned.top/style/js/jquery.min.js IP 104.21.24.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-19 23:18:11 Times Seen105363 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	fwdnq.looksigned.top/style/js/jscript_jquery-1.8.3.min.js	94 kB	2023-03-07	2024-04-19
Pretty URL fwdnq.looksigned.top/style/js/jscript_jquery-1.8.3.min.js IP 104.21.24.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:21 Last Seen2024-04-19 23:26:27 Times Seen7056 Hash e1288116312e4728f98923c79b034b67 8b6babff47b8a9793f37036fd1b1a3ad41d38423 ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32 Loading...

	fwdnq.looksigned.top/	79 B	2023-03-07	2024-03-03
Pretty URL fwdnq.looksigned.top/ IP 172.67.218.39 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:24 Last Seen2024-03-03 15:15:06 Times Seen1857 Hash b402b8742f02bbc35aaa04ac716fa443 7c8495eda515f76fa5b5ca8132bdd87159bd69f5 49ed10aeb4571121e6a10816e3715b00562bb940843b29b6ffe5748fb16388b4 Loading...

	fwdnq.looksigned.top/style/js/webs.js	1.4 kB	2023-03-07	2023-05-19
Pretty URL fwdnq.looksigned.top/style/js/webs.js IP 104.21.24.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:10 Last Seen2023-05-19 09:50:12 Times Seen4 Hash 2d977a5191c4bcd3ae66277851896109 03272f156c8c9d865f5e6ab661017218f914de60 4f74be9f69e59239038a67fe543062b64cc306d43228ec34a9f1153f90b91a98 Loading...

	fwdnq.looksigned.top/	858 B	2023-03-08	2023-12-01
Pretty URL fwdnq.looksigned.top/ IP 172.67.218.39 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 07:28:29 Last Seen2023-12-01 18:35:14 Times Seen9 Hash f7d514feae3a7278d17d7447f2c74c10 882bbce01d8c9cf7b68c3fc085243e4a5f71e526 a49718034bfc9ba2a5c2f537d14bc56a49036fea809fba005e83469787faff19 Loading...

	fwdnq.looksigned.top/style/js/banner_change.js	2.0 kB	2023-03-08	2023-04-01
Pretty URL fwdnq.looksigned.top/style/js/banner_change.js IP 104.21.24.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:58:28 Last Seen2023-04-01 11:09:33 Times Seen3 Hash 624ba7a0be51c26d32d2e541dc44c344 3df1a5ff8420dd63a3ff9d778375c9d96c9feafa df0a74b133410ca2ae558313269d7c51421773d8c69425cb59c205b194878a60 Loading...

HTTP Transactions (72)

URL IP Response Size

fwdnq.looksigned.top/

172.67.218.39

301 Moved Permanently

0 B

URL HTTP/1.1
fwdnq.looksigned.top/
IP
172.67.218.39:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET / HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 18:45:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 19:45:05 GMT
Location: https://fwdnq.looksigned.top/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4V1zIpH6%2BTNtTg2z14H5hNLA1URE7RpDSp6JRfnYrrfffOkYAHRdd4aAVwyzDw3SH9iHZE9hl4VahhvcuQY8T6PtYtawz29vcRGCT2qSqVl%2F2P6UoZpCaD6eIFlM2xaT6G51QmN5qw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791c5cd78eeab517-OSL
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17519
Expires: Mon, 30 Jan 2023 23:37:05 GMT
Date: Mon, 30 Jan 2023 18:45:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2393
Expires: Mon, 30 Jan 2023 19:24:59 GMT
Date: Mon, 30 Jan 2023 18:45:06 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 18:43:12 GMT
content-type: application/json
age: 114
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3061
Expires: Mon, 30 Jan 2023 19:36:07 GMT
Date: Mon, 30 Jan 2023 18:45:06 GMT
Connection: keep-alive

ocsp.pki.goog/s/gts1p5/Q4Xezou2kKY

216.58.211.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/Q4Xezou2kKY
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0e9de7282d54ceb5ef2a1c7657178f0a
3e2ded82626cb81396af3395f760a0360a336c4e
ff02a2b2fc2d471d47deb094a35e1f3b172f677d7706d0f3060588790c9ec69a

HTTP Headers

POST /s/gts1p5/Q4Xezou2kKY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:45:06 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: em1hcM99gPsbm+VZN5cOOfYbRhRyxfSgT2474ekcsec3YPp7zQRokyhZhwiyc5ABPxYT9h3iAM0=
x-amz-request-id: JHTCH22Y6S8D2D83
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 18:21:54 GMT
age: 1392
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:45:06 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 18:41:41 GMT
age: 205
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12262
Expires: Mon, 30 Jan 2023 22:09:28 GMT
Date: Mon, 30 Jan 2023 18:45:06 GMT
Connection: keep-alive

push.services.mozilla.com/

52.35.120.215

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.35.120.215:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: b6DAIISNBFXf1YWk0U2klg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VIiW/eLorEBpBDe7235b6TYR8M8=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5981
Expires: Mon, 30 Jan 2023 20:24:49 GMT
Date: Mon, 30 Jan 2023 18:45:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5981
Expires: Mon, 30 Jan 2023 20:24:49 GMT
Date: Mon, 30 Jan 2023 18:45:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5981
Expires: Mon, 30 Jan 2023 20:24:49 GMT
Date: Mon, 30 Jan 2023 18:45:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5981
Expires: Mon, 30 Jan 2023 20:24:49 GMT
Date: Mon, 30 Jan 2023 18:45:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5981
Expires: Mon, 30 Jan 2023 20:24:49 GMT
Date: Mon, 30 Jan 2023 18:45:08 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9457 bytes)
Hash
51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3EXFa0gb46AbdZ9ZznGiPTemGZ7zWh9WLs5Yr1zmfyh_jyKA6o7xoA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:19:57 GMT
age: 73511
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7538 bytes)
Hash
131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 8bec493a-9c81-4cfd-b6e9-66f4f3d55cb7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOOJQEZSoAMFb1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf2a3b-5f0c9f3e4cac1ba26c802050;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 00:45:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PHd9IMeVMHy0TgXRqXyBCg6CZkOtT1WAOyq8zu8ERfIzoaB-7pLc2A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 15:48:30 GMT
age: 10598
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.5 kB (4475 bytes)
Hash
4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 05:47:49 GMT
age: 46639
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7679 bytes)
Hash
3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VHh2SQ21xoDoBnGvM2kRiposhXuCE-DdWW1bM35kEykjbHYmhsldVA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 75226
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8464 bytes)
Hash
fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y6bDvcD7a3-A4DLC3cSdZT-yewV1kkFqcGr7AMuqvUeGA4A0pgF4wQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:27 GMT
age: 74741
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10997 bytes)
Hash
65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:08:57 GMT
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
age: 74171
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/stylesheet_searchtop.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/stylesheet_searchtop.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /style/css/stylesheet_searchtop.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
content-length: 0
cache-control: max-age=43200
cf-bgj: minify
etag: "639d630e-0"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hQdCWLS5caBMEDPSdzQ6iGM5jNQpsrqDa49V2gJonnQzknGdR2S0b9XGqLJNVDLQQYqLJ6NqqEq5V2p%2FVAA%2BSdUjnX024iEafdV1KjFhqgimd%2FOCThjUhfqHt7zdAvmbsSP71sB3EA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf0fa5bfac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/logo.png

104.21.24.96

200 OK

6.5 kB

URL HTTP/2
fwdnq.looksigned.top/images/logo.png
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 330 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size
6.5 kB (6501 bytes)
Hash
810ce5e9e136dd08bd5bd6ea04cfc832
eb04e7cbbebbad16bc0e2af54b06d73ad4390898
8878f0d148150a9b5b027715f218eb4593dfc557a13a66b0daacd6982f3993bc

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/png
content-length: 6501
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
etag: "639d630e-1965"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BYxHoWQ%2FXN%2BVSyGavw73cXICKgLjB%2Fv3CQ7NQqLjvVnm9fArdCYS6oAM02GAfuYh7MzIvWys%2Bwu1r3dSiZ1p9tulIW01dbmRS5HfV9Hn9bBuIg6k0HPElL1JYZSLisdt6Vmy9TvFHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf10a6afac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/leibie.png

104.21.24.96

200 OK

1.2 kB

URL HTTP/2
fwdnq.looksigned.top/images/leibie.png
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced\012- data
Size
1.2 kB (1157 bytes)
Hash
887a2a82b48b70ef57b0d5db2f624b4c
7579e8250825c39bc0da33e6897914fb213db503
071c376c08c5e287ad72b284865b49d150646efa9a7317545c8bd12b4fe9274b

HTTP Headers

GET /images/leibie.png HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/png
content-length: 1157
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
etag: "639d630e-485"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NNBHtSyR4aUOyaVQICxGqXwOpsVRsi0%2B5Ya1B0GjebOAfxy%2BtA5OG2046k91N3utu9NJ3eXt6VEp7wAx7RamS%2B%2FQ7k2XCo5UdbjMo43c3dEyivta6gj6KWlpal4ksOX6TQpr5VaEKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf10a6bfac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/gwc.png

104.21.24.96

200 OK

1.5 kB

URL HTTP/2
fwdnq.looksigned.top/images/gwc.png
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced\012- data
Size
1.5 kB (1486 bytes)
Hash
ee6ef0e770d4aa77f9b9d485a9f25e1e
ee4dac475d1b687066e98c07091174cdf4d93ea4
1d32e9498b1c5d448bd46c003d5b089103b0802b90c7126b5b9a6c879611cc0c

HTTP Headers

GET /images/gwc.png HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/png
content-length: 1486
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
etag: "639d630e-5ce"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K2i9IjLTVic2wk4UEyrl2C0yLc92DscWk3V4lEjecV9fXEa963J8o%2BhTYocCwnk%2F8Bwhki2TLpfXDJDRrBA6fUg%2FzeDb6KCM0kG8C2qCANBK2FWnSPyHIBGxGTbs0tU5epK7ggQeew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf10a71fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/denglu.png

104.21.24.96

200 OK

1.6 kB

URL HTTP/2
fwdnq.looksigned.top/images/denglu.png
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced\012- data
Size
1.6 kB (1566 bytes)
Hash
bb57af4b36fb7cdb2c789ff20c0735b6
af6b3562ec66c4cf87926730c3aa3957bd10d515
1fa29f1cc3ed9796dc52601ed26ad6c8beb5a9c59aeb7c361a0482f913007e21

HTTP Headers

GET /images/denglu.png HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/png
content-length: 1566
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
etag: "639d630e-61e"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nZv7GeonYNsjRJ6n98JDB0a%2B2kJCqxHFERFurNkIkHAzjxKGwp9k0Dt1XPVONpvTfSX0hI4qVCp8IxeoGYyUYlw31l4uhYUh45L%2F3dcWLE5ZBYpWIM%2Fp2GfzcCXVyVOeJ6hZj4oHFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf10a6efac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/688308337_1.jpg

104.21.24.96

200 OK

34 kB

URL HTTP/2
fwdnq.looksigned.top/images/688308337_1.jpg
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, baseline, precision 8, 640x180, components 3\012- data
Size
34 kB (33811 bytes)
Hash
1f24138bba992e12c94fb3439743bbdd
c744dc58747cdb2b82e579d27a08cc2783f83b85
8a9706e165ecf328ed30dea997fd0daba4106d4bf34200f0e92e9039b05610e0

HTTP Headers

GET /images/688308337_1.jpg HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/jpeg
content-length: 33811
last-modified: Sat, 17 Dec 2022 06:34:53 GMT
etag: "639d630d-8413"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K%2B6tSivRh%2FX0GhgcLHFp4oGfBml%2FdGffkB6mxd72ApDizGrqEjK63aRl%2Fn7fq0GduFdwI%2BurA1StvNf2%2Fg1qsR8DvknHHDnIjrN036O9N8lMDIOYCm6MKtit%2FLXxN5lT8lfy%2BUCDIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf11a7dfac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/20220216102825_01_001.jpg

104.21.24.96

200 OK

57 kB

URL HTTP/2
fwdnq.looksigned.top/images/20220216102825_01_001.jpg
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x320, components 3\012- data
Size
57 kB (56581 bytes)
Hash
2f22b82175c9e7436d0b2439e654c04f
732048f24295a688c77b6182064823ab73fd0d6b
fce4f2c7731a9342668c067bdcaa91ba6a1d51523bec93c6bd0906ab2a294b04

HTTP Headers

GET /images/20220216102825_01_001.jpg HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/jpeg
content-length: 56581
last-modified: Sat, 17 Dec 2022 06:34:53 GMT
etag: "639d630d-dd05"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NWc0O5IbvAC%2FD2r3JnPtY09HcyoFXaXqSSreRe8%2BpYQjZNZh%2BvfCJjHGsvHFo0CwELWOe%2FWR615j4YY4QbshkQbGli7CzUXgqAT92V%2Brp4VjTlpm420L6EDgOSW%2FMJsOR6NiiikYAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf11a81fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/banner01.png

104.21.24.96

200 OK

502 kB

URL HTTP/2
fwdnq.looksigned.top/images/banner01.png
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 1200 x 460, 8-bit/color RGB, non-interlaced\012- data
Size
502 kB (502449 bytes)
Hash
0100f1275996cf36b792efac3df57852
3affc41e84604db51e9d5bfcf63e6f58a05c63c8
e7b0e4b08d0c646c9f3cbfbd2ef0d2f1b4c9f6adcc49cdb341559edd79d65687

HTTP Headers

GET /images/banner01.png HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/png
content-length: 502449
last-modified: Sat, 17 Dec 2022 06:34:53 GMT
etag: "639d630d-7aab1"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TznANwF90kj4s6JL0SONmdkcGZgyTqVShSgLAP3AoBialoo52chvZhAs3KOT%2B7kfrSl7%2Fgd%2B5fw0%2B0y53An04wRxY6QF6Bt9q6SV15dY8DqdebSeMCvC21tF7%2FchNYNAark%2FEhda9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf10a75fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/Q4Xezou2kKY

216.58.211.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/Q4Xezou2kKY
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0e9de7282d54ceb5ef2a1c7657178f0a
3e2ded82626cb81396af3395f760a0360a336c4e
ff02a2b2fc2d471d47deb094a35e1f3b172f677d7706d0f3060588790c9ec69a

HTTP Headers

POST /s/gts1p5/Q4Xezou2kKY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:45:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.mercdn.net/item/detail/orig/photos/m78992467716_1.jpg?1664164653

199.232.214.131

200 OK

27 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m78992467716_1.jpg?1664164653
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x600, components 3\012- data
Size
27 kB (26557 bytes)
Hash
aefbd734242320b8e21ca159f8bf0601
6167ffa5bab4a3908a18e045ea244dd467f196c0
6c7f8aa4d0589992de1542b75585ed49cac01ab2f80b07fc95f5556d0f162c6c

HTTP Headers

GET /item/detail/orig/photos/m78992467716_1.jpg?1664164653 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EDht5tlVy8DzLiMxYyIAAAAiZTUyMTM4MGQ4MDBmZGEyYjQwYTA2YmEwZjY5N2JlYzMi"
last-modified: Mon, 26 Sep 2022 03:57:34 GMT
x-amz-id-2: c0bfwZda+4pn5VK/AY4LH1QpLt4T/TyHO71lkYMOLAj5AkpZMtLXwOacDd3bO3De+fTRPCA2FO4=
x-amz-request-id: RTM3QQ14CYPSDNGN
x-amz-version-id: OTQjN0ZL8FgevvJ2Ry3lUQ3FQVfxxWjW
via: http/1.1 rear.sv120 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 2562816
x-served-by: cache-tyo11942-TYO, cache-bma1628-BMA
x-cache: HIT, HIT
x-cache-hits: 16, 1
x-timer: S1675104310.107804,VS0,VE1
access-control-allow-origin: *
content-length: 26557
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m31847869718_1.jpg?1664528216

199.232.214.131

200 OK

88 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m31847869718_1.jpg?1664528216
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1005x1080, components 3\012- data
Size
88 kB (87759 bytes)
Hash
6a7771804570826f2e7471b893889044
33a422c367035cea43ba04740bcc9f6f08cad7eb
10cd06a3adb57412334ea59b60ddd8ffc797299c44b7f85ed54d2d410bb52510

HTTP Headers

GET /item/detail/orig/photos/m31847869718_1.jpg?1664528216 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"ECq84w4rIP9QWa82YyIAAAAiYjI5MThiYzg2M2UwMjdlYmJhMTEwNzM4MzQ4MTk2MjIi"
last-modified: Fri, 30 Sep 2022 08:56:57 GMT
x-amz-id-2: Xhj5GKxiKw4sdwnGLl8vXxHtMME1mopxxZZlVvDhvUuTZDCSc/VsMhlAYyKT3ZFMwAN2qoRgmsg=
x-amz-request-id: D98021SY5J2Y3X98
x-amz-version-id: tUJcKsebsVnxlYSc803HSzoP.3SnrPJS
via: http/1.1 rear.sv130 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 160555
x-served-by: cache-tyo11964-TYO, cache-bma1628-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1675104310.098572,VS0,VE1
access-control-allow-origin: *
content-length: 87759
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m88428562424_1.jpg?1650967454

199.232.214.131

200 OK

65 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m88428562424_1.jpg?1650967454
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1022x1080, components 3\012- data
Size
65 kB (64581 bytes)
Hash
b9d1ad770a2a761bcc43ba15cc8bf6e9
2e579f2ebbaf10c96e855d26626a5cdb87ddbc12
df782b5f66d5916cbfc566137b304c98467984e913267369ec0ec76d66fe7278

HTTP Headers

GET /item/detail/orig/photos/m88428562424_1.jpg?1650967454 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EKDqoediCx9Fn8NnYiIAAAAiMTJjZDgxYjQ2MWMxNGViODFhOWJkMjhjMjA3NDJhMDUi"
last-modified: Tue, 26 Apr 2022 10:04:15 GMT
x-amz-id-2: s0gY42eFzMXeDxCehArGUaYOQB2/g+ypEES+ymmD4by3RMwak0B4UXrUwkgdjaq2YyCVoTIUu1g=
x-amz-request-id: 25ZM43YEHDDAD20Q
x-amz-version-id: CHxS29bdm_vMeRzU.bI_WE2inG8qX.Bl
via: http/1.1 rear.sv127 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 834427
x-served-by: cache-tyo11923-TYO, cache-bma1628-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1675104310.107742,VS0,VE5
access-control-allow-origin: *
content-length: 64581
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m95181470061_1.jpg?1658488158

199.232.214.131

200 OK

88 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m95181470061_1.jpg?1658488158
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1076, components 3\012- data
Size
88 kB (88489 bytes)
Hash
aa796c0e436bd35a0a5d4889090dd9df
652ecb4bc38ddd1bedf3bc72ae27022941af1297
88f9a19906e169e1eba26b6b9d139b66ca6d4f862deebba8ae004c0a333b9aae

HTTP Headers

GET /item/detail/orig/photos/m95181470061_1.jpg?1658488158 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EOiKuT7whbUXX4XaYiIAAAAiMTMxOTdiNzgyZmRmYmNiYjdhYmRjODk4MjRmNjc1ZmIi"
last-modified: Fri, 22 Jul 2022 11:09:19 GMT
x-amz-id-2: 2/jX1WOrT/Lu7qsvwYmxJnGdk/8j/03BzftsJTLMOj8vOtxfk+iHhWTp6JzB9K/1XV3y4en7mF4=
x-amz-request-id: 6TS0DKRAM3QTQ5EY
x-amz-version-id: CnyhQnC5VC0t.HzHeyZ2wleuwNpLGWBE
via: http/1.1 rear.sv117 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 3473778
x-served-by: cache-tyo11969-TYO, cache-bma1628-BMA
x-cache: HIT, HIT
x-cache-hits: 37, 1
x-timer: S1675104310.099231,VS0,VE1
access-control-allow-origin: *
content-length: 88489
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m10055893890_1.jpg?1649200853

199.232.214.131

200 OK

71 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m10055893890_1.jpg?1649200853
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1018x1080, components 3\012- data
Size
71 kB (70817 bytes)
Hash
076149244a1dc0af2339c107c8ea7de9
9288580f1174b51e012385ab55db1e2b39c874b7
2c937c0453340a74e34f2fc6283a5f43b4ec620bfa7ada646beda41600e516a9

HTTP Headers

GET /item/detail/orig/photos/m10055893890_1.jpg?1649200853 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EKCFcZJ44KOT1s5MYiIAAAAiZmVmZmIzZmUyODA0ZTNkNDllODZkNDg3MzZhZDBjNzMi"
last-modified: Tue, 05 Apr 2022 23:20:54 GMT
x-amz-id-2: LgKsxFDD1pOqVVmHuTEdfkMQwJCJxzO2XBoopB2SgFb/YIUyAJoBKdV+nrm7Vngzg+8tzFmW7AY=
x-amz-request-id: 8TAQX1S27HYXE137
x-amz-version-id: Prpum26MqGLwcLy8mqnCRLSe9LByP_4r
via: http/1.1 rear.sv119 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 883578
x-served-by: cache-tyo11966-TYO, cache-bma1628-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1675104310.098812,VS0,VE1
access-control-allow-origin: *
content-length: 70817
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m82473821033_1.jpg?1644758574

199.232.214.131

200 OK

87 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m82473821033_1.jpg?1644758574
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size
87 kB (86797 bytes)
Hash
1b641ea7f3290b56c29d8f3c2d34b5fa
6a3a8536fb9db71ef34124d16c50f1f5f86d5230
223b7da2545bbd8f5393846e48b52507ec528c16909d7232539e39baaa8763a4

HTTP Headers

GET /item/detail/orig/photos/m82473821033_1.jpg?1644758574 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EP1P35lhmxH5LwYJYiIAAAAiZGYyZTY2MWVlMWQyOGMxMzkwNjY2NTVjNTFhMDkzNGQi"
last-modified: Sun, 13 Feb 2022 13:22:55 GMT
x-amz-id-2: O7xkexGBcv9PbV0G7pdlHLJyUq6kIqHjx4V5mtY1AXGgjF715+ybcdelZChe7ZamYaXkdvPKmfY=
x-amz-request-id: 5KSQR1H21KS63ZSC
x-amz-version-id: V6xtfrIhnq3axrLdKChxRkOhHqBAECDC
via: http/1.1 rear.sv121 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 120349
x-served-by: cache-tyo11964-TYO, cache-bma1628-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1675104310.107771,VS0,VE1
access-control-allow-origin: *
content-length: 86797
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m87038710595_1.jpg?1650003349

199.232.214.131

200 OK

92 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m87038710595_1.jpg?1650003349
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1078x1080, components 3\012- data
Size
92 kB (92493 bytes)
Hash
d313386e4ed3900d74b6aa06226f49b0
7fd7814754de4ce84c5a9c04cdd5f3468a5d162e
c7116b05bf3736b6dcaf68d2e069a49610fe13afc005aa09435daf04e83d25a6

HTTP Headers

GET /item/detail/orig/photos/m87038710595_1.jpg?1650003349 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EM3U55iLBXXdlg1ZYiIAAAAiZTU0NGQ1YTE4OGQxZGMxNmViN2YxOTQyYTAzM2ZmM2Ui"
last-modified: Fri, 15 Apr 2022 06:15:50 GMT
x-amz-id-2: kmgDtqizZSSsYlyRhvBPqzzvy+j3ff9391GfRofQ63naoGzRmGC8CqP+PXUki3pVQNmBfVHLqEY=
x-amz-request-id: Y4H3EGHZV4DYBFP7
x-amz-version-id: hnSI1aM6RrwNGqRdO.ZhLGUVDVNL6.SH
via: http/1.1 rear.sv120 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 468269
x-served-by: cache-tyo11933-TYO, cache-bma1628-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 1
x-timer: S1675104310.107785,VS0,VE1
access-control-allow-origin: *
content-length: 92493
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m68208746458_1.jpg?1662571422

199.232.214.131

200 OK

116 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m68208746458_1.jpg?1662571422
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size
116 kB (116402 bytes)
Hash
c3224232b077f315a975e1d45a8af6c1
dcdb7f405c1bd46ffdd8a613bba26dd97bbea765
044b92eacef2c0486a960d4f74fb90386e2778804a89c533c0910c6eebebe8a4

HTTP Headers

GET /item/detail/orig/photos/m68208746458_1.jpg?1662571422 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EK98fgwc9nVfn9MYYyIAAAAiMjMyN2MzYjYxZjc3NWI5NDBkNDQzM2YyOTgyN2Y1ZTEi"
last-modified: Wed, 07 Sep 2022 17:23:43 GMT
x-amz-id-2: zSorC1kPHAIa+Z/SJ3GbT2yhb0jkNEpU5SUkdDoEfvavZ1c5GnWc1P43HrVSmxKxqxo5iw0RYMI=
x-amz-request-id: TZAH2BV0KJX93XSA
x-amz-version-id: 7waKhrTg3P4Vq81ls5vDz0FsKBIeS2Dm
via: http/1.1 rear.sv112 (ATS [cMsSfW]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 1088976
x-served-by: cache-tyo11978-TYO, cache-bma1628-BMA
x-cache: HIT, HIT
x-cache-hits: 16, 1
x-timer: S1675104310.107729,VS0,VE1
access-control-allow-origin: *
content-length: 116402
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/js/jquery.min.js

104.21.24.96

200 OK

32 kB

URL HTTP/2
fwdnq.looksigned.top/style/js/jquery.min.js
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65451)
Size
32 kB (32408 bytes)
Hash
1d5bcbcb7060a7348df9734553031000
e3588af49623dc7602ff31523cc9b18dd50f8692
1d5f8ff7532d989eb92007f8ecc10e848526b89bbcc092db2d1a7138611cb560

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /style/js/jquery.min.js HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: application/javascript
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
etag: W/"639d630e-1538f"
expires: Tue, 31 Jan 2023 06:44:46 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t1DYgUc8VfMm1vRe5xbonkmQ6sFvaixgRcO8%2Fsr6leZSUZgrj7pf6vP2lv4AYhXeHFVFHc8zcyIpZuWWaTRip%2BAH%2FyL0TH%2B8C2mnttGjPioJyYn7B1zAyfx9UN%2FGd8WVBmnJHQ5Ndg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf10a66fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m96053047072_1.jpg?1668568092

199.232.214.131

200 OK

26 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m96053047072_1.jpg?1668568092
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x540, components 3\012- data
Size
26 kB (25757 bytes)
Hash
cbb430a043c1f83d24947ea3a869928d
b572dfdc1f237a9b58d7cbbb9b52e3415f43b84a
56af3b900831752af401c1edc6e86de03667b388098623cb00051d3da4f9fa70

HTTP Headers

GET /item/detail/orig/photos/m96053047072_1.jpg?1668568092 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EHHh_cRuuBR1HVR0YyIAAAAiODUzYzRmYTlhZmIwMjFiNDAxODkwODViNjlmNTQ5Y2Ii"
last-modified: Wed, 16 Nov 2022 03:08:13 GMT
x-amz-id-2: jsH12dnLJzThECuGGckTmZXSHZ/3+FMBZCWlPjbxcfftE0V2xtEuNs90eIV+50Qgt5mSUz7QsG4=
x-amz-request-id: M86VZ8NBAWSXJKJE
x-amz-version-id: 3xkBx_5yQsqNImOYttMpcoxJH9sOSfF1
via: http/1.1 rear.sv102 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 453352
x-served-by: cache-tyo11956-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 5, 0
x-timer: S1675104310.098536,VS0,VE264
access-control-allow-origin: *
content-length: 25757
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m97815410852_1.jpg?1666743488

199.232.214.131

200 OK

33 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m97815410852_1.jpg?1666743488
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3\012- data
Size
33 kB (32932 bytes)
Hash
8c807712584d73e5ce194c984d0d9696
eeb89c677d73e6f583ee2e099ed4adcfc6272613
925a641809dcea357de1690ff094c7aea3adef27ba2c394cf7f4c06d481b35f1

HTTP Headers

GET /item/detail/orig/photos/m97815410852_1.jpg?1666743488 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EDNMvwfLRhpwwXxYYyIAAAAiYTk3NjQxM2Q2NzExZTEyZDBmYmM0MWNjMWUwODQzOWQi"
last-modified: Wed, 26 Oct 2022 00:18:09 GMT
x-amz-id-2: 5meWbiaC/oyAM39ACjDuoaFqyQx0nH0r7LwTVNef0c2Uf7f6TzIK2tEKcqw3CQYddC64U8rQHkE=
x-amz-request-id: CXPZJ0KHEG6PV20C
x-amz-version-id: _B0rNbK7Vr56y9WUTMWC1gNhfG4nevQ9
via: http/1.1 rear.sv118 (ATS [cMsSfW]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 734606
x-served-by: cache-tyo11930-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 8, 0
x-timer: S1675104310.107626,VS0,VE260
access-control-allow-origin: *
content-length: 32932
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m66353545887_1.jpg?1667400694

199.232.214.131

200 OK

62 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m66353545887_1.jpg?1667400694
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1027, components 3\012- data
Size
62 kB (62159 bytes)
Hash
3f1ca6ec98d051d81fa34410a5504f6d
95fa3a598bfec90ca931c318316ca4a823119bf1
7fecdf4875364859a533d78f53f206a531425816a722ab4ee14511c5eda5bfa6

HTTP Headers

GET /item/detail/orig/photos/m66353545887_1.jpg?1667400694 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"ELCjsJvoYWo294NiYyIAAAAiN2JlYTBlZGE0ZjBlZTRjNGEwZjdlZjhkMDhiODc2Nzci"
last-modified: Wed, 02 Nov 2022 14:51:35 GMT
x-amz-id-2: LF56+6lN+guAj5r0yYBSiJQsCC+pO6C7QRNehg2LEDrERym4I9MLdp642RaIN3xh0rR72kVPgyM=
x-amz-request-id: G76QB3EN52PQVN0G
x-amz-version-id: 3VYj59sWPTnDFkvjcKLCnvN63wbSGNHZ
via: http/1.1 rear.sv107 (ATS [cMsSfW]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 362440
x-served-by: cache-tyo11931-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 3, 0
x-timer: S1675104310.098002,VS0,VE275
access-control-allow-origin: *
content-length: 62159
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m46513515659_1.jpg?1667288265

199.232.214.131

200 OK

22 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m46513515659_1.jpg?1667288265
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3\012- data
Size
22 kB (22096 bytes)
Hash
5160d42b8ba690e536881385a7b25892
eb6d227d4529971df13360d35816ecebecf8f1ca
ab1751bec832a63ccb9fbba8658c2d52625bfa28086fd50df08c3a1719c88aab

HTTP Headers

GET /item/detail/orig/photos/m46513515659_1.jpg?1667288265 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EKKYF3HOXV6-ysxgYyIAAAAiNjE5YTE3OTIxOWRkNDhkNGFmZTY3N2M2NzUyNzA4ZWQi"
last-modified: Tue, 01 Nov 2022 07:37:46 GMT
x-amz-id-2: pNHf58YSSapTQOPDJXfiFUtkb+EzbYgZP0xN/avL3HeC5WC/sPpFOpJV1178xo8M7eGahAFIjiM=
x-amz-request-id: 7T8SF79B8JBFDD90
x-amz-version-id: 1w_Q8UlLGx83tRfwdXmVhMit2paDCjUU
via: http/1.1 rear.sv129 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 1069507
x-served-by: cache-tyo11973-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 11, 0
x-timer: S1675104310.097664,VS0,VE277
access-control-allow-origin: *
content-length: 22096
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m86625498259_1.jpg?1667211288

199.232.214.131

200 OK

161 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m86625498259_1.jpg?1667211288
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 810x1080, components 3\012- data
Size
161 kB (161011 bytes)
Hash
58164fe0a121f7f3ac13637e0c38cac3
0b4bf5901b29c0a903207994690aa3db0e3a18fe
fa8e9002d11e9b4f3e10f65172243a75f9d29fc66a7c95d6bba70a81dc198f63

HTTP Headers

GET /item/detail/orig/photos/m86625498259_1.jpg?1667211288 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"ELmLxYIcyTe5GaBfYyIAAAAiZjRkYWQyZDRhOThlMGI5MTkyY2I0ZDY3ZGFiZjVkMDgi"
last-modified: Mon, 31 Oct 2022 10:14:49 GMT
x-amz-id-2: mek9GdGfWPJrgMMLjzAI660tbeqcI+hgjRvVo+Y3at+mLee0aUuD7x73zCH/WVCwzX3hTmuBleA=
x-amz-request-id: 4AQ21CG465JR75GR
x-amz-version-id: .x4vSxYtmaWTNhC9K.HfWp4gLrFtrJbZ
via: http/1.1 rear.sv125 (ATS [cMsSfW]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 195968
x-served-by: cache-tyo11973-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 3, 0
x-timer: S1675104310.107686,VS0,VE267
access-control-allow-origin: *
content-length: 161011
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m76532833784_1.jpg?1670481005

199.232.214.131

200 OK

60 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m76532833784_1.jpg?1670481005
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x540, components 3\012- data
Size
60 kB (59801 bytes)
Hash
1d45f863b30ef8b3c73a48287bd21527
c6203c5104dfa27f1bb192ab7f455bd676e25891
25f99a9b3caa1b9571a05cf5c1385bde0bf3bae59e9552263e8f33ac9ba67387

HTTP Headers

GET /item/detail/orig/photos/m76532833784_1.jpg?1670481005 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EFFmStCMDCItboSRYyIAAAAiOWQyZGYxY2QzZmJmMmE3OWVlN2U3MzgzZjFkNzE4Njci"
last-modified: Thu, 08 Dec 2022 06:30:06 GMT
x-amz-id-2: DeomSTZIsrf0UosmXz1Wo8YUOoedAFbtP8bXmMlYWI6nsC0lj8TuTvP6MchVmWxi/WZ89FHkrpY=
x-amz-request-id: 1KDV7X5XRZ2EYDZ8
x-amz-version-id: OgwtSMY_pJ5V2E5RuBImmAWON7o9AtOq
via: http/1.1 rear.sv125 (ATS [cMsSfW]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 1213003
x-served-by: cache-tyo11938-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 7, 0
x-timer: S1675104310.107610,VS0,VE281
access-control-allow-origin: *
content-length: 59801
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m17994562033_1.jpg?1670417411

199.232.214.131

200 OK

70 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m17994562033_1.jpg?1670417411
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size
70 kB (69519 bytes)
Hash
835fe985088c0bbe636fe20cf3903a6b
8136b02ce21ed6af27ee59bc127c885e73329a83
9b6f9a793b77a1f7e756db1a32d94d75a3a367de2436c0cdb3f57aa628a38f3e

HTTP Headers

GET /item/detail/orig/photos/m17994562033_1.jpg?1670417411 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EAYlbjIg38R0BIyQYyIAAAAiNWM5NmNhYzNmYjMxNWQxZWZjYmNmMDI5Mzg2ZGMwNTki"
last-modified: Wed, 07 Dec 2022 12:50:12 GMT
x-amz-id-2: ldnPAKGj/66aErt+tZnca7ahS/8hbmoZILOEbmIKApa803kzRMLYPRpaMxrjEhZstsw1YjASglE=
x-amz-request-id: XT154QXCJ4N6979R
x-amz-version-id: EAm.yPAHR_eMjYEE6TtpnqSwx9MBMMgd
via: http/1.1 rear.sv121 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 668190
x-served-by: cache-tyo11927-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 4, 0
x-timer: S1675104310.098562,VS0,VE287
access-control-allow-origin: *
content-length: 69519
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m67731662390_1.jpg?1670204807

199.232.214.131

200 OK

205 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m67731662390_1.jpg?1670204807
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1028x1080, components 3\012- data
Size
205 kB (204894 bytes)
Hash
3e831697b15d250c639a50a2f044b1ba
a2272d5e0cc0c617a674447fc63b22a7820b1e3d
d86c71fba76d9f72082831183f5304b73806498fa565ec35b9a4f0e98133944d

HTTP Headers

GET /item/detail/orig/photos/m67731662390_1.jpg?1670204807 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EB2sT7yVu6z8iE2NYyIAAAAiYWQyYTI3MDY4Zjg5MjhmNjI5NTAwMzUwNTc2MTBkZDQi"
last-modified: Mon, 05 Dec 2022 01:46:48 GMT
x-amz-id-2: OVOIpmkQ3MLSEd7L0M/4uCeN7YuMLVAKiPV3oR9XggCe52lmZi4NUnHGxCgNooBG5ymSi2OZFOE=
x-amz-request-id: YQVTF65PJ2429956
x-amz-version-id: agWD3APNUN3UcxVrYjl3asXlZZd0iD_g
via: http/1.1 rear.sv122 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 2596287
x-served-by: cache-tyo11963-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 50, 0
x-timer: S1675104310.097830,VS0,VE301
access-control-allow-origin: *
content-length: 204894
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m55633175731_1.jpg?1669210771

199.232.214.131

200 OK

149 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m55633175731_1.jpg?1669210771
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x754, components 3\012- data
Size
149 kB (149168 bytes)
Hash
ba4fbebd69d87e15cef2d0acd9c20feb
d4bbf94cc187e823311163053add9fd5213839ea
262cb27ca8e5441b40d435814f9df522b13a1056d1fb120938ca8eb4cd5df874

HTTP Headers

GET /item/detail/orig/photos/m55633175731_1.jpg?1669210771 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"ELofNqRaft5ZlCJ-YyIAAAAiNTNmMDgxYzE0MWExNTA1MTViM2M3Y2NlMzQyODljMDci"
last-modified: Wed, 23 Nov 2022 13:39:32 GMT
x-amz-id-2: 80MC6XssOLBSf+9thPHYhRNq+KLboUMQ1qeCFAgLgTPeJMgO+/VIY4WZcdzdXv1VCJpd+VQOCDM=
x-amz-request-id: 8ZT305AFG336CYSB
x-amz-version-id: z4ACoWF3Jtjp1lXw4WBfX6zck._glzpL
via: http/1.1 rear.sv122 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 925680
x-served-by: cache-tyo11983-TYO, cache-bma1628-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675104310.098249,VS0,VE337
access-control-allow-origin: *
content-length: 149168
X-Firefox-Spdy: h2

static.mercdn.net/item/detail/orig/photos/m94291671135_1.jpg?1667778961

199.232.214.131

200 OK

84 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m94291671135_1.jpg?1667778961
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x720, components 3\012- data
Size
84 kB (84379 bytes)
Hash
f97885ecee8952e6dc973c89e2d15663
24c5cfa5a0f953ec0bf56b396df42bb9765130c9
6f3a14778143d494ed03cb99d303bffa2990659846fa9a9cae4d7f81343b63fe

HTTP Headers

GET /item/detail/orig/photos/m94291671135_1.jpg?1667778961 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EF4jih27nxufkkloYyIAAAAiNjk1ZmE0MGEwNzk0MTZjODZmMWE3OGIxMmNmNmQwNTAi"
last-modified: Sun, 06 Nov 2022 23:56:02 GMT
x-amz-id-2: oeq1yBx0SiXno2TrfRgoC+zOe46/5bYQNF6PQCLwrY0ASAXKqES04rGCW1WS8mp/GVT33p7ULtg=
x-amz-request-id: KKG63A689JEQZJFC
x-amz-version-id: 0tL5qkJZHu3MvAaH1_oOxNCsLsoiaiPq
via: http/1.1 rear.sv130 (ATS [cMsSfW]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:10 GMT
age: 0
x-served-by: cache-tyo11920-TYO, cache-bma1628-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675104310.107670,VS0,VE439
access-control-allow-origin: *
content-length: 84379
X-Firefox-Spdy: h2

ocsp.globalsign.com/gsgccr3dvtlsca2020

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1414 bytes)
Hash
571f80016ea0a84fa97793e71f23e224
7a17588e7122fa5dc44cdf76740beb5d75d13c75
678c3b8db1bcaef3354d24e9ed5d24e9294472c5327b8338b41256c3c7d2bf2c

HTTP Headers

POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 18:45:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 03 Feb 2023 15:47:37 GMT
ETag: "7a17588e7122fa5dc44cdf76740beb5d75d13c75"
Last-Modified: Mon, 30 Jan 2023 15:47:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 233
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791c5cf6ba900b69-OSL

static.mercdn.net/item/detail/orig/photos/m87843001315_1.jpg?1663390870

199.232.214.131

200 OK

42 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m87843001315_1.jpg?1663390870
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x720, components 3\012- data
Size
42 kB (42103 bytes)
Hash
1fc10c8d9c0d2e0335358614c724dc94
c1215b9f818f2e731ed9b5131c74e8db19326bb3
9e279e7ad482d4a17706ff5c7f30686af68ffbc7dcb126f5dca2a939d9e4714b

HTTP Headers

GET /item/detail/orig/photos/m87843001315_1.jpg?1663390870 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EOew8WoO6YYal1QlYyIAAAAiMjdmN2RjYjNkZTI1NjFjZDYxOTNhOWZhYzkwMWFjYzAi"
last-modified: Sat, 17 Sep 2022 05:01:11 GMT
x-amz-id-2: fKyek6Hu7IMdJDUV/dyeM4V/pROPtVSOrYLppmMCS1EZeMhlMq7Imp28Z7qcZvNkZXNYMojF4Pw=
x-amz-request-id: 4JDAZEPHS47GPRQM
x-amz-version-id: Zjgsqd2EVLmzUdurGjAvT.nSqCp.wV90
via: http/1.1 rear.sv125 (ATS [cHs f ]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:11 GMT
age: 580651
x-served-by: cache-tyo11967-TYO, cache-bma1628-BMA
x-cache: HIT, MISS
x-cache-hits: 2, 0
x-timer: S1675104310.107798,VS0,VE1077
access-control-allow-origin: *
content-length: 42103
X-Firefox-Spdy: h2

js.users.51.la/21512729.js

103.143.19.103

200 OK

2.3 kB

URL HTTP/1.1
js.users.51.la/21512729.js
IP
103.143.19.103:0
ASN
#4837 CHINA UNICOM China169 Backbone

File type
ASCII text, with very long lines (4898)
Size
2.3 kB (2310 bytes)
Hash
7226ed0dd590dd8550030bb23a59a827
f0a340307464dce3ff7b3afc2b0e4fe3139777b6
3a7f358b3f975e68c6efe7a6307ce4ee85eb038e9ae2b61053327313aa96be01

HTTP Headers

GET /21512729.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: CloudWAF
Date: Mon, 30 Jan 2023 18:45:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=d3c3b1f62d8f7e3bb4d; path=/
HWWAFSESTIME=1675104309712; path=/
Cache-Control: max-age=360000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip

static.mercdn.net/item/detail/orig/photos/m57014998618_1.jpg?1669187937

199.232.214.131

200 OK

127 kB

URL HTTP/2
static.mercdn.net/item/detail/orig/photos/m57014998618_1.jpg?1669187937
IP
199.232.214.131:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x810, components 3\012- data
Size
127 kB (126843 bytes)
Hash
e4f06987a9388cd11d872c472168e19d
1161082ee027d416cba16ae1e2b40ab7b8e7e4c6
f2971562823a1376309e27035bb0f65685980d9b2de86e35a8afb0a6968b825b

HTTP Headers

GET /item/detail/orig/photos/m57014998618_1.jpg?1669187937 HTTP/1.1
Host: static.mercdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
cache-control: max-age=315360000
etag: W/"EE1y-M4_whGgYsl9YyIAAAAiMGJkMzFlNDRkN2RmNThiMzVmMGE3Y2JmYzlmYzkxMTUi"
last-modified: Wed, 23 Nov 2022 07:18:58 GMT
x-amz-id-2: 2qHDE2HvObTj3AROvgbiJAMAI0WsDYj8twYso9z9oZ6FxgWzLAf4TjTTiDu29pVUVNe24GUpjbA=
x-amz-request-id: BHQ3HBARVXEDS61C
x-amz-version-id: l52GfVhN1XYZPeFbBl3T9S3CaYbPu3Ei
via: http/1.1 rear.sv102 (ATS [cMsSfW]), 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 30 Jan 2023 18:45:11 GMT
age: 0
x-served-by: cache-tyo11922-TYO, cache-bma1628-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675104310.098216,VS0,VE1547
access-control-allow-origin: *
content-length: 126843
X-Firefox-Spdy: h2

ocsp.globalsign.com/gsgccr3dvtlsca2020

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1414 bytes)
Hash
6491bdb9956ffc4d88acc1abf01f1b1d
80eb9d4d28fcd7c2063259767dcefcf0517e5629
c84875d3542db29ce3540d4585b9473a730f2f5912c65e5130111a454b1acbfe

HTTP Headers

POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 18:45:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 03 Feb 2023 15:44:07 GMT
ETag: "80eb9d4d28fcd7c2063259767dcefcf0517e5629"
Last-Modified: Mon, 30 Jan 2023 15:44:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 234
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791c5cff0bc40b69-OSL

ia.51.la/go1?id=21512729&rt=1675104324685&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E3%2580%2590%25E6%25A5%25BD%25E5%25A4%25A9%25E3%2582%25AB%25E3%2583%25BC%25E3%2583%2589%25E5%2588%2586%25E5%2589%25B2%25E3%2580%2591%25E3%2583%2599%25E3%2583%2593%25E3%2583%25BC%25E5%25AE%25B6%25E5%2585%25B7%252F%25E5%25AF%259D%25E5%2585%25B7%252F%25E5%25AE%25A4%25E5%2586%2585%25E7%2594%25A8%25E5%2593%2581%252C%25E3%2583%2599%25E3%2583%2593%25E3%2583%25BC%25E6%259C%258D(%25E7%2594%25B7%25E5%25A5%25B3&ing=1&ekc=&sid=1675104324685&tt=%25E3%2580%2590%25E3%2582%25B9%25E3%2583%258E%25E3%2583%25BC%25E3%2583%259C%25E3%2583%25BC%25E3%2583%2589%25E3%2580%2591%25E3%2580%2590%25E6%25A5%25BD%25E5%25A4%25A9%25E3%2582%25AB%25E3%2583%25BC%25E3%2583%2589%25E5%2588%2586%25E5%2589%25B2%25E3%2580%2591%25E8%2587%25AA%25E8%25BB%25A2%25E8%25BB%258A%25E6%25B5%25B4%25E8%25A1%25A3%252F%25E6%25B0%25B4%25E7%259D%2580&kw=%25E5%25AD%2590%25E3%2581%25A9%25E3%2582%2582%25E7%2594%25A8%25E3%2583%2595%25E3%2582%25A1%25E3%2583%2583%25E3%2582%25B7%25E3%2583%25A7%25E3%2583%25B3%25E5%25B0%258F%25E7%2589%25A9%252C%25E3%2581%25BE%25E3%2581%25A8%25E3%2582%2581%25E5%25A3%25B2%25E3%2582%258A%252C%25E3%2582%25AD%25E3%2583%2583%25E3%2582%25BA%25E6%259C%258D(%25E7%2594%25B7%25E3%2581%25AE%25E5%25AD%2590%25E7%2594%25A8)%2520100cm~%252C%25E3%2583%25AA%25E3%2583%25A9%25E3%2582%25AF%25E3%2582%25BC%25E3%2583%25BC%25E3%2582%25B7%25E3%2583%25A7%25E3%2583%25B3%252C%25E3%2583%259C%25E3%2583%2587%25E3%2582%25A3%25E3%2582%25B1%25E3%2582%25A2%252C%25E3%2582%25B9%25E3%2582%25AD%25E3%2583%25BC%252C%25E3%2581%258A%25E3%2582%2580%25E3%2581%25A4%252F%25E3%2583%2588%25E3%2582%25A4%25E3%2583%25AC%252F%25E3%2583%2590%25E3%2582%25B9%252C%25E6%2597%25A5%25E7%2594%25A8%25E5%2593%2581%252F%25E7%2594%259F%25E6%25B4%25BB%25E9%259B%2591%25E8%25B2%25A8%252F%25E6%2597%2585%25E8%25A1%258C%252C&cu=https%253A%252F%252Ffwdnq.looksigned.top%252F&pu=

183.240.166.132

200

0 B

URL HTTP/1.1
ia.51.la/go1?id=21512729&rt=1675104324685&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E3%2580%2590%25E6%25A5%25BD%25E5%25A4%25A9%25E3%2582%25AB%25E3%2583%25BC%25E3%2583%2589%25E5%2588%2586%25E5%2589%25B2%25E3%2580%2591%25E3%2583%2599%25E3%2583%2593%25E3%2583%25BC%25E5%25AE%25B6%25E5%2585%25B7%252F%25E5%25AF%259D%25E5%2585%25B7%252F%25E5%25AE%25A4%25E5%2586%2585%25E7%2594%25A8%25E5%2593%2581%252C%25E3%2583%2599%25E3%2583%2593%25E3%2583%25BC%25E6%259C%258D(%25E7%2594%25B7%25E5%25A5%25B3&ing=1&ekc=&sid=1675104324685&tt=%25E3%2580%2590%25E3%2582%25B9%25E3%2583%258E%25E3%2583%25BC%25E3%2583%259C%25E3%2583%25BC%25E3%2583%2589%25E3%2580%2591%25E3%2580%2590%25E6%25A5%25BD%25E5%25A4%25A9%25E3%2582%25AB%25E3%2583%25BC%25E3%2583%2589%25E5%2588%2586%25E5%2589%25B2%25E3%2580%2591%25E8%2587%25AA%25E8%25BB%25A2%25E8%25BB%258A%25E6%25B5%25B4%25E8%25A1%25A3%252F%25E6%25B0%25B4%25E7%259D%2580&kw=%25E5%25AD%2590%25E3%2581%25A9%25E3%2582%2582%25E7%2594%25A8%25E3%2583%2595%25E3%2582%25A1%25E3%2583%2583%25E3%2582%25B7%25E3%2583%25A7%25E3%2583%25B3%25E5%25B0%258F%25E7%2589%25A9%252C%25E3%2581%25BE%25E3%2581%25A8%25E3%2582%2581%25E5%25A3%25B2%25E3%2582%258A%252C%25E3%2582%25AD%25E3%2583%2583%25E3%2582%25BA%25E6%259C%258D(%25E7%2594%25B7%25E3%2581%25AE%25E5%25AD%2590%25E7%2594%25A8)%2520100cm~%252C%25E3%2583%25AA%25E3%2583%25A9%25E3%2582%25AF%25E3%2582%25BC%25E3%2583%25BC%25E3%2582%25B7%25E3%2583%25A7%25E3%2583%25B3%252C%25E3%2583%259C%25E3%2583%2587%25E3%2582%25A3%25E3%2582%25B1%25E3%2582%25A2%252C%25E3%2582%25B9%25E3%2582%25AD%25E3%2583%25BC%252C%25E3%2581%258A%25E3%2582%2580%25E3%2581%25A4%252F%25E3%2583%2588%25E3%2582%25A4%25E3%2583%25AC%252F%25E3%2583%2590%25E3%2582%25B9%252C%25E6%2597%25A5%25E7%2594%25A8%25E5%2593%2581%252F%25E7%2594%259F%25E6%25B4%25BB%25E9%259B%2591%25E8%25B2%25A8%252F%25E6%2597%2585%25E8%25A1%258C%252C&cu=https%253A%252F%252Ffwdnq.looksigned.top%252F&pu=
IP
183.240.166.132:0
ASN
#56040 China Mobile communications corporation

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /go1?id=21512729&rt=1675104324685&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E3%2580%2590%25E6%25A5%25BD%25E5%25A4%25A9%25E3%2582%25AB%25E3%2583%25BC%25E3%2583%2589%25E5%2588%2586%25E5%2589%25B2%25E3%2580%2591%25E3%2583%2599%25E3%2583%2593%25E3%2583%25BC%25E5%25AE%25B6%25E5%2585%25B7%252F%25E5%25AF%259D%25E5%2585%25B7%252F%25E5%25AE%25A4%25E5%2586%2585%25E7%2594%25A8%25E5%2593%2581%252C%25E3%2583%2599%25E3%2583%2593%25E3%2583%25BC%25E6%259C%258D(%25E7%2594%25B7%25E5%25A5%25B3&ing=1&ekc=&sid=1675104324685&tt=%25E3%2580%2590%25E3%2582%25B9%25E3%2583%258E%25E3%2583%25BC%25E3%2583%259C%25E3%2583%25BC%25E3%2583%2589%25E3%2580%2591%25E3%2580%2590%25E6%25A5%25BD%25E5%25A4%25A9%25E3%2582%25AB%25E3%2583%25BC%25E3%2583%2589%25E5%2588%2586%25E5%2589%25B2%25E3%2580%2591%25E8%2587%25AA%25E8%25BB%25A2%25E8%25BB%258A%25E6%25B5%25B4%25E8%25A1%25A3%252F%25E6%25B0%25B4%25E7%259D%2580&kw=%25E5%25AD%2590%25E3%2581%25A9%25E3%2582%2582%25E7%2594%25A8%25E3%2583%2595%25E3%2582%25A1%25E3%2583%2583%25E3%2582%25B7%25E3%2583%25A7%25E3%2583%25B3%25E5%25B0%258F%25E7%2589%25A9%252C%25E3%2581%25BE%25E3%2581%25A8%25E3%2582%2581%25E5%25A3%25B2%25E3%2582%258A%252C%25E3%2582%25AD%25E3%2583%2583%25E3%2582%25BA%25E6%259C%258D(%25E7%2594%25B7%25E3%2581%25AE%25E5%25AD%2590%25E7%2594%25A8)%2520100cm~%252C%25E3%2583%25AA%25E3%2583%25A9%25E3%2582%25AF%25E3%2582%25BC%25E3%2583%25BC%25E3%2582%25B7%25E3%2583%25A7%25E3%2583%25B3%252C%25E3%2583%259C%25E3%2583%2587%25E3%2582%25A3%25E3%2582%25B1%25E3%2582%25A2%252C%25E3%2582%25B9%25E3%2582%25AD%25E3%2583%25BC%252C%25E3%2581%258A%25E3%2582%2580%25E3%2581%25A4%252F%25E3%2583%2588%25E3%2582%25A4%25E3%2583%25AC%252F%25E3%2583%2590%25E3%2582%25B9%252C%25E6%2597%25A5%25E7%2594%25A8%25E5%2593%2581%252F%25E7%2594%259F%25E6%25B4%25BB%25E9%259B%2591%25E8%25B2%25A8%252F%25E6%2597%2585%25E8%25A1%258C%252C&cu=https%253A%252F%252Ffwdnq.looksigned.top%252F&pu= HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 
Content-Length: 0
Date: Mon, 30 Jan 2023 18:45:12 GMT

fwdnq.looksigned.top/style/css/stylesheet.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/stylesheet.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/stylesheet.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=9696
etag: W/"639d630e-25e0"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k86jBsCNpK5d4RpVoYs%2BeKgMvFk1VkSJuagswJirldCA3oo%2BHQa87JibwmBQbYmnyAPsI4HwfoU1ssP%2FP5fdOeOF1IaW%2FS51QaRrWWeB8w4JqyyxYFfhb1YUIy%2BtUkrlpFNceu7yiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa4cfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/images/banner02.png

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/images/banner02.png
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/banner02.png HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: image/png
content-length: 522069
last-modified: Sat, 17 Dec 2022 06:34:53 GMT
etag: "639d630d-7f755"
expires: Wed, 01 Mar 2023 18:44:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 23
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ecefZZ19UF67X9HW1E3nQwtUdgw1BdYnI9lmlIGprooRKfuctFmbDkjRtQgrusVbMJDfiMjGyMDee6naJQYF9tu2xHaPlpRG3jaEANAuFuHgDuPxv%2BAmufC1mu5y%2FvTCOWkw0xtY%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf10a77fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET / HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: language=jp
currency=JPY
html=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
zenid=1vg32j8n5b48urbfk93t9a6bj4; path=/; domain=fwdnq.looksigned.top; HttpOnly
position=aW5kZXgudHBs
position=aW5kZXgudHBs
position=aW5kZXgudHBs
position=aW5kZXgudHBs
position=aW5kZXgudHBs
position=aW5kZXgudHBs
position=aW5kZXgudHBs
position=aW5kZXgudHBs
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=irknZ8FUsyxAJezFuVXMPknyR2dKSAtofc4MqNgFaHYFSp1hO9EIpPHvUJ4VjxOfZbCHcJQF68rhFrPCBmHSv8QZ941IAEqVxw8QABKvO0f5CE%2FRU9Yzb3aaZQaKOeTEasq10Dod1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cda6ceffac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/stylesheet_cart.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/stylesheet_cart.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/stylesheet_cart.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=8522
etag: W/"639d630e-214a"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KHfxyiNdnmxgnCKk1MrqV2A0CSm0iHfrR7B2A0XsKYPNmrGTn%2BVrG2ajMGot%2FgTP3WEjy0GO1f523DS6auVJ5rwDbOKfQRTae2vPzvHo6EfDN%2FIWedM88Z9GnnqR7pwfc6pjj6u9TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa4ffac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/swiper.min.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/swiper.min.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/swiper.min.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
etag: W/"639d630e-4b93"
expires: Tue, 31 Jan 2023 06:44:46 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zvte155DKIw2EtPnTpxhQjDbo7frn6KZlnWdkxbNDNrWGqZD8wAwR8Rm0Ne%2Fzx4FSuxCMevsbgo2G5wIb5%2Fhed9FG1Z1L%2Bvd0pwFhRBsF3s3zklkvUnar2GSgDg2CqrGmgc8GfXeKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa5efac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/js/webs.js

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/js/webs.js
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /style/js/webs.js HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=1623
etag: W/"639d630e-657"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZWmPLyfAacc%2BtIAn3etnwtSBQ7nJbgcfHZdhFrzvGCwNfyJ6MRfd5qM3xU3k2rMbHLKswNr0JE4jtYoXGpG3rrKf%2BmCn8wPCceLsVPXl9VPWAJ7FDCfTVf3sOAlcpWrHS%2BPsbT%2BNZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf10a68fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/js/ofi.min.js

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/js/ofi.min.js
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /style/js/ofi.min.js HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: application/javascript
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
etag: W/"639d630e-cdb"
expires: Tue, 31 Jan 2023 06:44:46 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yB6%2F7tsv9%2BQ9jpijC%2BwNf8RVQkLwCjpPe%2BKbVVIHIfCkiM3Am6fA5VODQCgYgx8hU91fVzAZp5QctzZEFFl0%2B86z4jhJF1vMkM18EsrBb1i3FeW%2FAKmcg9rFW94t9g3s%2BDssevAEQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa60fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/style_dropmenu.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/style_dropmenu.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/style_dropmenu.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=915
etag: W/"639d630e-393"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZKKNeZMpvMa%2Fk9uD8TkCCDTarBHWzULtW%2B9Y4Nzg%2FlbWkSMqfeanIIUU0B2OKmf%2F7T9mwT5s4CLLs%2F6f6Tf5LqP22Sk1ZWEdY8b59u2UbJvU1pG0wAfB3Um5GX3l6rgrqI9pjO3tiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf0ea43fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/style_footer.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/style_footer.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/style_footer.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=3092
etag: W/"639d630e-c14"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SANy5b5QAX8WnpFQqGuNqXXTqyRKb4I8yKN1nHPUcQgp%2FCRsqhi8bGsnAbUqr58XroxMoBcSIRpGiUBP8DLayT33INHdWaIYTemvT5tJOGknhFynrY0qZ7At8sWPc2TfWnbnqtzHPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0ea46fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/style_header.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/style_header.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/style_header.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=7103
etag: W/"639d630e-1bbf"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z9XWa123bvVkoELMx3Z%2BWB4yh%2BAvjyzS5bxYBFrCk9ZokExNEWnlR1feIht4EVo57GL%2F3IF1CCj65uIY4gsia1hO46r1zytB0o0JYT4sBycNoAH1vC3X5wgJOAl8oBmw4z%2B2Sx1ZJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa4bfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/user-1-1-2.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/user-1-1-2.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/user-1-1-2.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=930
etag: W/"639d630e-3a2"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GlGv1%2BYb4QC8EgUrQjouqqHF8mCaOhIXK7cIEeZSDdUILMiQTBvLjNv5O4ooZXBHpPnZUh0fB3WFEVP0HeuP2I9aNZ7cPYG0yLcAo97gP%2FGp4Ifrh%2BTGc8TRIGBj%2FR%2BNlRJ82K1CdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c5cf0fa5dfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/js/jscript_jquery-1.8.3.min.js

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/js/jscript_jquery-1.8.3.min.js
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /style/js/jscript_jquery-1.8.3.min.js HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: application/javascript
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
etag: W/"639d630e-16dc5"
expires: Tue, 31 Jan 2023 06:44:46 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v3xGO%2BH77%2Byi2ZNWT%2BOuJ9SIL5qyy9xIkqubZoV5HH4nW0pfRdkNiNamtxfAGEq2k1s1W84e7%2BBYjchPX5DLe7I95MsiAREG0RBOXHwbIY%2FFTG91VkGGjVMFFvis2uQRq9DLw2anIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf10a6cfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/stylesheet_css_buttons.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/stylesheet_css_buttons.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/stylesheet_css_buttons.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=1488
etag: W/"639d630e-5d0"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K369AOF2LeCEI0KXDHD5IFKwuaV%2FgvC74QiK97541FTlSuR5X2q6%2BqWek4%2F5hi8UjRJCl8eXDFFZLeWQ1aUJBmsw2M%2F%2Bt36B2pKe0huseN8MsWeMFz0mOmR3Sfxa30ybIz86HHf3Qw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa55fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/stylesheet_index_home.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/stylesheet_index_home.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/stylesheet_index_home.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=2498
etag: W/"639d630e-9c2"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gZrAM2T0AZBUTOGXbpHkDe%2F6dYc4xMgVeFXmor31VceyUCQB9c24dJO4KZ3nGaxNpfY4vwDu57Nz6o0HupqQwQjw%2BoajlsJj8%2FFgoATwtCzQTdbpFG8FpBV7J1cA%2FG%2BR0Oxi%2B9MegQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa58fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/css/stylesheet_tm.css

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/css/stylesheet_tm.css
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /style/css/stylesheet_tm.css HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=35255
etag: W/"639d630e-89b7"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SAJSi1NiiUB%2Be75p2UFjPRB49JbvlMi2JWNcuLiACxEHEdwafcwAWZbn7438UGIn%2BCy0WkdppKz%2FnoMt41npIQRbpMRIvXmj9aso8TGTqgiV1roPDtzYksjnWYtAaQb9pKDpUylyxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf0fa5cfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fwdnq.looksigned.top/style/js/banner_change.js

104.21.24.96

200 OK

0 B

URL HTTP/2
fwdnq.looksigned.top/style/js/banner_change.js
IP
104.21.24.96:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /style/js/banner_change.js HTTP/1.1
Host: fwdnq.looksigned.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fwdnq.looksigned.top/
Cookie: language=jp; currency=JPY; zenid=1vg32j8n5b48urbfk93t9a6bj4; position=aW5kZXgudHBs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:45:09 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=4475
etag: W/"639d630e-117b"
expires: Tue, 31 Jan 2023 06:44:46 GMT
last-modified: Sat, 17 Dec 2022 06:34:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bj0iS20mlWjB%2B6tYOI3lCmJTu3HVosIzn2Xxpfp4P9Fci5q3h5%2B2cfspN52fpzkVYpwwjnCB7mIx940Pwq1p4z2lpzQAozVDv7jzdfemUNIjX6cgtbLMnKq6eqz69MK%2FXc0mNibucw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c5cf11a79fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML