Report - www.brucebarclay.com/access/login.php

Report Overview

Submitted URL
www.brucebarclay.com/access/login.php
IP
156.253.67.99
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone
Submitted
2023-01-30 02:31:23
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	52.35.3.113
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	58 kB	34.120.237.76
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-13T05:09:19Z	718 B	3.8 kB	104.18.20.226
hm.baidu.com	8254	2012-05-26T10:38:45Z	2023-03-13T05:32:36Z	1.5 kB	24 kB	103.235.46.191
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
www.brucebarclay.com	unknown	2017-04-08T12:50:57Z	2023-03-12T03:42:52Z	1.3 kB	6.6 kB	156.253.67.99
m1.shengmain.com	unknown	2022-07-30T04:16:48Z	2023-03-09T14:02:31Z	373 B	1.2 kB	103.35.149.232
www.sbw9188.com	unknown	2022-12-01T06:45:43Z	2023-03-09T14:02:32Z	12 kB	574 kB	103.35.149.232
ocsp.trust-provider.cn	unknown	2022-02-10T09:18:30Z	2023-03-13T07:40:56Z	346 B	1.5 kB	47.246.44.205
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.4 kB	8.9 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-30	medium	www.brucebarclay.com/access/login.php	Phishing
2023-01-30	medium	www.brucebarclay.com/access/login.php	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (16)

	URL	Size	First Seen	Last Seen
	www.sbw9188.com/go/css/kaiyun/index.js	2.5 kB	2023-03-12	2023-03-13
Pretty URL www.sbw9188.com/go/css/kaiyun/index.js IP 103.35.149.232 ASN #55720 Gigabit Hosting Sdn Bhd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 15:30:31 Last Seen2023-03-13 12:54:58 Times Seen1 Hash 64e22dae0b67a2f9632bb2766bb91ee4 3cd85988d3296dec7654fc769396db850584ade6 7e5dbdf2207e2492ba9a439067ddffb6d7d01acb5347e49067a5697790eb9c0b Loading...

	unknown	0 B	2023-03-07	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 03:38:25 Times Seen37082170 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	m1.shengmain.com/js/22/11/b/yb.js	942 B	2023-03-13	2023-05-01
Pretty URL m1.shengmain.com/js/22/11/b/yb.js IP 103.35.149.232 ASN #55720 Gigabit Hosting Sdn Bhd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 11:00:43 Last Seen2023-05-01 19:47:10 Times Seen4 Hash 046fcd88637c90a21ef0b7133e6044ec 13f3b6ddf9f9f25bb881e079fe08b4e71c3c8c04 f3d22032d6041d28a4ac04e7afb3d44ed8cbeb5a8dee094e2f7050d88bc51f31 Loading...

	www.sbw9188.com/js/yb.js	1.7 kB	2023-03-12	2023-06-27
Pretty URL www.sbw9188.com/js/yb.js IP 103.35.149.232 ASN #55720 Gigabit Hosting Sdn Bhd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 15:30:31 Last Seen2023-06-27 03:17:33 Times Seen14 Hash 96b55ccab87382eaf02f66335646d4cd b249e03ec4b9c3a7de5af1df30c14d1f0a3bd6b0 149c078ee3b91069404bd8ee4062f0084782223ef1797c059a5dd1f3af1e67de Loading...

	www.sbw9188.com/go/yb.html	92 B	2023-03-08	2023-04-02
Pretty URL www.sbw9188.com/go/yb.html IP 103.35.149.232 ASN #55720 Gigabit Hosting Sdn Bhd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:38:27 Last Seen2023-04-02 21:12:54 Times Seen2 Hash a95724b126500bcf5ad6f139b775a29e 6f745535a71cc1275500d05060c0438b97fdd2df ca9160051eb664bc80c92a9a2a96444c00a2a9d4669f674f3d7f4e1e9737fdf3 Loading...

	hm.baidu.com/hm.js?81f8e37df0f74aafca778055331ea3f4	30 kB	2023-03-13	2023-03-13
Pretty URL hm.baidu.com/hm.js?81f8e37df0f74aafca778055331ea3f4 IP 103.235.46.191 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 11:55:37 Last Seen2023-03-13 11:55:37 Times Seen1 Hash b6793e0d50fdccb7bc55702be129f935 b029a147d617a5fabdf6f73db7ad101633adc988 788e046430aab2b8a73982ecc6f3cb7eeb9e013f65546cc8ff5371010eec7982 Loading...

	hm.baidu.com/hm.js?f716678c805ceec62b6fa6e0ce8d5d88	30 kB	2023-03-13	2023-03-13
Pretty URL hm.baidu.com/hm.js?f716678c805ceec62b6fa6e0ce8d5d88 IP 103.235.46.191 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 11:55:37 Last Seen2023-03-13 11:55:37 Times Seen1 Hash 87c34051f85afb10e022c4decb957f7c c4bfa34bf423dd471af65a8b3e7a86e45bce5c63 23798fd0bfe330fe5223594a719728f266958378ca59a7cea7011031ef2c94d9 Loading...

	www.sbw9188.com/go/css/kaiyun/clipboard.min.js	11 kB	2023-03-07	2024-04-24
Pretty URL www.sbw9188.com/go/css/kaiyun/clipboard.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:12 Last Seen2024-04-24 13:34:13 Times Seen1048 Hash f06c52bfddb458ad87349acf9fac06c5 ee60ca5ba9401456105ef703a98092369b579c80 1626706afc88d95ebe1173b553ec732c6dc82a576989315fdf5e7779af738a44 Loading...

	www.sbw9188.com/go/css/kaiyun/jquery.min.js	194 kB	2023-03-08	2023-09-19
Pretty URL www.sbw9188.com/go/css/kaiyun/jquery.min.js IP 103.35.149.232 ASN #55720 Gigabit Hosting Sdn Bhd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:38:27 Last Seen2023-09-19 00:28:58 Times Seen44 Hash 3b884ee6b94c60820246e9c6965c9f53 4e44bab1518ae317c178863570fb713a198a2463 3dbb6f7a24e97ede677401bac8811975ef505cef2c61406c32ee828ed9deb3be Loading...

		Size	First Seen	Last Seen
	#1 Eval - b9ee63d3b7355f4969fb16b47ddedde3	121 B	2023-03-12	2023-09-21
Pretty Observations First Seen2023-03-12 15:30:31 Last Seen2023-09-21 23:13:57 Times Seen6 Hash b9ee63d3b7355f4969fb16b47ddedde3 c2892711284cf498097dc0770f2ddf2a9cbbdfd9 4e6dfd807685bcb4c7ed7e2214f2041939fed463861c2abb895347ff2da440af Loading...

		Size	First Seen	Last Seen
	#1 Write - 0a3a0b592b9c285e050805307cee87c2	6 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:09 Last Seen2024-04-25 22:36:43 Times Seen11449 Hash 0a3a0b592b9c285e050805307cee87c2 125a168e24b2bd38aadb84cbb5f87f316b073c41 aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23 Loading...

	#2 Write - 9a2eb1a390f7aa7422f5c9d5464e3405	101 B	2023-03-12	2023-09-21
Pretty Observations First Seen2023-03-12 15:30:31 Last Seen2023-09-21 23:13:57 Times Seen6 Hash 9a2eb1a390f7aa7422f5c9d5464e3405 26d19e3e3513773a9197c9ebabac6ec52e450cca f84338f41f6cb404e57d80d0f8a3ca13f1893f72b9ed8a44ffd7871260e572b9 Loading...

	#3 Write - 78ac2aa5ccc29c90a345c90aab40b442	103 B	2023-03-07	2024-04-19
Pretty Observations First Seen2023-03-07 01:06:53 Last Seen2024-04-19 17:37:58 Times Seen2026 Hash 78ac2aa5ccc29c90a345c90aab40b442 cac604932faa4add2955602b41de8a8bff362ebd 53db339b0b80637f13dfc63813d7366c899cebe0db896602886ece619163d82e Loading...

	#4 Write - 59cf81439a8bf9b569e5577fe5aa0de8	77 B	2023-03-07	2024-04-03
Pretty Observations First Seen2023-03-07 01:06:53 Last Seen2024-04-03 10:05:58 Times Seen1648 Hash 59cf81439a8bf9b569e5577fe5aa0de8 7310f3ea09ddff6601e9da7bf0665b0edd6d1435 235f11ebdcfb5a9e00906afc39c11efbaeed816b9040567cd61f18f9ce7242d4 Loading...

	#5 Write - 38b99736e991d961335f0a6eed5fc930	102 B	2023-03-07	2024-03-31
Pretty Observations First Seen2023-03-07 01:11:52 Last Seen2024-03-31 08:18:13 Times Seen433 Hash 38b99736e991d961335f0a6eed5fc930 fc7bb9218b7b2813f9b267fddf5d8b476eec564f f586d612c00723dedb1ced3c5f41ec9def9333bd0669dfe697d48f99c9e19fc2 Loading...

	#6 Write - 92782ca7f860667db167643defed0c36	178 B	2023-03-12	2023-06-27
Pretty Observations First Seen2023-03-12 15:30:31 Last Seen2023-06-27 03:17:33 Times Seen8 Hash 92782ca7f860667db167643defed0c36 855d3d9791024944bde5d6ba13c30767502c1cf4 636ef41388a9d5d1ad0ef9505f0e3353133809447dc25e6fb893d2359655d927 Loading...

HTTP Transactions (61)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3230
Expires: Mon, 30 Jan 2023 03:25:02 GMT
Date: Mon, 30 Jan 2023 02:31:12 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2524
Expires: Mon, 30 Jan 2023 03:13:16 GMT
Date: Mon, 30 Jan 2023 02:31:12 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 01:43:10 GMT
content-type: application/json
age: 2882
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10128
Expires: Mon, 30 Jan 2023 05:20:00 GMT
Date: Mon, 30 Jan 2023 02:31:12 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: gYZUGAMxU9pKL+RL3tGS7cfH6QCZMQdRdlhxRESsQycPv0aUavb+54SGh1Mg2kmoREfmE7usfXE=
x-amz-request-id: 04ETNJ1Q4RQ87JPY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 01:50:33 GMT
age: 2439
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 02:31:12 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 01:49:04 GMT
age: 2528
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3036
Expires: Mon, 30 Jan 2023 03:21:48 GMT
Date: Mon, 30 Jan 2023 02:31:12 GMT
Connection: keep-alive

push.services.mozilla.com/

52.35.3.113

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.35.3.113:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WHEOR2OvhXTS2YxJOTXDRw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FwI/G5isN4yK++ugdNzHKQ7L8Ck=

www.brucebarclay.com/access/login.php

156.253.67.99

301 Moved Permanently

185 B

URL HTTP/1.1
www.brucebarclay.com/access/login.php
IP
156.253.67.99:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
185 B (185 bytes)
Hash
4c555068310076e85908835c721911f5
9ec990aabb4391e139034f68e5e657e0f1d0b74d
568b4de0ad30e85670e724dc30ccb675924353b77807356c5ad7f29c8c38f510

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /access/login.php HTTP/1.1
Host: www.brucebarclay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.2
Date: Mon, 30 Jan 2023 02:31:13 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: https://www.brucebarclay.com/access/login.php

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
15b19d3e060269f5e2a3069a3bfca87d
f99c7db4ae47a1c1a84fb1904b4d93273b4996f3
216974849240455a0f1b4d60e5030d246393d90e327c165a335d241583fe78a6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "216974849240455A0F1B4D60E5030D246393D90E327C165A335D241583FE78A6"
Last-Modified: Sat, 28 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21566
Expires: Mon, 30 Jan 2023 08:30:40 GMT
Date: Mon, 30 Jan 2023 02:31:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12300
Expires: Mon, 30 Jan 2023 05:56:14 GMT
Date: Mon, 30 Jan 2023 02:31:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12300
Expires: Mon, 30 Jan 2023 05:56:14 GMT
Date: Mon, 30 Jan 2023 02:31:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12300
Expires: Mon, 30 Jan 2023 05:56:14 GMT
Date: Mon, 30 Jan 2023 02:31:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12300
Expires: Mon, 30 Jan 2023 05:56:14 GMT
Date: Mon, 30 Jan 2023 02:31:14 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9167 bytes)
Hash
3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 20:46:17 GMT
age: 20697
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbe179e9-ed5b-474f-b131-5b5a63a84dfb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8414 bytes)
Hash
2ffefd279ef73e586048a7907c0425b8
53d3da3cdf647e619abe96c6af42f2374112f334
75d7034fd709cb69e15234a4de94cdd9b42de1e26e3a0b2cb107be3228575af2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbe179e9-ed5b-474f-b131-5b5a63a84dfb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8414
x-amzn-requestid: 3ca84a59-6dce-45f8-919e-bd551d553a99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj5EGvAIAMFtPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6a0-446d1dff705f17853e7d0a77;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1bwRc3ESNUlQS6TzRP-pa2GYg09kQryE0kM0BZEAChp6UdLIhUYAMA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
etag: "53d3da3cdf647e619abe96c6af42f2374112f334"
content-type: image/jpeg
age: 16745
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7679 bytes)
Hash
3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 16745
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d55e9c-b793-48b6-9641-536d9d4b8a49.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9150 bytes)
Hash
7ce4f845d4cdd467b4c82d8fbeb9ae0b
68257cdadb6e13a8f7f5e2354aca225286107a79
243b58df1616fd8b78c11302dbf90c97ecb6a3b289abe5f3439252cdbf304892

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d55e9c-b793-48b6-9641-536d9d4b8a49.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9150
x-amzn-requestid: 2b8949c8-5c97-49f5-8784-85daa42adff1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj4NF1moAMFQ9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e69a-2ab06022306835b013c1e46f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NEYfOHRSbqSqgj9m4A-z6jFKKbaiYC9DKmggHLFvSAK88FMnfXMn1Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:23:20 GMT
age: 14874
etag: "68257cdadb6e13a8f7f5e2354aca225286107a79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9457 bytes)
Hash
51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:00:38 GMT
age: 16236
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80079413-a219-4943-96b4-3e14e10bb5ba.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.2 kB (7223 bytes)
Hash
36ff8d0c9899da25e80edbb858b164de
3e2491c5465f3c427a11c32bdfee27767559bb3f
b060501c6d82e97bd4826a62b790d58cd9d7ece8e1590267bc9b48033f3ce9b1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80079413-a219-4943-96b4-3e14e10bb5ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7223
x-amzn-requestid: b05a1db9-29e2-42d0-9eca-9a0f462c87c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3IHtpIAMFUkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e693-7e13d93143b5e666313a4b8f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: y8z-TFrhe0-x-KHZd2pIVITumrB18bqIzK_vX9em0eEpt3U8i0sozA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:07 GMT
age: 16687
etag: "3e2491c5465f3c427a11c32bdfee27767559bb3f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
16330529b47c7c5c9db01928291c2d97
e0be04be9c0a39c06c98760871a0045e08a350f9
15f69fbf7d248eb46429f1428f56d7c34e7a1d69b7b36e119702038e903e0f77

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "15F69FBF7D248EB46429F1428F56D7C34E7A1D69B7B36E119702038E903E0F77"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21586
Expires: Mon, 30 Jan 2023 08:31:01 GMT
Date: Mon, 30 Jan 2023 02:31:15 GMT
Connection: keep-alive

m1.shengmain.com/js/22/11/b/yb.js

103.35.149.232

200 OK

942 B

URL HTTP/1.1
m1.shengmain.com/js/22/11/b/yb.js
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
ASCII text, with very long lines (332)
Size
942 B (942 bytes)
Hash
046fcd88637c90a21ef0b7133e6044ec
13f3b6ddf9f9f25bb881e079fe08b4e71c3c8c04
f3d22032d6041d28a4ac04e7afb3d44ed8cbeb5a8dee094e2f7050d88bc51f31

HTTP Headers

GET /js/22/11/b/yb.js HTTP/1.1
Host: m1.shengmain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brucebarclay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:15 GMT
Content-Type: application/javascript
Content-Length: 942
Last-Modified: Thu, 01 Dec 2022 05:47:52 GMT
Connection: keep-alive
ETag: "63884008-3ae"
Accept-Ranges: bytes

www.brucebarclay.com/access/login.php

156.253.67.99

200 OK

2.2 kB

URL HTTP/2
www.brucebarclay.com/access/login.php
IP
156.253.67.99:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
data
Size
2.2 kB (2205 bytes)
Hash
91e2fe1d012566902cf01ceff2b09939
d673059a5400744388b5a5e4228736930919f6bf
bd04db758127f022e873ff193d1f7c4d79e76a5dec05eba1a457f8a219412448

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /access/login.php HTTP/1.1
Host: www.brucebarclay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 30 Jan 2023 02:31:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
a4c1276d81b0475f7963cfeb826164ab
39b52b039ceb9f029949cdab7aaac5475b8f1d2b
a96936a4c03eed50b00b17ec321e8307122777dcbe1aea349881732c8748dd9b

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 02:31:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 02 Feb 2023 23:44:05 GMT
ETag: "39b52b039ceb9f029949cdab7aaac5475b8f1d2b"
Last-Modified: Sun, 29 Jan 2023 23:44:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3170
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7916ca5beceab4f7-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
a4c1276d81b0475f7963cfeb826164ab
39b52b039ceb9f029949cdab7aaac5475b8f1d2b
a96936a4c03eed50b00b17ec321e8307122777dcbe1aea349881732c8748dd9b

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 02:31:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 02 Feb 2023 23:44:05 GMT
ETag: "39b52b039ceb9f029949cdab7aaac5475b8f1d2b"
Last-Modified: Sun, 29 Jan 2023 23:44:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3170
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7916ca5bec9ab52d-OSL

www.sbw9188.com/js/yb.js

103.35.149.232

200 OK

894 B

URL HTTP/1.1
www.sbw9188.com/js/yb.js
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document, ASCII text, with CRLF line terminators
Size
894 B (894 bytes)
Hash
93b96b8fdd4dfc584c1cfe702711e61d
1c48120f8060d676264e2a6f81a8d4bb8d192f4e
18b994d7b8c7feea5ca72b8e0469fce556b4dfd99ae56f884ddc0e55d3053446

HTTP Headers

GET /js/yb.js HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brucebarclay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:17 GMT
Content-Type: application/javascript
Last-Modified: Thu, 01 Dec 2022 05:47:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63884008-6bb"
Content-Encoding: gzip

www.sbw9188.com/go/yb.html

103.35.149.232

200 OK

2.9 kB

URL HTTP/1.1
www.sbw9188.com/go/yb.html
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
2.9 kB (2898 bytes)
Hash
a003839e765afe69cea54b6dbf32db1d
db6f2e43fbaea6250d38faec0a2469b483673b93
f433e1cf5702f1b888ade5c8c2b6c2a50657913dbcce5662384ad6184c909c37

HTTP Headers

GET /go/yb.html HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brucebarclay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:17 GMT
Content-Type: text/html
Last-Modified: Tue, 22 Nov 2022 17:52:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"637d0c7b-26b9"
Content-Encoding: gzip

www.sbw9188.com/go/css/kaiyun/style.css

103.35.149.232

200 OK

2.9 kB

URL HTTP/1.1
www.sbw9188.com/go/css/kaiyun/style.css
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
Unicode text, UTF-8 text
Size
2.9 kB (2853 bytes)
Hash
712770e900aa453ea20a9bd9de42dcf7
8af0ff66589e62cef1cdfbce83d024bb351ec4f4
da3ed03f1391decc4ebc42798e3d8579ad726f8a4f4af8ce21a47194710243fb

HTTP Headers

GET /go/css/kaiyun/style.css HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:17 GMT
Content-Type: text/css
Last-Modified: Mon, 24 Oct 2022 03:29:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6356069a-30fa"
Content-Encoding: gzip

www.sbw9188.com/go/css/kaiyun/swiper.min.css

103.35.149.232

200 OK

2.7 kB

URL HTTP/1.1
www.sbw9188.com/go/css/kaiyun/swiper.min.css
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2654 bytes)
Hash
5f3d28441814058295ac0ef6e51add1a
422d5c6be1ebbe1ade768905af74c1fde44003d8
c8f7cac3506c7afc15c9b51ed80bae647ac263fb991b389db0a3db7d0f762c2a

HTTP Headers

GET /go/css/kaiyun/swiper.min.css HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:17 GMT
Content-Type: text/css
Last-Modified: Mon, 24 Oct 2022 03:29:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635606a1-33b6"
Content-Encoding: gzip

hm.baidu.com/hm.js?81f8e37df0f74aafca778055331ea3f4

103.235.46.191

200 OK

11 kB

URL HTTP/1.1
hm.baidu.com/hm.js?81f8e37df0f74aafca778055331ea3f4
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
ASCII text, with very long lines (624)
Size
11 kB (11262 bytes)
Hash
e8cf84e843ad91c834248098631ac59c
94167924dc9a300f13422c880d137abaf7241a31
f45f2265ed4b67fe2d37a3ef42b94372503d94d688a72c8bb97fe75134d78b69

HTTP Headers

GET /hm.js?81f8e37df0f74aafca778055331ea3f4 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brucebarclay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11262
Content-Type: application/javascript
Date: Mon, 30 Jan 2023 02:31:17 GMT
Etag: 3f39aa1d716c0020ca8de01c325dfed0
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=8BECC87FE7A84971; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

hm.baidu.com/hm.js?f716678c805ceec62b6fa6e0ce8d5d88

103.235.46.191

200 OK

11 kB

URL HTTP/1.1
hm.baidu.com/hm.js?f716678c805ceec62b6fa6e0ce8d5d88
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
ASCII text, with very long lines (631)
Size
11 kB (11269 bytes)
Hash
19293bc8d6e37330806f2fd492e49b9c
17f45f81d0407f5a29039e0edae333fbf21a62b7
0fca2d69e7f825a45740c179fc9d6b37489ed4b5743bf0dc375cbc0b5fc32942

HTTP Headers

GET /hm.js?f716678c805ceec62b6fa6e0ce8d5d88 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brucebarclay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11269
Content-Type: application/javascript
Date: Mon, 30 Jan 2023 02:31:17 GMT
Etag: 1b608ffa506d029def7190b98af09873
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=03F2721ECC3286B0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

www.sbw9188.com/go/css/kaiyun/index.js

103.35.149.232

200 OK

932 B

URL HTTP/1.1
www.sbw9188.com/go/css/kaiyun/index.js
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
932 B (932 bytes)
Hash
10948479069102d8391364b907284299
8f5c574342ea1e44b62c5ddf201826268594a17b
7dcdff5c728eaba9e85288b6061bdc31381e42371a30245663de62b1532122e7

HTTP Headers

GET /go/css/kaiyun/index.js HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:18 GMT
Content-Type: application/javascript
Last-Modified: Wed, 04 Jan 2023 07:16:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b527ce-9ea"
Content-Encoding: gzip

www.brucebarclay.com/favicon.ico

156.253.67.99

200 OK

3.7 kB

URL HTTP/2
www.brucebarclay.com/favicon.ico
IP
156.253.67.99:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Size
3.7 kB (3671 bytes)
Hash
ae8d639907e37921fd5280e300227ed7
b86e4dfcfdf1dbe47191c2e939025eec4a210b4b
6b4ef88eca6475daa6e8be7da2f822e25aedd65382785123445117103753c0ea

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.brucebarclay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brucebarclay.com/access/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 30 Jan 2023 02:31:18 GMT
content-type: image/x-icon
X-Firefox-Spdy: h2

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1298833024&si=f716678c805ceec62b6fa6e0ce8d5d88&v=1.3.0&lv=1&sn=36823&r=0&ww=1280&u=https%3A%2F%2Fwww.brucebarclay.com%2Faccess%2Flogin.php&tt=Yabo%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8-%E6%90%9C%E7%8B%97%E6%8C%87%E5%8D%97

103.235.46.191

200 OK

43 B

URL HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1298833024&si=f716678c805ceec62b6fa6e0ce8d5d88&v=1.3.0&lv=1&sn=36823&r=0&ww=1280&u=https%3A%2F%2Fwww.brucebarclay.com%2Faccess%2Flogin.php&tt=Yabo%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8-%E6%90%9C%E7%8B%97%E6%8C%87%E5%8D%97
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1298833024&si=f716678c805ceec62b6fa6e0ce8d5d88&v=1.3.0&lv=1&sn=36823&r=0&ww=1280&u=https%3A%2F%2Fwww.brucebarclay.com%2Faccess%2Flogin.php&tt=Yabo%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8-%E6%90%9C%E7%8B%97%E6%8C%87%E5%8D%97 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brucebarclay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 30 Jan 2023 02:31:18 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=6BBC3D5191AA75E2; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

www.sbw9188.com/go/css/kaiyun/swiper.min.js

103.35.149.232

200 OK

47 kB

URL HTTP/1.1
www.sbw9188.com/go/css/kaiyun/swiper.min.js
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
ASCII text, with very long lines (1621), with CRLF line terminators
Size
47 kB (47051 bytes)
Hash
d7cc45910c96d32bd10c8616276d8d0d
9cb49c552c6a837246aed69c20c3af1681f8f051
2c83707b11d3092ae37353a8a5a355fb5c52ceb877b63fd044e83e65f1e2973a

HTTP Headers

GET /go/css/kaiyun/swiper.min.js HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:18 GMT
Content-Type: application/javascript
Last-Modified: Mon, 24 Oct 2022 03:34:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635607af-2eac0"
Content-Encoding: gzip

www.sbw9188.com/go/css/kaiyun/jquery.min.js

103.35.149.232

200 OK

76 kB

URL HTTP/1.1
www.sbw9188.com/go/css/kaiyun/jquery.min.js
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
ASCII text, with very long lines (32077), with CRLF line terminators
Size
76 kB (75473 bytes)
Hash
00c1f3c1a39fa40429a4543b61c762bc
9518a228a248ae91453167c9b1c22ae743d15f5f
4d93134f82269c9307a07effae46832fdd5e99102d811905b935a694f409936c

HTTP Headers

GET /go/css/kaiyun/jquery.min.js HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:18 GMT
Content-Type: application/javascript
Last-Modified: Mon, 24 Oct 2022 03:36:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63560854-2f71e"
Content-Encoding: gzip

www.sbw9188.com/go/images/kaiyun/screen-shot.png

103.35.149.232

200 OK

4.4 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/screen-shot.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
PNG image data, 715 x 47, 8-bit colormap, non-interlaced\012- data
Size
4.4 kB (4442 bytes)
Hash
8189f90af72659193d3b067a0493aa03
9c9ed7e2d998563110f423f784b9ba143084de1f
9b1018431aac30cf4a966b73512d102fea2af41f4ba5ef1a202e4d516745d85d

HTTP Headers

GET /go/images/kaiyun/screen-shot.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/png
Content-Length: 4442
Last-Modified: Mon, 24 Oct 2022 03:36:27 GMT
Connection: keep-alive
ETag: "6356083b-115a"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/0001.jpg

103.35.149.232

200 OK

49 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/0001.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 996x402, components 3\012- data
Size
49 kB (48977 bytes)
Hash
bbacc8495a4eaffb8d3ae2fd785509b8
f465e71ef90a241486788858cd0fa1454410115a
a4de0488a00caf6214c41bd196fb16711873d2836cce111ec40162f4f9bd4f02

HTTP Headers

GET /go/images/kaiyun/0001.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/jpeg
Content-Length: 48977
Last-Modified: Mon, 24 Oct 2022 03:34:38 GMT
Connection: keep-alive
ETag: "635607ce-bf51"
Accept-Ranges: bytes

www.sbw9188.com/go/css/images/tabnormal.png

103.35.149.232

404 Not Found

520 B

URL HTTP/1.1
www.sbw9188.com/go/css/images/tabnormal.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
520 B (520 bytes)
Hash
3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e

HTTP Headers

GET /go/css/images/tabnormal.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/css/kaiyun/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
ETag: "619e0cae-208"

www.sbw9188.com/go/css/images/tab7.png

103.35.149.232

404 Not Found

520 B

URL HTTP/1.1
www.sbw9188.com/go/css/images/tab7.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
520 B (520 bytes)
Hash
3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e

HTTP Headers

GET /go/css/images/tab7.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/css/kaiyun/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
ETag: "619e0cae-208"

www.sbw9188.com/go/css/images/tab8.png

103.35.149.232

404 Not Found

520 B

URL HTTP/1.1
www.sbw9188.com/go/css/images/tab8.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
520 B (520 bytes)
Hash
3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e

HTTP Headers

GET /go/css/images/tab8.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/css/kaiyun/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
ETag: "619e0cae-208"

www.sbw9188.com/go/css/images/tab9.png

103.35.149.232

404 Not Found

520 B

URL HTTP/1.1
www.sbw9188.com/go/css/images/tab9.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
520 B (520 bytes)
Hash
3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e

HTTP Headers

GET /go/css/images/tab9.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/css/kaiyun/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
ETag: "619e0cae-208"

www.sbw9188.com/go/images/kaiyun/1234.jpg

103.35.149.232

200 OK

49 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/1234.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 996x402, components 3\012- data
Size
49 kB (48593 bytes)
Hash
ab0f26542ce03399dad330383f28d086
10d35294d23c5293ec7f95b39a7ae3805e243f0f
b967da26884b79c8e300bc8cc4339b1a274c255341f6643697a865f2bd362ce9

HTTP Headers

GET /go/images/kaiyun/1234.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/jpeg
Content-Length: 48593
Last-Modified: Mon, 24 Oct 2022 03:35:12 GMT
Connection: keep-alive
ETag: "635607f0-bdd1"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/0003.jpg

103.35.149.232

200 OK

44 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/0003.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 996x402, components 3\012- data
Size
44 kB (43989 bytes)
Hash
87ed0407eded8551000acaadd25437e4
23d0a8b0c5406c79fd8fa59222d16f097cd160d1
bc9fc54005479e92657883444b2e04dac30006b8653c01715fd111161037641c

HTTP Headers

GET /go/images/kaiyun/0003.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/jpeg
Content-Length: 43989
Last-Modified: Mon, 24 Oct 2022 03:34:45 GMT
Connection: keep-alive
ETag: "635607d5-abd5"
Accept-Ranges: bytes

www.sbw9188.com/go/css/images/tab10.png

103.35.149.232

404 Not Found

520 B

URL HTTP/1.1
www.sbw9188.com/go/css/images/tab10.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
520 B (520 bytes)
Hash
3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e

HTTP Headers

GET /go/css/images/tab10.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/css/kaiyun/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
ETag: "619e0cae-208"

www.sbw9188.com/go/css/images/tab11.png

103.35.149.232

404 Not Found

520 B

URL HTTP/1.1
www.sbw9188.com/go/css/images/tab11.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
520 B (520 bytes)
Hash
3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e

HTTP Headers

GET /go/css/images/tab11.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/css/kaiyun/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
ETag: "619e0cae-208"

www.sbw9188.com/go/css/images/tab12.png

103.35.149.232

404 Not Found

520 B

URL HTTP/1.1
www.sbw9188.com/go/css/images/tab12.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
520 B (520 bytes)
Hash
3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e

HTTP Headers

GET /go/css/images/tab12.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/css/kaiyun/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
ETag: "619e0cae-208"

www.sbw9188.com/go/images/kaiyun/0004.jpg

103.35.149.232

200 OK

50 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/0004.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 996x402, components 3\012- data
Size
50 kB (50366 bytes)
Hash
188bcdd690c72b92093f609f2480480b
990788b187276853279ec0cfaae2c5cf4a2ba660
e77376a935cd2e88b901f35b2bed202883b6064e8dd600274189a17efea011a5

HTTP Headers

GET /go/images/kaiyun/0004.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/jpeg
Content-Length: 50366
Last-Modified: Mon, 24 Oct 2022 03:34:52 GMT
Connection: keep-alive
ETag: "635607dc-c4be"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/1235.jpg

103.35.149.232

200 OK

54 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/1235.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 996x402, components 3\012- data
Size
54 kB (53697 bytes)
Hash
5b4e8e985e02bcf3f5cc36df750f30c3
397759346d5a36014ccb51bc9890ae175a4339f4
011a8e8676d55f9e07aae946bbce397927ffed94b1dc23c8483da62aa2e78ac4

HTTP Headers

GET /go/images/kaiyun/1235.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/jpeg
Content-Length: 53697
Last-Modified: Mon, 24 Oct 2022 03:35:19 GMT
Connection: keep-alive
ETag: "635607f7-d1c1"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/ky-sports-logo.png

103.35.149.232

200 OK

20 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/ky-sports-logo.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
PNG image data, 284 x 112, 8-bit/color RGBA, non-interlaced\012- data
Size
20 kB (20241 bytes)
Hash
40dc5eafc556f91607df8a92799ddb4a
6007f33f708ff7f250823b9cad3402120bf33a07
09f70977245d3dad84b9331312eb711c5c519501290ca45062fb3e94e4b2118c

HTTP Headers

GET /go/images/kaiyun/ky-sports-logo.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/png
Content-Length: 20241
Last-Modified: Mon, 24 Oct 2022 03:36:14 GMT
Connection: keep-alive
ETag: "6356082e-4f11"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/notice.png

103.35.149.232

200 OK

1.1 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/notice.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size
1.1 kB (1115 bytes)
Hash
1a0ae55b58228e258b2385123a5c3eee
9d6049ddd895331185fe22a7927525dae4958a60
7dad03cc4005a92b2cec0dcb0cd8276322b513673aa5b21090acb7ea10d90f35

HTTP Headers

GET /go/images/kaiyun/notice.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:20 GMT
Content-Type: image/png
Content-Length: 1115
Last-Modified: Mon, 24 Oct 2022 03:36:20 GMT
Connection: keep-alive
ETag: "63560834-45b"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/kaiyun.png

103.35.149.232

200 OK

11 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/kaiyun.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
PNG image data, 93 x 93, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (11258 bytes)
Hash
0f32b3e4ff9e281031b35acd7f303ae2
7032d399e9c45286b137c5404bcbe1d1ba21e867
787a84b3bdf6d2ce1388c27b7d29830d471baffc373a043957036d16b53877c9

HTTP Headers

GET /go/images/kaiyun/kaiyun.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:20 GMT
Content-Type: image/png
Content-Length: 11258
Last-Modified: Mon, 24 Oct 2022 03:36:03 GMT
Connection: keep-alive
ETag: "63560823-2bfa"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/service.956c87f.png

103.35.149.232

200 OK

7.8 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/service.956c87f.png
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
PNG image data, 199 x 223, 8-bit colormap, non-interlaced\012- data
Size
7.8 kB (7793 bytes)
Hash
956c87fe51d76bd6a72390b5601f04d4
d2eece1285160188495188c5f65e882972543cdc
30518cb6b5b8a5576a7a988cd75249e39e22f9d1f9099c4daa87e47f0a68e1f3

HTTP Headers

GET /go/images/kaiyun/service.956c87f.png HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:20 GMT
Content-Type: image/png
Content-Length: 7793
Last-Modified: Mon, 24 Oct 2022 03:36:35 GMT
Connection: keep-alive
ETag: "63560843-1e71"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/ayx50.jpg

103.35.149.232

200 OK

141 kB

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/ayx50.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=292, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=564], progressive, precision 8, 564x292, components 3\012- data
Size
141 kB (140829 bytes)
Hash
bf753790ad8c1173d84b387b26f4d85c
2f034314fa667a224c50064182401a2286032cd6
cb85892270e32f0003e61d9dce205b9d5a1b5b2842ce31069463b81d6b8520ac

HTTP Headers

GET /go/images/kaiyun/ayx50.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:20 GMT
Content-Type: image/jpeg
Content-Length: 140829
Last-Modified: Mon, 24 Oct 2022 03:35:42 GMT
Connection: keep-alive
ETag: "6356080e-2261d"
Accept-Ranges: bytes

ocsp.trust-provider.cn/

47.246.44.205

200 OK

599 B

URL HTTP/1.1
ocsp.trust-provider.cn/
IP
47.246.44.205:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
599 B (599 bytes)
Hash
992b3a0c8d67291b5ffc6072faa1425e
9adc6465f73d2727d64cad0ff8d3a3d157257efc
80ad89745df7b64447939bd3035c233b1a57171ce088dbc6e09e3ff83f49aa8a

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Mon, 30 Jan 2023 02:15:17 GMT
last-modified: Fri, 27 Jan 2023 02:10:48 GMT
expires: Fri, 03 Feb 2023 02:10:47 GMT
etag: "9adc6465f73d2727d64cad0ff8d3a3d157257efc"
cache-control: max-age=599776,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 7916b2efda8a9b6e-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1675044917
via: cache2.l2de2[25,25,304-0,M], cache3.l2de2[26,0], cache4.se1[0,0,200-0,H], cache5.se1[1,0], cache7.se1[3,0]
age: 964
x-cache: HIT TCP_MEM_HIT dirn:4:365457899
x-swift-savetime: Mon, 30 Jan 2023 02:15:17 GMT
x-swift-cachetime: 1800
timing-allow-origin: *, *
eagleid: 2ff62c9b16750458810965101e, 2ff62c9b16750458810965101e

www.sbw9188.com/go/images/kaiyun/ayxzhenren.jpg

103.35.149.232

200 OK

0 B

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/ayxzhenren.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /go/images/kaiyun/ayxzhenren.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:20 GMT
Content-Type: image/jpeg
Content-Length: 124584
Last-Modified: Mon, 24 Oct 2022 03:35:49 GMT
Connection: keep-alive
ETag: "63560815-1e6a8"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/11111.jpg

103.35.149.232

200 OK

0 B

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/11111.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /go/images/kaiyun/11111.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/jpeg
Content-Length: 379859
Last-Modified: Mon, 24 Oct 2022 03:35:05 GMT
Connection: keep-alive
ETag: "635607e9-5cbd3"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/44444.jpg

103.35.149.232

200 OK

0 B

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/44444.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /go/images/kaiyun/44444.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:19 GMT
Content-Type: image/jpeg
Content-Length: 480991
Last-Modified: Mon, 24 Oct 2022 03:35:26 GMT
Connection: keep-alive
ETag: "635607fe-756df"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/55555.jpg

103.35.149.232

200 OK

0 B

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/55555.jpg
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /go/images/kaiyun/55555.jpg HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:20 GMT
Content-Type: image/jpeg
Content-Length: 437712
Last-Modified: Mon, 24 Oct 2022 03:35:33 GMT
Connection: keep-alive
ETag: "63560805-6add0"
Accept-Ranges: bytes

www.sbw9188.com/go/images/kaiyun/huodong.gif

103.35.149.232

200 OK

0 B

URL HTTP/1.1
www.sbw9188.com/go/images/kaiyun/huodong.gif
IP
103.35.149.232:0
ASN
#55720 Gigabit Hosting Sdn Bhd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /go/images/kaiyun/huodong.gif HTTP/1.1
Host: www.sbw9188.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sbw9188.com/go/yb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 02:31:20 GMT
Content-Type: image/gif
Content-Length: 356268
Last-Modified: Mon, 24 Oct 2022 03:35:56 GMT
Connection: keep-alive
ETag: "6356081c-56fac"
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL