Report - shjtfwxh.com/

Report Overview

Submitted URL
shjtfwxh.com/
IP
64.32.28.236
ASN
#46844 ST-BGP
Submitted
2023-01-17 10:29:13
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
libs.baidu.com	103017	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	287 B	82 kB	39.156.66.111
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	66 kB	34.120.237.76
ia.51.la	59607	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	997 B	201 B	103.143.19.103
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	3.5 kB	23.33.119.27
shjtfwxh.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	785 B	5.3 kB	64.32.28.236
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.155.77.83
js.users.51.la	53024	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	275 B	2.9 kB	103.143.19.103
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.2 kB	93.184.220.29
s104.cnzz.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	305 B	669 B	119.96.204.250
www.4.cn	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.1 kB	130 kB	69.234.239.50

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-17	medium	js.users.51.la/2882802.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-01-17	medium	shjtfwxh.com	Sinkholed
2023-01-17	medium	shjtfwxh.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	js.users.51.la/2882802.js	5.2 kB	2023-03-07	2023-08-16
Pretty URL js.users.51.la/2882802.js IP 103.143.19.103 ASN #4837 CHINA UNICOM China169 Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:06 Last Seen2023-08-16 08:22:04 Times Seen66 Hash 72557b96f08f6689a03fe696a0c01b14 197dfc40f4c548a31fa9bce5e23185e5903369dd c2acc3aaa494c65fa2238cf0e1e135f0bac7a46948ab05f5b240117fe436ac39 Loading...

	libs.baidu.com/jquery/1.9.0/jquery.js	277 kB	2023-03-07	2024-04-20
Pretty URL libs.baidu.com/jquery/1.9.0/jquery.js IP 39.156.66.111 ASN #9808 China Mobile Communications Group Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:06:55 Last Seen2024-04-20 18:53:12 Times Seen497 Hash 5543952568a64f79db992b6ece4af18d aa6ccf721c4e76921abda46c120772d364e5b285 5d513c05fa221491a386ebed47744f266dc278703b45389167cb010bb8681d03 Loading...

	shjtfwxh.com/	225 B	2023-03-07	2023-11-04
Pretty URL shjtfwxh.com/ IP 64.32.28.236 ASN #46844 ST-BGP Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:06:55 Last Seen2023-11-04 08:18:50 Times Seen32 Hash 00770c8b9037ac509adf027ba469142e 6cd8a2938dbf3b7b46272fbac0cc3429b1f5e517 91908930e058f3f62b27246da89982331db8c4e46e00e72db320a92ad0e4557b Loading...

	s104.cnzz.com/stat.php?id=403447&web_id=403447&show=pic	0 B	2023-03-07	2024-04-25
Pretty URL s104.cnzz.com/stat.php?id=403447&web_id=403447&show=pic IP 119.96.204.250 ASN #58563 CHINANET Hubei province network Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 18:36:43 Times Seen37069677 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

		Size	First Seen	Last Seen
	#1 Write - 566f72c76b1baa243efbb2f566ab48e1	257 B	2023-03-07	2024-04-20
Pretty Observations First Seen2023-03-07 12:11:06 Last Seen2024-04-20 18:53:12 Times Seen160 Hash 566f72c76b1baa243efbb2f566ab48e1 35d1f8938cddd4273b2f4bcbaacc127a818610ce 37a2f4d070dc06736311f306af75e1200b7f6dd5e9c3792ce7874462bb2fc042 Loading...

HTTP Transactions (32)

URL IP Response Size

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4b8b051d555b46b1e9e64faebf91b4ab
bdab7f1f4146f0e7c16665692e4f1edd83c10a24
e069730519f658e767ec8edb57edd8e2b1ccb18d4f0ade0920654eac18f83456

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E069730519F658E767EC8EDB57EDD8E2B1CCB18D4F0ADE0920654EAC18F83456"
Last-Modified: Tue, 17 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18782
Expires: Tue, 17 Jan 2023 15:42:04 GMT
Date: Tue, 17 Jan 2023 10:29:02 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
405f8f149ccdf0005ca0d890c96a9cb4
64de3200cef76133dfad901d6709697d6842405e
3a10790c397a419450ac2c90b941fd20bc49af1dbaeb34678836306de8febfce

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A10790C397A419450AC2C90B941FD20BC49AF1DBAEB34678836306DE8FEBFCE"
Last-Modified: Mon, 16 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2500
Expires: Tue, 17 Jan 2023 11:10:42 GMT
Date: Tue, 17 Jan 2023 10:29:02 GMT
Connection: keep-alive

shjtfwxh.com/

64.32.28.236

200 OK

4.8 kB

URL HTTP/1.1
shjtfwxh.com/
IP
64.32.28.236:0
ASN
#46844 ST-BGP

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (546), with CRLF line terminators
Size
4.8 kB (4822 bytes)
Hash
5a95284fcfad02810a09e073b18bf913
c17817c495cd6fc57c4175be3f4b785a45a7289c
8bd9ab7f91e7d323a123cc1af14487abeb12248847da93f89c51f616e48c2ed0

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: shjtfwxh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 17 Jan 2023 10:29:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.28

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 17 Jan 2023 09:49:13 GMT
content-type: application/json
age: 2389
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d6e2abd68203014e8e24d4a9e20e980a
5edbbb1a36083d5077b90b82e7aa10049e90c5d6
88cf8dae194a5e92a8c36a4c54ae71a609eaaed6e99d3986b3834c40d2fceeaa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88CF8DAE194A5E92A8C36A4C54AE71A609EAAED6E99D3986B3834C40D2FCEEAA"
Last-Modified: Sun, 15 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6344
Expires: Tue, 17 Jan 2023 12:14:46 GMT
Date: Tue, 17 Jan 2023 10:29:02 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: nvagREOdVYATxOy1ATYXk6i/3DQEHguy3R/s224+41ngImGFO7V4cZw4lLxcgTa34XNSdXoVD+w=
x-amz-request-id: MQVQYQ3XFRABVGEP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 17 Jan 2023 09:56:12 GMT
age: 1970
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 10:29:02 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 17 Jan 2023 10:17:25 GMT
age: 697
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d03545e1fc5a8876441094039811aac5
99fcc840f3516298625c528e9b408132f7fcbb9c
166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4474
Cache-Control: max-age=85944
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 10:29:03 GMT
Etag: "63c513ad-1d7"
Expires: Wed, 18 Jan 2023 10:21:27 GMT
Last-Modified: Mon, 16 Jan 2023 09:06:53 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.155.77.83

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.155.77.83:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MB317lsFcQXQ2dThWzo9SQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Mr7wzeJCSZ1zqd8eIMXtqivMMHc=

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
c2e972917031278f751a3ee410770ab4
313ff8cae50b5bf07acb6dcab59127fc479dbebb
6a5fe9642a8922c2f4b6b6953107e620c0957434dc876eeafc5329bc1ffab1b4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=154173
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 10:29:03 GMT
Etag: "63c62fac-1d7"
Expires: Thu, 19 Jan 2023 05:18:36 GMT
Last-Modified: Tue, 17 Jan 2023 05:18:36 GMT
Server: nginx
Content-Length: 471

js.users.51.la/2882802.js

103.143.19.103

200 OK

2.5 kB

URL HTTP/1.1
js.users.51.la/2882802.js
IP
103.143.19.103:0
ASN
#4837 CHINA UNICOM China169 Backbone

File type
HTML document, ASCII text, with very long lines (5205)
Size
2.5 kB (2510 bytes)
Hash
98d51968092b9775523fb89c348f1434
690e658697b65c75fca41662f8bf2543abcd1209
e0954b405d629a9cf3259806c6731150c30e62af5b2075ea395c3b7ed35da956

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /2882802.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shjtfwxh.com/

HTTP/1.1 200 OK
Server: CloudWAF
Date: Tue, 17 Jan 2023 10:29:03 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=fe16418d2deaddd6d3f; path=/
HWWAFSESTIME=1673951342099; path=/
Cache-Control: max-age=360000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
c2e972917031278f751a3ee410770ab4
313ff8cae50b5bf07acb6dcab59127fc479dbebb
6a5fe9642a8922c2f4b6b6953107e620c0957434dc876eeafc5329bc1ffab1b4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 10:29:03 GMT
Etag: "63c38cba-1d7"
Server: ECS (amb/6B8A)
Content-Length: 471

s104.cnzz.com/stat.php?id=403447&web_id=403447&show=pic

119.96.204.250

200 OK

20 B

URL HTTP/1.1
s104.cnzz.com/stat.php?id=403447&web_id=403447&show=pic
IP
119.96.204.250:0
ASN
#58563 CHINANET Hubei province network

File type
data
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

HTTP Headers

GET /stat.php?id=403447&web_id=403447&show=pic HTTP/1.1
Host: s104.cnzz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shjtfwxh.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 20
Connection: keep-alive
Date: Tue, 17 Jan 2023 09:56:41 GMT
Vary: Accept-Encoding
X-Powered-By: PHP/5.5.25
Last-Modified: Tue, 17 Jan 2023 09:56:41 GMT
Cache-Control: max-age=1800,s-maxage=3600
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1673949401
Via: cache49.l2cn1807[326,325,200-0,M], cache20.l2cn1807[327,0], cache2.cn6[0,0,200-0,H], cache1.cn6[0,0]
Age: 1942
X-Cache: HIT TCP_MEM_HIT dirn:9:51261083
X-Swift-SaveTime: Tue, 17 Jan 2023 09:56:41 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 7760cc8316739513434833464e

libs.baidu.com/jquery/1.9.0/jquery.js

39.156.66.111

200 OK

82 kB

URL HTTP/1.1
libs.baidu.com/jquery/1.9.0/jquery.js
IP
39.156.66.111:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
ASCII text, with CRLF line terminators
Size
82 kB (81543 bytes)
Hash
20ca9ef9de27b6a919e4ff7d680672de
ecaadaf2705373fc832df2a7ab60c7b8f0d07a28
f02cbc130fe8b34fc66506e26644d3caa0390f130e2e35e7667ae94f81c9a08f

HTTP Headers

GET /jquery/1.9.0/jquery.js HTTP/1.1
Host: libs.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shjtfwxh.com/

HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Tue, 17 Jan 2023 10:29:03 GMT
Expires: Thu, 16 Feb 2023 10:29:03 GMT
Last-Modified: Wed, 07 Jan 2015 09:16:30 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: Apache
Set-Cookie: BAIDUID=72728CECAEEE7B35E173792BC375D328:FG=1; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2145916555; path=/; domain=.baidu.com; version=1
Vary: Accept-Encoding
Transfer-Encoding: chunked

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6349
Expires: Tue, 17 Jan 2023 12:14:53 GMT
Date: Tue, 17 Jan 2023 10:29:04 GMT
Connection: keep-alive

www.4.cn/img/style.css

69.234.239.50

200 OK

15 kB

URL HTTP/2
www.4.cn/img/style.css
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
data
Size
15 kB (15183 bytes)
Hash
c9fd76d16efc21d461040bb8531c7911
aa380270ed2523f1b4b8dd51a6f207c15d5aaf30
a9b6dffb2a7325da279939ffbc9af61861a55d85cdb24bf78c29ae8457f24f6f

HTTP Headers

GET /img/style.css HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://shjtfwxh.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 17 Jan 2023 10:29:03 GMT
content-type: text/css
last-modified: Thu, 15 Aug 2019 08:40:51 GMT
vary: Accept-Encoding
etag: W/"5d551a93-cfbc"
expires: Wed, 18 Jan 2023 10:29:03 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2

www.4.cn/template/stencil.css

69.234.239.50

200 OK

4.6 kB

URL HTTP/2
www.4.cn/template/stencil.css
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
data
Size
4.6 kB (4590 bytes)
Hash
1d997b340e412d15e35ae28dae22eb05
970d67a725055b6beb8ada608cb305d102c6c2e3
956abd8f973b91e9f76428ca01aa4165e2833d4c1de815137b82d1c5bf6a2479

HTTP Headers

GET /template/stencil.css HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://shjtfwxh.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 17 Jan 2023 10:29:03 GMT
content-type: text/css
last-modified: Thu, 14 Nov 2019 06:55:42 GMT
vary: Accept-Encoding
etag: W/"5dccfa6e-4820"
expires: Wed, 18 Jan 2023 10:29:03 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9529 bytes)
Hash
ad210f0ba6ce6930724549cbba76e83d
e4badc3fbca9913bc11d968dac5cad1f900ff492
ad5f754d5dbe870feabfe090a46838614e96d72e78b9a2a8010ab339c67130be

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9529
x-amzn-requestid: 56f2b9a5-91c6-421a-ad84-165376e23dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm6Fm-oAMFrDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f8-67a0c1fe6aad6e6b71e50463;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mzmFGVDfMuZte5CJUmchEQIVAuDUKdGfUpm7PRTUqnsP44IcDmbl8A==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
etag: "e4badc3fbca9913bc11d968dac5cad1f900ff492"
content-type: image/jpeg
age: 45769
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10660 bytes)
Hash
ec0e283376914297c3fb2464ed15a31b
acd84e057b6c618fd3b31915983998c00fe21dc4
3d02b82d8f6a00703de7594f5b34baf0010294c1a7023818344ca341e4ac203c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10660
x-amzn-requestid: ac5d6edc-5228-4318-a99f-c08d3265aa87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3HXpH4PoAMF78Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5ec30-044bf7c40e44de637c0c2dba;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 00:30:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6wALvrvX2EOL6xe6U3Vf2Xmcx_Nmh0mHXveaX1mZL1yUzOLdKg8f_A==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 00:45:05 GMT
age: 35039
etag: "acd84e057b6c618fd3b31915983998c00fe21dc4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a57f270-98a9-442f-9239-76f1b01be9ae.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9186 bytes)
Hash
11978fd8515619467879303c76a11092
178546ab6c6779129e49f2a7bd80560cf08fbf7c
3f4bd577a740e0b2fcfb38ba4edd72cef3d2a8da7b5949eef33b2c04d417dca8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a57f270-98a9-442f-9239-76f1b01be9ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9186
x-amzn-requestid: 4b5ea40c-6349-4748-9263-0770f7bc63f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tAVH7iIAMFj_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c201-54b832f14fbf83d03590bbeb;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:30:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DYSmK9zy0k8OJAOLaY7FH_FTmEdJBFp7wDZEct8h7XDvyKpyariTZw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:51:54 GMT
etag: "178546ab6c6779129e49f2a7bd80560cf08fbf7c"
content-type: image/jpeg
age: 45430
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7800 bytes)
Hash
57828b7affae7633b38d0fb6057b894d
db4cd956ba7e1e6b43174c250b7d4f1193277be9
26d83d511af9583a8f0a9ef1bd2ce3deab3ca42fa2c2ae141b61cd123afa9625

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: eac845c9-b10c-4fce-b2ff-01b4111b506e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2OjhHp_IAMFeyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c59149-0058376c385a7bf91e07a395;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 18:02:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FtmoLO8c5S2uN0aj1HxWjVMg31vndNF2iKRJoJXmow1Hbb0NIHm9Cw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 18:16:36 GMT
age: 58348
etag: "db4cd956ba7e1e6b43174c250b7d4f1193277be9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

15 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
15 kB (14703 bytes)
Hash
fefb1f12a78ad92ed309da2c54984a3c
caf58bf6276e226a20a0d0cf6fc3d422f922eb28
baf6596c635254885f32e423cbc5667694754243f01109cbdbeb54c337b16bc2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14703
x-amzn-requestid: bdc14ffc-297a-4046-9a4f-26d454f6f9be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2trpGZkoAMFhZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c317-58908dd71980be98200e8f6c;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oqw0_4rVitBtqGh0oigqr5VmH0oVghH9SQiW1bRvMGsIX6fb8iRR0Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
etag: "caf58bf6276e226a20a0d0cf6fc3d422f922eb28"
content-type: image/jpeg
age: 45769
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93fda3d0-f25d-4038-bce9-349d25d63a74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7847 bytes)
Hash
dd54f560a77956e0ffb9645ba786c193
0a67ed30b7b9c66a6ccd2a72cd0de27b0fd38509
359fd1bdac8f7106b2d1dc71136ddca2bb70e95fab441af114e24d04fa69afe7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93fda3d0-f25d-4038-bce9-349d25d63a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7847
x-amzn-requestid: 15cc6d5b-0805-4828-9bdc-5067a2d542d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: evbCYETXoAMFVqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c2d875-5ff79c917007ccbd40957aa3;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 16:29:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t-PsjfY-xNvUhLRlVmRuNtL_kJHAYTN479nHFgJUcYKLqkZlbSxwqg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 06:41:41 GMT
age: 13643
etag: "0a67ed30b7b9c66a6ccd2a72cd0de27b0fd38509"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.4.cn/template/images/a-pic.jpg

69.234.239.50

301 Moved Permanently

169 B

URL HTTP/1.1
www.4.cn/template/images/a-pic.jpg
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
bd6987d71fad7058a993a9028dc40454
3ed872fa3a00837bb008ad9d201850e2ea57a79f
f0e759f444eb3a324b621f0548919424455e81441d42ea6bc6bcd2b24fce1b92

HTTP Headers

GET /template/images/a-pic.jpg HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shjtfwxh.com/

HTTP/1.1 301 Moved Permanently
Server: nginx/1.16.1
Date: Tue, 17 Jan 2023 10:29:04 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://www.4.cn/template/images/a-pic.jpg

www.4.cn/template/images/a-header-bg.jpg

69.234.239.50

200 OK

565 B

URL HTTP/2
www.4.cn/template/images/a-header-bg.jpg
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x265, components 3\012- data
Size
565 B (565 bytes)
Hash
4ede6284c84b381be8850c2fd79a850d
4380e2912d944b222f723a178b07900e7cd91ef8
869074a582028aebcedfb449d0b19ec4118ddd361319c61c118467c44c44654d

HTTP Headers

GET /template/images/a-header-bg.jpg HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4.cn/template/stencil.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 17 Jan 2023 10:29:04 GMT
content-type: image/jpeg
content-length: 565
last-modified: Thu, 15 Aug 2019 08:40:47 GMT
etag: "5d551a8f-235"
expires: Wed, 18 Jan 2023 10:29:04 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2

www.4.cn/template/images/a-banner.jpg

69.234.239.50

200 OK

54 kB

URL HTTP/2
www.4.cn/template/images/a-banner.jpg
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 960x265, components 3\012- data
Size
54 kB (53811 bytes)
Hash
59ff722889cd28079bc037248367fd24
5db3e09e95d47d5fbd7163dc931b0226714c4583
2c0466823de77ea3dc1774b34665c23040cdffaeb2033c9337cca0cc854b6429

HTTP Headers

GET /template/images/a-banner.jpg HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4.cn/template/stencil.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 17 Jan 2023 10:29:04 GMT
content-type: image/jpeg
content-length: 53811
last-modified: Thu, 15 Aug 2019 08:40:47 GMT
etag: "5d551a8f-d233"
expires: Wed, 18 Jan 2023 10:29:04 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2

www.4.cn/template/images/icon.png

69.234.239.50

200 OK

9.7 kB

URL HTTP/2
www.4.cn/template/images/icon.png
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
PNG image data, 400 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size
9.7 kB (9699 bytes)
Hash
9b4af9803579d99a06c4ed48d3e07c49
de4c9b346c7ef69dffa3d32a13af00f116998dc2
4a70f4bbc38b6a1c6de04520b689e88058e3a62107953af8e210bfd110bee5c9

HTTP Headers

GET /template/images/icon.png HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4.cn/template/stencil.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 17 Jan 2023 10:29:04 GMT
content-type: image/png
content-length: 9699
last-modified: Thu, 15 Aug 2019 08:40:47 GMT
etag: "5d551a8f-25e3"
expires: Wed, 18 Jan 2023 10:29:04 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2

www.4.cn/template/images/a-content-bg.jpg

69.234.239.50

200 OK

410 B

URL HTTP/2
www.4.cn/template/images/a-content-bg.jpg
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x299, components 3\012- data
Size
410 B (410 bytes)
Hash
b7a7743fabeb4425df77f384f49d151f
97e0eb70feaa0c85b99da3ce430de08927db2932
ac74bdee581d6773ad60ef75804a472670d7f46a975139452b82f43978be3b2d

HTTP Headers

GET /template/images/a-content-bg.jpg HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4.cn/template/stencil.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 17 Jan 2023 10:29:04 GMT
content-type: image/jpeg
content-length: 410
last-modified: Thu, 15 Aug 2019 08:40:47 GMT
etag: "5d551a8f-19a"
expires: Wed, 18 Jan 2023 10:29:04 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2

www.4.cn/template/images/a-pic.jpg

69.234.239.50

200 OK

44 kB

URL HTTP/2
www.4.cn/template/images/a-pic.jpg
IP
69.234.239.50:0
ASN
#135629 Ningxia West Cloud Data Technology Co.Ltd.

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2013:11:14 12:45:12], baseline, precision 8, 170x160, components 3\012- data
Size
44 kB (43730 bytes)
Hash
a281798942eb961057ca3b35fdbb7fb7
3a8f4fc15f3de0173311fe3ddc14496b238a7bfb
c2f767090ba92cb09b136d10df8083a3384d13948123404fcf509c5d17a0c500

HTTP Headers

GET /template/images/a-pic.jpg HTTP/1.1
Host: www.4.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://shjtfwxh.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 17 Jan 2023 10:29:04 GMT
content-type: image/jpeg
content-length: 43730
last-modified: Thu, 15 Aug 2019 08:40:47 GMT
etag: "5d551a8f-aad2"
expires: Wed, 18 Jan 2023 10:29:04 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2

ia.51.la/go1?id=2882802&rt=1673951344509&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25B8%2582%25E5%25AE%25B6%25E5%25BA%25AD%25E6%259C%258D%25E5%258A%25A1%25E4%25B8%259A%25E8%25A1%258C%25E4%25B8%259A%25E5%258D%258F%25E4%25BC%259A-09-20%25E5%25B9%25B4%25E8%25AE%25B0%25E5%25BD%2595&ing=1&ekc=&sid=1673951344509&tt=www.shjtfwxh.com-%25E5%25AE%2598%25E7%25BD%2591%25E9%25A6%2596%25E9%25A1%25B5&kw=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25B8%2582%25E5%25AE%25B6%25E5%25BA%25AD%25E6%259C%258D%25E5%258A%25A1%25E4%25B8%259A%25E8%25A1%258C%25E4%25B8%259A%25E5%258D%258F%25E4%25BC%259A-09-20%25E5%25B9%25B4%25E8%25AE%25B0%25E5%25BD%2595&cu=http%253A%252F%252Fshjtfwxh.com%252F&pu=

103.143.19.103

200

0 B

URL HTTP/1.1
ia.51.la/go1?id=2882802&rt=1673951344509&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25B8%2582%25E5%25AE%25B6%25E5%25BA%25AD%25E6%259C%258D%25E5%258A%25A1%25E4%25B8%259A%25E8%25A1%258C%25E4%25B8%259A%25E5%258D%258F%25E4%25BC%259A-09-20%25E5%25B9%25B4%25E8%25AE%25B0%25E5%25BD%2595&ing=1&ekc=&sid=1673951344509&tt=www.shjtfwxh.com-%25E5%25AE%2598%25E7%25BD%2591%25E9%25A6%2596%25E9%25A1%25B5&kw=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25B8%2582%25E5%25AE%25B6%25E5%25BA%25AD%25E6%259C%258D%25E5%258A%25A1%25E4%25B8%259A%25E8%25A1%258C%25E4%25B8%259A%25E5%258D%258F%25E4%25BC%259A-09-20%25E5%25B9%25B4%25E8%25AE%25B0%25E5%25BD%2595&cu=http%253A%252F%252Fshjtfwxh.com%252F&pu=
IP
103.143.19.103:0
ASN
#4837 CHINA UNICOM China169 Backbone

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /go1?id=2882802&rt=1673951344509&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25B8%2582%25E5%25AE%25B6%25E5%25BA%25AD%25E6%259C%258D%25E5%258A%25A1%25E4%25B8%259A%25E8%25A1%258C%25E4%25B8%259A%25E5%258D%258F%25E4%25BC%259A-09-20%25E5%25B9%25B4%25E8%25AE%25B0%25E5%25BD%2595&ing=1&ekc=&sid=1673951344509&tt=www.shjtfwxh.com-%25E5%25AE%2598%25E7%25BD%2591%25E9%25A6%2596%25E9%25A1%25B5&kw=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25B8%2582%25E5%25AE%25B6%25E5%25BA%25AD%25E6%259C%258D%25E5%258A%25A1%25E4%25B8%259A%25E8%25A1%258C%25E4%25B8%259A%25E5%258D%258F%25E4%25BC%259A-09-20%25E5%25B9%25B4%25E8%25AE%25B0%25E5%25BD%2595&cu=http%253A%252F%252Fshjtfwxh.com%252F&pu= HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shjtfwxh.com/

HTTP/1.1 200 
Server: CloudWAF
Date: Tue, 17 Jan 2023 10:29:06 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=c597011c8c147d4b3e88; path=/
HWWAFSESTIME=1673951341632; path=/

shjtfwxh.com/favicon.ico

64.32.28.236

404 Not Found

153 B

URL HTTP/1.1
shjtfwxh.com/favicon.ico
IP
64.32.28.236:0
ASN
#46844 ST-BGP

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
153 B (153 bytes)
Hash
a53e183b2c571a68b246ad570b76da19
7eac95d26ba1e92a3b4d6fd47ee057f00274ac13
29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: shjtfwxh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shjtfwxh.com/
Cookie: __tins__2882802=%7B%22sid%22%3A%201673951344509%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201673953144509%7D; __51cke__=; __51laig__=1

HTTP/1.1 404 Not Found
Server: nginx/1.20.2
Date: Tue, 17 Jan 2023 10:29:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 153
Connection: keep-alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (32)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/2