{"report_id":"542b00e1-c9f0-4339-b283-651a90e9c3ab","version":6,"status":"done","tags":[],"date":"2023-09-09T22:04:43Z","url":{"schema":"http","addr":"compress-pdf.xiyu.info/?fileurl=https://kupdf.net/downloadFilePartner/58c893f0dc0d60be0633902b?hash=19f8f5e5e581d6676662bd62d7be23cb\u0026title=A+Brief+Guide+to+Writing+from+Readings+7th+Edition\u0026utm_source=kupdfnet\u0026utm_medium=queue\u0026utm_campaign=58c893f0dc0d60be0633902b","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"title":"XIYU.INFO Compresseur en ligne PDF Gratuit"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T07:40:15Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-09-09 22:31:21","alert_count":0,"request_count":2,"received_data":150275,"sent_data":895,"comment":"","tags":null,"fingerprints":null},{"fqdn":"compress-pdf.xiyu.info","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2020-08-16","domain_rank":0,"first_seen":"2020-10-08 13:33:47","last_seen":"2023-08-11 18:34:30","alert_count":10,"request_count":10,"received_data":481990,"sent_data":5576,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-09-09 18:34:13","alert_count":0,"request_count":5,"received_data":89556,"sent_data":2762,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-09-09 22:29:19","alert_count":0,"request_count":1,"received_data":10517,"sent_data":494,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-09-09 18:12:06","alert_count":0,"request_count":8,"received_data":5598,"sent_data":2664,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/sandbox%20eval%20code","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"bbc02b137750017d2f1016b0b9009003a1c923005eb78001f006001f2040eae88dc180","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-06T10:08:15.637049Z","times_seen":66740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"f63197075511c5fa022195d6ea7a3e2e61337628523440a8f238f23b23770cbf3d1abd","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-06T10:08:15.637529Z","times_seen":65082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"555b21ccd6817b4f56a26a118d561953","sha1":"13660d4b7f0e0a525da8a8cbb90a4e4da6257783","sha256":"05864e82fa534e3bdd396853bffb2c67d8f4ba38d865546a88c0e596657c6654","sha512":"39a24edf70d1d759a2b8aadce5bcdf4987428e4d10cbfdfa7c9f87e2bd27d8013d20c7440e6d3fdf336322819d607c7dcfa540756037852e9462e214fd65b3c1","ssdeep":"","tlshash":"f9a00273f0c18c7e4021b54421793508b943125c869051207a010870963708baa044c4","size":56,"data":"","first_seen":"2023-03-07T12:22:44Z","last_seen":"2026-04-06T10:55:05.029851Z","times_seen":2446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d558daacd4c4239917ee4021e80a2ec","sha1":"aa4b6d2c365e7384e9c13c2adace53994a6d7f72","sha256":"6948c46d121495660adeb467e5595e153395a89033a4b4245b7696627bb0b96b","sha512":"b61f8c540eccb3c828f5017da0deb3055aa3f9361277a3978c3fa86c72cfb0f96f4fc5a0f973ee6558cf819c9855a161c2ee000c6b57fceed4c3e2e67cca5d67","ssdeep":"","tlshash":"0d21595b27bb10491d33b065496f8408782224430a0bde183f0c10e08f0ea3cd227b99","size":1388,"data":"","first_seen":"2024-08-21T07:11:17.523444Z","last_seen":"2024-08-21T07:11:17.523444Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/jquery-3.2.1.min.js","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T10:05:03.889779Z","times_seen":77626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-06T10:10:22.806747Z","times_seen":773924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/sandbox%20eval%20code","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-06T10:10:22.80442Z","times_seen":775478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d6087c97fa50ce53220a991fc7ff2ab","sha1":"48710627dc0ac40e50f9d4007d00839c49d5b4a8","sha256":"ee26142ac11733a945017f36e310cf5a703b4a77f603f1cfa94ba73d9336b78b","sha512":"6b32bd39b9d449e30e85d564c25c4d1cf4b2331ed8d725faec65e7abc93a8efe3f3b7f1eba4ec7d81eb06900fcdb0505d709ac6706483c84b89e0e91ac253d39","ssdeep":"","tlshash":"eed08c882a5b0c7381bb3b868bbfe104b406a12360d04d223d0eb3448f60e27db18944","size":208,"data":"","first_seen":"2023-03-10T11:19:56Z","last_seen":"2026-03-04T17:41:07.483347Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SJ47HJ1D41\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfce1d12394f468de2a278b119e48c90","sha1":"56fe8f80cb4fed3a4e34fc72778dad7ba1b75e7b","sha256":"34609a78c4f55832f2faa970a29d317dc671f4bc36939603eb5ac32438568096","sha512":"108eef30aef9ea1d312e0e811b0bf240955e2499d075f3109ae88c10765b06d6422f1a407a664d43be73faa621b5de1b436da7671d9c5a89f128e65a83764bb3","ssdeep":"6144:rUXKN5GyWdd1lSHgzZ11axwod1neNUb9aIg:A85GyWxswA1nef","tlshash":"982407d9b3c2706682a6f4b5503f014ba57b6da2b85cccd8f189c9d02eb4a894177f7c","size":226476,"data":"","first_seen":"2023-09-10T00:04:43Z","last_seen":"2023-09-10T00:04:43Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/bootstrap.min.js","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"61f338f870fcd0ff46362ef109d28533","sha1":"b3c116c65e6f053aaab45e5619a78ec00271a50f","sha256":"5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548","sha512":"8c2694d03a7721b303959e9fe9d4844129cead2b2e806e85e988a04569da822ec7a0e2ec845d64c312d3e3ec42651810b1336aa542a3e969963b1b2ef65dd444","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B0+:uoFXOCx0wNGaYk+","tlshash":"c143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","size":60010,"data":"","first_seen":"2023-03-07T01:02:23Z","last_seen":"2026-04-06T10:06:01.341737Z","times_seen":11034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-177876326-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9173c7424ea92d13580f809ae3229c4b","sha1":"3005a4b127fabbb6671b927d80f115294288ff4c","sha256":"4cba1a41a8157eb9e8cd096d78cca0d81d5307f8f3a59180f08f7fb5a430e84d","sha512":"50d1bd7b54f2808fc124475287c283ad77d3079c6819b4273354863aa0023c5e7defc0cf665929b1ca5536a829a816a3534a8b595c952dc59b3595218629bb60","ssdeep":"3072:9069zayXPCurRFiKp0nUm4k05oHgzZXFWsX9eBvlPsMaBHUp:KUXKeCt16oHgzZ1BX9Yas","tlshash":"fa04e5d8b393b16682a3b4b4503f010bb17a6d92f85cccd4e189d5d42eb8a99417bf7c","size":187301,"data":"","first_seen":"2023-09-10T00:04:43Z","last_seen":"2023-09-10T00:04:43Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:25.817050376Z","timestamp":1694297065817,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:25 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"85a432f3bc13b568eca42e1b7b4ce3f1","sha1":"84763c73eb9b687f596dadd6dfd38eadec4c5e6c","sha256":"a9b98520b690d42fbdc1a1d902ee37597f93ae4af708450e1e958b19ba1716cb","sha512":"8c49e7e549cf9687849a748e0d56afb04c0906275b1ced0e780d9f7da3600b67dca811101d29f738535613db5c199ada31cca402afe1b69b2eeba80a72f917d5","ssdeep":"","tlshash":"d9f054509d742451788d22902ba4b9241e84b114072c430929e8f1ce4b183ce1324628","first_seen":"2023-09-08T18:05:35Z","last_seen":"2023-09-10T00:06:06Z","times_seen":844,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:25.832293627Z","timestamp":1694297065832,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:25 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"14bee7661a70e20720ccfc970f1da1df","sha1":"685187fc334995bb7d51766d5af831667d544c0b","sha256":"71d72c05430a03aea95e674c232e5b1a93612b0325d1092ba180d8880afceeab","sha512":"f3e94e5526ab7b0b44fd009ddbd28e86ea2b1c06c680a4d6bfe83f635b879e9e11192c78f04e6f5ae14132e3b5cb71a85b6e33f2b5877ba95840cfea23cd84eb","ssdeep":"","tlshash":"23f0d42699fd553358097ddc45b1d9f939103c0f1b688445743c545c925d1e86fc4905","first_seen":"2023-09-09T18:24:01Z","last_seen":"2023-09-11T00:01:27Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-177876326-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.747Z","timestamp":1694297065747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"E6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12","sha256":"31:8C:88:B2:F2:3A:CA:89:46:6A:03:A1:A7:BF:E0:54:61:71:D0:11:D9:00:D5:2A:60:78:1D:A2:83:16:9D:FC"}}},"request":{"raw":"GET /gtag/js?id=UA-177876326-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\nexpires: Sat, 09 Sep 2023 22:04:25 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 09 Sep 2023 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 68323\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68323,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"9173c7424ea92d13580f809ae3229c4b","sha1":"3005a4b127fabbb6671b927d80f115294288ff4c","sha256":"4cba1a41a8157eb9e8cd096d78cca0d81d5307f8f3a59180f08f7fb5a430e84d","sha512":"50d1bd7b54f2808fc124475287c283ad77d3079c6819b4273354863aa0023c5e7defc0cf665929b1ca5536a829a816a3534a8b595c952dc59b3595218629bb60","ssdeep":"3072:9069zayXPCurRFiKp0nUm4k05oHgzZXFWsX9eBvlPsMaBHUp:KUXKeCt16oHgzZ1BX9Yas","tlshash":"fa04e5d8b393b16682a3b4b4503f010bb17a6d92f85cccd4e189d5d42eb8a99417bf7c","first_seen":"2023-09-10T00:04:43Z","last_seen":"2023-09-10T00:04:43Z","times_seen":1,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":70,"dns":1,"connect":7,"send":0,"wait":25,"receive":16,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:25.950232311Z","timestamp":1694297065950,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:25 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"14bee7661a70e20720ccfc970f1da1df","sha1":"685187fc334995bb7d51766d5af831667d544c0b","sha256":"71d72c05430a03aea95e674c232e5b1a93612b0325d1092ba180d8880afceeab","sha512":"f3e94e5526ab7b0b44fd009ddbd28e86ea2b1c06c680a4d6bfe83f635b879e9e11192c78f04e6f5ae14132e3b5cb71a85b6e33f2b5877ba95840cfea23cd84eb","ssdeep":"","tlshash":"23f0d42699fd553358097ddc45b1d9f939103c0f1b688445743c545c925d1e86fc4905","first_seen":"2023-09-09T18:24:01Z","last_seen":"2023-09-11T00:01:27Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:25.951049946Z","timestamp":1694297065951,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:25 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"c837d5056b9424a7006e574bfc7c03ae","sha1":"a47e514b93e12d1e333ff23ac9e7977ca1cd07bc","sha256":"76e19e4cf87ceffa781f75bcaf8343f625c82242facbd389bd54ed288d9199e9","sha512":"155fb7986251ea9c262b0fc6aba4cc8625df686972d7bbaacd0460b2c01fdf474b9ee3a28db41fb1553ea4bfbb48584dfaa4bdcdfc4b091163ff9b7895e08979","ssdeep":"","tlshash":"","first_seen":"2023-09-09T18:52:21Z","last_seen":"2023-09-11T00:01:13Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:26.077646148Z","timestamp":1694297066077,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:26 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2060521e966a6a20a0bf1ababc2286c0","sha1":"763ffc1aa1a10115e4a0526c747e9202dd085f16","sha256":"9532f54419572a700481f1d886fe5e95a277ad19ccd7b2df29b1d30f154f00f9","sha512":"f3e5679decf23a13475d1557ac37f8c86e2d48bbbb163a661ffcc156d49b8e6f9b7005a77a0daa00426a95f20913c573ed00d5a349a7fde5247caec4c8790031","ssdeep":"","tlshash":"58f0d4366df0c3329c1f4f551766921914543a9c9a781398343d9430db665b7a10c81c","first_seen":"2023-09-09T18:04:48Z","last_seen":"2023-09-11T00:01:13Z","times_seen":2197,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/main.css?v=5","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.743Z","timestamp":1694297065743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/main.css?v=5 HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\ncf-bgj: minify\r\ncf-polished: origSize=1032\r\netag: W/\"5f5c3f1f-408\"\r\nexpires: Thu, 28 Sep 2023 20:36:00 GMT\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 955705\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=JyvEKbe%2Fo0d9LiTTIbJL5hZBpPDN5iXWEwOYwvmZMthsNkeqHgAiF%2FKq4Ik8Sll1vlCkq0KmhBWFHfQlLIbiD93QbzFb7asODMBMuEIitFaBqxifl%2FPD3lddQ3cXtNyVb5qI5DMRluaB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8042ba14a8e60b31-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1087,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (927), with no line terminators","md5":"88786df88a1e6bbc37a32f1dafb2eb7d","sha1":"6ba57d7dbf124c0cfc6bf1e9ee4a2f811192f819","sha256":"8e238c15baf9c6a2f0cca89d8aa8d432ce0ceb3a3cc3fb933b94b3d56432e48c","sha512":"53717808940cf879d548b96ec1413a46a49bd6b59d5e2f2fc799d18adf14f00c2f5514958224f6234e4a9ef933d539eb6a2b0eb6f23078e3c304f48c76536c64","ssdeep":"","tlshash":"c211846abe4c00cf663b805764d96bfc2c8cdb66b1019b9ff4627b38c48a8483965385","first_seen":"2023-06-13T17:10:09Z","last_seen":"2024-08-21T08:48:45.712632Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:26.092Z","timestamp":1694297066092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/themes/xiyuinfo/assets/font-awesome/css/font-awesome.min.css\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\netag: \"5f5c3f1f-12d68\"\r\nexpires: Sat, 30 Sep 2023 14:27:34 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 805012\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qXplEtHHP0w4lwyVtURNwhY0LB9QFCjZsIk1wWqunus8T%2BOzVMoRElJ4jIyEBgmS9p3zp7tBYx%2F5aWHykooErVlI7cG6QV0RKuuDYif69WzZwXyf68nnfJZf5d0hEfMgCCWv5dV%2Fh3Ku\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8042ba16a9c30b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\\012- data","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-06T10:09:45.724229Z","times_seen":415609,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:26.093183367Z","timestamp":1694297066093,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:26 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2060521e966a6a20a0bf1ababc2286c0","sha1":"763ffc1aa1a10115e4a0526c747e9202dd085f16","sha256":"9532f54419572a700481f1d886fe5e95a277ad19ccd7b2df29b1d30f154f00f9","sha512":"f3e5679decf23a13475d1557ac37f8c86e2d48bbbb163a661ffcc156d49b8e6f9b7005a77a0daa00426a95f20913c573ed00d5a349a7fde5247caec4c8790031","ssdeep":"","tlshash":"58f0d4366df0c3329c1f4f551766921914543a9c9a781398343d9430db665b7a10c81c","first_seen":"2023-09-09T18:04:48Z","last_seen":"2023-09-11T00:01:13Z","times_seen":2197,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:26.093986888Z","timestamp":1694297066093,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:26 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d16e6a04473828a5eb518bac650a29c5","sha1":"940abcc82c06c90baf6d4014c9d80e18bfaaf0c3","sha256":"38606c1318a5cafd37bd0cf3bd966f1548150b78616a201f07ae7b38ff7c4156","sha512":"e3adc2a6772eaf927763f14bd1b5d28aaf35bbbf2be0e854f738112aab223b73645ef88d96503ebb184ddb8592d29ac5ef7af05b35e174f4b17ca51f91279e87","ssdeep":"","tlshash":"a1f054133efc0212f497171e5aa1ab1852e175cf5a983accb879dad807410a733aacc8","first_seen":"2023-09-08T18:06:26Z","last_seen":"2023-09-10T00:07:01Z","times_seen":1528,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.976Z","timestamp":1694297065976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://compress-pdf.xiyu.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20616\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Sep 2023 05:13:34 GMT\r\nexpires: Fri, 06 Sep 2024 05:13:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 233452\r\nlast-modified: Thu, 01 Jun 2023 22:52:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20616,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20616, version 1.0\\012- data","md5":"87a7147e959103f9fe850f1f5afc2589","sha1":"79c8559d24437b81d57f9f7e64dd83dd29664aad","sha256":"39cf9abce51786437c69ac45ac5f39aa19af7f859d87e347478b6bd96abe52c3","sha512":"487452ca77ab3605d99b1b206f3a44588b3e42e891648042624e80dae6a37344a33f3a74aa2ba86fea2d9167bd3bbf50f37a4b0f5c301ca6d7187114ebc473e2","ssdeep":"384:F01gNTvfHGxk/JfAqCh5LmMj0ZQfCU5ljvrBV3Q97rt+M:yCTnGxifnCh5lj0ABjby7Z+M","tlshash":"d892d1de47d24f946f0a5960fb3b75687ca2092fbb41d2a9556c027dc4430fa8b7aca0","first_seen":"2023-06-08T09:07:15Z","last_seen":"2026-04-06T05:01:46.622889Z","times_seen":1132,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":122,"dns":6,"connect":10,"send":0,"wait":33,"receive":5,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.963Z","timestamp":1694297065963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://compress-pdf.xiyu.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14780\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 09 Sep 2023 05:15:14 GMT\r\nexpires: Sun, 08 Sep 2024 05:15:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60552\r\nlast-modified: Thu, 01 Jun 2023 22:52:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14780, version 1.0\\012- data","md5":"8dae809192c44690275a3624133293e7","sha1":"969c98c4d7eb00386ebbd61a63288972d138ecb8","sha256":"c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8","sha512":"66dda9008b2e992e8efb994470338cb0f0a1a17a474ae2cf6aba12ca5f14a3e6f950446675a4ac5f28df65fb8878cc000de5767c1d107271b15826b83177b881","ssdeep":"384:y1eEXK7BfwOIT30DseNrOrBB3ZjaHg6vIXPSH:y1LXK9wjTGNFU3+gMIXPSH","tlshash":"e062d0741c09002bde66891fac3e4456fefcb8b08d29e2c17148d38769cb2e160d59de","first_seen":"2023-06-06T21:28:24Z","last_seen":"2026-04-06T03:41:26.810599Z","times_seen":8419,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":136,"dns":18,"connect":7,"send":0,"wait":38,"receive":1,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:26.110Z","timestamp":1694297066110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://compress-pdf.xiyu.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Sep 2023 04:55:26 GMT\r\nexpires: Fri, 06 Sep 2024 04:55:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 234540\r\nlast-modified: Thu, 01 Jun 2023 22:53:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20392, version 1.0\\012- data","md5":"271742eaf7491c7254efb0a2f0b71f3c","sha1":"f845e307601dd7e4bd6398b11170a97b563a7889","sha256":"22982053d357ec33aa4d613859733c23000ba767d919853d002f15129f7afc9e","sha512":"7079b4045d72b6a0b2fea67d6ce7c4cb2077042ae8f06429e651af0e0c0bdd5d9d68b72f7c9abbc3d95361650feddd8d2b3f063624179db44cc030e64207c1de","ssdeep":"384:c2w9BryxDpe/z9GXqKKMqh9fEioUI28lT6VfqPVKJj1Nr1er/Iw:c2wMpe/zYXqHh9sioUIVFiqtQpNr1cAw","tlshash":"5c92d066b971045db33ce4f6bd3e9d9846620788c7390ba5ff73478e9a623c8063811d","first_seen":"2023-06-10T09:08:57Z","last_seen":"2026-04-06T05:01:46.646603Z","times_seen":539,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.984Z","timestamp":1694297065984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://compress-pdf.xiyu.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Sep 2023 15:16:10 GMT\r\nexpires: Fri, 06 Sep 2024 15:16:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 197296\r\nlast-modified: Thu, 01 Jun 2023 22:52:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14712, version 1.0\\012- data","md5":"3afeae0d768769f5e5f30ac9805c5b70","sha1":"3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d","sha256":"0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce","sha512":"71c361ac0d7b72b222d4f087b46d1bea318ed6652c4d37ec3403f0b0616482b5040232e06f2fcf13109cdf6151dc209e882c0db40b2c6ace4e2e0292fcdcdab5","ssdeep":"384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM","tlshash":"5462c028919ebd49e05e8afc90d03417ee5dcfdaf82d64189354248aae1f3717e176b0","first_seen":"2023-06-06T21:00:07Z","last_seen":"2026-04-06T10:02:56.841462Z","times_seen":17247,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":155,"dns":0,"connect":10,"send":0,"wait":8,"receive":4,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.974Z","timestamp":1694297065974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://compress-pdf.xiyu.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14892\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Sep 2023 07:39:48 GMT\r\nexpires: Thu, 05 Sep 2024 07:39:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 311078\r\nlast-modified: Thu, 01 Jun 2023 22:52:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14892,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14892, version 1.0\\012- data","md5":"9ec6deaf6bada919e20b98f9f7b718b1","sha1":"501d36403ad8205e4644532600019ecb10f5cb0a","sha256":"7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762","sha512":"03849431cef204a1584ffe6f23dbe86730afd076146ab3d1855b9c3402168a97faa8a529e69fae45ea24cff7110c2930cb4744162ba0ed95d95600f6e777b322","ssdeep":"384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE","tlshash":"b362b0ad670a1495c0f3aa30ce8fdc5463dc0726f2ace21abcf42b95ab566e64061457","first_seen":"2023-06-06T21:00:07Z","last_seen":"2026-04-06T10:02:56.885026Z","times_seen":30651,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":166,"dns":7,"connect":10,"send":0,"wait":11,"receive":2,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-09T22:04:26.319604716Z","timestamp":1694297066319,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 09 Sep 2023 22:04:26 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d16e6a04473828a5eb518bac650a29c5","sha1":"940abcc82c06c90baf6d4014c9d80e18bfaaf0c3","sha256":"38606c1318a5cafd37bd0cf3bd966f1548150b78616a201f07ae7b38ff7c4156","sha512":"e3adc2a6772eaf927763f14bd1b5d28aaf35bbbf2be0e854f738112aab223b73645ef88d96503ebb184ddb8592d29ac5ef7af05b35e174f4b17ca51f91279e87","ssdeep":"","tlshash":"a1f054133efc0212f497171e5aa1ab1852e175cf5a983accb879dad807410a733aacc8","first_seen":"2023-09-08T18:06:26Z","last_seen":"2023-09-10T00:07:01Z","times_seen":1528,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SJ47HJ1D41\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:26.320Z","timestamp":1694297066320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"E6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12","sha256":"31:8C:88:B2:F2:3A:CA:89:46:6A:03:A1:A7:BF:E0:54:61:71:D0:11:D9:00:D5:2A:60:78:1D:A2:83:16:9D:FC"}}},"request":{"raw":"GET /gtag/js?id=G-SJ47HJ1D41\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 09 Sep 2023 22:04:26 GMT\r\nexpires: Sat, 09 Sep 2023 22:04:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 80724\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80724,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (5857)","md5":"cfce1d12394f468de2a278b119e48c90","sha1":"56fe8f80cb4fed3a4e34fc72778dad7ba1b75e7b","sha256":"34609a78c4f55832f2faa970a29d317dc671f4bc36939603eb5ac32438568096","sha512":"108eef30aef9ea1d312e0e811b0bf240955e2499d075f3109ae88c10765b06d6422f1a407a664d43be73faa621b5de1b436da7671d9c5a89f128e65a83764bb3","ssdeep":"6144:rUXKN5GyWdd1lSHgzZ11axwod1neNUb9aIg:A85GyWxswA1nef","tlshash":"982407d9b3c2706682a6f4b5503f014ba57b6da2b85cccd8f189c9d02eb4a894177f7c","first_seen":"2023-09-10T00:04:43Z","last_seen":"2023-09-10T00:04:43Z","times_seen":1,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/img/favicon-16x16.png","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:26.401Z","timestamp":1694297066401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/img/favicon-16x16.png HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1371\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\netag: \"5f5c3f1f-55b\"\r\nexpires: Sat, 30 Sep 2023 06:39:13 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 833113\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=hqKt9mnmItxf2kyhBlLTLijwvwdFaC3FbMCEhi1krRX7uMAyhLs469fNhHcgHtOO%2BCPSJ68borOaDskT35grXOrfYG3F64ogg950aXgA47eAttK6yxRWQJNOnenNrA%2BHT0gEnt3qY3Ej\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8042ba18cafe0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced\\012- data","md5":"388b3c8ad9bf3dfaa308c6c473b58344","sha1":"495bb3fa98e71eb917bcf65b8c414ff2f21a0ec0","sha256":"4ecc24678362343005637646bfcf2d757834ea86e86191f6591d0d228f2d5067","sha512":"765181e9433ac100e322503dd52a02e0ca6646749d5baf24fde2b3d582d765a4121ee56ee3006bc90ab7e3666ab95e7a397ff998e63fb27117d20f277242c8c5","ssdeep":"","tlshash":"1821a5e5f238b015c6636678af01d500fa7f478baa4c47c9fe06a219585c77868f5f83","first_seen":"2023-06-13T17:10:09Z","last_seen":"2026-04-04T12:00:46.455202Z","times_seen":100,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/img/favicon-96x96.png","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:26.400Z","timestamp":1694297066400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/img/favicon-96x96.png HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 7521\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\netag: \"5f5c3f1f-1d61\"\r\nexpires: Sat, 30 Sep 2023 14:45:15 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 803950\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=jzAWGHV%2F8mKFnmiTz3gDcW%2FJhaHT3kfBVl3U8qTdc1JC3DTyVyuVPx0qOIWxk7jwZKbK3Rg4tfho5Jxr%2B1AfY8d%2B%2BuhqkeCCnKzI1FyFgVEcOs1q40mtA5fqcL%2Bv%2B4KCfCuxx0tzGRVD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8042ba18cafd0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\\012- data","md5":"76487f3fc7d21e052d935859b242b14e","sha1":"f252901ab420fddcd022c71d7ed0a22086e433da","sha256":"cd9c9a7098a8d0e82e62a19cd14f75f9ec71ec300f74f4619ef4d22bd999d813","sha512":"5dcaf0232c47bc88e8edfcb224b185d5a63b958d9e990bc7079be83ea75af7ac08294d5293271d3d6791b8bef6f909c131b7121182cf5ba18d58f5230cda7cf0","ssdeep":"192:iFnpb6h0KR6WTqTZky6MQuUhvhF/+ogIr7wWdczD7b6:iTKRkTZkyNwvH/7fr8W6a","tlshash":"96f18ec1964ff902e5a61d88b74943d3faf50753929a5688aa5cc8951c0e33461eee0f","first_seen":"2023-06-13T17:10:09Z","last_seen":"2026-04-04T12:00:46.448636Z","times_seen":98,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/bootstrap.min.css?v=1","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.742Z","timestamp":1694297065742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/bootstrap.min.css?v=1 HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f5c3f1f-2df2c\"\r\nexpires: Sat, 30 Sep 2023 12:34:52 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 811773\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=8qUrJOhScCzvtTIkX7njIzQSNLBZr9I5T1yDamKMeawuXsb164fiWY5LXKxxpc%2BpD6q20%2B88WMmlY6VXyg8aips7ztLdP78UNxgWl2r9I43P3uWbmJVdXEFLTo7zxwcQROxxILaKqAqZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8042ba14a8e50b31-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":188204,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"806922956eeb5acd9f783d0993a824b4","sha1":"9167410ae38d0ad0ac7a598c771d1c9480cb5cd7","sha256":"1eb80f196f390a7a014dc31138862457b5986a3e47bf9a7288571a2a466be498","sha512":"769e017f8e0453d43dd7eecddd281ca995e149c43ee13d6f1f0135533e673ecafb2a5eb7c036bce3f98ddcb8f02ad8662bc180c3aadc26378bab54a9f1d33772","ssdeep":"1536:FJUue3dtv+dg56Ru1lraaE/h+dIfBZD2wcpiSclKNMqg5QNk6hNO6Gjr:XU4ZBZ6wcpiSkKNMqg5QNk6hNO6Gjr","tlshash":"ea04b6a7f590311d6513ca0d61d0b7ba6a2f8165e6125ffbf4277b20c78a2c609b3d0e","first_seen":"2023-06-26T20:58:51Z","last_seen":"2026-04-04T12:00:46.468707Z","times_seen":21,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/bootstrap.min.js","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.746Z","timestamp":1694297065746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/bootstrap.min.js HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f5c3f1f-ea6a\"\r\nexpires: Thu, 28 Sep 2023 20:36:00 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 955705\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gwqxRdYOalgBNPvHuCNm6X%2B0i4QmsY8thN1V28UO3UrVYeYh7hF7oFmVrvmV3%2BFtGk0Pd%2FuDc54F1igLRENKd0%2Bp%2BFMfuFEUpsGcUjvw%2FhbMhcaaIXZHjTd8o9RPOCBw1fspOeBHWxr1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8042ba14a8e90b31-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60010,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (59729)","md5":"61f338f870fcd0ff46362ef109d28533","sha1":"b3c116c65e6f053aaab45e5619a78ec00271a50f","sha256":"5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548","sha512":"8c2694d03a7721b303959e9fe9d4844129cead2b2e806e85e988a04569da822ec7a0e2ec845d64c312d3e3ec42651810b1336aa542a3e969963b1b2ef65dd444","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B0+:uoFXOCx0wNGaYk+","tlshash":"c143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","first_seen":"2023-03-07T01:02:23Z","last_seen":"2026-04-06T10:06:01.341737Z","times_seen":11034,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/?fileurl=https://kupdf.net/downloadFilePartner/58c893f0dc0d60be0633902b?hash=19f8f5e5e581d6676662bd62d7be23cb\u0026title=A+Brief+Guide+to+Writing+from+Readings+7th+Edition\u0026utm_source=kupdfnet\u0026utm_medium=queue\u0026utm_campaign=58c893f0dc0d60be0633902b","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-09T22:04:25.114Z","timestamp":1694297065114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /?fileurl=https://kupdf.net/downloadFilePartner/58c893f0dc0d60be0633902b?hash=19f8f5e5e581d6676662bd62d7be23cb\u0026title=A+Brief+Guide+to+Writing+from+Readings+7th+Edition\u0026utm_source=kupdfnet\u0026utm_medium=queue\u0026utm_campaign=58c893f0dc0d60be0633902b HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://compress-pdf.xiyu.info/\r\nset-cookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt; expires=Sun, 10-Sep-2023 00:04:25 GMT; Max-Age=7200; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=KE6Kpja%2B4BaCXEQyTPTAmdtU2jmNBxD9D1Qmdz3ghi4jyIQgGVZGMOpU64LOqlEOFu%2FwZhO0%2BeCmC6%2FWgFfRaqIi9U%2F1kqYFi2tSpeZXpYIdsod4Z%2FQnDawTf0ehG%2BMw%2FHfqGLHqzx%2B6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8042ba10d8e7b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":10360,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":201,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-09T22:04:25.345Z","timestamp":1694297065345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=rsKDuQiVwsBgASVne0w7xw2K%2FTjGRBEPzrOqqXxJWftEWYZSNz5JwZBQoYOKPoKIJeRPF2xep4ZZxVJgiDAyF3ZKZh%2F2CsBbeMJNaXDZOsNfMOA1paVjoPQ7MjF330Qa6EsgGbyvjxyi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8042ba1239d6b4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10360,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/font-awesome/css/font-awesome.min.css","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.740Z","timestamp":1694297065740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f5c3f1f-7918\"\r\nexpires: Sat, 30 Sep 2023 13:09:21 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 809704\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=d71eDyDUr7ELBd%2BzcqbYPTqJukiUPKN2dCXEmd9Akp2YYAYEamdjhkK8fqbmRGnp8HIp7NIb1%2BAFpQht%2BvGkIRF9NYZfMQvD%2F%2BcIfQalkHKtkp%2BybeK2ntWeGhsrqN2X7JHh%2FAlDZZbW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8042ba14a8e40b31-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-06T10:12:06.221391Z","times_seen":237738,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"compress-pdf.xiyu.info/themes/xiyuinfo/assets/jquery-3.2.1.min.js","fqdn":"compress-pdf.xiyu.info","domain":"xiyu.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.744Z","timestamp":1694297065744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiyu.info","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 09 Aug 2023 08:46:55 GMT","end":"Tue, 07 Nov 2023 08:46:54 GMT"},"fingerprint":{"sha1":"05:EB:B2:92:D9:F1:09:30:18:84:7A:40:62:CB:43:78:21:53:E5:AB","sha256":"87:7E:16:C6:3A:F4:D4:D3:06:AB:70:3D:9D:24:8E:1E:98:FF:40:8A:9F:A4:55:44:9F:A8:6C:DC:AD:9D:27:62"}}},"request":{"raw":"GET /themes/xiyuinfo/assets/jquery-3.2.1.min.js HTTP/1.1\r\nHost: compress-pdf.xiyu.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nCookie: ci_session=tioi8li299ajprjarp1gb7q9cpntdpkt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2020 03:23:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f5c3f1f-15283\"\r\nexpires: Sat, 30 Sep 2023 08:44:44 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 825581\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qXwf1rLQjlxF3xhwYyS2XVqBswhugmAw0ji4GxnxcStX%2BQK0VvlSRtFZp%2B3NGMXQ4wM7GAZruoiNGpEQBEKjSolZekRfosSGWE0%2BknEpBTx%2B3xR%2FHt8GrSqSZC34G%2F5zLI9IHB0KVCyC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8042ba14a8e80b31-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86659,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T10:05:03.889779Z","times_seen":77626,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-09","alert":"Sinkholed","trigger":"xiyu.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,300;0,400;0,700;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://compress-pdf.xiyu.info/","date":"2023-09-09T22:04:25.776Z","timestamp":1694297065776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:09 GMT","end":"Mon, 06 Nov 2023 08:22:08 GMT"},"fingerprint":{"sha1":"09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38","sha256":"51:9F:EC:84:6E:75:1D:8B:F5:23:58:A2:24:2B:C1:8E:91:C4:20:61:49:69:0D:3E:83:47:F0:3C:36:08:DF:BA"}}},"request":{"raw":"GET /css2?family=Source+Sans+Pro:ital,wght@0,300;0,400;0,700;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://compress-pdf.xiyu.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 09 Sep 2023 22:04:25 GMT\r\ndate: Sat, 09 Sep 2023 22:04:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9885,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10137), with no line terminators","md5":"15408dfe751cb9e47451aa3da1faf636","sha1":"2c3660fb27f7dfb54cf39bf14f063fe24fcab529","sha256":"1d799e4480b85e5c52fa8f544af846f4ae038df305a5c4e65812f101439c0b25","sha512":"8fc8fb38b1a49badea0758bc767b0afeed1f788f0efae7ef40d88558a45256578b5444caf72c9a2de25abcca7b36478a454c4786c1a641c3dc006b6291c154e6","ssdeep":"96:GeW+FZl3W3TFVc+oJpNz+FZ04Vc+oZNZ2FZ9HVc+ooNXqFZ8IVc+olNF:GeWk3W3TRMXFCMA/nJy6","tlshash":"2122cca3901ba404d6a34fd533df373a6d4e2a116071c236dffd489aacd6c2a1364b6d","first_seen":"2023-06-27T01:25:48Z","last_seen":"2024-08-21T09:36:42.270775Z","times_seen":20,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":59,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}