Report - r6r1tbuzu.xpj2443001.cc/

Report Overview

Visited public
2025-03-13 23:52:08
Tags
URL
r6r1tbuzu.xpj2443001.cc/
Finishing URL
r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc
IP / ASN
13.75.124.118
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Title
Demo

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r6r1tbuzu.xpj2443001.cc	unknown	unknown	No data	No data	9.9 kB	2.2 MB	13.75.124.118
js244f.oss-accelerate.aliyuncs.com	unknown	2012-04-01	2023-03-06	2025-03-07	2.2 kB	194 kB	47.254.188.9

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-03-13 23:51:47	low	Client IP	47.254.188.9	ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)
2025-03-13 23:51:47	low	Client IP	47.254.188.9	ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)
2025-03-13 23:51:47	low	Client IP	47.254.188.9	ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)
2025-03-13 23:51:47	low	Client IP	47.254.188.9	ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)
2025-03-13 23:51:47	low	Client IP	47.254.188.9	ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	From	Size	First Seen	Last Seen
	js244f.oss-accelerate.aliyuncs.com/244.js	ScriptElement	124 B	2023-03-12	2025-03-15
Pretty URL js244f.oss-accelerate.aliyuncs.com/244.js IP 47.254.188.9 ASN #45102 Alibaba US Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 09:33 Last Seen2025-03-15 02:56 Times Seen90 Hash 8beb6b8bc718c58afe00d31021ff8183 86e10256f8110f717571002234cc72dd217a3997 10826c76a8e6643f79f08a4175aef3eff923484b317970df1cf6f4ac43a83e93 Loading...

	js244f.oss-accelerate.aliyuncs.com/244h5new.js	ScriptElement	388 B	2025-02-18	2025-03-15
Pretty URL js244f.oss-accelerate.aliyuncs.com/244h5new.js IP 47.254.188.9 ASN #45102 Alibaba US Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-18 21:35 Last Seen2025-03-15 02:56 Times Seen18 Hash 600bdf7008456465ba086b08bc9a9df7 fc2c2aa41f149618dedd00373fc36e6ff36a5131 962e2127256027ff4719820f93c5ee08a1ec6868da39cf66644a91802d04a550 Loading...

	js244f.oss-accelerate.aliyuncs.com/244kf.js	ScriptElement	93 B	2025-03-08	2025-03-15
Pretty URL js244f.oss-accelerate.aliyuncs.com/244kf.js IP 47.254.188.9 ASN #45102 Alibaba US Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-08 13:20 Last Seen2025-03-15 02:56 Times Seen11 Hash b18268e501cf3a375de9b171d251e932 3351d86bd912b6e66ca1fc8dd4f766f74515a168 567c5c7768aa3a1722938811fda0db7d04ef292a9fb28cd4e70901618eb3d795 Loading...

	js244f.oss-accelerate.aliyuncs.com/244pa.js	ScriptElement	816 B	2023-11-04	2025-03-15
Pretty URL js244f.oss-accelerate.aliyuncs.com/244pa.js IP 47.254.188.9 ASN #45102 Alibaba US Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-04 04:40 Last Seen2025-03-15 03:00 Times Seen603 Hash 0ae53882e286f3f1ed3df03d03bbcc98 a43804bcad1aee22b039b711599bd331ff39527d 2e0e951899678a36771e8dab33df27508f951cfbe5ba83b0208d640899c19597 Loading...

	r6r1tbuzu.xpj2443001.cc/js/jquery-2.2.4.min.js	ScriptElement	86 kB	2023-03-07	2025-03-15
Pretty URL r6r1tbuzu.xpj2443001.cc/js/jquery-2.2.4.min.js IP 13.75.124.118 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-03-15 03:39 Times Seen162295 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	r6r1tbuzu.xpj2443001.cc/js/swiper-4.2.0.min.js	ScriptElement	120 kB	2023-03-07	2025-03-15
Pretty URL r6r1tbuzu.xpj2443001.cc/js/swiper-4.2.0.min.js IP 13.75.124.118 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23 Last Seen2025-03-15 03:00 Times Seen3046 Hash be15b3ba6a71edd608b9af34dfc6130c b11842fbe74778511b86bf899fbd02102b57ac62 add18244c3d92cb789bd50456f05f02ca034c908bbf4210fedbd9013b3bf5d96 Loading...

	r6r1tbuzu.xpj2443001.cc/js/rem.js	ScriptElement	840 B	2023-03-07	2025-03-15
Pretty URL r6r1tbuzu.xpj2443001.cc/js/rem.js IP 13.75.124.118 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23 Last Seen2025-03-15 03:00 Times Seen3083 Hash e74e945fcc19cbd1d5276e5d4548d525 8236e3f3fc64916f9f7f65e8aa2680c9302f0858 33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5 Loading...

	js244f.oss-accelerate.aliyuncs.com/os2.js	ScriptElement	190 kB	2024-10-13	2025-03-15
Pretty URL js244f.oss-accelerate.aliyuncs.com/os2.js IP 47.254.188.9 ASN #45102 Alibaba US Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-13 20:12 Last Seen2025-03-15 03:00 Times Seen647 Hash ce95427b0e57d396e5b5c0ada4d0a9e8 c5d223a7abee60b1c034f64a8d31be3b79629e16 973b911af63340ce55102f23cb9b85e516ccfac9f39d0823e3104c6cfeee4786 Loading...

		Size	First Seen	Last Seen
	#1 Write - c6258e5bac21b8f25d008d7fb664b064	99 B	2025-02-18 21:35	2025-03-15 02:56
Pretty Observations First Seen2025-02-18 21:35 Last Seen2025-03-15 02:56 Times Seen18 Hash c6258e5bac21b8f25d008d7fb664b064 dbcdf557d993db6ebcc710a15c12c6d136db6f8b 2cd36c8921082d5a0cdb6429b5c7028963c08ca5aa924fd1715c1828ae4f608d Loading...

	#2 Write - fe7cfff8512e3e40e7361a3138850206	99 B	2025-02-18 21:35	2025-03-15 02:56
Pretty Observations First Seen2025-02-18 21:35 Last Seen2025-03-15 02:56 Times Seen18 Hash fe7cfff8512e3e40e7361a3138850206 6c1340d0846e08485ed280ef4d545ac089f9cfc4 089f54451556464cc9eda5785c52121365fef951f7a695b0840d2bc1a4d61fbb Loading...

	#3 Write - 9d229c9d456c3a499c6a6cbb2e0b2831	99 B	2025-02-18 21:35	2025-03-15 02:56
Pretty Observations First Seen2025-02-18 21:35 Last Seen2025-03-15 02:56 Times Seen18 Hash 9d229c9d456c3a499c6a6cbb2e0b2831 fa9c488f29a9f8542d6a46a3681716e8b656de12 e108a0d6888d5f16daa1b69b5ad82206efd0d93ed18e393c0e3ec3e7ce105b2f Loading...

	#4 Write - a9c63d321780b92067a582d5fe33697d	70 B	2025-03-08 13:20	2025-03-15 02:56
Pretty Observations First Seen2025-03-08 13:20 Last Seen2025-03-15 02:56 Times Seen11 Hash a9c63d321780b92067a582d5fe33697d f5a5ebe4e5166df3364874862be13084b91b10f8 8d84e22ff650c1f0e003e867123ee09b4d6337e1c53fc3ba1d3112ab743e908a Loading...

HTTP Transactions (25)

	URL	IP	Response	Size
	r6r1tbuzu.xpj2443001.cc/images/06.gif	13.75.124.118	200 OK	492 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/06.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 869 Size 492 kB (491789 bytes) Hash 5501e4ca60b88b3ae68cce826f841b8b c4cb5e88a0f1126e62d058cbe4366cd0030740ab 31691b3234674882b8548ea00f5b81a4bb879a4c45f6aa5f1d2a9f415e9924bb HTTP Headers `GET /images/06.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: image/gif content-length: 491789 last-modified: Thu, 20 Feb 2025 09:09:30 GMT etag: "67b6f14a-7810d" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	js244f.oss-accelerate.aliyuncs.com/244pa.js	47.254.188.9	200 OK	816 B
URL GET js244f.oss-accelerate.aliyuncs.com/244pa.js IP 47.254.188.9:443 ASN #45102 Alibaba US Technology Co., Ltd. Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerGlobalSign nv-sa Subject.oss-eu-central-1.aliyuncs.com FingerprintB3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA ValidityThu, 02 Jan 2025 06:31:08 GMT - Tue, 03 Feb 2026 06:31:07 GMT File type JavaScript source, ASCII text, with very long lines (870), with no line terminators Size 816 B (816 bytes) Hash 23639c8e4aaaf838bf1e291538cc56e9 19c4ef79b8cdb476bb57dacbaa3f093ce784e96a f1e0fec4774dca1920e4ca52514907edf5f3868f00206332b7c6bdaf66cffdf8 HTTP Headers `GET /244pa.js HTTP/1.1 Host: js244f.oss-accelerate.aliyuncs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 13 Mar 2025 23:51:47 GMT Content-Type: application/javascript Content-Length: 816 Connection: keep-alive x-oss-request-id: 67D36F933D84960F2F11D9BD Accept-Ranges: bytes ETag: "0AE53882E286F3F1ED3DF03D03BBCC98" Last-Modified: Fri, 03 Nov 2023 08:50:09 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3859210828925978543 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: CuU4guKG8/HtPfA9A7vMmA== x-oss-server-time: 3

	r6r1tbuzu.xpj2443001.cc/images/top.gif	13.75.124.118	200 OK	27 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/top.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 107 Size 27 kB (26742 bytes) Hash 7c43c704b99935e4fbedb5c58bca1ca1 88d99c1f5b5ae9d0c1d179e6103c25bd121ea4d1 bcfae07ade4c596d2e78805df38b558dafec83af0c1e66a780f853f1d7cef4fc HTTP Headers `GET /images/top.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/css/style.min.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:48 GMT content-type: image/gif content-length: 26742 last-modified: Thu, 20 Feb 2025 09:09:32 GMT etag: "67b6f14c-6876" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/	13.75.124.118	302 Found	2.5 kB
URL User Request GET r6r1tbuzu.xpj2443001.cc/ IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type Size 2.5 kB (2467 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:46 GMT content-type: text/html location: http://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc x-frame-options: DENY strict-transport-security: max-age=14400; includeSubdomains; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/css/animate.min.css	13.75.124.118	200 OK	76 kB
URL GET r6r1tbuzu.xpj2443001.cc/css/animate.min.css IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type ASCII text, with very long lines (460) Size 76 kB (76432 bytes) Hash 9d99b1c597a52a1a68d063308f1de662 90dc56142980365936e75aa7c32faf92930694cc 764287c1363d6895c6e4dbabaa80ddba43f68dfe8557e6fe9b6c7767b4db1eec HTTP Headers `GET /css/animate.min.css HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: text/css last-modified: Thu, 20 Feb 2025 09:09:28 GMT vary: Accept-Encoding etag: W/"67b6f148-12a90" cache-control: no-cache, no-store content-encoding: gzip strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	js244f.oss-accelerate.aliyuncs.com/os2.js	47.254.188.9	200 OK	190 kB
URL GET js244f.oss-accelerate.aliyuncs.com/os2.js IP 47.254.188.9:443 ASN #45102 Alibaba US Technology Co., Ltd. Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerGlobalSign nv-sa Subject.oss-eu-central-1.aliyuncs.com FingerprintB3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA ValidityThu, 02 Jan 2025 06:31:08 GMT - Tue, 03 Feb 2026 06:31:07 GMT File type Size 190 kB (189725 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /os2.js HTTP/1.1 Host: js244f.oss-accelerate.aliyuncs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 13 Mar 2025 23:51:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding x-oss-request-id: 67D36F939A252610751DDD6A Last-Modified: Thu, 26 Sep 2024 10:56:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7669523814167259404 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: zpVCew5X05bltcCtpNCp6A== x-oss-server-time: 3 Content-Encoding: gzip

	r6r1tbuzu.xpj2443001.cc/js/swiper-4.2.0.min.js	13.75.124.118	200 OK	120 kB
URL GET r6r1tbuzu.xpj2443001.cc/js/swiper-4.2.0.min.js IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (65273) Size 120 kB (119506 bytes) Hash be15b3ba6a71edd608b9af34dfc6130c b11842fbe74778511b86bf899fbd02102b57ac62 add18244c3d92cb789bd50456f05f02ca034c908bbf4210fedbd9013b3bf5d96 HTTP Headers `GET /js/swiper-4.2.0.min.js HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: application/javascript; charset=utf-8 last-modified: Thu, 20 Feb 2025 09:09:32 GMT vary: Accept-Encoding etag: W/"67b6f14c-1d2d2" cache-control: no-cache, no-store content-encoding: gzip strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/images/04b.gif	13.75.124.118	200 OK	12 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/04b.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 84 Size 12 kB (12294 bytes) Hash 5981a52a15b24384a400def43b20a6f8 5018ac3d4bee36ce9f56c1dc30d3f96984027bb0 22f42655129894fe37a8b1819cd32d7910832de3ad7afed04664b5d88d2179a6 HTTP Headers `GET /images/04b.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:48 GMT content-type: image/gif content-length: 12294 last-modified: Thu, 20 Feb 2025 09:09:30 GMT etag: "67b6f14a-3006" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc	13.75.124.118	200 OK	2.5 kB
URL User Request GET r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (2670), with no line terminators Size 2.5 kB (2467 bytes) Hash 668b786bae9b3d0c2df490896fd53892 a8f30018010ef29092f4bae44ff417caa80257b8 c117ab087bfae1c55a284ea60ca5216594e1c9decdecc03a099237d78ac53075 HTTP Headers GET /index.html?shareName=r6r1tbuzu.xpj2443001.cc HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:46 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding cache-control: no-cache, no-store content-encoding: gzip strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/css/style.min.css	13.75.124.118	200 OK	9.4 kB
URL GET r6r1tbuzu.xpj2443001.cc/css/style.min.css IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type ASCII text, with very long lines (9389), with no line terminators Size 9.4 kB (9371 bytes) Hash ab2c35eb8b2e5ac5d059a20232923bcb 4c3b0b85e56a741a06c08dc47669134dc2091570 32c3cafc1df88ba834d30557558a2eb4a76fabcaaa285647a2909934d912c7ba HTTP Headers `GET /css/style.min.css HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: text/css last-modified: Thu, 20 Feb 2025 09:09:28 GMT vary: Accept-Encoding etag: W/"67b6f148-249b" cache-control: no-cache, no-store content-encoding: gzip strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	js244f.oss-accelerate.aliyuncs.com/244h5new.js	47.254.188.9	200 OK	388 B
URL GET js244f.oss-accelerate.aliyuncs.com/244h5new.js IP 47.254.188.9:443 ASN #45102 Alibaba US Technology Co., Ltd. Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerGlobalSign nv-sa Subject.oss-eu-central-1.aliyuncs.com FingerprintB3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA ValidityThu, 02 Jan 2025 06:31:08 GMT - Tue, 03 Feb 2026 06:31:07 GMT File type ASCII text, with very long lines (422), with no line terminators Size 388 B (388 bytes) Hash 8ebc2ebe43cb234d4dbd6d37f668b82e 7c4d44faf17f72e48f888b46a92f48e0763a73bb 921f256097c47193435a263272ba3e0a4a40ff767555016b90e54fb343e53c11 HTTP Headers `GET /244h5new.js HTTP/1.1 Host: js244f.oss-accelerate.aliyuncs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 13 Mar 2025 23:51:47 GMT Content-Type: application/javascript Content-Length: 388 Connection: keep-alive x-oss-request-id: 67D36F933D84960F2F11D9A1 Accept-Ranges: bytes ETag: "600BDF7008456465BA086B08BC9A9DF7" Last-Modified: Sat, 15 Feb 2025 05:21:03 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9283479703284089215 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: YAvfcAhFZGW6CGsIvJqd9w== x-oss-server-time: 2

	r6r1tbuzu.xpj2443001.cc/images/05c.gif	13.75.124.118	200 OK	13 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/05c.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 88 Size 13 kB (12680 bytes) Hash 067ee01d1d904bda0b2cfafe8e5cd11c 33156a4df3dc7cdf9c97edfc7b6550ea173b0143 4195e22938920eee3c305edc81453c2b08c9e013d25b7a24488164a7614da416 HTTP Headers `GET /images/05c.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:48 GMT content-type: image/gif content-length: 12680 last-modified: Thu, 20 Feb 2025 09:09:30 GMT etag: "67b6f14a-3188" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/js/jquery-2.2.4.min.js	13.75.124.118	200 OK	86 kB
URL GET r6r1tbuzu.xpj2443001.cc/js/jquery-2.2.4.min.js IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (32065) Size 86 kB (85578 bytes) Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e HTTP Headers `GET /js/jquery-2.2.4.min.js HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: application/javascript; charset=utf-8 last-modified: Thu, 20 Feb 2025 09:09:32 GMT vary: Accept-Encoding etag: W/"67b6f14c-14e4a" cache-control: no-cache, no-store content-encoding: gzip strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/images/03a.gif	13.75.124.118	200 OK	12 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/03a.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 86 Size 12 kB (12077 bytes) Hash 6804749539362be423ae6a72706fd2d9 d8cf68366cd4609050fddcd65dc3854e22acab8e e3cd0b36859ae264002fd3ecb4aaaa59f67cf51eca4b18f96342243b7c124155 HTTP Headers `GET /images/03a.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:48 GMT content-type: image/gif content-length: 12077 last-modified: Thu, 20 Feb 2025 09:09:30 GMT etag: "67b6f14a-2f2d" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/favicon.ico	13.75.124.118	404 Not Found	146 B
URL GET r6r1tbuzu.xpj2443001.cc/favicon.ico IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type HTML document, ASCII text, with no line terminators Size 146 B (146 bytes) Hash 40b3fc14254227ec5012d996bf90c4e1 b0dd06eb5a779151151101337889ff09953f8ac0 740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca HTTP Headers `GET /favicon.ico HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:48 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding content-encoding: gzip strict-transport-security: max-age=31536000; preload X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/css/Swiper.css	13.75.124.118	200 OK	14 kB
URL GET r6r1tbuzu.xpj2443001.cc/css/Swiper.css IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type ASCII text, with very long lines (13412), with CRLF line terminators Size 14 kB (13680 bytes) Hash 60a23d2c5b75975b1a2c21520e483352 7ec5dfff3b6bd1a12fe64fb61c568c034ce354cd 56c3dd16a5cf2ebefe0a3ee896bb3f20bc7b4327f75588188343c488d4aa951c HTTP Headers `GET /css/Swiper.css HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: text/css last-modified: Thu, 20 Feb 2025 09:09:28 GMT vary: Accept-Encoding etag: W/"67b6f148-3570" cache-control: no-cache, no-store content-encoding: gzip strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	js244f.oss-accelerate.aliyuncs.com/244.js	47.254.188.9	200 OK	124 B
URL GET js244f.oss-accelerate.aliyuncs.com/244.js IP 47.254.188.9:443 ASN #45102 Alibaba US Technology Co., Ltd. Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerGlobalSign nv-sa Subject.oss-eu-central-1.aliyuncs.com FingerprintB3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA ValidityThu, 02 Jan 2025 06:31:08 GMT - Tue, 03 Feb 2026 06:31:07 GMT File type ASCII text, with no line terminators Size 124 B (124 bytes) Hash d028bbdb63cd67a1959de30440860ee3 0b080d3eb8f59c22c88c5e0dd26a28f3c8137339 58e96d67beb2af559eace30929d95f51642ad8a88392d6bae4315b252decfa5e HTTP Headers `GET /244.js HTTP/1.1 Host: js244f.oss-accelerate.aliyuncs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 13 Mar 2025 23:51:47 GMT Content-Type: application/javascript Content-Length: 124 Connection: keep-alive x-oss-request-id: 67D36F9319FB121DAA28D3D5 Accept-Ranges: bytes ETag: "8BEB6B8BC718C58AFE00D31021FF8183" Last-Modified: Mon, 06 Feb 2023 14:01:22 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8932706878767095208 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: i+tri8cYxYr+ANMQIf+Bgw== x-oss-server-time: 3

	r6r1tbuzu.xpj2443001.cc/images/01.gif	13.75.124.118	200 OK	703 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/01.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 1260 Size 703 kB (702577 bytes) Hash 0317dd1cb29342a12194b50cc910fb94 04338c841bc57e82ce7b9067106a51d19e5a48aa 797b95ca58d3de5d28ce67728890b025a8117325b502861114342ed340ae7900 HTTP Headers `GET /images/01.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: image/gif content-length: 702577 last-modified: Thu, 20 Feb 2025 09:09:30 GMT etag: "67b6f14a-ab871" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/images/fix.gif	13.75.124.118	200 OK	67 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/fix.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 150 Size 67 kB (67426 bytes) Hash 36f8f3094cbda1d0ddc715b90fd4dd8a b1e10cafb2227841ad00ba3a8312ddb9d8d859b4 35a467500d8eff83ad3ef2527944c43fe5a58fde94be381a475c4defaaca0d76 HTTP Headers `GET /images/fix.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: image/gif content-length: 67426 last-modified: Thu, 20 Feb 2025 09:09:31 GMT etag: "67b6f14b-10762" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/images/kf.png	13.75.124.118	200 OK	7.8 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/kf.png IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type PNG image data, 124 x 192, 8-bit colormap, non-interlaced Size 7.8 kB (7808 bytes) Hash 341cd26a4c771e88b560dd0027eaec82 df1bbe9972637b4dc3fb2629fae4232c473590b1 fc001a590e5a98de38880dc157a2a3f76b7dc975af20637d894fa593290a72ab HTTP Headers `GET /images/kf.png HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: image/png content-length: 7808 last-modified: Thu, 20 Feb 2025 09:09:32 GMT etag: "67b6f14c-1e80" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/js/6d92be_750x3863.js	13.75.124.118	404 Not Found	548 B
URL GET r6r1tbuzu.xpj2443001.cc/js/6d92be_750x3863.js IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type HTML document, ASCII text, with very long lines (574), with no line terminators Size 548 B (548 bytes) Hash 5b3bd9705af8e4446f589e073b64d64c e25d724de194a431213080e10392963efc18ad75 ad8ec7fd0face5bd866b2a915cd34853cf60f18229acc156dfa99f5dd5d3c775 HTTP Headers `GET /js/6d92be_750x3863.js HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/css/style.min.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:48 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding content-encoding: gzip strict-transport-security: max-age=31536000; preload X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/js/rem.js	13.75.124.118	200 OK	843 B
URL GET r6r1tbuzu.xpj2443001.cc/js/rem.js IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type ASCII text, with very long lines (894), with no line terminators Size 843 B (843 bytes) Hash b973c404d84e531374269548c918df98 c41928b2001d7535e59d61f341be8e7eb1200581 d3f3f59fef708fa7d774ec16c75f3db893a603d2ab42699a298f40214188d419 HTTP Headers `GET /js/rem.js HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: application/javascript; charset=utf-8 last-modified: Thu, 20 Feb 2025 09:09:32 GMT vary: Accept-Encoding etag: W/"67b6f14c-34b" cache-control: no-cache, no-store content-encoding: gzip strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/images/02.gif	13.75.124.118	200 OK	26 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/02.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 120 Size 26 kB (26157 bytes) Hash 7fea8ca12ea6518605d9255c0c8aa10c 44be99e8d1bda69576a55aa4df0cd1a492f48b5d 1e416516115663c8b9ada6f4bd6b2e10ec5e1066ef8ac46402140bca3ee29e02 HTTP Headers `GET /images/02.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: image/gif content-length: 26157 last-modified: Thu, 20 Feb 2025 09:09:30 GMT etag: "67b6f14a-662d" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	r6r1tbuzu.xpj2443001.cc/images/07.gif	13.75.124.118	200 OK	496 kB
URL GET r6r1tbuzu.xpj2443001.cc/images/07.gif IP 13.75.124.118:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerZeroSSL Subjectxpj2443001.cc Fingerprint5F:01:C6:76:39:87:42:DE:DE:40:91:03:AD:C2:F1:CF:43:34:AC:26 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT File type GIF image data, version 89a, 750 x 905 Size 496 kB (496379 bytes) Hash 2965d3e1ee85bce5e6ec6acc84e255fb c0f2a59489f9e6a5685453309f755629bf666cb5 d45108164230cfad7d49f4ff8a255d11c32bdca9bd2f83d3ae4fc6d79bc247b4 HTTP Headers `GET /images/07.gif HTTP/1.1 Host: r6r1tbuzu.xpj2443001.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.25.3 date: Thu, 13 Mar 2025 23:51:47 GMT content-type: image/gif content-length: 496379 last-modified: Thu, 20 Feb 2025 09:09:31 GMT etag: "67b6f14b-792fb" cache-control: no-cache, no-store strict-transport-security: max-age=31536000; preload x-country: NO x-cache: HIT@woodanm3g000001 accept-ranges: bytes X-Firefox-Spdy: h2`

	js244f.oss-accelerate.aliyuncs.com/244kf.js	47.254.188.9	200 OK	93 B
URL GET js244f.oss-accelerate.aliyuncs.com/244kf.js IP 47.254.188.9:443 ASN #45102 Alibaba US Technology Co., Ltd. Requested by https://r6r1tbuzu.xpj2443001.cc/index.html?shareName=r6r1tbuzu.xpj2443001.cc Certificate IssuerGlobalSign nv-sa Subject.oss-eu-central-1.aliyuncs.com FingerprintB3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA ValidityThu, 02 Jan 2025 06:31:08 GMT - Tue, 03 Feb 2026 06:31:07 GMT File type HTML document, ASCII text, with no line terminators Size 93 B (93 bytes) Hash d1c8778c4b9b2542475732d0dd8f88d5 c1d67080a7ae2032bccfb9add8bd249845548ad2 426ae650fb9718161d8eaca34178049ad64cb1be0f0c29f82a8f6570c196bbfa HTTP Headers `GET /244kf.js HTTP/1.1 Host: js244f.oss-accelerate.aliyuncs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://r6r1tbuzu.xpj2443001.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 13 Mar 2025 23:51:47 GMT Content-Type: application/javascript Content-Length: 93 Connection: keep-alive x-oss-request-id: 67D36F93A4A7BE0FC90D3413 Accept-Ranges: bytes ETag: "B18268E501CF3A375DE9B171D251E932" Last-Modified: Fri, 07 Mar 2025 13:37:06 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2975959920078276611 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: sYJo5QHPOjdd6bFx0lHpMg== x-oss-server-time: 12

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (25)

URL GET

IP

ASN