Report - nuvzju.xyz/

Report Overview

Visited public
2024-06-25 04:22:25
Tags
Submit Tags
URL
nuvzju.xyz/
Finishing URL
k8g5uy6x.xyz/
IP / ASN
198.16.50.246
#40065 CNSERVERS
Title
APP v6996v.com APP

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
k8g5uy6x.xyz	unknown	unknown	No data	No data	3.4 kB	272 kB	23.225.201.102
	unknown				5.1 kB	257 kB	23.224.112.214
www.zaoxingwu.com	unknown	unknown	No data	No data	445 B	211 B	43.202.168.202
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-06-24 18:13:10	2.0 kB	5.3 kB	23.36.76.226
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09 21:05:29	2024-06-24 22:25:18	672 B	1.6 kB	172.64.149.23
nuvzju.xyz	unknown	unknown	No data	No data	1.4 kB	2.5 kB	198.16.50.245
c11011.com	unknown	2023-11-04	2023-11-04 22:26:29	2024-04-04 19:36:18	441 B	301 B	0.0.0.0
vjs.zencdn.net	4968	2011-12-27	2012-05-21 10:26:59	2024-06-24 19:05:23	844 B	208 kB	151.101.130.217
imgsrc.baidu.com	78485	1999-10-11	2012-05-23 12:30:48	2024-06-14 13:45:32	1.4 kB	422 kB	104.193.88.109
uu11771.com	unknown	2024-02-02	2024-02-13 22:37:45	2024-02-25 09:43:52	442 B	764 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-06-25 04:21:59	low	198.16.50.245	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:21:59	low	198.16.50.245	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-06-25 04:22:02	low	23.225.201.102	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:22:02	low	23.225.201.102	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)
2024-06-25 04:22:05	low	23.224.112.214	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	k8g5uy6x.xyz/assets/HomeView-BpkCuV9j.js	ScriptElement	26 kB	2024-08-19	2024-08-19
Pretty URL k8g5uy6x.xyz/assets/HomeView-BpkCuV9j.js IP 23.225.201.102 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 18:59 Last Seen2024-08-19 18:59 Times Seen1 Hash 9dbcacb142616a7618dc8f28b671f7ad 9805e4e9f7998800cf7a27d4ec6b44440dac426f 23e4185d1b607433316f3052e05dbfb63e3fec6dffac5f5be7f1b22836dbe9ee Loading...

	k8g5uy6x.xyz/	ScriptElement	41 kB	2024-08-19	2024-08-19
Pretty URL k8g5uy6x.xyz/ IP 23.225.201.102 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 18:59 Last Seen2024-08-19 18:59 Times Seen1 Hash 08cd7d3f61af2618a2a421760b953633 fa511a2bfa95b067b6ea4da0e1899843796a7f56 7c448bfc4c304b48afaa7b5c6a27b2698aa8de9ba3321e01b4fa58b47141c275 Loading...

	k8g5uy6x.xyz/registerSW.js	ScriptElement	134 B	2023-03-11	2025-07-06
Pretty URL k8g5uy6x.xyz/registerSW.js IP 23.225.201.102 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 15:21 Last Seen2025-07-06 04:11 Times Seen945 Hash 1872c500de691dce40960bb85481de07 b83dfcba8d2c57ca8837324bf395f34748033a50 9742073ef7fc795e7673d98f272992843298426a0ffd8cb3507784df5143608b Loading...

	k8g5uy6x.xyz/	ScriptElement	411 B	2024-08-19	2024-08-19
Pretty URL k8g5uy6x.xyz/ IP 23.225.201.102 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 18:59 Last Seen2024-08-19 18:59 Times Seen1 Hash e4b24d8e418adef2caed552df867882d a26e7b2df1d0780cbd39c9232a151aa44aa1a39f 4cc54f982ee30779524d1994e6fa719e45af6a9f48569e1c1a720c160467b8bd Loading...

	k8g5uy6x.xyz/assets/index-AYjM9yzR.js	ScriptElement	126 kB	2024-08-19	2024-08-19
Pretty URL k8g5uy6x.xyz/assets/index-AYjM9yzR.js IP 23.225.201.102 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 18:59 Last Seen2024-08-19 18:59 Times Seen1 Hash 1ff629578a976c522eb293a3aa74b8b9 55808edc80dbe07f8a588016659ec365f02a31c3 d2a125191a59a4c2ad97aa9905c746505b7f45dd7f3c40ee6a05480adb24a34c Loading...

HTTP Transactions (38)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 116d4d1edb43ea3783c92812f245f108 02c09fc6450c50f5d2f7f6162fed01cf2c4bf6b8 f661a4c5b81edb82ec095d2d50b655e19536630577352b6abbfc3962adf3454c HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "F661A4C5B81EDB82EC095D2D50B655E19536630577352B6ABBFC3962ADF3454C" Last-Modified: Sun, 23 Jun 2024 01:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9005 Expires: Tue, 25 Jun 2024 06:52:03 GMT Date: Tue, 25 Jun 2024 04:21:58 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash a0df476aabc83408676a1db571e8e885 a8522ed457ae3e068d543d0c52e3d041a14e8f72 d01cb238cf68efecdce74166a560dcf6989862ab6adf726a764deabb4f8ef017 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "D01CB238CF68EFECDCE74166A560DCF6989862AB6ADF726A764DEABB4F8EF017" Last-Modified: Mon, 24 Jun 2024 23:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7198 Expires: Tue, 25 Jun 2024 06:21:56 GMT Date: Tue, 25 Jun 2024 04:21:58 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash b759b7db0b1e744941c094170ce2d69d 455ac12d34df1d589a07c8e8c6403be6484d0a04 d4178b58a3ba98404f5136dd600e8ee69cd3a669237d75cb632c1234ef647cbc HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "D4178B58A3BA98404F5136DD600E8EE69CD3A669237D75CB632C1234EF647CBC" Last-Modified: Mon, 24 Jun 2024 16:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12980 Expires: Tue, 25 Jun 2024 07:58:19 GMT Date: Tue, 25 Jun 2024 04:21:59 GMT Connection: keep-alive`

	zerossl.ocsp.sectigo.com/	172.64.149.23		317 B
URL zerossl.ocsp.sectigo.com/ IP 172.64.149.23:0 ASN #13335 CLOUDFLARENET File type data Size 317 B (317 bytes) Hash f90ec8dd1a802cf53eca28b1533d2973 8d5e2f1ef7c5ad7a2c204bfcec352afe6b788ade 08215554f5a6577a9b6f8c0048f987176a8c1cfae88ccfbd01794dc4e87bccdb HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 25 Jun 2024 04:21:59 GMT Content-Type: application/ocsp-response Content-Length: 317 Connection: keep-alive Last-Modified: Tue, 25 Jun 2024 01:42:58 GMT Expires: Tue, 02 Jul 2024 01:42:57 GMT Etag: "8d5e2f1ef7c5ad7a2c204bfcec352afe6b788ade" Cache-Control: max-age=594657,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89922c857eb21c12-OSL`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash fe36e270c1ecfa3891cc7b505e7894b6 ce43401e7146eb139a1e3caf7db957e6b9531dc3 bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802" Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3015 Expires: Tue, 25 Jun 2024 05:12:16 GMT Date: Tue, 25 Jun 2024 04:22:01 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash fe36e270c1ecfa3891cc7b505e7894b6 ce43401e7146eb139a1e3caf7db957e6b9531dc3 bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802" Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3015 Expires: Tue, 25 Jun 2024 05:12:16 GMT Date: Tue, 25 Jun 2024 04:22:01 GMT Connection: keep-alive`

	GET nuvzju.xyz/?key=ok	198.16.50.245	302 Found	142 B
URL User Request GET HTTP/2 nuvzju.xyz/?key=ok IP 198.16.50.245:443 ASN #40065 CNSERVERS Certificate IssuerZeroSSL Subjectnuvzju.xyz Fingerprint0E:A8:61:E1:C3:26:B4:DF:3C:19:AB:2F:74:3B:EE:DD:04:73:2F:66 ValiditySat, 27 Apr 2024 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT File type HTML document, ASCII text, with CRLF line terminators Size 142 B (142 bytes) Hash 82c98e8e012b79c922655461171cc2fa 0828d79135573276005b04be42d79a8a3291292b 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c HTTP Headers `GET /?key=ok HTTP/1.1 Host: nuvzju.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://nuvzju.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 302 Found server: openresty date: Tue, 25 Jun 2024 04:24:58 GMT content-type: text/html content-length: 142 location: https://k8g5uy6x.xyz access-control-allow-origin: * X-Firefox-Spdy: h2`

	zerossl.ocsp.sectigo.com/	172.64.149.23		315 B
URL zerossl.ocsp.sectigo.com/ IP 172.64.149.23:0 ASN #13335 CLOUDFLARENET File type data Size 315 B (315 bytes) Hash 941ebb127abf7264a240cf6904354267 67a303ca597eb9c66f0e55596fb754c34f6b3549 90e183b492e8579494c2136aa098314dc9e1e7bb44bcac3101b5e4308380f028 HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 25 Jun 2024 04:22:02 GMT Content-Type: application/ocsp-response Content-Length: 315 Connection: keep-alive Last-Modified: Mon, 24 Jun 2024 07:19:41 GMT Expires: Mon, 01 Jul 2024 07:19:40 GMT Etag: "67a303ca597eb9c66f0e55596fb754c34f6b3549" Cache-Control: max-age=528457,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb3 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89922c9a4fca1c12-OSL`

	GET k8g5uy6x.xyz/assets/index-AYjM9yzR.js	23.225.201.102	200 OK	67 kB
URL GET HTTP/2 k8g5uy6x.xyz/assets/index-AYjM9yzR.js IP 23.225.201.102:443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type gzip compressed data, max speed, from Unix Size 67 kB (67377 bytes) Hash e0938ec62237e793b710f90526ba6b97 1a1d1313a3159dc745914a87ed10fc7aa0f7f3a4 d311d4c14355443e263aef3ddc57a226ff6007801a10a1ef58a75d27d60397ff HTTP Headers `GET /assets/index-AYjM9yzR.js HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:03 GMT content-type: application/javascript; charset=utf-8 last-modified: Mon, 24 Jun 2024 13:36:10 GMT vary: Accept-Encoding etag: W/"6679764a-1ea57" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN content-encoding: gzip X-Firefox-Spdy: h2`

	GET k8g5uy6x.xyz/registerSW.js	23.225.201.102	200 OK	39 kB
URL GET HTTP/2 k8g5uy6x.xyz/registerSW.js IP 23.225.201.102:443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type Unicode text, UTF-8 text, with very long lines (44366) Size 39 kB (38777 bytes) Hash bf0c6946e4df2d6fe9dc37c226f0c95c b2956dbfa30d145661f28c64b21694862a6ac8fa ee3657455e0971a3fee740912f2f891eadb326c1add9389580d0dc1d790bdbe6 HTTP Headers `GET /registerSW.js HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:03 GMT content-type: application/javascript; charset=utf-8 last-modified: Mon, 24 Jun 2024 13:36:10 GMT vary: Accept-Encoding etag: W/"6679764a-86" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN content-encoding: gzip X-Firefox-Spdy: h2`

	GET vjs.zencdn.net/7.18.1/video.min.js	151.101.130.217	200 OK	161 kB
URL GET HTTP/2 vjs.zencdn.net/7.18.1/video.min.js IP 151.101.130.217:443 ASN #54113 FASTLY Requested by https://k8g5uy6x.xyz/ Certificate IssuerGlobalSign nv-sa Subjectvjs.zencdn.net Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17 ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT File type JavaScript source, Unicode text, UTF-8 text, with very long lines (48246) Size 161 kB (161243 bytes) Hash 2aaaaa0a5cce6de0b6a34997d3c36015 ef277265f6235ce7abdbce5000a5a3756c5b4e8c cbf335cdb19e47784face065ff2196f3b2fac3ba515a7b75e8822c3fd1f3c655 HTTP Headers `GET /7.18.1/video.min.js HTTP/1.1 Host: vjs.zencdn.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Moz: prefetch DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK last-modified: Wed, 23 Feb 2022 22:50:39 GMT etag: "2aaaaa0a5cce6de0b6a34997d3c36015" cache-control: public, max-age=31536000 content-type: application/javascript; charset=utf-8 content-encoding: gzip date: Tue, 25 Jun 2024 04:22:04 GMT x-served-by: cache-hel1410027-HEL x-cache: HIT x-cache-hits: 0 vary: Accept-Encoding access-control-allow-origin: * timing-allow-origin: * content-length: 161243 X-Firefox-Spdy: h2`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c9131d5664dea6b98d96b3dc84e651da 38e7ad4815f3fca6500beaa4e4ecb5f1a5e29676 10f5350346c1e9743e130fadfbad514c11574e128df216e1f07426b22562ac18 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "10F5350346C1E9743E130FADFBAD514C11574E128DF216E1F07426B22562AC18" Last-Modified: Sun, 23 Jun 2024 12:17:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18806 Expires: Tue, 25 Jun 2024 09:35:31 GMT Date: Tue, 25 Jun 2024 04:22:05 GMT Connection: keep-alive`

	GET jt9ath.xyz:8443/6cce0a9e301395e9758b21de997675f3.webp	23.224.112.214	200 OK	3.3 kB
URL GET HTTP/2 jt9ath.xyz:8443/6cce0a9e301395e9758b21de997675f3.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 3.3 kB (3312 bytes) Hash 4f155a389014a457f8a747bb1846b154 c6c658888d2d683b9e291e82a1a4de2c193876ed 71d93bd0635d35d78eee45009ba3abff95217fcdb64c14b05a6921d6b7e99568 HTTP Headers `GET /6cce0a9e301395e9758b21de997675f3.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 3312 last-modified: Wed, 22 May 2024 07:05:16 GMT etag: "664d992c-cf0" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

	GET jt9ath.xyz:8443/426a1352a162f050c297c68dd36a2395.webp	23.224.112.214	200 OK	4.2 kB
URL GET HTTP/2 jt9ath.xyz:8443/426a1352a162f050c297c68dd36a2395.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 4.2 kB (4242 bytes) Hash 46d347f8cd0b728cc91841a76a007fae 34f013d66d2e245568c7ce849b198f13e25c9c1c e00a442ce2b64e84352600b9e8e0eedfe3e4daf218bc63406008bd0cbfab5167 HTTP Headers `GET /426a1352a162f050c297c68dd36a2395.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 4242 last-modified: Wed, 08 May 2024 19:05:08 GMT etag: "663bcce4-1092" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

	GET jt9ath.xyz:8443/fa93fd36fc6c9ad75f9200eebf2126a9.webp	23.224.112.214	200 OK	7.1 kB
URL GET HTTP/2 jt9ath.xyz:8443/fa93fd36fc6c9ad75f9200eebf2126a9.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 7.1 kB (7076 bytes) Hash 8ede90fdcb8a9d47ea313b06fb90e55a 98ae6eb1f85bae14b9070494b0345f61c3273c62 106328e34bcb9373160106c6816ef3f2186d8ef320161cbb8e7adf978c16dc51 HTTP Headers `GET /fa93fd36fc6c9ad75f9200eebf2126a9.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 7076 last-modified: Thu, 23 May 2024 09:05:30 GMT etag: "664f06da-1ba4" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

	GET k8g5uy6x.xyz/api/home	23.225.201.102	200 OK	27 kB
URL GET HTTP/2 k8g5uy6x.xyz/api/home IP 23.225.201.102:443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type gzip compressed data, max speed, from Unix Size 27 kB (27318 bytes) Hash 4e1743007f9e094a0bd7263e7be1fe52 147ccb580c59c69c3e702782d2d80be41cb83e20 5e17ab5fad91be62427fb94c01375ed28d2aa0e121d32985e0b60a46a05aa526 HTTP Headers `GET /api/home HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://k8g5uy6x.xyz/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:04 GMT content-type: application/json last-modified: Mon, 17 Jun 2024 09:22:32 GMT vary: Accept-Encoding etag: W/"66700058-e538" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN content-encoding: gzip X-Firefox-Spdy: h2`

	GET jt9ath.xyz:8443/5fdbaec83834445997407e51bea1219c.webp	23.224.112.214	200 OK	4.9 kB
URL GET HTTP/2 jt9ath.xyz:8443/5fdbaec83834445997407e51bea1219c.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 4.9 kB (4914 bytes) Hash 52c8b6e40fc5403f19241bc19d93456d 14e8f84c428498a8c44d5cf13b5d11272b6c19f4 532f2f6eaf1b3af7a3420d7c35954b13f4ec257d50cc46631da1a7e9c99bc32f HTTP Headers `GET /5fdbaec83834445997407e51bea1219c.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 4914 last-modified: Wed, 22 May 2024 09:05:19 GMT etag: "664db54f-1332" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

	GET www.zaoxingwu.com/images/666d8810bfcbd9ba3e82adca.gif	43.202.168.202	302 Found	0 B
URL GET HTTP/2 www.zaoxingwu.com/images/666d8810bfcbd9ba3e82adca.gif IP 43.202.168.202:443 ASN #16509 AMAZON-02 Requested by https://k8g5uy6x.xyz/ Certificate IssuerLet's Encrypt Subjectzaoxingwu.com FingerprintC6:53:78:25:42:0C:51:80:57:99:47:26:3A:C7:E8:78:1D:F6:B6:9D ValidityTue, 07 May 2024 03:28:55 GMT - Mon, 05 Aug 2024 03:28:54 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /images/666d8810bfcbd9ba3e82adca.gif HTTP/1.1 Host: www.zaoxingwu.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found content-length: 0 referrer-policy: no-referrer cache-control: max-age=600 location: https://imgsrc.baidu.com/tieba/pic/item/562c11dfa9ec8a135514ccdeb103918fa0ecc086.jpg X-Firefox-Spdy: h2`

	GET jt9ath.xyz:8443/b6e6409d83003787aad345cc87403dd4.webp	23.224.112.214	200 OK	6.3 kB
URL GET HTTP/2 jt9ath.xyz:8443/b6e6409d83003787aad345cc87403dd4.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 6.3 kB (6312 bytes) Hash 2c91c0ba3f47e8d2d8f60eab9acdbeca 7d8a3300c4764d2cc22d27b3d63e96334129cf70 286db5dc4b1ced6afd02c30adcf89d72f24a689ab7ad9680898f39ea376a92d4 HTTP Headers `GET /b6e6409d83003787aad345cc87403dd4.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 6312 last-modified: Thu, 09 May 2024 03:18:13 GMT etag: "663c4075-18a8" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

	GET jt9ath.xyz:8443/4df42d649f1a570fe3023110346cf377.webp	23.224.112.214	200 OK	6.5 kB
URL GET HTTP/2 jt9ath.xyz:8443/4df42d649f1a570fe3023110346cf377.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 6.5 kB (6474 bytes) Hash f00d8beb3a6d094ffafe18c07026bf2b eb2c4be9e20e44f19bb8319560a5843ce8d1d36b 3d7ccfd68af2fec142b4ecd10c4894e459a23540b3a9cbc06959a6491fe32a96 HTTP Headers `GET /4df42d649f1a570fe3023110346cf377.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 6474 last-modified: Tue, 21 May 2024 17:05:11 GMT etag: "664cd447-194a" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

	GET jt9ath.xyz:8443/31a6d444993cd8e746126cd43e52c670.webp	23.224.112.214	200 OK	7.6 kB
URL GET HTTP/2 jt9ath.xyz:8443/31a6d444993cd8e746126cd43e52c670.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 7.6 kB (7616 bytes) Hash 641fc078ebfcad2a9d1384f4e48b2d74 7188d72fc119ba8fd6498696d30cace3849d62ee 9cdd41800ad7f353c0743da772998d191f1c8cb501066eaca0e331ae50feb00d HTTP Headers `GET /31a6d444993cd8e746126cd43e52c670.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 7616 last-modified: Tue, 21 May 2024 09:05:15 GMT etag: "664c63cb-1dc0" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

	GET imgsrc.baidu.com/tieba/pic/item/562c11dfa9ec8a135514ccdeb103918fa0ecc086.jpg	104.193.88.109	200 OK	147 kB
URL GET HTTP/2 imgsrc.baidu.com/tieba/pic/item/562c11dfa9ec8a135514ccdeb103918fa0ecc086.jpg IP 104.193.88.109:443 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Requested by https://k8g5uy6x.xyz/ Certificate IssuerGlobalSign nv-sa Subjectbaidu.com Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT File type GIF image data, version 89a, 410 x 50 Size 147 kB (146842 bytes) Hash 3a47f2b72867caa3892962fd6a183644 6e367fea64c1a4c13f8f2744df080d31a1e5910f 0edb3b9bde19faf44768129e8bc5538f04307c54da8e4cc9a80dcfad463f1117 HTTP Headers `GET /tieba/pic/item/562c11dfa9ec8a135514ccdeb103918fa0ecc086.jpg HTTP/1.1 Host: imgsrc.baidu.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: JSP3/2.0.14 date: Tue, 25 Jun 2024 04:22:06 GMT content-type: image/gif content-length: 146842 expires: Sun, 21 Jul 2024 07:32:37 GMT last-modified: Sat, 03 Jan 1970 00:00:00 GMT etag: 3a47f2b72867caa3892962fd6a183644 age: 334169 accept-ranges: bytes access-control-allow-origin: * ohc-global-saved-time: Fri, 21 Jun 2024 07:32:37 GMT ohc-cache-hit: sfo01-sys-jorcol04.sfo01.baidu.com [2] ohc-response-time: 1 0 0 0 0 0 X-Firefox-Spdy: h2`

	GET w0074.com:33236/b8326c5cbb5940298d874c1fe9aac5a2.gif	103.189.109.181	200 OK	211 kB
URL GET HTTP/1.1 w0074.com:33236/b8326c5cbb5940298d874c1fe9aac5a2.gif IP 103.189.109.181:33236 ASN #7483 Skycloud Computing co., Ltd. Requested by https://k8g5uy6x.xyz/ Certificate IssuerLet's Encrypt Subjectw0074.com FingerprintFF:6C:60:61:9D:F0:DF:6F:2C:CA:84:3B:AD:2B:0A:3B:3A:DB:A7:57 ValiditySat, 22 Jun 2024 16:29:26 GMT - Fri, 20 Sep 2024 16:29:25 GMT File type GIF image data, version 89a, 960 x 150 Size 211 kB (210799 bytes) Hash da77aabc66abd274b14d7b0308cb4782 a257a9af1eeea1222504c44d8e0fffaee350efde f6f1763eaeef0fd3a6c1c2ff200ebf5dde745176fa0046dc952b3c7819178576 HTTP Headers `GET /b8326c5cbb5940298d874c1fe9aac5a2.gif HTTP/1.1 Host: w0074.com:33236 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Cache-Control: max-age=3600 ETag: "6678109d-3376f" Server: nginx Date: Sun, 23 Jun 2024 12:46:04 GMT Content-Type: image/gif Last-Modified: Sun, 23 Jun 2024 12:10:05 GMT Accept-Ranges: bytes X-Cache: HIT from my109-cdnb-g01-ty8z2109-33 Content-Length: 210799`

	GET imgsrc.baidu.com/forum/pic/item/c83d70cf3bc79f3d868e2c0dfca1cd11728b29a4.jpg	104.193.88.109	200 OK	111 kB
URL GET HTTP/2 imgsrc.baidu.com/forum/pic/item/c83d70cf3bc79f3d868e2c0dfca1cd11728b29a4.jpg IP 104.193.88.109:443 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Requested by https://k8g5uy6x.xyz/ Certificate IssuerGlobalSign nv-sa Subjectbaidu.com Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT File type GIF image data, version 89a, 410 x 50 Size 111 kB (111323 bytes) Hash 573c5f8ea8f3f3376ec67f0fc7c9e026 c8fc8e5d8cbe7bfa520d1f920ac260972b7639ee 7e0c67110ea6933bb32b5470c5d94a82b779ddbe88f0c7f2be83862f013a4617 HTTP Headers `GET /forum/pic/item/c83d70cf3bc79f3d868e2c0dfca1cd11728b29a4.jpg HTTP/1.1 Host: imgsrc.baidu.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: JSP3/2.0.14 date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/gif content-length: 111323 access-control-allow-origin: * etag: 573c5f8ea8f3f3376ec67f0fc7c9e026 expires: Thu, 25 Jul 2024 04:22:05 GMT last-modified: Thu, 01 Jan 1970 00:00:00 GMT X-Firefox-Spdy: h2`

	GET imgsrc.baidu.com/forum/pic/item/d009b3de9c82d158b1b9898cc60a19d8bc3e42d0.jpg	104.193.88.109	200 OK	163 kB
URL GET HTTP/2 imgsrc.baidu.com/forum/pic/item/d009b3de9c82d158b1b9898cc60a19d8bc3e42d0.jpg IP 104.193.88.109:443 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Requested by https://k8g5uy6x.xyz/ Certificate IssuerGlobalSign nv-sa Subjectbaidu.com Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT File type GIF image data, version 89a, 960 x 150 Size 163 kB (162811 bytes) Hash 7ba2eb2430d44478c2034050ee4eadd1 99d949c6f8153cdd6cba050051e3feb58a45853b 940f007036093566696467793f9e91bb5197d2f842a5e98034a50c31a0500842 HTTP Headers `GET /forum/pic/item/d009b3de9c82d158b1b9898cc60a19d8bc3e42d0.jpg HTTP/1.1 Host: imgsrc.baidu.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: JSP3/2.0.14 date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/gif content-length: 162811 access-control-allow-origin: * etag: 7ba2eb2430d44478c2034050ee4eadd1 expires: Thu, 25 Jul 2024 04:22:05 GMT last-modified: Thu, 01 Jan 1970 00:00:00 GMT X-Firefox-Spdy: h2`

	GET k8g5uy6x.xyz/assets/index-CJJurO4H.css	23.225.201.102	200 OK	54 kB
URL GET HTTP/2 k8g5uy6x.xyz/assets/index-CJJurO4H.css IP 23.225.201.102:443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type Size 54 kB (53611 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /assets/index-CJJurO4H.css HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:03 GMT content-type: text/css last-modified: Mon, 24 Jun 2024 13:36:10 GMT vary: Accept-Encoding etag: W/"6679764a-d16b" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN content-encoding: gzip X-Firefox-Spdy: h2`

	GET k8g5uy6x.xyz/favicon.ico	23.225.201.102	200 OK	4.3 kB
URL GET HTTP/2 k8g5uy6x.xyz/favicon.ico IP 23.225.201.102:443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Size 4.3 kB (4286 bytes) Hash d5c0691cc08e12622748a501ccc59c45 e8c1566cef05048ceb330a7f4faa4a67d45d236f f2a964afb98c55a8a89e65c6d6e0429c1c9342fe68686e026d96b2e0a6e09f11 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:04 GMT content-type: image/x-icon content-length: 4286 last-modified: Mon, 24 Jun 2024 13:36:10 GMT etag: "6679764a-10be" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN accept-ranges: bytes X-Firefox-Spdy: h2`

	GET k8g5uy6x.xyz/assets/HomeView-BpkCuV9j.js	23.225.201.102	200 OK	26 kB
URL GET HTTP/2 k8g5uy6x.xyz/assets/HomeView-BpkCuV9j.js IP 23.225.201.102:443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type Size 26 kB (25611 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /assets/HomeView-BpkCuV9j.js HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/assets/index-AYjM9yzR.js Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:04 GMT content-type: application/javascript; charset=utf-8 last-modified: Mon, 24 Jun 2024 13:36:10 GMT vary: Accept-Encoding etag: W/"6679764a-640b" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN content-encoding: gzip X-Firefox-Spdy: h2`

	GET k8g5uy6x.xyz/	23.225.201.102	200 OK	42 kB
URL User Request GET HTTP/2 k8g5uy6x.xyz/ IP 23.225.201.102:443 ASN #40065 CNSERVERS Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type Size 42 kB (42087 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://nuvzju.xyz/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:02 GMT content-type: text/html; charset=utf-8 last-modified: Mon, 24 Jun 2024 13:36:10 GMT vary: Accept-Encoding etag: W/"6679764a-a467" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN content-encoding: gzip X-Firefox-Spdy: h2`

	OPTIONS dn5c7.mom:22222/wfMonitor/upLogs	0.0.0.0		0 B
URL OPTIONS dn5c7.mom:22222/wfMonitor/upLogs IP 0.0.0.0:0 ASN #0 Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `OPTIONS /wfMonitor/upLogs HTTP/1.1 Host: dn5c7.mom:22222 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://k8g5uy6x.xyz/ Origin: https://k8g5uy6x.xyz DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache`

	GET vjs.zencdn.net/7.18.1/video-js.css	151.101.130.217	200 OK	45 kB
URL GET HTTP/2 vjs.zencdn.net/7.18.1/video-js.css IP 151.101.130.217:443 ASN #54113 FASTLY Requested by https://k8g5uy6x.xyz/ Certificate IssuerGlobalSign nv-sa Subjectvjs.zencdn.net Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17 ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT File type Size 45 kB (45359 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /7.18.1/video-js.css HTTP/1.1 Host: vjs.zencdn.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Moz: prefetch DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK last-modified: Wed, 23 Feb 2022 22:50:39 GMT etag: "dd30b80727d68fe531e91ccdd99c3c4d" cache-control: public, max-age=31536000 content-type: text/css; charset=utf-8 content-encoding: gzip date: Tue, 25 Jun 2024 04:22:04 GMT x-served-by: cache-hel1410027-HEL x-cache: HIT x-cache-hits: 389 vary: Accept-Encoding access-control-allow-origin: * timing-allow-origin: * content-length: 10817 X-Firefox-Spdy: h2`

	GET nuvzju.xyz/	198.16.50.245	200 OK	1.5 kB
URL User Request GET HTTP/2 nuvzju.xyz/ IP 198.16.50.245:443 ASN #40065 CNSERVERS Certificate IssuerZeroSSL Subjectnuvzju.xyz Fingerprint0E:A8:61:E1:C3:26:B4:DF:3C:19:AB:2F:74:3B:EE:DD:04:73:2F:66 ValiditySat, 27 Apr 2024 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT File type JavaScript source, Unicode text, UTF-8 text, with very long lines (1538), with no line terminators Size 1.5 kB (1543 bytes) Hash 790da6b7ffa81340db94ae0d24bd0cb1 b52e168d5374bb293f0b2fedd7a9b4896b44aff9 3337cee51774d10985f190b7eb001a10307a4e93ea1eb09b1ce96ea45ff68ef1 HTTP Headers `GET / HTTP/1.1 Host: nuvzju.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:24:55 GMT content-type: text/html; charset=utf-8 last-modified: Thu, 07 Mar 2024 19:07:46 GMT vary: Accept-Encoding etag: W/"65ea1082-607" access-control-allow-origin: * content-encoding: gzip X-Firefox-Spdy: h2`

	GET uu11771.com/0766769243f3b5eb2e370051a64d32ac.gif	0.0.0.0		0 B
URL GET uu11771.com/0766769243f3b5eb2e370051a64d32ac.gif IP 0.0.0.0:0 ASN #0 Requested by https://k8g5uy6x.xyz/ Certificate IssuerLet's Encrypt Subjectuu11771.com Fingerprint37:46:BD:33:E5:72:F5:C1:3B:15:39:E4:FF:39:68:44:0E:59:30:5C ValiditySun, 28 Apr 2024 15:50:33 GMT - Sat, 27 Jul 2024 15:50:32 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /0766769243f3b5eb2e370051a64d32ac.gif HTTP/1.1 Host: uu11771.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK age: 389108 alt-svc: h3=":443"; ma=86400 cache-control: max-age=2678400 cf-cache-status: HIT cf-ray: 89922ca95988315b-LAX content-encoding: gzip content-type: image/gif date: Tue, 25 Jun 2024 04:22:05 GMT etag: W/"666dc84c-4a2b3" expires: Sat, 20 Jul 2024 16:16:57 GMT last-modified: Sat, 15 Jun 2024 16:58:52 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ORDD%2F7gHbTZTmXp4drUGThP7XVx53jcTQ4ImqUrTmlAm7nC07kJAbhPee9PPdihg2w09Z2O%2BytpfEP4vpQX6%2FyOHQYQj60svTLKWSr5naXB6LlatTdcs0bHyCMHxCBVIVys%3D"}],"group":"cf-nel","max_age":604800} server: cloudflare vary: Accept-Encoding x-cache: BYPASS, no policy found X-Firefox-Spdy: h2

	OPTIONS dn5c7.mom:22222/wfMonitor/upLogs	0.0.0.0		0 B
URL OPTIONS dn5c7.mom:22222/wfMonitor/upLogs IP 0.0.0.0:0 ASN #0 Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `OPTIONS /wfMonitor/upLogs HTTP/1.1 Host: dn5c7.mom:22222 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://k8g5uy6x.xyz/ Origin: https://k8g5uy6x.xyz DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache`

	GET k8g5uy6x.xyz/api/adata	23.225.201.102	200 OK	9.0 kB
URL GET HTTP/2 k8g5uy6x.xyz/api/adata IP 23.225.201.102:443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectk8g5uy6x.xyz Fingerprint48:48:D2:84:F2:42:35:B5:F5:C8:B1:9A:DD:5D:C0:7D:B1:2E:9D:53 ValidityFri, 14 Jun 2024 00:00:00 GMT - Thu, 12 Sep 2024 23:59:59 GMT File type Unicode text, UTF-8 text, with very long lines (8435), with no line terminators Size 9.0 kB (9026 bytes) Hash 8def4bce6b6050f5799c04918a52b254 22c4c91dde4a01f53442314049c2f8827c587d98 c7272558bca63386d2ee3b1a023fe6b006801f2f422db699e30fe488f01d7ccf HTTP Headers `GET /api/adata HTTP/1.1 Host: k8g5uy6x.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://k8g5uy6x.xyz/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:04 GMT content-type: application/json last-modified: Mon, 24 Jun 2024 14:07:27 GMT vary: Accept-Encoding etag: W/"66797d9f-2342" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept x-frame-options: SAMEORIGIN content-encoding: gzip X-Firefox-Spdy: h2`

	GET c11011.com/f56ec1cf42305472d5c1c06715b6d97b.gif	0.0.0.0		0 B
URL GET c11011.com/f56ec1cf42305472d5c1c06715b6d97b.gif IP 0.0.0.0:0 ASN #0 Requested by https://k8g5uy6x.xyz/ Certificate IssuerLet's Encrypt Subjectc11011.com Fingerprint5F:66:81:2F:A1:86:14:1C:57:FE:BC:C6:D9:95:38:7D:75:13:B9:18 ValidityWed, 24 Apr 2024 15:49:03 GMT - Tue, 23 Jul 2024 15:49:02 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /f56ec1cf42305472d5c1c06715b6d97b.gif HTTP/1.1 Host: c11011.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-encoding: gzip content-type: image/gif date: Wed, 19 Jun 2024 01:44:13 GMT etag: W/"65eda10c-5438d" expires: Fri, 19 Jul 2024 01:44:13 GMT last-modified: Wed, 19 Jun 2024 01:44:13 GMT server: nginx vary: Accept-Encoding x-cache: HIT, server, disk X-Firefox-Spdy: h2`

	GET nuvzju.xyz/favicon.ico	198.16.50.245	404 Not Found	150 B
URL GET HTTP/2 nuvzju.xyz/favicon.ico IP 198.16.50.245:443 ASN #40065 CNSERVERS Requested by https://nuvzju.xyz/ Certificate IssuerZeroSSL Subjectnuvzju.xyz Fingerprint0E:A8:61:E1:C3:26:B4:DF:3C:19:AB:2F:74:3B:EE:DD:04:73:2F:66 ValiditySat, 27 Apr 2024 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT File type HTML document, ASCII text, with no line terminators Size 150 B (150 bytes) Hash 3975df6acd9bb32205823270e122bb3f debbb3ecc9183ee7672f25d0f74eea74e3530298 13ed13454e3102135579e64775b002a66280f9eb99c31e4d8b59a69cf7e00425 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: nuvzju.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://nuvzju.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found server: openresty date: Tue, 25 Jun 2024 04:24:56 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding content-encoding: gzip X-Firefox-Spdy: h2`

	GET jt9ath.xyz:8443/b2679311246008088d6264281fc0b532.webp	23.224.112.214	200 OK	3.4 kB
URL GET HTTP/2 jt9ath.xyz:8443/b2679311246008088d6264281fc0b532.webp IP 23.224.112.214:8443 ASN #40065 CNSERVERS Requested by https://k8g5uy6x.xyz/ Certificate IssuerZeroSSL Subjectjt9ath.xyz Fingerprint35:D2:DB:C6:3A:3B:5E:B2:F5:6E:06:66:EF:E4:BC:12:CC:08:E7:53 ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x234, Scaling: [none]x[none], YUV color, decoders should clamp Size 3.4 kB (3372 bytes) Hash 3f330ff0c3edb828d69592ced40ae99b be9477f9e6d7bd7b95065e8fc0c407b9d9c1cb43 e5f3c1ccb2a3317ef5b8d460d647306e7031a14dcf24d338bc348835afde1012 HTTP Headers `GET /b2679311246008088d6264281fc0b532.webp HTTP/1.1 Host: jt9ath.xyz:8443 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://k8g5uy6x.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Tue, 25 Jun 2024 04:22:05 GMT content-type: image/webp content-length: 3372 last-modified: Wed, 22 May 2024 05:05:34 GMT etag: "664d7d1e-d2c" expires: Wed, 25 Jun 2025 04:22:05 GMT cache-control: max-age=31536000 access-control-allow-origin: , accept-ranges: bytes X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (38)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN