302 Found 15 kB IP
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 09 Jul 2025 04:39:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.0.33
location: /frontpage.html
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
GET 91jqstatic.com/js/notice.js
200 OK 3.5 kB URL GET 91jqstatic.com/js/notice.js
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jqstatic.com
FingerprintB9:8C:86:19:FD:1F:55:FC:C1:F7:75:C8:DB:00:85:62:3D:2F:5C:62
ValiditySun, 18 May 2025 02:15:20 GMT - Sat, 16 Aug 2025 02:15:19 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (2831), with CRLF line terminators
Hash 158640cbe85cc47b16b6eec432a6c986
cc2a0be905ee918eab8f2d1e987e37679171fac2
a9455cee5357375bd46794e83e43678c834f6736d7cc12dafbb5ed5f3fd31d26
GET /js/notice.js HTTP/1.1
Host: 91jqstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:28 GMT
content-type: application/javascript
last-modified: Thu, 12 Jun 2025 03:07:48 GMT
vary: Accept-Encoding
etag: W/"684a4484-d9b"
expires: Wed, 09 Jul 2025 04:49:28 GMT
cache-control: max-age=600, public, max-age=600
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, If-Modified-Since, Cache-Control, Range
access-control-max-age: 3600
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.91jq.work/js/tj_mtm.js
200 OK 571 B URL GET www.91jq.work/js/tj_mtm.js
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 5b505cdc94c3d742d4a033e47fa371a2
f88a651ff35336619c7555e5f0a508ec8492db42
9aad50def3bab0f0ac3c0502ecb5564b6d4296533cd3bf5bcfb96310309b52e1
GET /js/tj_mtm.js HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/frontpage.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:25 GMT
content-type: application/javascript
content-length: 571
last-modified: Wed, 18 Jun 2025 09:41:05 GMT
etag: "685289b1-23b"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
GET jq5.91av29.work/js/get_dm.js
200 OK 1.8 kB URL GET jq5.91av29.work/js/get_dm.js
IP
Requested by https://jq5.91av29.work/index.html
Certificate IssuerLet's Encrypt
Subject91av29.work
Fingerprint3B:3D:F2:83:C4:00:B0:D3:A4:D8:01:32:EB:B7:E5:3B:47:17:E4:2F
ValiditySat, 28 Jun 2025 16:26:46 GMT - Fri, 26 Sep 2025 16:26:45 GMT
File type ASCII text, with CRLF line terminators
Hash 81aeb1cbddf02f95d44e884871635e49
ada12c094e2bbbf0dbf0b352944507daf32fb400
e7b09445c4c20cb0373851f8b7b5bad0276a919ec65cb976d64f89bd70119cc5
GET /js/get_dm.js HTTP/1.1
Host: jq5.91av29.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jq5.91av29.work/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:44 GMT
content-type: application/javascript
content-length: 1776
last-modified: Sun, 08 Jun 2025 03:10:38 GMT
etag: "6844ff2e-6f0"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
POST analysis-seeker.top/matomo.php?action_name=91JQ%20-%20%E9%98%B2%E5%B1%8F%E8%94%BD%E5%9C%B0%E5%9D%80%E7%99%BC%E5%B8%83%E9%A0%81%20%E8%AB%8B%E5%8A%A0%E5%85%A5%E6%94%B6%E8%97%8F%E5%A4%BE&idsite=1&rec=1&r=325227&h=4&m=39&s=29&url=https%3A%2F%2Fwww.91jq.work%2Ffrontpage.html&_id=df45ca7d2fd8b869&_idn=1&send_image=0&_refts=0&pv_id=JyGCAI&pf_net=0&pf_srv=346&pf_tfr=0&pf_dm1=3228&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024
204 No Content 0 B URL POST analysis-seeker.top/matomo.php?action_name=91JQ%20-%20%E9%98%B2%E5%B1%8F%E8%94%BD%E5%9C%B0%E5%9D%80%E7%99%BC%E5%B8%83%E9%A0%81%20%E8%AB%8B%E5%8A%A0%E5%85%A5%E6%94%B6%E8%97%8F%E5%A4%BE&idsite=1&rec=1&r=325227&h=4&m=39&s=29&url=https%3A%2F%2Fwww.91jq.work%2Ffrontpage.html&_id=df45ca7d2fd8b869&_idn=1&send_image=0&_refts=0&pv_id=JyGCAI&pf_net=0&pf_srv=346&pf_tfr=0&pf_dm1=3228&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subjectanalysis-seeker.top
Fingerprint93:64:0F:2D:95:B2:38:92:F1:40:08:C9:B7:0B:25:F6:08:B9:BD:38
ValidityThu, 22 May 2025 08:05:03 GMT - Wed, 20 Aug 2025 08:05:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=91JQ%20-%20%E9%98%B2%E5%B1%8F%E8%94%BD%E5%9C%B0%E5%9D%80%E7%99%BC%E5%B8%83%E9%A0%81%20%E8%AB%8B%E5%8A%A0%E5%85%A5%E6%94%B6%E8%97%8F%E5%A4%BE&idsite=1&rec=1&r=325227&h=4&m=39&s=29&url=https%3A%2F%2Fwww.91jq.work%2Ffrontpage.html&_id=df45ca7d2fd8b869&_idn=1&send_image=0&_refts=0&pv_id=JyGCAI&pf_net=0&pf_srv=346&pf_tfr=0&pf_dm1=3228&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1
Host: analysis-seeker.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://www.91jq.work
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 09 Jul 2025 04:39:29 GMT
vary: Origin
content-encoding: none
access-control-allow-origin: https://www.91jq.work
access-control-allow-credentials: true
referrer-policy: origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
GET lf26-cdn-tos.bytecdntp.com/cdn/expire-3-y/jquery/2.1.0/jquery.min.js
200 OK 84 kB URL GET lf26-cdn-tos.bytecdntp.com/cdn/expire-3-y/jquery/2.1.0/jquery.min.js
IP
ASN #133119 China Unicom IP network
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerDigiCert Inc
Subject*.bytecdntp.com
Fingerprint80:B0:74:91:BC:E4:19:5F:0C:EA:16:96:CC:BF:BB:81:73:43:51:C1
ValidityMon, 24 Mar 2025 00:00:00 GMT - Mon, 23 Mar 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32065)
Hash 5ca7582261c421482436dfdf3af9bffe
98884258cbdb0d939fa2c5e74fc7ac9e56d8170f
f284353a7cc4d97f6fe20a5155131bd43587a0f1c98a56eeaf52cff72910f47d
GET /cdn/expire-3-y/jquery/2.1.0/jquery.min.js HTTP/1.1
Host: lf26-cdn-tos.bytecdntp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Jul 2025 04:39:27 GMT
content-type: application/javascript
content-length: 29344
server: openresty
last-modified: Wed, 26 Jan 2022 04:19:50 GMT
vary: Accept-Encoding
etag: W/"61f0cbe6-1469f"
expires: Fri, 02 Jun 2028 01:33:14 GMT
content-encoding: gzip
server-timing: inner; dur=14
x-tt-trace-host: 01484e4933de0723b952477538a8832cec025029c51d9597eba5e35189728fba0df26d5f97da5e1909c9d0442f385ace1b3051265895e9146b653a499a0b6b2d7ea67cda41cee59eea0ebd8052436dc2389722b33d915accaaf6aa3f3db60c6c9b39257d2b64c699bfbb124c8bf0164b2f
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
x-tt-trace-id: 00-250603092445ED5EAA212B5568CED27C-349B8AD06C4681F9-00
x-tt-logid: 20250603092445ED5EAA212B5568CED27C
via: CHN-HElangfang-AREACUCC1-CACHE24[4],CHN-HElangfang-AREACUCC1-CACHE10[0,TCP_HIT,0],CHN-HEshijiazhuang-GLOBAL1-CACHE2[3],CHN-HEshijiazhuang-GLOBAL1-CACHE10[0,TCP_HIT,0]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 3122063
cache-control: max-age=94608000
x-ccdn-expires: 91486085
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-TR7Z5D13P2
200 OK 372 kB URL GET www.googletagmanager.com/gtag/js?id=G-TR7Z5D13P2
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint06:CD:2A:9C:6E:F9:40:51:AA:E0:81:4A:BB:69:6C:BA:FA:AD:AB:4D
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
File type JavaScript source, ASCII text, with very long lines (5912)
Size 372 kB (371947 bytes)
Hash b2e0153aa9c05ccd855fd924e263de54
bd447847f2556b5248ff4af63e50a8dc4bc6539f
651aff92204aea9b9e46869ccea7e7730e0ad15dd635e735d85dab391a0987a4
GET /gtag/js?id=G-TR7Z5D13P2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 09 Jul 2025 04:39:28 GMT
expires: Wed, 09 Jul 2025 04:39:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 126967
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.91jq.work/frontpage.html
200 OK 15 kB URL User Request GET www.91jq.work/frontpage.html
IP
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type HTML document, Unicode text, UTF-8 text
Hash e0ae025ab15aadbf43c6d2fd2a5fbf9f
4fbf71806fe1b19fb62a74ca50024c7b235e0cd5
e33d0f12162a6d0fb6118b23411a377c17e45149155d2f599c2e9b532879b38e
GET /frontpage.html HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:25 GMT
content-type: text/html
last-modified: Wed, 18 Jun 2025 09:41:06 GMT
vary: Accept-Encoding
etag: W/"685289b2-3997"
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.91jq.work/js/tj.js
200 OK 1.3 kB IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash f4c6a636b240c1dac7c79751b5cde603
591b6d4b364fa6e89e8eceae2d9dc98438e14ac6
1df1fae8e0d176ebd16b63db81e51e2661a5d02770ddb0538b0cc9b3daecb16e
GET /js/tj.js HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/frontpage.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:25 GMT
content-type: application/javascript
content-length: 1293
last-modified: Wed, 18 Jun 2025 09:41:05 GMT
etag: "685289b1-50d"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 91jqstatic.com/js/qrcode.min.js
200 OK 20 kB URL GET 91jqstatic.com/js/qrcode.min.js
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jqstatic.com
FingerprintB9:8C:86:19:FD:1F:55:FC:C1:F7:75:C8:DB:00:85:62:3D:2F:5C:62
ValiditySun, 18 May 2025 02:15:20 GMT - Sat, 16 Aug 2025 02:15:19 GMT
File type ASCII text, with very long lines (19927), with no line terminators
Hash 517b55d3688ce9ef1085a3d9632bcb97
2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b
c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36
GET /js/qrcode.min.js HTTP/1.1
Host: 91jqstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:26 GMT
content-type: application/javascript
last-modified: Thu, 12 Jun 2025 03:07:48 GMT
vary: Accept-Encoding
etag: W/"684a4484-4dd7"
expires: Wed, 09 Jul 2025 04:49:26 GMT
cache-control: max-age=600, public, max-age=600
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, If-Modified-Since, Cache-Control, Range
access-control-max-age: 3600
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.91jq.work/favicon.ico
200 OK 4.3 kB URL GET www.91jq.work/favicon.ico
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Hash c12d5d5c121b6d009679d763b2556bdc
c8dffd4055286addc3dc690652d0f07eda55aafb
ffdb68a707203b4d73ca8fcf15d1e4cd5bcb2a28ea630c6cd6879331e049daaa
GET /favicon.ico HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/frontpage.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:29 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Wed, 18 Jun 2025 09:41:33 GMT
etag: "685289cd-10be"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
GET jq5.91av29.work/index.html
200 OK 31 kB URL User Request GET jq5.91av29.work/index.html
IP
Certificate IssuerLet's Encrypt
Subject91av29.work
Fingerprint3B:3D:F2:83:C4:00:B0:D3:A4:D8:01:32:EB:B7:E5:3B:47:17:E4:2F
ValiditySat, 28 Jun 2025 16:26:46 GMT - Fri, 26 Sep 2025 16:26:45 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (360), with CRLF line terminators
Hash a52fe6d7ef70129b7e58bf78e21b2e15
30d49f5e5af92c46e8cbf01c7556298e28bc36dc
7139b19de1976607cd2bb63faacd75cf802701369f534ea065733a4250b4e1c2
GET /index.html HTTP/1.1
Host: jq5.91av29.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:43 GMT
content-type: text/html
last-modified: Tue, 08 Jul 2025 16:25:05 GMT
vary: Accept-Encoding
etag: W/"686d4661-77e2"
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.91jq.work/js/jm.js
200 OK 6.2 kB IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type JavaScript source, ASCII text, with very long lines (589), with CRLF line terminators
Hash ff4b6d6f3a87086856e47cb3baff33c2
42dd2a75caf36b9bd94254851049582ab72abc1e
7555f78f52ba509a5b1a6f74cec4ca1c8ad12bc5a21612f7030cf5768149821f
GET /js/jm.js HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/frontpage.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:25 GMT
content-type: application/javascript
content-length: 6166
last-modified: Wed, 18 Jun 2025 09:41:05 GMT
etag: "685289b1-1816"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
GET analysis-seeker.top/matomo.js
200 OK 68 kB URL GET analysis-seeker.top/matomo.js
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subjectanalysis-seeker.top
Fingerprint93:64:0F:2D:95:B2:38:92:F1:40:08:C9:B7:0B:25:F6:08:B9:BD:38
ValidityThu, 22 May 2025 08:05:03 GMT - Wed, 20 Aug 2025 08:05:02 GMT
File type JavaScript source, ASCII text, with very long lines (2878)
Hash 97d28a3aefbae803f17013706da83e1b
2aad8740afe4a5d49c2de29a52b886b2be5bc94c
89e35b18e2ddd93f040839eb32f71a22a7781f27fca6e294f9405d5fb0ea2cc3
GET /matomo.js HTTP/1.1
Host: analysis-seeker.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:28 GMT
content-type: application/javascript
last-modified: Fri, 21 Feb 2025 01:48:46 GMT
vary: Accept-Encoding
etag: W/"67b7db7e-107aa"
expires: Wed, 09 Jul 2025 05:39:28 GMT
pragma: public
cache-control: max-age=3600, public
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.91jq.work/get_dm.php
200 OK 76 B IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type ASCII text, with no line terminators
Hash 04e9cd438a7d9b2e35e9b9458879d9f6
34469436cb343c21188ba1bd8402e3e2c1966c29
ae5e842f222c9e4baa80fb9775abf7270598b44002f1c6d02789b6b736bbe15d
GET /get_dm.php HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/frontpage.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.0.33
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.91jq.work/frontpage_qrcode_inner_img.png
200 OK 4.7 kB URL GET www.91jq.work/frontpage_qrcode_inner_img.png
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type PNG image data, 224 x 225, 8-bit colormap, non-interlaced
Hash 47eb48cf5cc9d6bebb334678be5ab46a
b750e1ad552000a2517da4135a5a9a7e1ec7ad33
51f3d16c5e2e043d54d6845adcbb359a892fa53386d6c828553af5059936df44
GET /frontpage_qrcode_inner_img.png HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/frontpage.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:28 GMT
content-type: image/png
last-modified: Wed, 18 Jun 2025 09:41:33 GMT
vary: Accept-Encoding
etag: W/"685289cd-1275"
expires: Thu, 10 Jul 2025 04:39:28 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: gzip
X-Firefox-Spdy: h2
GET jq5.91av29.work/js/tj.js
200 OK 1.3 kB IP
Requested by https://jq5.91av29.work/index.html
Certificate IssuerLet's Encrypt
Subject91av29.work
Fingerprint3B:3D:F2:83:C4:00:B0:D3:A4:D8:01:32:EB:B7:E5:3B:47:17:E4:2F
ValiditySat, 28 Jun 2025 16:26:46 GMT - Fri, 26 Sep 2025 16:26:45 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash f4c6a636b240c1dac7c79751b5cde603
591b6d4b364fa6e89e8eceae2d9dc98438e14ac6
1df1fae8e0d176ebd16b63db81e51e2661a5d02770ddb0538b0cc9b3daecb16e
GET /js/tj.js HTTP/1.1
Host: jq5.91av29.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jq5.91av29.work/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:44 GMT
content-type: application/javascript
content-length: 1293
last-modified: Sun, 08 Jun 2025 03:10:38 GMT
etag: "6844ff2e-50d"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.91jq.work/js/tj_frontpage.js
200 OK 484 B URL GET www.91jq.work/js/tj_frontpage.js
IP
Requested by https://www.91jq.work/frontpage.html
Certificate IssuerLet's Encrypt
Subject91jq.work
Fingerprint03:A6:B5:1E:0C:05:19:A8:E0:24:9D:C8:1F:E0:9B:B0:49:54:EE:39
ValiditySat, 10 May 2025 08:38:32 GMT - Fri, 08 Aug 2025 08:38:31 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 9b72f4f0affca5fa45a98d8b5da6beee
ea3dc02e36f2b60234ddbbd55fcf91572b647bb1
45811067aab609589a64703ed8bb8c7b5b74b089cc4c0857011691c0d4b30d2d
GET /js/tj_frontpage.js HTTP/1.1
Host: www.91jq.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.91jq.work/frontpage.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Jul 2025 04:39:25 GMT
content-type: application/javascript
content-length: 484
last-modified: Wed, 18 Jun 2025 09:41:05 GMT
etag: "685289b1-1e4"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
198.16.32.219
107.148.148.69
120.52.95.246