www.googletagmanager.com/gtag/js?id=UA-85346163-2
200 OK 51 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-85346163-2
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (2213)
Hash 62a4a6ff544b640199bf916632f804f9
02314d855919f8bd7dfb8b923eccc80fea3ea909
f96d3b5feea02d226a9932ffe0e6ef27e45947a63e079636eaf57a66e88a420b
GET /gtag/js?id=UA-85346163-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 24 Nov 2023 11:23:31 GMT
expires: Fri, 24 Nov 2023 11:23:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51365
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
itweepinbelltor.com/pfe/current/tag.min.js?z=5490114
200 OK 123 kB URL GET HTTP/2 itweepinbelltor.com/pfe/current/tag.min.js?z=5490114
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File type gzip compressed data, max speed, from Unix\012- data
Size 123 kB (123213 bytes)
Hash 0a3b9be3ed8d8368530e1d7ca912d0d0
c86b5fe77f4cbfb17c11492fe761baf01f62ac43
b58dedc7bd676124839fa3dfe059cf2380f6ecf60404f2f5fdc2973ea26a2e07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/tag.min.js?z=5490114 HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:31 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 20:41:59 GMT
etag: W/"655fb917-33f4"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
itweepinbelltor.com/zone?pub=0&zone_id=5490114&is_mobile=false&domain=bjchuhai.com.atlaq.com&var=&ymid=&var_3=&tg=0&sw=3.1.471
200 OK 888 B URL GET HTTP/2 itweepinbelltor.com/zone?pub=0&zone_id=5490114&is_mobile=false&domain=bjchuhai.com.atlaq.com&var=&ymid=&var_3=&tg=0&sw=3.1.471
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File type JSON data\012- , ASCII text, with very long lines (887)
Hash 5800ebd5fac46023ee5ce159af185039
69130d428356b977ec0a5bb70fe95ce3bc947b85
b299942a863006c6c8227371cc765b6eaef53616b56613001feda66f9667444f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /zone?pub=0&zone_id=5490114&is_mobile=false&domain=bjchuhai.com.atlaq.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json; charset=utf-8
content-length: 888
x-trace-id: bc897914c46a1f4049e9559d22721f47
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-FPZ0VEL1WQ&l=dataLayer&cx=c
200 OK 90 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-FPZ0VEL1WQ&l=dataLayer&cx=c
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 8d001ec2f0d882d64a6d69634a903b15
9ac910284ae626e62184138cbaeae80a96577507
4e2b53e8e39c6d56b4788d085c23dcc1fbe4e83dcceef902a0f0d8988991af08
GET /gtag/js?id=G-FPZ0VEL1WQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 24 Nov 2023 11:23:32 GMT
expires: Fri, 24 Nov 2023 11:23:32 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90054
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
itweepinbelltor.com/custom
200 OK 0 B URL POST HTTP/2 itweepinbelltor.com/custom
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
whulsaux.com/tag.min.js
200 OK 26 kB IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectwhulsaux.com
FingerprintA8:C3:DA:A6:D8:7E:B2:1D:20:3B:9D:3B:86:9A:EF:7C:B3:AC:47:D7
ValidityMon, 20 Nov 2023 05:29:27 GMT - Sun, 18 Feb 2024 05:29:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash eb9c9dc8a65f1be429c1cfb6f8abcc9e
18a1c9d83552f65a34b439f6660d3d7c052a4328
f47596cacf5473851f4caa3fb498f52087f762a0dc8cc0effbe93bd30f461b81
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /tag.min.js HTTP/1.1
Host: whulsaux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/javascript; charset=utf-8
content-length: 25607
content-encoding: br
x-trace-id: 0f329b6bdab6391ddb2212fe7ebbe88a
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Tue, 21 Nov 2023 19:19:56 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
itweepinbelltor.com/custom
200 OK 39 B URL POST HTTP/2 itweepinbelltor.com/custom
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Content-Type: application/json
Content-Length: 381
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 3292734cb90ea54077c83caa60736966
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 0 B IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
preview.atlaq.com/4577fa87652000018c3558b5cc2aa605_bjchuhai.com.png
200 OK 110 kB URL GET HTTP/2 preview.atlaq.com/4577fa87652000018c3558b5cc2aa605_bjchuhai.com.png
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerCloudflare, Inc.
Subjectatlaq.com
Fingerprint1E:C6:84:53:3B:FF:CE:FF:8F:8C:9D:8B:3A:69:3F:E5:28:C8:F4:A5
ValidityWed, 26 Apr 2023 00:00:00 GMT - Thu, 25 Apr 2024 23:59:59 GMT
File type PNG image data, 683 x 384, 8-bit/color RGBA, non-interlaced\012- data
Size 110 kB (109529 bytes)
Hash a2e1628a3b3f238c0df9cb423bf9e721
e191cbc56e82e43a7a7f2c285a910ec879f2972c
2c051d2e5feb1b0104d8573abc905ab9b448a586466c71432f20c1e1158b8500
GET /4577fa87652000018c3558b5cc2aa605_bjchuhai.com.png HTTP/1.1
Host: preview.atlaq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: image/png
content-length: 109529
x-powered-by: Express
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 07:04:13 GMT
etag: W/"1abd9-18b374cad5c"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RPOFn7SYDWgu7puaPOMPcbeb7cyI%2B2PJPFyJMSuaPqmxi22CPgXGTuL2cBIe8gSUhhXSpeVS2cuoC1pUAWKMcWnMZyyBv5%2BzNNg9BrzCd8Hz3yRoiSi6GevXxz8D%2BGnb%2FP5iEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82b147c37fc15688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
signtexinc.com/favicon.ico
302 Found 0 B URL GET HTTP/2 signtexinc.com/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsigntexinc.com
Fingerprint57:5A:9C:2F:21:2A:54:91:61:65:E7:C8:A3:85:16:74:5C:27:E7:3D
ValiditySun, 22 Oct 2023 20:23:13 GMT - Sat, 20 Jan 2024 20:23:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: signtexinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.signtexinc.com/wp-content/uploads/2020/06/cropped-SI-Shield-32x32.jpg
link: <https://www.signtexinc.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
File type JSON data\012- , ASCII text
Hash e86bcca4c6af1e3f02958cf62c2ff4dc
fc64f0ed418e91835bd5202e04701f5f51b2d84c
7ee77d9499a92bd90baf61e9c3a9dffb9dae21717c40fef55bf6fcb81bc921bc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Content-Type: application/json
Content-Length: 507
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
sidehustlestack.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sidehustlestack.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsidehustlestack.com
Fingerprint72:23:E3:09:C9:F3:F1:3C:5D:E4:D5:1E:1F:AB:06:F1:5A:0D:C5:67
ValidityWed, 01 Nov 2023 09:28:50 GMT - Tue, 30 Jan 2024 09:28:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sidehustlestack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: http://sidehustlestack.com/favicon.ico
cache-control: no-cache
set-cookie: mtmssl=1; path=/;
atlaq.com/style.css
200 OK 18 kB IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerCloudflare, Inc.
Subjectatlaq.com
Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (49091), with no line terminators
Hash 1dc4998a41131ac5df41ae820c7f583c
227aa907d96a66d38f5073700d2d8c5e1262187c
1f807cd9d5d8475f4ec107c17a62318927277940eb8bfe1d386ec97ad4cb9f57
GET /style.css HTTP/1.1
Host: atlaq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 11:23:31 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
cf-bgj: minify
expires: Fri, 22 Dec 2023 03:51:19 GMT
last-modified: Tue, 25 Oct 2022 04:42:27 GMT
strict-transport-security: max-age=31536000;includeSubDomains
vary: Accept-Encoding,User-Agent,Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 199932
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FhHul7ELc%2BWg86R0QIXb4p0HLdyR4WnFupFekarc0EYIcHsL9gmxOMkn9IXqL%2B2sdLKA8J7leKHKx0lF8BpI2EwN4GDc%2FkY4%2BeOAtU1NVOpxi4NyXb7k3tq3RZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b147c349ae56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
200 OK 0 B URL User Request GET HTTP/2 IP
Certificate IssuerCloudflare, Inc.
Subjectatlaq.com
Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: bjchuhai.com.atlaq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/html; charset=UTF-8
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Authorization, Accept
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-expose-headers: Content-Disposition
cache-control: public, max-age=2592000
cf-railgun: direct (waiting for pending WAN connection)
expires: Thu, 21 Dec 2023 13:57:05 GMT
strict-transport-security: max-age=31536000;includeSubDomains
vary: User-Agent,Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-litespeed-cache: hit
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=23ZK3izVQM%2BX4ii3hQjRNfY9r%2BAklWpdgMGZwVC8nl3ZQMXsfFuR8piA5TLVJ4%2BHZkoEsKvaW0D%2Ba3fpJpc77fKeB5AD%2BO87ZIh7wj2446z3Qw32UNmkgSn4viJp46anoQnX1RHaUf%2Fl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b147c57c4156bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
itweepinbelltor.com/event
200 OK 0 B URL POST HTTP/2 itweepinbelltor.com/event
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /event HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
bjchuhai.com.atlaq.com/badk.txt
200 OK 14 kB URL GET HTTP/3 bjchuhai.com.atlaq.com/badk.txt
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerCloudflare, Inc.
Subjectatlaq.com
Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
Hash f4245877e1f9b8764acbac7b475ebf2d
7471a9d7354637651fa5d0200febe7ab162fb69a
bd300473a295a173716b1b182aed7c14e3551f7400360dd5f694115683ccd41c
GET /badk.txt HTTP/1.1
Host: bjchuhai.com.atlaq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/plain; charset=UTF-8
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Authorization, Accept
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-expose-headers: Content-Disposition
cache-control: public, max-age=2592000
cf-railgun: direct (starting new WAN connection)
expires: Sun, 24 Dec 2023 11:23:32 GMT
last-modified: Mon, 13 Apr 2020 08:00:16 GMT
strict-transport-security: max-age=31536000;includeSubDomains
vary: Accept-Encoding,User-Agent,Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zEnZmovidUBgyOMSToCEWQPH1%2FD0o%2BdQ9HOKyEpr%2FSQgZAcCBpQtpHA2m%2Fad5yGWy17rN5KtzWXvPFsdFwa3LP7lGqW%2BsILLJTqKHuFKseHO545A%2BafsRC1P4UfaTjr9Ex1Ct0bowFo%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b147c55c1d56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
itweepinbelltor.com/event
200 OK 94 B URL POST HTTP/2 itweepinbelltor.com/event
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File type JSON data\012- , ASCII text
Hash 65741c91add16b47d49107b4e1db7c81
df78b3255d7160867b94427f4463733eb59e786b
c69e026473e99d1999eb61647cbaa9db05670afde15f1037ab7a5488312c7a25
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Content-Type: application/json
Content-Length: 1645
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=de1a3ccca0ce494d8b9b7a1690790aa6&zoneId=5490114&checkDuplicate=true&ymid=&var=
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?pub=0&userId=de1a3ccca0ce494d8b9b7a1690790aa6&zoneId=5490114&checkDuplicate=true&ymid=&var=
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 531652b4620289cb316bdcc9994dc315
e6f3a38eae4827967c027cbc1bb0b8fa7212e045
42cca0d0c4fe833391a624d977b46fa5a9870e643d4f67b9ba527028fbd44fb0
GET /gid.js?pub=0&userId=de1a3ccca0ce494d8b9b7a1690790aa6&zoneId=5490114&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Cookie: ID=3bb5e36c439c464092c1c2ee8f5d7dbb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3bb5e36c439c464092c1c2ee8f5d7dbb; expires=Sat, 23 Nov 2024 11:23:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
File type JSON data\012- , ASCII text
Hash 5e81ff3aea3f58cbb4decf6ffacd8bb6
91580add9e3b8d178affc0a2706d547c3c62a489
5bb831dc20fa07668ae38e74cc280c0d48b2e08448ad7345262c1221f3ea9775
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Content-Type: application/json
Content-Length: 507
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
sidehustlestack.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sidehustlestack.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsidehustlestack.com
Fingerprint72:23:E3:09:C9:F3:F1:3C:5D:E4:D5:1E:1F:AB:06:F1:5A:0D:C5:67
ValidityWed, 01 Nov 2023 09:28:50 GMT - Tue, 30 Jan 2024 09:28:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sidehustlestack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: http://sidehustlestack.com/favicon.ico
cache-control: no-cache
set-cookie: mtmssl=1; path=/;
region1.analytics.google.com/g/collect?v=2&tid=G-FPZ0VEL1WQ>m=45je3b81v894672372&_p=1700825014810&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1460669497.1700825015&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1700825015&sct=1&seg=0&dl=https%3A%2F%2Fbjchuhai.com.atlaq.com%2F&dt=%E7%99%BD%E9%B2%B8%E5%8A%A0%E9%80%9F%E5%99%A8%20-%20%E6%B0%B8%E8%BF%9C%E8%83%BD%E8%BF%9E%E4%B8%8A%E7%9A%84VPN&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2081
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-FPZ0VEL1WQ>m=45je3b81v894672372&_p=1700825014810&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1460669497.1700825015&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1700825015&sct=1&seg=0&dl=https%3A%2F%2Fbjchuhai.com.atlaq.com%2F&dt=%E7%99%BD%E9%B2%B8%E5%8A%A0%E9%80%9F%E5%99%A8%20-%20%E6%B0%B8%E8%BF%9C%E8%83%BD%E8%BF%9E%E4%B8%8A%E7%9A%84VPN&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2081
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FPZ0VEL1WQ>m=45je3b81v894672372&_p=1700825014810&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1460669497.1700825015&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1700825015&sct=1&seg=0&dl=https%3A%2F%2Fbjchuhai.com.atlaq.com%2F&dt=%E7%99%BD%E9%B2%B8%E5%8A%A0%E9%80%9F%E5%99%A8%20-%20%E6%B0%B8%E8%BF%9C%E8%83%BD%E8%BF%9E%E4%B8%8A%E7%9A%84VPN&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2081 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://bjchuhai.com.atlaq.com
date: Fri, 24 Nov 2023 11:23:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sidehustlestack.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sidehustlestack.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsidehustlestack.com
Fingerprint72:23:E3:09:C9:F3:F1:3C:5D:E4:D5:1E:1F:AB:06:F1:5A:0D:C5:67
ValidityWed, 01 Nov 2023 09:28:50 GMT - Tue, 30 Jan 2024 09:28:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sidehustlestack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: http://sidehustlestack.com/favicon.ico
cache-control: no-cache
set-cookie: mtmssl=1; path=/;
www.signtexinc.com/wp-content/uploads/2020/06/cropped-SI-Shield-32x32.jpg
200 OK 565 kB URL GET HTTP/2 www.signtexinc.com/wp-content/uploads/2020/06/cropped-SI-Shield-32x32.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsigntexinc.com
Fingerprint57:5A:9C:2F:21:2A:54:91:61:65:E7:C8:A3:85:16:74:5C:27:E7:3D
ValiditySun, 22 Oct 2023 20:23:13 GMT - Sat, 20 Jan 2024 20:23:12 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 32x32, components 3\012- data
Size 565 kB (565237 bytes)
Hash 20a5d8ded41641066627d1f1bbb61ff7
f2581b35ad7eb1f2bfd110bb03d70fa3ae53b8f6
ba6b3db5bfbae946e990771bad0b34e9bf65586b7f855ee4c18cbf00590e9b7c
GET /wp-content/uploads/2020/06/cropped-SI-Shield-32x32.jpg HTTP/1.1
Host: www.signtexinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: image/jpeg
content-length: 565237
last-modified: Tue, 23 Jun 2020 12:43:38 GMT
etag: "5ef1f8fa-89ff5"
cache-control: public, max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
itweepinbelltor.com/custom
200 OK 39 B URL POST HTTP/2 itweepinbelltor.com/custom
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Content-Type: application/json
Content-Length: 378
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:33 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 0bf3382f80108dbf5d63a28736190a15
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
sidehustlestack.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sidehustlestack.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsidehustlestack.com
Fingerprint72:23:E3:09:C9:F3:F1:3C:5D:E4:D5:1E:1F:AB:06:F1:5A:0D:C5:67
ValidityWed, 01 Nov 2023 09:28:50 GMT - Tue, 30 Jan 2024 09:28:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sidehustlestack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: http://sidehustlestack.com/favicon.ico
cache-control: no-cache
set-cookie: mtmssl=1; path=/;
whulsaux.com/?rb=dyq2skmGi7rPWsh7-0AyG08_OQsestvIvOuwA0MklXW5RBoEipM_Ld7ymVtFLAuBASkkVJp_7tTm5eA2zD39_vudVkWzpUzCQ5F5hwbHmtMzC4EkFs5YIsefOGlVsBNa2ST0KPDeW7RwK1Ylh1Pj9d-RE_ZisjOxSk4W_ClepmNlctPebCeggV__bmn-2qY9QySJO7fhJjHW14UXcccW6MsrSELUVL09q-fOKA%3D%3D&request_ab2=0&zoneid=6577958&js_build=iclick-v1.631.3-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1152&wh=901&cw=1152&wih=901&wiw=1152&wfc=1&pl=https%3A%2F%2Fbjchuhai.com.atlaq.com%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.631.3-auto&bs=ddb1c96a-03a0-4f46-80de-d8cc4882c606&userId=3bb5e36c439c464092c1c2ee8f5d7dbb&m=link
200 OK 1.7 kB URL GET HTTP/2 whulsaux.com/?rb=dyq2skmGi7rPWsh7-0AyG08_OQsestvIvOuwA0MklXW5RBoEipM_Ld7ymVtFLAuBASkkVJp_7tTm5eA2zD39_vudVkWzpUzCQ5F5hwbHmtMzC4EkFs5YIsefOGlVsBNa2ST0KPDeW7RwK1Ylh1Pj9d-RE_ZisjOxSk4W_ClepmNlctPebCeggV__bmn-2qY9QySJO7fhJjHW14UXcccW6MsrSELUVL09q-fOKA%3D%3D&request_ab2=0&zoneid=6577958&js_build=iclick-v1.631.3-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1152&wh=901&cw=1152&wih=901&wiw=1152&wfc=1&pl=https%3A%2F%2Fbjchuhai.com.atlaq.com%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.631.3-auto&bs=ddb1c96a-03a0-4f46-80de-d8cc4882c606&userId=3bb5e36c439c464092c1c2ee8f5d7dbb&m=link
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectwhulsaux.com
FingerprintA8:C3:DA:A6:D8:7E:B2:1D:20:3B:9D:3B:86:9A:EF:7C:B3:AC:47:D7
ValidityMon, 20 Nov 2023 05:29:27 GMT - Sun, 18 Feb 2024 05:29:26 GMT
File type JSON data\012- , ASCII text, with very long lines (2210), with no line terminators
Hash b9151d5e70df393efb332699160e915b
71d4532bf270965cd3671483e044c9da2053d6a8
ae5e85814b4661b1c4633c1a1de7dbd6336014446b55732bd829a37a54b9ce2b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?rb=dyq2skmGi7rPWsh7-0AyG08_OQsestvIvOuwA0MklXW5RBoEipM_Ld7ymVtFLAuBASkkVJp_7tTm5eA2zD39_vudVkWzpUzCQ5F5hwbHmtMzC4EkFs5YIsefOGlVsBNa2ST0KPDeW7RwK1Ylh1Pj9d-RE_ZisjOxSk4W_ClepmNlctPebCeggV__bmn-2qY9QySJO7fhJjHW14UXcccW6MsrSELUVL09q-fOKA%3D%3D&request_ab2=0&zoneid=6577958&js_build=iclick-v1.631.3-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1152&wh=901&cw=1152&wih=901&wiw=1152&wfc=1&pl=https%3A%2F%2Fbjchuhai.com.atlaq.com%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.631.3-auto&bs=ddb1c96a-03a0-4f46-80de-d8cc4882c606&userId=3bb5e36c439c464092c1c2ee8f5d7dbb&m=link HTTP/1.1
Host: whulsaux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Cookie: OAID=3bb5e36c439c464092c1c2ee8f5d7dbb; oaidts=1700825012
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json
x-trace-id: 56f7df506dea0abd4aef074b5c481c84
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=3bb5e36c439c464092c1c2ee8f5d7dbb; expires=Sat, 23 Nov 2024 11:23:32 GMT; path=/; secure; SameSite=None
oaidts=1700825012; expires=Sat, 23 Nov 2024 11:23:32 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 01 Dec 2023 11:23:32 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
whulsaux.com/5/6577958/?oo=1&aab=1
200 OK 3.2 kB URL GET HTTP/2 whulsaux.com/5/6577958/?oo=1&aab=1
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectwhulsaux.com
FingerprintA8:C3:DA:A6:D8:7E:B2:1D:20:3B:9D:3B:86:9A:EF:7C:B3:AC:47:D7
ValidityMon, 20 Nov 2023 05:29:27 GMT - Sun, 18 Feb 2024 05:29:26 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 5752792676643f72ae2e1b5b8d65bfa7
0e7aa01736e75ec0ef5d88a7c637282c245b5e17
b9a7d4ab2837efce148ec39050d134bb2a688aa250d8ab1e961c88eddd50d71b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/6577958/?oo=1&aab=1 HTTP/1.1
Host: whulsaux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json
x-trace-id: 94b398cd63db9fe1d7b1a9d21974f35a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=3bb5e36c439c464092c1c2ee8f5d7dbb; expires=Sat, 23 Nov 2024 11:23:32 GMT; path=/; secure; SameSite=None
oaidts=1700825012; expires=Sat, 23 Nov 2024 11:23:32 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
sidehustlestack.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sidehustlestack.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsidehustlestack.com
Fingerprint72:23:E3:09:C9:F3:F1:3C:5D:E4:D5:1E:1F:AB:06:F1:5A:0D:C5:67
ValidityWed, 01 Nov 2023 09:28:50 GMT - Tue, 30 Jan 2024 09:28:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sidehustlestack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: http://sidehustlestack.com/favicon.ico
cache-control: no-cache
set-cookie: mtmssl=1; path=/;
sipesworld.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sipesworld.com/favicon.ico
IP
ASN #41000 Freethought Internet Limited
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerSectigo Limited
Subjectsipesworld.com
Fingerprint7D:A1:6C:9E:76:85:8D:0E:CD:6E:82:E1:F0:AD:2D:2C:56:1D:3C:1D
ValiditySun, 27 Aug 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sipesworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 24 Nov 2023 11:23:32 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Cache-Control: no-cache
Link: <https://sipesworld.com/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: https://sipesworld.com/wp-content/uploads/2020/06/favicon.png
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
sidehustlestack.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sidehustlestack.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsidehustlestack.com
Fingerprint72:23:E3:09:C9:F3:F1:3C:5D:E4:D5:1E:1F:AB:06:F1:5A:0D:C5:67
ValidityWed, 01 Nov 2023 09:28:50 GMT - Tue, 30 Jan 2024 09:28:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sidehustlestack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: http://sidehustlestack.com/favicon.ico
cache-control: no-cache
set-cookie: mtmssl=1; path=/;
sipesworld.com/wp-content/uploads/2020/06/favicon.png
200 OK 4.9 kB URL GET HTTP/1.1 sipesworld.com/wp-content/uploads/2020/06/favicon.png
IP
ASN #41000 Freethought Internet Limited
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerSectigo Limited
Subjectsipesworld.com
Fingerprint7D:A1:6C:9E:76:85:8D:0E:CD:6E:82:E1:F0:AD:2D:2C:56:1D:3C:1D
ValiditySun, 27 Aug 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File type PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash 835a6d6dd7ebdab666105bfe1a44f10a
bbbddf978078dbe3a33dac7de33f618d24858ee3
59dd9fbe547b27933d4d98b275d4c068fbfb57fbfa9fcfa088aa61a1dfe4bcbf
GET /wp-content/uploads/2020/06/favicon.png HTTP/1.1
Host: sipesworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 24 Nov 2023 11:23:34 GMT
Server: Apache
Last-Modified: Thu, 24 Mar 2022 21:32:51 GMT
Accept-Ranges: bytes
Content-Length: 4874
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
sidehustlestack.com/favicon.ico
302 Found 0 B URL GET HTTP/1.1 sidehustlestack.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectsidehustlestack.com
Fingerprint72:23:E3:09:C9:F3:F1:3C:5D:E4:D5:1E:1F:AB:06:F1:5A:0D:C5:67
ValidityWed, 01 Nov 2023 09:28:50 GMT - Tue, 30 Jan 2024 09:28:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sidehustlestack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: http://sidehustlestack.com/favicon.ico
cache-control: no-cache
set-cookie: mtmssl=1; path=/;
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://bjchuhai.com
200 OK 1.5 kB URL GET HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://bjchuhai.com
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 910cd9e43b795792ff9e1dff135e2052
8bdb66df4a363bd07252f3760f6f2b0836657d3a
cd1ad126c7cdfe970ed153e9e62889ec93527f2ab6ae8bfee1ac50aa5fa51778
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://bjchuhai.com HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.bjchuhai.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 1478
date: Fri, 24 Nov 2023 11:23:34 GMT
expires: Fri, 01 Dec 2023 11:23:34 GMT
cache-control: public, max-age=604800
last-modified: Wed, 01 Jun 2022 16:19:53 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://sigma-capital.com
200 OK 348 B URL GET HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://sigma-capital.com
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 1ad48dc2afb3517233530b9f7a35e9a0
3435c17a2e288352916ef4c4d5fbfd8552c39e3a
a59f5866e91c77d7f9cf03b0e7fb8dbbca6b4103f5b10173d0b415f12f978a67
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://sigma-capital.com HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://sigma-capital.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 348
date: Fri, 24 Nov 2023 11:23:34 GMT
expires: Fri, 01 Dec 2023 11:23:34 GMT
cache-control: public, max-age=604800
last-modified: Wed, 19 Jun 2019 05:55:26 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://site4job.com
200 OK 2.4 kB URL GET HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://site4job.com
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 9a9c5c2cd2e25d88be68cb5c2d1d8487
afb0431d3510ff9680a3ef276957d9a84cfd1c7c
b90d1c1ff9bd423abaaa12bc2c5155e6e7b11d32338c3d4d58c6b77f476214fd
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://site4job.com HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.site4job.com/wp-content/uploads/2021/06/cropped-cropped-14587-1-180x180.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 2353
date: Fri, 24 Nov 2023 11:23:34 GMT
expires: Fri, 01 Dec 2023 11:23:34 GMT
cache-control: public, max-age=604800
last-modified: Fri, 17 Nov 2023 07:03:23 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FPZ0VEL1WQ&cid=1460669497.1700825015>m=45je3b81v894672372&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=747897230
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FPZ0VEL1WQ&cid=1460669497.1700825015>m=45je3b81v894672372&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=747897230
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FPZ0VEL1WQ&cid=1460669497.1700825015>m=45je3b81v894672372&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=747897230 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 24 Nov 2023 11:23:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://sidehustlestack.com
404 Not Found 726 B URL GET HTTP/3 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://sidehustlestack.com
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash b8a0bf372c762e966cc99ede8682bc71
2d7c9b60d1e2b4f4726141de2e4ab738110b9287
59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://sidehustlestack.com HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: image/png
x-content-type-options: nosniff
date: Fri, 24 Nov 2023 11:23:34 GMT
server: sffe
content-length: 726
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
itweepinbelltor.com/custom
200 OK 39 B URL POST HTTP/2 itweepinbelltor.com/custom
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Content-Type: application/json
Content-Length: 739
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:34 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 9f8388f67d9014f3934889a7ddddcf2f
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
itweepinbelltor.com/pfe/current/defaultSkin.min.js
200 OK 57 kB URL GET HTTP/2 itweepinbelltor.com/pfe/current/defaultSkin.min.js
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 20:41:59 GMT
etag: W/"655fb917-df63"
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
atlaq.com/logo.png
200 OK 117 kB IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerCloudflare, Inc.
Subjectatlaq.com
Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type PNG image data, 500 x 446, 8-bit/color RGBA, non-interlaced\012- data
Size 117 kB (117433 bytes)
Hash 792b74959e26cd37fd05dfcd0ef07770
c6e3ed2dd9771b077daf93eda5773cd10d621147
7ae2cb133588b7a2926b71630869d602c294840f6c1379666e82b25f3354623b
GET /logo.png HTTP/1.1
Host: atlaq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: image/png
content-length: 117433
cache-control: public, max-age=31536000
expires: Sat, 23 Nov 2024 05:48:22 GMT
last-modified: Wed, 29 Jan 2020 11:21:42 GMT
vary: User-Agent,Origin, Accept-Encoding
strict-transport-security: max-age=31536000;includeSubDomains
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 20110
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1sMU%2BIF4XEammX8F%2FRut%2F%2F5CsYp99WK%2BGBX3XfaAY31OWEc4PijC1Q3bbje7LAqbX0Kj4Tbq5RVUqASyk68Eb2kWTSjIccDw%2Fkq%2Fd5ZU8Fbv64r6d476vbqLHuM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b147c50bbd56bb-OSL
alt-svc: h3=":443"; ma=86400
site4job.com/favicon.ico
0 B IP
Requested by https://bjchuhai.com.atlaq.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: site4job.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
itweepinbelltor.com/pfe/current/universal.min.js?v=3.1.471
200 OK 88 kB URL GET HTTP/2 itweepinbelltor.com/pfe/current/universal.min.js?v=3.1.471
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectitweepinbelltor.com
Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF
ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d46d2997ab218d1dba1ab614422ed53f
3f1f6b9847c8ad209835db366c62fcb209b83a67
09e8ce2dfeac0ad09cd24788931b38ea7e7592f2c28eecc324b2dd1cd69d1b42
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 20:41:59 GMT
etag: W/"655fb917-1572c"
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
bjchuhai.com.atlaq.com/sw-5490114.js
404 Not Found 4.8 kB URL GET HTTP/3 bjchuhai.com.atlaq.com/sw-5490114.js
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerCloudflare, Inc.
Subjectatlaq.com
Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5214), with no line terminators
Hash 4fa9a57847b553cf01fb5953c36899a9
fc06a5a9bcd25cbcec180e54b3ef56ca5919ae7b
2a2eb9d0f806dc1f248c042715683521bbfa79da97ddb637e50342c871666d2e
GET /sw-5490114.js HTTP/1.1
Host: bjchuhai.com.atlaq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bjchuhai.com.atlaq.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=31536000
expires: Fri, 22 Dec 2023 04:33:54 GMT
x-litespeed-cache: hit
vary: Accept-Encoding,User-Agent,Origin
strict-transport-security: max-age=31536000;includeSubDomains
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Authorization, Accept
access-control-expose-headers: Content-Disposition
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V6rlHDiy1og4tdo9KXlW8dVvEIOhjyNJGNaFsWGmgOfcRFAJoTjrVuoCxbO7vfZe%2F2Y%2FKN1ugPvJsK7t4v9MzkatJ9fSZq6BC6UZjUD6x3HIVjBk7dJ%2BGTwR5%2FMQwKSXRuCiHh7AxsbR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b147c6ee1356bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=3bb5e36c439c464092c1c2ee8f5d7dbb
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=3bb5e36c439c464092c1c2ee8f5d7dbb
IP
Requested by https://bjchuhai.com.atlaq.com/
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 141de1702ed9c1c31cae471c1042d0be
85268cb5807bdc74410db7e275f6d5c5862917e9
86f0ea43965d8c549ba174355cb23ea652b402706ca08d7a0456087c4f657ca9
GET /gid.js?userId=3bb5e36c439c464092c1c2ee8f5d7dbb HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bjchuhai.com.atlaq.com
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 24 Nov 2023 11:23:32 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://bjchuhai.com.atlaq.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3bb5e36c439c464092c1c2ee8f5d7dbb; expires=Sat, 23 Nov 2024 11:23:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=q&b=f5f5f5&n=666666&r=2y&u=bjchuhai.com
0 B URL GET traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=q&b=f5f5f5&n=666666&r=2y&u=bjchuhai.com
IP
Requested by https://bjchuhai.com.atlaq.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /graph?w=260&h=190&o=f&c=1&y=q&b=f5f5f5&n=666666&r=2y&u=bjchuhai.com HTTP/1.1
Host: traffic.alexa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=t&b=f5f5f5&n=666666&r=2y&u=bjchuhai.com
0 B URL GET traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=t&b=f5f5f5&n=666666&r=2y&u=bjchuhai.com
IP
Requested by https://bjchuhai.com.atlaq.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /graph?w=260&h=190&o=f&c=1&y=t&b=f5f5f5&n=666666&r=2y&u=bjchuhai.com HTTP/1.1
Host: traffic.alexa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bjchuhai.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
sigma-capital.com/favicon.ico
0 B URL GET sigma-capital.com/favicon.ico
IP
Requested by https://bjchuhai.com.atlaq.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sigma-capital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
104.21.64.58
216.58.207.232
139.45.197.250
0.0.0.0