| GET m.xzjmtzs.com/static/picture/shape-3.png | 172.67.208.82 | 200 OK | 1.5 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/shape-3.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen466 Size1.5 kB (1539 bytes) MD57897206239870928ccadd33798a0c388 SHA1c8ebf2f2078d74e3cd70765dd23610fd2e118295 SHA2565933313031931d2179d11ecac187502a4e628c63c22f89cae78f1a009d5f2f51 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/shape-3.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 1539
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-603"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jnu1I9VeteZy9za1kZUEvFF2GWA3x%2B3D7l449SygOO06YYFoZgST5bnsp2lyX4SZ6CEyRVtWLkPKXpCJKRblVpzJ8A2o324bCQcm6Q9XHxopYjnzhab9h7AhB5aZnAd5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe5c2356be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3036&min_rtt=1533&rtt_var=1501&sent=94&recv=77&lost=0&retrans=0&sent_bytes=24464&recv_bytes=20036&delivery_rate=269918&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=820&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/shape-2.png | 172.67.208.82 | 200 OK | 7.3 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/shape-2.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 521 x 267, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen466 Size7.3 kB (7349 bytes) MD523fafbe2054753eb8fbc0378efbd7358 SHA17577b91c4cd1aa99cb58a8f659fc59b2a8a4031e SHA256a05b62d2692f59650a63e51eebe3935050dda23c9bea9420b0864337d9a836bf Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/shape-2.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 7349
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-1cb5"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Byr2bL2alNgnXzFKzO8I6%2F4gntKU2bCP%2F3qzE7rgkNYtOQ%2FI03qcykQOmt2OJNiVlcCLq888FWmNayDYIDSlIUgcqPVsa%2BCZ%2FCaHpUG9Cq7TkgA%2FqWCzPkhgiiMzLJf%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe5c2256be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2897&min_rtt=1533&rtt_var=1109&sent=107&recv=80&lost=0&retrans=0&sent_bytes=34942&recv_bytes=20462&delivery_rate=3323966&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=826&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/logo-1.png | 172.67.208.82 | 200 OK | 1.5 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/logo-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 108 x 36, 8-bit/color RGBA, non-interlaced First Seen2023-11-30 Last Seen2025-07-10 Times Seen175 Size1.5 kB (1536 bytes) MD5bb0f185735c1e4587da82b7ef4403ace SHA1fc2f1ecd0019f1515e0012d29349b1811a00df5c SHA2567ed24510b42ed7ac5bf0090d5b7c84e10a16633c6113e31d3a41349ea2bed9d9 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/logo-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 1536
last-modified: Tue, 10 Sep 2024 05:51:07 GMT
etag: "66dfde4b-600"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BxNhmUvccVcwvPOkm1WPT%2FghkMUnx06YfLObQNfjS%2BaTow2niHf9yaMd1w%2F6MLwp48hRVLo7j03%2FFSH1EYdeXaYJlFkxZGCY6w%2F2hClEYPzhXxQNQ5leGHRAWzUFcpRj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe5c1956be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2184&min_rtt=541&rtt_var=1143&sent=136&recv=86&lost=0&retrans=0&sent_bytes=61247&recv_bytes=20735&delivery_rate=3345&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=870&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/bg-shape-1.png | 172.67.208.82 | 200 OK | 6.8 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/bg-shape-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 229 x 229, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen454 Size6.8 kB (6772 bytes) MD5d766bbc7dc567b95f8132c8c835ad430 SHA1ce7021882547660a54cfc66246acb2050f75ab5f SHA2560797750b854c6127f25fb6a9855ac9fbd0c2a26ad2111cb67b80b26fc5514a1e Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/bg-shape-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 6772
last-modified: Wed, 01 Nov 2023 14:36:08 GMT
etag: "65426258-1a74"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XTVmwenmg9f7zZ1v6tPUva0Dw1PzP2%2BSW87wBK5HJ5MtDBV9m%2F8q%2BZHWoQi1Ajkyr5IAc5cLqyECVBLc1Z3EkI2zZda7jAO%2B0Q%2FussSKbw8xq6og6GrirxPaONd6a7ZC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeac8f56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1849&min_rtt=535&rtt_var=1028&sent=140&recv=89&lost=0&retrans=0&sent_bytes=63575&recv_bytes=20870&delivery_rate=20457&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=874&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/icon-2.png | 172.67.208.82 | 200 OK | 3.7 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/icon-2.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 27 x 42, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen455 Size3.7 kB (3696 bytes) MD5db2a1bb07e49376ad9e93001a8a08223 SHA189dea4d507f5d61eacf70c755aef7bac003d92ae SHA256374b798d265fbf16b071275596dc6a5d6915f3ec3bd69d3e453073ad62c495ba Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/icon-2.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 3696
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-e70"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2BT9D9P2rlAYKkUuEVXo6aHxXptECszplW2Lpb%2BEWN9OPkJlN3d6jO8VEmX1nLT09WT2XjqrIbsO%2BWwphO%2F0HPxIvsTyz7G7l5x%2FphnJVolTIPRTHJAA0Vgq1llH6ZhT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeac9456be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1656&min_rtt=535&rtt_var=730&sent=151&recv=92&lost=0&retrans=0&sent_bytes=73201&recv_bytes=21006&delivery_rate=31467&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=893&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/gallery-6.jpg | 172.67.208.82 | 200 OK | 8.6 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/gallery-6.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 First Seen2024-02-01 Last Seen2025-08-08 Times Seen457 Size8.6 kB (8589 bytes) MD5939fdd3fe4c3f64694a5c587dcaaff07 SHA1dd6ad294a49435f1ec4f6c4c2cbccaf9ce7a62ac SHA256fcfe9fdc32d7f1e3485514b47236004b0dbd09c6d934b69b480d79a660e32675 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/gallery-6.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/jpeg
content-length: 8589
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-218d"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zPsFdrQl90o%2B2zNCNXKp20tvTtrhH7o1%2BzC3njVfj5WFZvkeo3setLUSrJh4UgHt0klBEWY5B8dEA0e7Yq9RMHU7zw%2F0SYSaNiRLHUJCnH8c6fftjYQ3IRZAmQDqw21y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeecee56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1624&min_rtt=535&rtt_var=610&sent=156&recv=93&lost=0&retrans=0&sent_bytes=77720&recv_bytes=21052&delivery_rate=2155927&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=899&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/icon-3.png | 172.67.208.82 | 200 OK | 3.0 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/icon-3.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 45 x 42, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen463 Size3.0 kB (2985 bytes) MD57b771bffd4eb3584002b6ecc876a2146 SHA130295bba792a8eeee1e01669211eca906039a8c3 SHA25683228bc5e056a9ea12eef48e95455753d46a5867d5559b4afc52e6fcdda1fd19 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/icon-3.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 2985
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-ba9"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zGUAGCPasQ6pchG6e%2FIqsRWMiiaOqUiYVKt6HHDH2Wh2421tEHITRj7sxmd48AwgKZfu9Ega4MUmCvnm2hYpfO9wAUPn9%2BIy4iBrzAC2bMaR%2FkXNNgAus%2B3P9wbtby9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeac9756be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1624&min_rtt=535&rtt_var=610&sent=164&recv=93&lost=0&retrans=0&sent_bytes=87216&recv_bytes=21052&delivery_rate=2155927&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=900&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/uploads/allimg/250120/191UK329-0-lp.jpg | 172.67.208.82 | 200 OK | 6.6 kB |
URL GET HTTPS m.xzjmtzs.com/uploads/allimg/250120/191UK329-0-lp.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 240x144, components 3 First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size6.6 kB (6637 bytes) MD5206f23523cbcf9bcd9183b81ada65477 SHA1bbfbfed80007259ee30754e24da3fd3bbc02e92d SHA256558a33230c670a7e1a11308ff84ff009c43435422a6a064673660b881f662a72 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /uploads/allimg/250120/191UK329-0-lp.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/jpeg
content-length: 6637
last-modified: Mon, 20 Jan 2025 11:18:57 GMT
etag: "678e3121-19ed"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kRQrXDv48X10e3LDCx3JfI40HWQbUH8n%2FsvvCnQrk9RPfcIVHF%2FE3zwQN7RGSlK26DRVNcvm6ZuCDsytmcASjuaA6Kd%2F6L%2BNaOgzpULOHAS6nSyzSFdOYxlh8DW43hgO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeccbf56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1550&min_rtt=535&rtt_var=606&sent=169&recv=94&lost=0&retrans=0&sent_bytes=91029&recv_bytes=21098&delivery_rate=1821850&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=901&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/icon-1.png | 172.67.208.82 | 200 OK | 2.5 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/icon-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen461 Size2.5 kB (2466 bytes) MD5b12ee7f26711f115e8a962d682841331 SHA1a1c578afea5339a63ecbe2d1878e4ae201aa8a6c SHA256666713a3f66755c9146819c2099af596bc212ff1a7db0cf981eee0c649ab2b8a Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/icon-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 2466
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-9a2"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IViqukYXi%2B8Qmu0k2Lzgjt1MjVBWfU4jm%2B6%2BTOIIsnEqiHHAXlUW3Q80Fkw52xKspEXx0XOG5NUwLJgbJ6rUirrKjyAeC%2FEoC8lbj3lAc2JZw%2FpENvpSCRZzI8XWy9%2Fo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeac9156be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1378&min_rtt=535&rtt_var=629&sent=178&recv=98&lost=0&retrans=0&sent_bytes=98603&recv_bytes=21280&delivery_rate=18832&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=906&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/gallery-1.jpg | 172.67.208.82 | 200 OK | 8.4 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/gallery-1.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 First Seen2024-02-01 Last Seen2025-08-08 Times Seen445 Size8.4 kB (8373 bytes) MD5a503b5ea39cc615e9f621d3e3b557c88 SHA11f35790c70b0ba47649e51b0029e5ecfd6ce9567 SHA25686e28b1dde1151defcd2156ad46fb88bf142931c26245a3255a68601f49314ae Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/gallery-1.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/jpeg
content-length: 8373
last-modified: Wed, 01 Nov 2023 14:36:08 GMT
etag: "65426258-20b5"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xZHU72Ui5sgWpO3TgluEgTuSZJjJp9CafAfRsT%2FPG3ia4iUYR5nvEQFaReMcU5H5SqnFWOiIky3P5Djbck0MIVa2Qdkad6n1cvcuqCY%2BFByAd4y18IwcQTIXlEd66%2BEn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeece856be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1351&min_rtt=535&rtt_var=526&sent=182&recv=99&lost=0&retrans=0&sent_bytes=101865&recv_bytes=21326&delivery_rate=1821484&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=910&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/shape-1.png | 172.67.208.82 | 200 OK | 2.3 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/shape-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen471 Size2.3 kB (2335 bytes) MD5ec3948b8d36dea60b210b2ab21a92290 SHA14bb53e0c80977f8d95852c6c25a7459568405b4d SHA2563c1ae3164c38144ae661f6b4bffd359f55b36a903aa4714b35a70d3a605a47c1 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/shape-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 2335
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-91f"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4VU6SQVHVKXw%2BSXnrW2RtMA%2Bqbf9cWLgncT5izdbofAu0qgyjHnQIrfvcDBFy4iWZ%2BGinRy3pxGqSBryARcra%2FIyTVSQtMf5QhuEl5Ax566HGHrm%2Bjnj%2FEocv772dySb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe5c1d56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2083&min_rtt=535&rtt_var=1859&sent=191&recv=100&lost=0&retrans=0&sent_bytes=111171&recv_bytes=21372&delivery_rate=860120&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=919&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/about-icon-1.png | 172.67.208.82 | 200 OK | 2.5 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/about-icon-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen454 Size2.5 kB (2548 bytes) MD55787184d0495e46a5557b7aa8957af95 SHA1f48a8870e05b6c3cb8278159dfe96bfcd9b9203b SHA256fe2389b7a1ee96ca436b5ed684c94c61d561b1c9af8a463a79b6c19cf84e7413 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/about-icon-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 2548
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-9f4"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TRkxOovjTsBaQDer%2FEQIyolgQxaW4qFsodW8Can2lgOLicoqsyJaizYWGWVUcMjoiUeUVMBvjt1sEHWg9r7bUBY2vnzTjdngJUWNehPMOXwd29yw%2B%2Bh3a%2FWGF19gYCW%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeac8d56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1971&min_rtt=535&rtt_var=1619&sent=195&recv=101&lost=0&retrans=0&sent_bytes=114300&recv_bytes=21418&delivery_rate=1073146&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=922&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/gallery-3.jpg | 172.67.208.82 | 200 OK | 8.4 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/gallery-3.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 First Seen2024-02-01 Last Seen2025-08-08 Times Seen457 Size8.4 kB (8397 bytes) MD54c1ec4a5c4206f22e37243d99eec884b SHA1aec1d2d2952f0936062d0acc4c2e34641771c872 SHA2562d83693d57d7a37fae6fdc5da84cda1b126373f85aafa624ad17ccc35a536a5e Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/gallery-3.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/jpeg
content-length: 8397
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-20cd"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LPocp5%2BygJvoaxZktNGHi6NF4k7NJE0bn3AgAYjJ6VYZK%2FsREmUv3GA2dZBwLACn%2FwGcw1wraBDomwpyjxrAJ9yUs2gFDKeoRtkeUg5aOMTa5PC6oDMIWT%2F0JatGMXYs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeeceb56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1892&min_rtt=535&rtt_var=1373&sent=203&recv=102&lost=0&retrans=0&sent_bytes=122223&recv_bytes=21464&delivery_rate=1640779&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=927&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/gallery-2.jpg | 172.67.208.82 | 200 OK | 9.7 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/gallery-2.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 First Seen2024-02-01 Last Seen2025-08-08 Times Seen447 Size9.7 kB (9736 bytes) MD580270079ec7950a0b8d5e834e488dd72 SHA138a26bfd822f52b44c7e907fb15b6feef87f9e83 SHA25658d810fbaa2f91e3aa5437fb5bf193b65db9c8c67b837755617089a50c72b8d3 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/gallery-2.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/jpeg
content-length: 9736
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-2608"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BsT5R6OoYtp1RkUggcGeezIJuEAZqO%2Bhh7fiopOXwH6NhCCdHT166d2FhfoFLwGbezlXjpTF7f2%2Bn4yDsov7TvPrur74XCfSgjVTRIUaET2YaiiHH4B0TmFa7I5v6NE1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeece956be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1809&min_rtt=535&rtt_var=922&sent=212&recv=104&lost=0&retrans=0&sent_bytes=131556&recv_bytes=21556&delivery_rate=3423378&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=931&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/logo-2.png | 172.67.208.82 | 200 OK | 3.1 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/logo-2.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 125 x 57, 8-bit/color RGBA, non-interlaced First Seen2024-03-15 Last Seen2025-08-08 Times Seen445 Size3.1 kB (3097 bytes) MD5f7a90ba93e1c08513c6534e6fabb742c SHA12a1943030890f91f13a8888e2ded5ca6e762f74c SHA2562d86c01f9af1456d681d7852b7c6aac9d4957dc44ec7a53357aa6961c79bef25 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/logo-2.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/png
content-length: 3097
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-c19"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BHM6%2FCX5G%2F4rgbsHWckbMGQHuP1MqN%2BTvTjonq8tEt8TLNqOgj3C%2B6xWz5XFCnvN%2FVSuCmOD0H7%2BEnPXubKYzr3QQwDKqM0wZJWJ0i4rAABodIUAjcLrRyRnjHlNzTMj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabedce656be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1721&min_rtt=535&rtt_var=867&sent=222&recv=105&lost=0&retrans=0&sent_bytes=142254&recv_bytes=21602&delivery_rate=1379700&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=936&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/uploads/allimg/250120/1SH35952-0-lp.jpg | 172.67.208.82 | 200 OK | 8.0 kB |
URL GET HTTPS m.xzjmtzs.com/uploads/allimg/250120/1SH35952-0-lp.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 240x144, components 3 First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size8.0 kB (8022 bytes) MD585d3e808ffeb0322625a0a5dd2db9285 SHA1e401ce7c107a4c134f76fc1486bbda4290f535b4 SHA256a1a14019c38c61232498c97c846406950c37182d098897400357bd993b41f7ed Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /uploads/allimg/250120/1SH35952-0-lp.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/jpeg
content-length: 8022
last-modified: Mon, 20 Jan 2025 10:37:24 GMT
etag: "678e2764-1f56"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m8JEt%2BUU1kRo6Fy1jmaKtvM6E1a6wPMoU0WUgGRzR39kCQjMJ6g4qzZx6FAQDKplRRyBqYYsDmUIqPD3vkHL1mLvk6qSKcPjGQOwinPnn55eMjLgSRADLqYLHRHnucpk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeccd056be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1721&min_rtt=535&rtt_var=867&sent=226&recv=105&lost=0&retrans=0&sent_bytes=146155&recv_bytes=21602&delivery_rate=1379700&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=937&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/gallery-4.jpg | 172.67.208.82 | 200 OK | 4.7 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/gallery-4.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 First Seen2024-02-01 Last Seen2025-08-08 Times Seen439 Size4.7 kB (4721 bytes) MD53507c2613a89a75b60b04718aaaafec6 SHA18e27a8bd05d333bfbbf4e6b52a7b526164ab5f1b SHA256ba1d60db77681ffa279dfa8dcf6ad57fc25ffaff5fe21854edcf480c73e18fad Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/gallery-4.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: image/jpeg
content-length: 4721
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-1271"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7P4nUHzL%2BzV5R4pGrH5n1QJ7EgHWnEG7BDTMzycWQ%2F%2BkoJex7dySZ1AJ6thH8EqEDZE4BbAe3J%2Bp%2B%2FsAsEPRZpmGTyuuJ%2BEi7C5SA4cHuWSHv7tzBctR4DvahW0jGWq7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeecec56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2063&min_rtt=535&rtt_var=1334&sent=234&recv=106&lost=0&retrans=0&sent_bytes=155085&recv_bytes=21648&delivery_rate=1450426&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=944&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/scrolltop.js | 172.67.208.82 | 200 OK | 1.3 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/scrolltop.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typegzip compressed data, from Unix First Seen2025-01-20 Last Seen2025-01-20 Times Seen2 Size1.3 kB (1294 bytes) MD51772bb2d619ac9798eb4569a7ba5b279 SHA1adf03ce5beaacae8c46cdc35424521437b60797a SHA2560e457b3b9914d0f4827289a59d4b958375d04ba31242b7d26c35fa476f1f7207 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/scrolltop.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
server: cloudflare
last-modified: Wed, 01 Nov 2023 14:33:50 GMT
vary: Accept-Encoding
etag: W/"654261ce-8bf"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
cf-ray: 904ecabf0d0d56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET m.xzjmtzs.com/static/js/ajax-form.js | 172.67.208.82 | 200 OK | 1.0 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/ajax-form.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typegzip compressed data, from Unix First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size1.0 kB (1029 bytes) MD532f5de8052f3cdfd086837bd279c1428 SHA18125f7fca41476ac08a992d75eeac2513d4f3b69 SHA256bbe7ae648f849d15cac36ab0fff43572b1ab14d5685c2b7f16c8b3390ba818df Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/ajax-form.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:54 GMT
vary: Accept-Encoding
etag: W/"654261d2-4bf"
expires: Mon, 20 Jan 2025 23:41:01 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H4rJ%2F%2BQQtvXhk2z7%2FEJdZ6IKdpF67uRRozuXWdaX0VPGx5komgrTmOpw5AQGZOeNcflfZ2UaWUMfcL2vVOUp646IckezSDbfuI7sfC4vu9f%2BO0F2tJYc4JA89SWmH0xF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabf0d0f56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2169&min_rtt=535&rtt_var=1138&sent=252&recv=110&lost=0&retrans=0&sent_bytes=173851&recv_bytes=21831&delivery_rate=667264&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=967&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/waypoints.min.js | 172.67.208.82 | 200 OK | 3.3 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/waypoints.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typegzip compressed data, from Unix First Seen2025-01-20 Last Seen2025-01-20 Times Seen2 Size3.3 kB (3338 bytes) MD5455456d59cb7b1a37eb0fdd8126452a5 SHA1e93c6e9990c62fe619d23ee2bab482c5c6478c05 SHA256b0b0ef0f68672f5c86c6268e7335db4e940ae7ce7834c9772175e22fcf22694e Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/waypoints.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:44 GMT
vary: Accept-Encoding
etag: W/"654261c8-1f6c"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AaJJGKAV9eGVr3uCEGbRLQfU8I8jNJ1HjzMNz9GY26ki%2BVzwD5fBWkx3eN7hPPSbFnGPm1gNJyAIuGSBmkxrvxni7HSsvfcf1p7JglQgobHxXlevcj8NthNYoq%2FfkIAa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabf0d0356be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2133&min_rtt=535&rtt_var=925&sent=258&recv=111&lost=0&retrans=0&sent_bytes=178917&recv_bytes=21877&delivery_rate=731262&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=980&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/plugins.js | 172.67.208.82 | 200 OK | 881 B |
URL GET HTTPS m.xzjmtzs.com/static/js/plugins.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text First Seen2023-03-07 Last Seen2025-08-08 Times Seen1146 Size881 B (881 bytes) MD5074c4c08f0730c4d4ca76f724355807c SHA109d6a93af6b87a67c5773163d35f40b993fca3d3 SHA256c6129bd3aeb079f5c310d2a9618478ba0d621992c1a5e5ef320917937dc2dbb7 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/plugins.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:34:02 GMT
etag: W/"654261da-2f8"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uJ%2BZ4Cd3A3PKJ42M%2F6pqXJcn7JPmWPeYlebP0ugSEh1tZUb1kAATi5M2zI3I0p9mGVmpt1tjpcff8GonhDofdnIMTsswP%2B2tGgYguO2PCziNYF%2BC6YpHDTGBLx96wEKy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabf1d1556be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2207&min_rtt=535&rtt_var=1266&sent=248&recv=108&lost=0&retrans=0&sent_bytes=169445&recv_bytes=21740&delivery_rate=6403447&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=955&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/video-bg.jpg | 172.67.208.82 | 200 OK | 31 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/video-bg.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1140x620, components 3 First Seen2024-02-01 Last Seen2025-08-09 Times Seen453 Size31 kB (31209 bytes) MD5a8550a80611b7d71d05bb74974d69896 SHA1a3f06e35b67991287adf1d76bb35bdf373116fa5 SHA2564208b4763543d1e81cf875a3f2c5d9ab5c1f9c8bdbf7e806716bb958d589ea5c Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/video-bg.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/jpeg
content-length: 31209
last-modified: Wed, 01 Nov 2023 14:36:06 GMT
etag: "65426256-79e9"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2cXO4PkZ1suCRju3%2B33Og3vk3jw%2B5RdlZ2wkatwqLRplHY6a2kUI1r4cTwCKcK1lKDkxG104Vflc9Ztp1phdHiAEArZllAKc8ylJpdH%2B%2BbqcQkKXrQfCV4OkBjtZfrzx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeaca056be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1764&min_rtt=535&rtt_var=859&sent=298&recv=115&lost=0&retrans=1&sent_bytes=221461&recv_bytes=22059&delivery_rate=6871796&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1075&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/uploads/allimg/250120/193I3D09-0-lp.jpg | 172.67.208.82 | 200 OK | 13 kB |
URL GET HTTPS m.xzjmtzs.com/uploads/allimg/250120/193I3D09-0-lp.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 240x144, components 3 First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size13 kB (12821 bytes) MD5b90c0b99070be5c45af75fe762b651a3 SHA199f69ec5b2513e766947a0ef221ac1fa8692d9f2 SHA2565c2c63606b7d0c01ad705f49211bb884f34c53e0089ef2b5f82ba494a560972a Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /uploads/allimg/250120/193I3D09-0-lp.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/jpeg
content-length: 12821
last-modified: Mon, 20 Jan 2025 11:37:34 GMT
etag: "678e357e-3215"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PJxlWle09GgHEjILIGIwZblAn%2BnoEmHWvAFu%2F1zS%2BqQHUNmamRG5cLLFkxa4L%2FdetKQupZeccmqfBNctAe2EFK9hcDvFJUE76bHTGGdfGz2x2kIav2opVxDlKTa3gEH%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeccb756be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1766&min_rtt=535&rtt_var=646&sent=326&recv=116&lost=0&retrans=1&sent_bytes=254173&recv_bytes=22105&delivery_rate=10791630&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1078&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/uploads/allimg/250120/1U52245c-0-lp.jpg | 172.67.208.82 | 200 OK | 13 kB |
URL GET HTTPS m.xzjmtzs.com/uploads/allimg/250120/1U52245c-0-lp.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 240x144, components 3 First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size13 kB (13037 bytes) MD5d4f358bdf1b22cce45ee48e47e663fbc SHA19c45877fc7e1eddc2743c01bd39487196487d5ab SHA25692b0ea21a46d0240a791511b87e07622c0417e586e7b9f24ea317ad11eb5ef10 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /uploads/allimg/250120/1U52245c-0-lp.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/jpeg
content-length: 13037
last-modified: Mon, 20 Jan 2025 10:55:23 GMT
etag: "678e2b9b-32ed"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WTrLXWk9CE8shXnrz7S6Fz7xeREceMz54djDJPxQIY1%2BVmpmKFyazacd7v7xLiUauWrDH0iBKxp8BPAK7QxYEckW3JG4HVMTsHmR%2Ffr2CLeFtyEE1Itl%2BCf7xm8Lsz2Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabecccc56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1738&min_rtt=535&rtt_var=430&sent=350&recv=118&lost=0&retrans=1&sent_bytes=281721&recv_bytes=22197&delivery_rate=6729057&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1096&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/bg-shape-2.png | 172.67.208.82 | 200 OK | 34 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/bg-shape-2.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 534 x 404, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen471 Size34 kB (33900 bytes) MD5e6cf106a4d80d1bad808ce3d74342585 SHA1234e439c9c7b08e9e2ade04bb3080d0c98037094 SHA25693b3a18aacf64278c57ca5ac26d64a06a96ca4d3fb55fc3e482b2ad24c7dfc5f Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/bg-shape-2.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 33900
last-modified: Wed, 01 Nov 2023 14:36:08 GMT
etag: "65426258-846c"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=goATaIbTFJvN3slOZCbtkaxxEAcadQuy5ARLa78iypoI7jcTDy0SqFyOTjpS3GofpCdwZl%2BJHm9a%2B4Mx2%2BDdTTk%2BgwZsSrI5%2Bh%2FczLo4MB5CA85p2KA6TzZPLwbFSKLJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeac9056be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1684&min_rtt=535&rtt_var=431&sent=362&recv=119&lost=0&retrans=1&sent_bytes=295781&recv_bytes=22243&delivery_rate=6563140&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1110&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/gallery-5.jpg | 172.67.208.82 | 200 OK | 11 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/gallery-5.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 First Seen2024-02-01 Last Seen2025-08-08 Times Seen456 Size11 kB (10949 bytes) MD57b13e0f6e593a8164ddafade586beadb SHA1384a3e63dca672854beab1659a5b28acc26c1b9c SHA256cb1a1bde6f843c89afdd617c7dc5ac3170e1f837749daea38e893be78beeae9b Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/gallery-5.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/jpeg
content-length: 10949
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-2ac5"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=foPAvuPdpX7s5W03Wwn9MoT2mrEjcNL8ZUbqlUKK%2B6bWY4KvpdRmAKUdRm3KoHv1sopVWpW%2FdJDQCQTGD41nIT04TOOpPsLtjMlV8Y%2FXwYx8bQfFyPj%2FuAV9WbKiSaHN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabeeced56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1699&min_rtt=535&rtt_var=355&sent=392&recv=120&lost=0&retrans=1&sent_bytes=331249&recv_bytes=22289&delivery_rate=9914643&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1132&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/uploads/allimg/250119/193G63405-0-lp.jpg | 172.67.208.82 | 200 OK | 11 kB |
URL GET HTTPS m.xzjmtzs.com/uploads/allimg/250119/193G63405-0-lp.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 240x144, components 3 First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size11 kB (11308 bytes) MD5ab083424ff037ba1efe85672028ee985 SHA11118f6c4397190740991f5c44e4b5457f186df39 SHA256bbc19a881dfca4427c445c55f224b25ad8d6ea495318b66f42cb566a6333f5e3 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /uploads/allimg/250119/193G63405-0-lp.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/jpeg
content-length: 11308
last-modified: Sun, 19 Jan 2025 11:37:17 GMT
etag: "678ce3ed-2c2c"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5PnSN4tryKW6lH7gTC1k3NidtzRnkdFQZ7jTsGj7sbfQercFR5xIa3ZxqE6gOlRbhkFZG6A%2FMcwfISqMulhPW3IltJ4mI2WekHRRPCpieJzyDspLJVolnlTq2jRufOF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabedcdc56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1599&min_rtt=535&rtt_var=373&sent=417&recv=122&lost=0&retrans=1&sent_bytes=360581&recv_bytes=22380&delivery_rate=10380507&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1147&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/uploads/allimg/250119/195513OV-0-lp.jpg | 172.67.208.82 | 200 OK | 13 kB |
URL GET HTTPS m.xzjmtzs.com/uploads/allimg/250119/195513OV-0-lp.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 240x144, components 3 First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size13 kB (12900 bytes) MD56211287d15e773945742246d8b3bf40d SHA1b0a518b308bfc1d97730fd6596652e0f177fbe37 SHA25613875bd3b4a70e7cbf5d30cc7e5f8f65e488ac7b7ea61e07c9df64263e43d9e2 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /uploads/allimg/250119/195513OV-0-lp.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/jpeg
content-length: 12900
last-modified: Sun, 19 Jan 2025 11:55:14 GMT
etag: "678ce822-3264"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wgmaB1trboi4HMnSD%2BIW9N1rBOSbEk5mmQ0z0pEI54ThvFd3O6bneEkJX%2FJLgCH6hcCNdADBZ%2Bn8QgAvQgR%2FDvXY3eKNiJPRBTsRxE0Zi6ZPHmvs6BqIQGndsOjTFMcd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabedcd556be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1599&min_rtt=535&rtt_var=373&sent=428&recv=122&lost=0&retrans=1&sent_bytes=372882&recv_bytes=22380&delivery_rate=10380507&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1151&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/hero-mobile-1.png | 172.67.208.82 | 200 OK | 48 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/hero-mobile-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 401 x 801, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen447 Size48 kB (47651 bytes) MD5689fab29ff518f640b9eb842d7838ff7 SHA1436226b82cdcf8071dd5a3dd9a6a92a3c7aaaf68 SHA2562f190ed00391ce2b621e9f9fbf3610c80e103776f30328cf9cab9b35da8fe192 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/hero-mobile-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 47651
last-modified: Wed, 01 Nov 2023 14:36:08 GMT
etag: "65426258-ba23"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BcllPGSXTllm07pqoltnn72D2O3WXl7h9MF%2B661GFZb52eMipv%2BgeMhwYYFOR%2B%2BcHEeR9ZOrUYFxeaibE%2FL%2BGfWU3DxzCKlByqphe1rsabUK4f9JcsocpZ%2B%2BuuF6EMt5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe5c2556be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1438&min_rtt=535&rtt_var=356&sent=453&recv=126&lost=0&retrans=1&sent_bytes=402087&recv_bytes=22562&delivery_rate=9978780&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1199&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/faqs-1.png | 172.67.208.82 | 200 OK | 141 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/faqs-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 523 x 555, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen451 Size141 kB (141103 bytes) MD5b8c8872cbde5a67df9eb242028842b05 SHA1d7ecd383d3bdd4f66ca1a12b7b5d8ec6d1b1219f SHA256fc49a0fda10de6144340da2a8a01c3f4ab4e046e4c668faa24aac44b3f7ce735 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/faqs-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 141103
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-2272f"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=030TFdyHYxLhgf%2B0U0bQxL%2FmzKl4ZJy5wlcoP83d8%2BqMqMlpZ%2FSr6QvGN0BP1edy6Y0CzUJ%2BB9LhB%2FBU62LZMkJlGr8X%2BEIcR%2Bkz1CXSqyfJc8fk%2FIYI6geNHlg29%2BQj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabebcae56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1408&min_rtt=535&rtt_var=263&sent=577&recv=132&lost=0&retrans=1&sent_bytes=548139&recv_bytes=22837&delivery_rate=15306171&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1286&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/about-1.png | 172.67.208.82 | 200 OK | 228 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/about-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 527 x 555, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen441 Size228 kB (228126 bytes) MD54171b2c2229183a9006f545f0ead11a2 SHA1b385422f48ef79448c6de4c104e241e40e9366b9 SHA2567f69b0556f6ef74eb6afc1368fc7ad01939a6e4cbfb4613a1b7fc5b9246b9f5a Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/about-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 228126
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-37b1e"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgoxiVI2ToNU3WME1mGzUJqruz2uOy%2BlAytMUMf1r4ipjEY2XRym1hqIUecQNbNpPXLiTPwpURGpW5P9Uo138sOvnc%2BdNOD3OpH5lYDmojnuua%2FOzIICw0cKuQgysLd2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe9c8c56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1369&min_rtt=535&rtt_var=345&sent=495&recv=128&lost=0&retrans=1&sent_bytes=451671&recv_bytes=22654&delivery_rate=3867341&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1244&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/images/626x0w.png | 172.67.208.82 | 200 OK | 263 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/626x0w.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 626 x 835, 8-bit/color RGB, non-interlaced First Seen2024-03-15 Last Seen2025-08-09 Times Seen430 Size263 kB (262712 bytes) MD5b078df2ed57b46fafc9aea6fb7ef1438 SHA1eb1224803d25b35daf7266bb07328ab4097169ec SHA256e6b02ac634e1d1406d1730f718c68349fa5ce24ea694f8ca1cc54d91e358c9d6 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/626x0w.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 262712
last-modified: Wed, 01 Nov 2023 16:12:58 GMT
etag: "6542790a-40238"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XOgsNiDlOXVXTRDqbYGzi%2FD9bW2p%2B%2FcriMox51G9A7teJpBxJbafx3UDT6%2FhDRz3vKoxrn2Sb4kINGdAUWIa8b1uPUgNvMdmzuQoBevVev2UJsuCPr8e3fM5%2BBs0OF0M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabebcaa56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1388&min_rtt=535&rtt_var=397&sent=523&recv=130&lost=0&retrans=1&sent_bytes=483856&recv_bytes=22746&delivery_rate=16267417&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1252&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/images/643x0w.png | 172.67.208.82 | 200 OK | 234 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/643x0w.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 643 x 858, 8-bit/color RGBA, non-interlaced First Seen2024-03-15 Last Seen2025-08-09 Times Seen449 Size234 kB (234154 bytes) MD5829f1a6ca8ac75edf0235c4412a7e2df SHA1f31b3970364480fca947f81bba24d253e447eab6 SHA2560d4223b8fbb93974189d9ae877f9bd4840a2a046fc2a47b07094faf9ff48145c Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/643x0w.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 234154
last-modified: Wed, 01 Nov 2023 16:13:00 GMT
etag: "6542790c-392aa"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c3DvZOxOw5aBclws%2F0Twvfb%2BbFXqYLpVCGToN0Y4B%2FLCLnmbTE64lOwF3O1nAaljk2Rip3GiZNrJpCKwbaZy7udPn09aVJeaTx20rAnHhajDj8WJw6eQL16JH%2FssEKTH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabebca856be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1391&min_rtt=535&rtt_var=231&sent=604&recv=133&lost=0&retrans=1&sent_bytes=580290&recv_bytes=22882&delivery_rate=17236988&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1296&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/client-2.png | 172.67.208.82 | 200 OK | 757 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/client-2.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 207 x 50, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-08 Times Seen406 Size757 kB (756891 bytes) MD5d45a51dead2546060debd05d9eb91c7b SHA170d11df581e0319856bfa92ce4b386b0d1d5bd71 SHA25698e44f3336028a58ea4f24c7b8f4e06f766e8f362678f0c3f437650382686e94 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/client-2.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 756891
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-b8c9b"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j260xhTEFstNGNGjw3sI0RSgqmBB1XWzJ9AdadWrt2vsBeuNX5nsp2orUaJN2OzryAKz%2Flnbu8EFkPWykoKqQ3G8Pqo5PbHilnAi04jDnFKJVr1SQRLH6Eln%2BTTU878p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabebcb356be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1389&min_rtt=535&rtt_var=300&sent=550&recv=131&lost=0&retrans=1&sent_bytes=516001&recv_bytes=22791&delivery_rate=17779186&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1264&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/images/1286x0w.png | 172.67.208.82 | 200 OK | 534 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/1286x0w.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 1286 x 1716, 8-bit/color RGBA, non-interlaced First Seen2024-03-15 Last Seen2025-08-09 Times Seen437 Size534 kB (533732 bytes) MD5f7aa7d85b380d5caeba468b9768b8637 SHA14e0e4fa07e2fb5ec643be5a105abd612e5167eb8 SHA25668aed7773169eb30fb91e4fb26fb642c030f66662af013373ea3738a225b1520 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/1286x0w.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 533732
server: cloudflare
last-modified: Wed, 01 Nov 2023 16:13:02 GMT
etag: "6542790e-824e4"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
priority: u=4,i=?0
accept-ranges: bytes
cf-ray: 904ecabebca356be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET m.xzjmtzs.com/static/picture/client-3.png | 172.67.208.82 | 200 OK | 757 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/client-3.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 207 x 40, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-08 Times Seen428 Size757 kB (756590 bytes) MD533752fa5f9f4bc80715eb0e4d0a8dca6 SHA1090fab80b86c597f258aa6d3e69c1856c721f852 SHA2566963475390919af00e932667866dcd50a99bd3c10eed37e7171ce44f2f2a326c Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/client-3.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 756590
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-b8b6e"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4QlhJ2QgqkztaIlxknYwDpzdgYTKzu47GQ9sw4ceXjoGbRyPK3New%2BXqruXqNDkz6502ZLibtq1ffC65%2B3aR4d16Sp83GimOtE1olMwLR408y9LY5SMI1TVRKsxpi69n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabedce356be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1382&min_rtt=535&rtt_var=192&sent=632&recv=134&lost=0&retrans=1&sent_bytes=612674&recv_bytes=22927&delivery_rate=18552419&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1313&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/client-4.png | 172.67.208.82 | 200 OK | 759 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/client-4.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 207 x 56, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-08 Times Seen421 Size759 kB (758637 bytes) MD5a7fe812cff429341ceabc2f6b90106ad SHA173138f68d7145b79276ffb86777ca6e159a11136 SHA256a2c8d365b68c872746170ad957d55d42e1686f3b0bfecd97df8e599b6bc404f9 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/client-4.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 758637
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-b936d"
expires: Wed, 19 Feb 2025 11:41:01 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oi0l2laEp0Q%2Ba0xpgSuJjBMHrklIhxcgA1wRU%2F7OkvlrWYt7TnUSIHh422FOcDqIx%2FxopfPqeD5wNuEwcchcowVWmh2ybZr6WelipyKbriUrSzJooKkMGm9X2CTSsna3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabedce556be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1479&min_rtt=535&rtt_var=241&sent=741&recv=139&lost=0&retrans=1&sent_bytes=740755&recv_bytes=23156&delivery_rate=788013&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1412&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/picture/client-1.png | 172.67.208.82 | 200 OK | 757 kB |
URL GET HTTPS m.xzjmtzs.com/static/picture/client-1.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 162 x 35, 8-bit/color RGBA, non-interlaced First Seen2024-03-15 Last Seen2025-08-08 Times Seen404 Size757 kB (756954 bytes) MD5781acbd42081e9e3c1ee7462ce8ad3ad SHA12770f8174eebbfd5ae593a21b75ab268d7e50a4d SHA256b71375eea868f5e91723374f586c46e1b838491970612de0716b5b1df81502ec Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/client-1.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: image/png
content-length: 756954
last-modified: Wed, 01 Nov 2023 14:36:10 GMT
etag: "6542625a-b8cda"
expires: Wed, 19 Feb 2025 11:41:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=34qHuO3xQ0TArRb3GH7m4xNkAoF%2F2i352eqmmZxEMkeuX5Ywxm18yqjgCGvL0LPhlTmHZw9CYNvvDagqPlsLGfl50jwLO4ekn%2BdXA7OSTDyLmdGmNfDA%2F5IZADOQvZs7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabebcb156be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1400&min_rtt=535&rtt_var=143&sent=693&recv=136&lost=0&retrans=1&sent_bytes=684518&recv_bytes=23019&delivery_rate=17503024&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1362&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET oudngmslhifnsf.gdmgcyy.com/tj.js | 156.224.2.38 | 200 OK | 805 B |
URL GET HTTPS oudngmslhifnsf.gdmgcyy.com/tj.js IP / ASN  156.224.2.38 #133199 SonderCloud Limited Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (805), with no line terminators First Seen2024-06-09 Last Seen2025-04-29 Times Seen280 Size805 B (805 bytes) MD5b91b404e65a6d55f48e3e8929aaa6631 SHA17feb40ab7aa9c2ff7458e6e89a74af63c5f56ae8 SHA256d73b625c5e38c3fd1e0d5a113374bec35307dd4cde91aca48167ee3dc33567ee Certificate Info IssuerLet's Encrypt Subjectoudngmslhifnsf.gdmgcyy.com Fingerprint8C:50:61:2C:BF:FF:34:B3:17:7D:A0:0D:E4:36:0D:E2:38:05:E9:BD ValiditySun, 15 Dec 2024 05:44:50 GMT - Sat, 15 Mar 2025 05:44:49 GMT GET /tj.js HTTP/1.1
Host: oudngmslhifnsf.gdmgcyy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Mon, 20 Jan 2025 11:40:52 GMT
Content-Type: application/javascript
Content-Length: 805
Last-Modified: Sun, 19 May 2024 07:52:07 GMT
Connection: keep-alive
ETag: "6649afa7-325"
Accept-Ranges: bytes
|
|
| GET m.xzjmtzs.com/static/images/cta-bg.png | 172.67.208.82 | 200 OK | 71 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/cta-bg.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 1920 x 350, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen452 Size71 kB (71277 bytes) MD596d07cdabd48de8c3f406ca38b4a867e SHA10766359895be74cfd59914603fdacf69887aa968 SHA256892b149b7c759e154d0b8500e86c5682fdc3b6787b66b6148046bca479d670d2 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/cta-bg.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/style.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:52 GMT
content-type: image/png
content-length: 71277
last-modified: Wed, 01 Nov 2023 14:52:58 GMT
etag: "6542664a-1166d"
expires: Wed, 19 Feb 2025 03:10:47 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 30615
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rUZBXe6WVKLubQFLIzitueIUw8x3L7ETiWjH9HCLJvu9YPRk2aJo6cy0rkpJ072yhwmVd%2BiLf9mZLpk3kUJa9TsRmyoZsJ1xreEStXVYSnpkmFYBw8ZJgNoU6M0LHWnB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacdebf756be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=39570&min_rtt=535&rtt_var=51533&sent=4585&recv=216&lost=144&retrans=145&sent_bytes=5235790&recv_bytes=27554&delivery_rate=1666717&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=2784&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 | 172.67.208.82 | 200 OK | 7.8 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 7776, version 1.0 First Seen2023-04-10 Last Seen2025-08-08 Times Seen1562 Size7.8 kB (7776 bytes) MD584780596e268aa0cb2be48af2ed5c375 SHA1d67ccd32f8c790a746d64d06145882a2f7b06560 SHA256d7ba57e3ccc2e3b2bdf8cc9e613194b802607682bf473293c2e3e29de82c9491 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 7776
last-modified: Wed, 01 Nov 2023 14:57:02 GMT
etag: "6542673e-1e60"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tUQxsg7%2F7OVa2SVt5Fx8lXLzzTnHr%2BaMLkR9G7cKbQvk28MZN%2F3n31U29g3BfoDH3r4wJXyRzimJHA4VKMhbY7nQjkWaYutU5vul%2FGaxrKO%2BHVDXDxFIEcV1KcHaYvvW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecace1c1d56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=30767&min_rtt=535&rtt_var=44331&sent=4653&recv=227&lost=144&retrans=145&sent_bytes=5309785&recv_bytes=31617&delivery_rate=180&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=2989&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/4icv6kvjbnbylgocxcvjsgyn.woff2 | 172.67.208.82 | 200 OK | 29 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/4icv6kvjbnbylgocxcvjsgyn.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 28968, version 1.0 First Seen2023-04-13 Last Seen2025-08-08 Times Seen624 Size29 kB (28968 bytes) MD5b91fae466c698c775adb2ae92cecc8b2 SHA15c9b89fcd9dee91910506375b316c59aef97e47b SHA256045469f2d577c2ad73219bbd713640bcb4a4f9a46cecc6c0df0e66338646b27f Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/4icv6kvjbnbylgocxcvjsgyn.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 28968
last-modified: Wed, 01 Nov 2023 14:57:36 GMT
etag: "65426760-7128"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KDK9jHHMBuM0T33pCTXWQA0vOSTfh4I0t11n9pvSD4ndxfcsShCIyfMZEjjZneo%2BCO4JXvA4WsAkyl41mDypR%2F5oS8GpdJg03DQ501od89LC3BmjG0w%2BIFnbKV0C8hWL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecace1c2156be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=27091&min_rtt=535&rtt_var=40601&sent=4662&recv=229&lost=144&retrans=145&sent_bytes=5318501&recv_bytes=32055&delivery_rate=1173452&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3192&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/jquery-1.12.4.min.js | 172.67.208.82 | 200 OK | 72 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/jquery-1.12.4.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typegzip compressed data, from Unix First Seen2024-08-20 Last Seen2025-01-27 Times Seen4 Size72 kB (72264 bytes) MD5ddcfcc160b59a842f6e166f5af366819 SHA12f0b65a1ef53d3c9cadd3b1483e12c079a06b37f SHA256c69856286fe05d9e4ddcb97ef61d58b0889023209618706462a64bb9d4d74f9e Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery-1.12.4.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:24 GMT
vary: Accept-Encoding
etag: W/"654261b4-17b8b"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FsUbCZzuC6dDIxz%2B4w7JkE62rJtLTzBfBV3ZXFZ%2BKQsQW7Z9UM3wWc%2Baq3oGv8Rly7o1%2F6yOGiBfFB4YX1xoVaCYYHtwpVn7jK70rpOP8TK%2Btp%2FCNNsfjB5Y26n8pZ5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabeecf356be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1383&min_rtt=535&rtt_var=146&sent=659&recv=135&lost=0&retrans=1&sent_bytes=644814&recv_bytes=22973&delivery_rate=3344092&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1337&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/counterup.min.js | 172.67.208.82 | 200 OK | 20 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/counterup.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typegzip compressed data, from Unix First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size20 kB (19523 bytes) MD584b9341d8c78f468a3c5ad9fbfe7e9d3 SHA1b2c72f9c780b4db893222a33f856c68928755bbe SHA256d639da3d8f42f1ef5d6d525082d3a5b2deb9b9cfa99975186a3459af4e339be7 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/counterup.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:48 GMT
vary: Accept-Encoding
etag: W/"654261cc-42b"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gpjzVD%2By80DWLXW1mr6tlhTO5sq0zFalhNPq97zRbN5ZCuo41oNR%2B%2BeI9pXErIs8noTURx1%2BwkB4MtZtBVYcsH2qNFuiiKYmFw5EL6H9MHfkO7fV5XFr0IcmNDO5AQI2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabf0d0b56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4166&min_rtt=1765&rtt_var=1843&sent=71&recv=71&lost=0&retrans=0&sent_bytes=5683&recv_bytes=19764&delivery_rate=540&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=590&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/modernizr-3.5.0.min.js | 172.67.208.82 | 200 OK | 12 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/modernizr-3.5.0.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typegzip compressed data, from Unix First Seen2025-01-20 Last Seen2025-01-20 Times Seen1 Size12 kB (11673 bytes) MD5261e7c3a1d1d0ab5dd97b7d559fa234b SHA11080afbc90bb060a131c40741fa50b8dab3c4047 SHA2565662df851011b063fae2cb23d4481527992d39000fade0db22a95848db2f6e6a Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/modernizr-3.5.0.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:20 GMT
vary: Accept-Encoding
etag: W/"654261b0-21bc"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JhQWJYnFuplGxbtJsZtMEfRELw2eCzopn268nPTSYBzSD7i3lrtXNHBqfo0lJa2P37SbvkMFXxB9Cjc5CTUCYiGqAFB1U30i0HjDnbq%2BnGbsY7Asf%2BOaAWWdh5rGJYsp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabeecf056be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1892&min_rtt=535&rtt_var=1373&sent=199&recv=102&lost=0&retrans=0&sent_bytes=117645&recv_bytes=21464&delivery_rate=1640779&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=925&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/fontawesome-webfont.woff2 | 172.67.208.82 | 200 OK | 77 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/fontawesome-webfont.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 First Seen2023-04-05 Last Seen2025-08-09 Times Seen173606 Size77 kB (77160 bytes) MD5af7ae505a9eed503f8b8e6982036873e SHA1d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c SHA2562adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/fontawesome-all.min.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 77160
last-modified: Wed, 01 Nov 2023 14:51:36 GMT
etag: "654265f8-12d68"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETunEjIcajA1HdwGzhoS4vhNOusHLrMOTkCSOM2Ko98kE%2FoJ8DN6%2BIOg8TN6jcHpyTMnW4XPzEc8wYwgyR%2BNlk4HyLV18ccjLfUrXhTzvZ1LSfylbLdYqtabm4taSgcK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacdebfb56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15013&min_rtt=535&rtt_var=23509&sent=4770&recv=234&lost=144&retrans=145&sent_bytes=5445066&recv_bytes=32285&delivery_rate=3692194&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3381&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/pxigyp8kv8jhgfvrjjluchta.woff2 | 172.67.208.82 | 200 OK | 8.7 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/pxigyp8kv8jhgfvrjjluchta.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 8656, version 1.0 First Seen2023-05-04 Last Seen2025-08-08 Times Seen531 Size8.7 kB (8656 bytes) MD5c8844b2518e608504a044c16951c094e SHA1b6a98202b81badaa49497d45a4568404e4fe05ec SHA256f41bc54bcb1241a706432b6ca646835b27140a2eca0f50595ac4fbdd9eeef0f5 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/pxigyp8kv8jhgfvrjjluchta.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 8656
last-modified: Wed, 01 Nov 2023 14:57:14 GMT
etag: "6542674a-21d0"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2Fo0uhe3rVgCnYnh8Sl0AlY0X1%2FEaYUMsKwaH8LvdlILB2yLWmvczn6UdMH9Ho7u0avr9hkeGvEpMfVZGkdSuATj6pEr53usuXEL0WxqOYTiQ%2FZuhocyG27G8wAlYGih"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacf5d8f56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9428&min_rtt=535&rtt_var=14801&sent=4895&recv=238&lost=144&retrans=145&sent_bytes=5592193&recv_bytes=32466&delivery_rate=28289638&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3511&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2 | 172.67.208.82 | 200 OK | 7.8 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 7832, version 1.0 First Seen2023-04-08 Last Seen2025-08-08 Times Seen1308 Size7.8 kB (7832 bytes) MD5f4f17fd53c7d040e56f91a3ecb692b22 SHA11b51342175762634835645ba2f99cd3ab0ac615c SHA256b0b43e548e691662dac85b1dc159d148a273d5cb9139f3fcf457cdeebe7bdf3f Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 7832
last-modified: Wed, 01 Nov 2023 14:57:10 GMT
etag: "65426746-1e98"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hLaaXcrRhmy0f4Haf%2FZnfoKQFQPDW809dzax87qOvJsfFuEScy2zgZIrm9MXTP%2BiPpxkdqoMili1i6oibbeN6tUJpSAL3FEzEXfSUVqeYSMcAM5Tsu%2BtHLM%2BkEa%2BDQpb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacf1d5456be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8384&min_rtt=535&rtt_var=13190&sent=4903&recv=239&lost=144&retrans=145&sent_bytes=5601758&recv_bytes=32512&delivery_rate=5130741&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3533&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/images/subscribe-bg.jpg | 172.67.208.82 | 200 OK | 78 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/subscribe-bg.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x250, components 3 First Seen2024-02-01 Last Seen2025-08-08 Times Seen454 Size78 kB (78237 bytes) MD5abaae475d804c03c9dff6d0d7fc8c45b SHA13699feb3aae732d75cf38550e21d570462cb5ac6 SHA2561cadfa5a9c3018eb30926fafb7737c72d1066dc65c41ec22162229698ba7bf25 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/subscribe-bg.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/style.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: image/jpeg
content-length: 78237
last-modified: Wed, 01 Nov 2023 14:52:44 GMT
etag: "6542663c-1319d"
expires: Wed, 19 Feb 2025 11:41:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PvtcFLUca26S7GWjjT0ctNyIYzy4STvh%2F6UBsnxmsR4xW9xhqycgWKkYysDZmfcHrArZaZEZhbnirKRrMi4kmObNHzgqPvZzpwLf8mUsIFex0m94Q6dZqfGgYhV9pa08"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacf0d3d56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7534&min_rtt=535&rtt_var=11591&sent=4911&recv=240&lost=144&retrans=145&sent_bytes=5610502&recv_bytes=32558&delivery_rate=3485107&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3536&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/4icv6kvjbnbylgocjc3jsgyn.woff2 | 172.67.208.82 | 200 OK | 30 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/4icv6kvjbnbylgocjc3jsgyn.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 29864, version 1.0 First Seen2023-05-07 Last Seen2025-08-08 Times Seen604 Size30 kB (29864 bytes) MD5b4e565dcfc8f6cb332be0fc03302ad99 SHA186bec9deab5b1b78b2c3b40df903c7d25e511763 SHA25697d812da07c2319e0e64c4137b33a5d3ccfb4c06fa5ab4444f522959e27a9ed0 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/4icv6kvjbnbylgocjc3jsgyn.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 29864
last-modified: Wed, 01 Nov 2023 14:57:28 GMT
etag: "65426758-74a8"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B4yvUaFveRZahe11BMZddGPTol85yfyAbXIfCP%2FLlCtJEzpDvV4oPwbH%2FKZnYitMviTPHYIF%2BN%2F%2FY23BLMye7V37%2BOjCuoCUaEW0FbfY9SxQCnwosrrb3vzt03mA11V5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecace3c3556be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6984&min_rtt=535&rtt_var=9794&sent=4979&recv=241&lost=144&retrans=145&sent_bytes=5691453&recv_bytes=32604&delivery_rate=12863641&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3575&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/images/testimonial-bg.png | 172.67.208.82 | 200 OK | 166 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/testimonial-bg.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 1920 x 798, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen455 Size166 kB (166491 bytes) MD530ea135bc002f396cbef9eca75d2a74a SHA1b0ccb2f145bd41477fe8a9fc78d2fba41d25bc49 SHA256456cc833aba447449e919e3abea9b050db12ff7c9ae47766833f7031bf6cdd1b Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/testimonial-bg.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/style.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: image/png
content-length: 166491
last-modified: Wed, 01 Nov 2023 14:52:52 GMT
etag: "65426644-28a5b"
expires: Wed, 19 Feb 2025 11:41:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J1qN0MTleBHYSQqalRQ6SReO%2B48irqCeLlvtc4BkM23BHaX1yLWUf9sKAB7ldEyDl3T9ncDFxD1p8zixI1MMDVF5xx9xHdEBq%2FUE471L8QECI8Cj7HeN4hsu4wzpckL5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacf0d3c56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19082&min_rtt=535&rtt_var=29214&sent=4735&recv=232&lost=144&retrans=145&sent_bytes=5404032&recv_bytes=32193&delivery_rate=6067009&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3338&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/images/hero-bg-1.jpg | 172.67.208.82 | 200 OK | 59 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/hero-bg-1.jpg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3 First Seen2024-02-01 Last Seen2025-08-09 Times Seen455 Size59 kB (58769 bytes) MD554df693087c681bca1e3a984c625aba9 SHA1d1c489b5200f2b55945b848d7490234f296744df SHA2567b9d4cbbe3baae34090c8f128c4ebad670f69b0ad4103069517c167203a62225 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/hero-bg-1.jpg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/style.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: image/jpeg
content-length: 58769
last-modified: Wed, 01 Nov 2023 14:53:04 GMT
etag: "65426650-e591"
expires: Wed, 19 Feb 2025 11:41:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfL0jjrv4OCxuE9eCgmw5nCte3AoklkiShI2K2XErdmMv5X8kssSmp15brXYY3aNSdmRWB580QPayquTyY1vkbsODjQQjuGTqJiJIUfVGIfnxAzpxIaucw55YmcZ%2FDDn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacdebf356be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5825&min_rtt=535&rtt_var=7496&sent=5069&recv=243&lost=144&retrans=145&sent_bytes=5795638&recv_bytes=32696&delivery_rate=59842&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3673&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/pxibyp8kv8jhgfvrlej6z1xlfq.woff2 | 172.67.208.82 | 200 OK | 8.0 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/pxibyp8kv8jhgfvrlej6z1xlfq.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 7988, version 1.0 First Seen2023-04-08 Last Seen2025-08-08 Times Seen1643 Size8.0 kB (7988 bytes) MD5087457026965f98466618a478c4b1b07 SHA100b024ccb35e3694de662d180d6ea7f56de6d654 SHA256b93b9165269362989e2855d0bf0ae232d7193a45c43627b2d03b26d7eb98263b Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/pxibyp8kv8jhgfvrlej6z1xlfq.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:54 GMT
content-type: font/woff2
content-length: 7988
last-modified: Wed, 01 Nov 2023 14:57:06 GMT
etag: "65426742-1f34"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2FSVxXEC%2BVT6bcJ2hepNewK35P6hQeyCSLOhDoVkXk4Un6LX5e3WPNhb0dJI9x7nLSYlXGosr8F%2BDjbq6yGB0VcaqS%2FBwmeF83c0xFgfuRrmiWosdZu5swbRlqmCKgv6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecace1c2056be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7335&min_rtt=535&rtt_var=8670&sent=5121&recv=246&lost=144&retrans=145&sent_bytes=5856634&recv_bytes=33089&delivery_rate=12972848&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3997&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/owl.carousel.min.css | 172.67.208.82 | 200 OK | 3.4 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/owl.carousel.min.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeASCII text, with very long lines (3370), with no line terminators First Seen2023-07-02 Last Seen2025-04-06 Times Seen238 Size3.4 kB (3364 bytes) MD591a7a4aeb1ace81ac0241f5eaf7af580 SHA18e3975b3750b3895985b0d9636b7f441da0a7dfc SHA256ab1bcad19255267898a1350372f9970b9f1572746c8fd96fe3938ef0c5878d08 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/owl.carousel.min.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:32 GMT
vary: Accept-Encoding
etag: W/"65426180-d24"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rAgYdW0CEDWzTVm2V8Jkt6y8cpmxu5br%2BTls6Axo%2B3Vo8uXjusDHitlv0CmaXTMSRk2wlSkKAcG%2Bx%2FHx5ouo66oDlg1iv4sASNaWwS%2FqkXybU9Rw%2BbOVWTd8pe02p5sB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe3c0156be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3251&min_rtt=1562&rtt_var=1428&sent=91&recv=76&lost=0&retrans=0&sent_bytes=22546&recv_bytes=19991&delivery_rate=1021944&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=818&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/favicon.ico | 172.67.208.82 | 200 OK | 17 kB |
URL GET HTTPS m.xzjmtzs.com/favicon.ico IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeMS Windows icon resource - 1 icon, 64x64, 32 bits/pixel First Seen2023-09-05 Last Seen2025-08-08 Times Seen466 Size17 kB (16958 bytes) MD54335a1236c49b652b743a45df7369f9a SHA131fb93100c45f3a89b8c4ab57657e9765871cdf0 SHA25649c07eda3d6369073f360397a29e52dd74020e6c0978e83c4eb1da69e37ae895 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:54 GMT
content-type: image/x-icon
last-modified: Mon, 30 Oct 2023 20:19:44 GMT
etag: W/"65400fe0-423e"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DbBILnxjI%2By6W0RN2zHAqAZBcbBrE1o1O1bjV9YG60xLXDDuQPCvnRxvHBoew90TI%2FIesYYo10wMWXK3q5z67MJlyd7bfC3i3Kn5ATMNvpS%2FO9uQe1d4OiJiDajH%2B6GQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecad47a7e56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6585&min_rtt=535&rtt_var=8001&sent=5129&recv=247&lost=144&retrans=145&sent_bytes=5865533&recv_bytes=33135&delivery_rate=49026&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=4186&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/scrolltop.css | 172.67.208.82 | 200 OK | 2.2 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/scrolltop.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeASCII text, with very long lines (2261), with no line terminators First Seen2024-02-01 Last Seen2025-04-06 Times Seen218 Size2.2 kB (2176 bytes) MD57d7151711c405c6275f704a56e263260 SHA1aa236e28854044c375351eebf15b24dd8ee26d87 SHA2563856bd6c10ea7243a92a035d43b856352e535b18d9726a3b631704e12d5d9bad Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/scrolltop.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:36 GMT
vary: Accept-Encoding
etag: W/"65426184-880"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KpUVrZByxuUYSe4s7KXt0uWi4exTGpv7xdpgx4FwjONrKnSlZpuGLezl7Ky4HSewizRyHfeOyaPjlOWwYA5twk0GTt1EaIFtMRJ4ZX16KYg3mFxoAVV4RVaLuf5ep1nB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe3c0656be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3036&min_rtt=1533&rtt_var=1501&sent=96&recv=77&lost=0&retrans=0&sent_bytes=26739&recv_bytes=20036&delivery_rate=269918&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=821&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/owl.carousel.min.js | 172.67.208.82 | 200 OK | 43 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/owl.carousel.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (32000) First Seen2023-03-07 Last Seen2025-08-09 Times Seen6401 Size43 kB (42766 bytes) MD5b7b9c97cd68ec336d01a79d5be48c58d SHA11a99890b57c9859a622337ed0b2f989d6e30cc0e SHA256b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/owl.carousel.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:42 GMT
vary: Accept-Encoding
etag: W/"654261c6-a70e"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2AQvO3mkclSZVvhvJ%2BEZFf2o2wfXkeNayyMXhmBX9R%2F84aUXA9SufM6GcYSL6tswpqH%2B1EG%2B54QpnYi9pc2t2sp2IOdeUhO1YaGl2ZFc1LwVvcsWR4oOIXi2OtuZOk8r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabefcff56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1769&min_rtt=535&rtt_var=492&sent=338&recv=117&lost=0&retrans=1&sent_bytes=268020&recv_bytes=22151&delivery_rate=2367206&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1088&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/style.css | 172.67.208.82 | 200 OK | 38 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/style.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738325 Size38 kB (38233 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/style.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 20:23:08 GMT
vary: Accept-Encoding
etag: W/"6542b3ac-9559"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LmgsShqIvCpIJkOeNLNJYZbXpEVQcUmdOU%2F6JkcAsz1SRSjgKzcJri1e4ojcrNPquCAdHEVzjfeYQ3m%2BC9mWdf2Txv5iuK4%2FVfFpBMYmZ4sg5mj7BCXThEtxdAQQEXu9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe4c1156be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3472&min_rtt=1604&rtt_var=1839&sent=77&recv=74&lost=0&retrans=0&sent_bytes=9395&recv_bytes=19901&delivery_rate=1429916&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=809&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/animate.min.css | 172.67.208.82 | 200 OK | 70 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/animate.min.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738325 Size70 kB (70327 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/animate.min.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:26 GMT
vary: Accept-Encoding
etag: W/"6542617a-112b7"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EM0j26udrTVNiSY%2FXtQPGnlgtsSm%2BltzmCO0frxEwu4UlNS44l%2FsZAchepYe%2FUfPveyivYHeVDcdGBnRtA3iZsNdWMIp346NkdcJFd188lYwOuAaVUDTjD9YZ3WN6TV1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe3bf656be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3036&min_rtt=1533&rtt_var=1501&sent=96&recv=77&lost=0&retrans=0&sent_bytes=26739&recv_bytes=20036&delivery_rate=269918&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=821&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/bootstrap.min.js | 172.67.208.82 | 200 OK | 51 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/bootstrap.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (50758) First Seen2023-03-07 Last Seen2025-08-09 Times Seen108228 Size51 kB (51039 bytes) MD567176c242e1bdc20603c878dee836df3 SHA127a71b00383d61ef3c489326b3564d698fc1227c SHA25656c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/bootstrap.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:30 GMT
vary: Accept-Encoding
etag: W/"654261ba-c75f"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZ0qIPN4%2B01Tf3N4WTE2q%2BzAZNx2sii9pnuqQu0inEyx7s6%2F6HeuGI3cYNxA7kQjEEh%2FHUqXeLUG5%2F9f0gr2u%2BpROuJAHqRzvDoEvlTgvHXOhAX5jKu126CwMP%2By%2FCjQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabefcf856be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1646&min_rtt=535&rtt_var=372&sent=402&recv=121&lost=0&retrans=1&sent_bytes=343168&recv_bytes=22335&delivery_rate=5655473&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1144&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/top-arrow.svg | 172.67.208.82 | 404 Not Found | 148 B |
URL GET HTTPS m.xzjmtzs.com/static/fonts/top-arrow.svg IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeHTML document, ASCII text, with no line terminators First Seen2024-07-29 Last Seen2025-04-06 Times Seen548 Size148 B (148 bytes) MD5a505c0cb4ec1715c35ec0dc7c89f154a SHA1b97fd9907cd01531489972ba67137e19f30e4c06 SHA256a7efd1f6629a4aa881a1681d5564ccf4f85b878eafa7bbae8f8a3c0a6d7dd9f0 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/top-arrow.svg HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/scrolltop.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hn8ZVVA7ASk6He1XEhPxTl%2BkYYR76sUyGfnWCPPe5AfhT2hac129ObTo4tdOHRjM7kwI4nAeC0R0g1Bb2MxteURp2DJSft9%2B89xMuBr9Yb33PoqUBJZDe%2BkWtRkmAIUV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacf1d4e56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6321&min_rtt=535&rtt_var=8672&sent=5007&recv=242&lost=144&retrans=145&sent_bytes=5722818&recv_bytes=32650&delivery_rate=10455215&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3588&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/swiper.min.js | 172.67.208.82 | 200 OK | 121 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/swiper.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (65276) First Seen2023-03-08 Last Seen2025-08-09 Times Seen580 Size121 kB (121304 bytes) MD5b117060487d6ec17a9af7c5604a2c149 SHA140a26a977cf1c6b060668c9680cf71a6c8e91e0d SHA25634200a216f42b734a9723a5367645bb517c31e036b42e2bf6a480c62880fc12c Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/swiper.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:36 GMT
vary: Accept-Encoding
etag: W/"654261c0-1d9d8"
expires: Mon, 20 Jan 2025 23:41:01 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DC9FYtWokaYQF6aU2rm3EtvdRm7TuGfrDWCfjZ62ynmhiGrZlo%2FNb5y9mAHntCqq172GeIblaJpm73Df9MUYPBe7Ag24gj8NTk19iVv8y53OJxcb3GagF%2Fio8fSQVL5A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabefcf956be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1541&min_rtt=535&rtt_var=310&sent=440&recv=124&lost=0&retrans=1&sent_bytes=386808&recv_bytes=22472&delivery_rate=5740788&cwnd=40800&unsent_bytes=0&cid=5e616046511c513c&ts=1175&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/main.js | 172.67.208.82 | 200 OK | 3.4 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/main.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (3600), with no line terminators First Seen2024-02-01 Last Seen2025-04-06 Times Seen178 Size3.4 kB (3399 bytes) MD5df8e58a311adb9a0c7ac3ed88f9f1e0c SHA131ebbce653ca791062b248b75d362eaec818fb58 SHA256404e90bf524c8aadef2a22e0c1b83e3476c1cd6599995ef5368adc2ce23f6513 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/main.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:34:06 GMT
vary: Accept-Encoding
etag: W/"654261de-d47"
expires: Mon, 20 Jan 2025 23:41:01 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FKm5ZrmRzclZBzeP2zohQvI8AFu5RTVakD1ZNCHq9KEB1nN75XO09Yu2Ab06cUaRdVjGQ6sZvVnSt3K5959h5nt7%2FtidSL%2F4RwbUnT4Ev6XnOyFgMdxJXiM1%2Baywj%2Fe5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabf2d2556be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2119&min_rtt=535&rtt_var=721&sent=270&recv=112&lost=0&retrans=0&sent_bytes=191533&recv_bytes=21923&delivery_rate=1432011&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=1004&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/4ics6kvjbnbylgokfw72.woff2 | 172.67.208.82 | 200 OK | 34 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/4ics6kvjbnbylgokfw72.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 34260, version 1.0 First Seen2023-04-13 Last Seen2025-08-08 Times Seen747 Size34 kB (34260 bytes) MD55b23eeb3a32b30e91682d601535d2a89 SHA148469f0155a13f3499db31d53cba5d47e8b528b5 SHA2564f4524f7e1a87079bc50a64681f880ccf3e6f5db1ec5fc27949377532a3881da Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/4ics6kvjbnbylgokfw72.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 34260
last-modified: Wed, 01 Nov 2023 14:57:20 GMT
etag: "65426750-85d4"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BX5fedS9Cx6MiN%2BF2qcVMzBEitg55NS8F3mrJVSZ4pwmIRsr%2BRLHCUB83aMA65Wge5cYSJEiLU4OsKJlxVuzgtetsK%2F90b3lmS99iMwNWdyM%2BIdy9G66mEKpaO9LIQi0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecace4c4a56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=23946&min_rtt=535&rtt_var=36741&sent=4688&recv=230&lost=144&retrans=145&sent_bytes=5348909&recv_bytes=32101&delivery_rate=153808&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3226&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/popper.min.js | 172.67.208.82 | 200 OK | 20 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/popper.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (20164) First Seen2023-03-07 Last Seen2025-08-08 Times Seen1485 Size20 kB (20336 bytes) MD5a22f3f7e61af6a069aa6b422537c3f49 SHA1682fdc625ae80a890d10af2cb16e62540e2186a8 SHA256d2b9f29ea1f42a60a8beb1c04f76868287f2a48d6ec50fb39d6b888584a03c49 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/popper.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:26 GMT
vary: Accept-Encoding
etag: W/"654261b6-4f70"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBI4R5cAu2%2B3nIakaudlpjVno%2FxwCpi7ri0YXu8%2F3ZkEJiJL4mODJhBo846nvzqwxgDdcFWbHJcYg8n1C6fqegmIdExuGVaaBemgOQZjnGK0CMF41HSrt6xI4kW%2BhEft"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabeecf556be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2063&min_rtt=535&rtt_var=1334&sent=239&recv=106&lost=0&retrans=0&sent_bytes=160639&recv_bytes=21648&delivery_rate=1450426&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=947&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/owl.theme.default.min.css | 172.67.208.82 | 200 OK | 1.0 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/owl.theme.default.min.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeASCII text, with very long lines (1018), with no line terminators First Seen2023-04-06 Last Seen2025-04-06 Times Seen1726 Size1.0 kB (1016 bytes) MD5239a6e674e55d9861415d6c5dbb9b724 SHA1a23bb02aa9fd78da1d8d1d48bbdf10c1bbc0cf48 SHA2566118ba2e89befa683bbcfce25da857e5336a4e9af05edebc4555abb38189da39 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/owl.theme.default.min.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:34 GMT
etag: W/"65426182-3f8"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ig%2BFQaEL3NgVwKql%2BLz07g0FIPoRYORWAOJohxr6oNdWMGcz%2Ble2bejPXehZrsJK2rFaPhplWEpWeNKti0%2F7Lit4QpepSOLMsjigvleqgRtLh0Bw6dPkDcnYcOTZeFsN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe3c0356be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2742&min_rtt=1526&rtt_var=998&sent=117&recv=82&lost=0&retrans=0&sent_bytes=44200&recv_bytes=20554&delivery_rate=83611&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=841&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/meanmenu.css | 172.67.208.82 | 200 OK | 3.6 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/meanmenu.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeASCII text, with very long lines (3945), with no line terminators First Seen2023-04-27 Last Seen2025-04-06 Times Seen216 Size3.6 kB (3551 bytes) MD573db00d5773ec6670b3004aa346ea5a5 SHA189fb9153ef6161f89ac06413d4da58a25f99e4eb SHA25607fc957f7dde0b1eb43c59d18541f7ca89a98da267407c81f97e53aadd1092a9 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/meanmenu.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:24 GMT
vary: Accept-Encoding
etag: W/"65426178-ddf"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fDlhsL7w9l%2Bc3adVSNkgSoiRFfBfWBZ%2FmU0qX0nR5o3OdHwf1Vwjx72H0SP2w%2BZ0BGTMeg7xd2a5P6F6rWFw8uA5Igcch6j6qWEL39gz0lKJ8aqfisu8cEpz8sTyyII1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe3bf256be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1849&min_rtt=535&rtt_var=1028&sent=147&recv=89&lost=0&retrans=0&sent_bytes=71229&recv_bytes=20870&delivery_rate=20457&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=875&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/images/foot-bg.png | 172.67.208.82 | 200 OK | 18 kB |
URL GET HTTPS m.xzjmtzs.com/static/images/foot-bg.png IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typePNG image data, 1920 x 545, 8-bit/color RGBA, non-interlaced First Seen2024-02-01 Last Seen2025-08-09 Times Seen465 Size18 kB (18112 bytes) MD5ffb254eb00f55f4166d0b7472b4177ff SHA19a20ff0e63357b62bd330c31e2bd339f9a55b918 SHA256bd414b9c7acee8f1f873d2a4a0f281eeb32a3fdf8c410ca7ea9ae3f67b56c64c Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/foot-bg.png HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/style.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: image/png
content-length: 18112
last-modified: Wed, 01 Nov 2023 14:52:34 GMT
etag: "65426632-46c0"
expires: Wed, 19 Feb 2025 11:41:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BI%2BdixWE5qQpHUI345WhMGnJZ%2F1%2B80GXmT3LdhgZISXzx%2FV%2BInNAGAf5Nir54GhIts5nKuw549YTZY5zx1Z7q35ZwPOGvgGQPZFD%2BZnqwlTrY3aDsmW2sgZCVenB6ic8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacf0d3e56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21585&min_rtt=535&rtt_var=32276&sent=4718&recv=231&lost=144&retrans=145&sent_bytes=5384734&recv_bytes=32147&delivery_rate=4368523&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3308&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/wow.min.js | 172.67.208.82 | 200 OK | 8.4 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/wow.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (8515), with no line terminators First Seen2023-04-05 Last Seen2025-04-06 Times Seen715 Size8.4 kB (8415 bytes) MD5da4ec6a3e988677b1eff06cb90e95927 SHA14083d1ec23a24f9f0eeb025501b9806b567249aa SHA25685a9285b248eb56c2268288cfcea3ea7806c912ebb82d256fcd7c4e5b7e9c740 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/wow.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:58 GMT
vary: Accept-Encoding
etag: W/"654261d6-20df"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rLE2K%2F62aWU1Ab2JyTdzKU%2FrTgGfWGSB0fLV%2Bb0XOgXsXe0my9v9ZN0c1qrPVdF2rB6H5xmK5sKRuUXc7LMHA23yiypsqLf4AHXwcg6W1%2FP7iTfHZl0sAXqjc0Npn5he"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabf0d1256be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2169&min_rtt=535&rtt_var=1138&sent=254&recv=110&lost=0&retrans=0&sent_bytes=175127&recv_bytes=21831&delivery_rate=667264&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=968&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/magnific-popup.css | 172.67.208.82 | 200 OK | 7.0 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/magnific-popup.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeASCII text, with very long lines (7302), with no line terminators First Seen2023-04-05 Last Seen2025-04-06 Times Seen1657 Size7.0 kB (6954 bytes) MD531624166558eafd72f05df700acd2245 SHA1efe61cc95aa5dc7b4798bbb5ca3223616e64649d SHA256acfdcefce785e171e91cbbb5d1367730acd4f83584d17c671a77bc10c141af5e Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/magnific-popup.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:28 GMT
vary: Accept-Encoding
etag: W/"6542617c-1b2a"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ojrCnhsaGfWTxj9B00BLBwzWq2IDRBvy61R89FRJQ3ju%2FWJECUmMjf%2BUjEstXQBQ1C5l8oZE4tecM1TBVdXgDBXpo4Plkcf3DnjfeOIuU0TNzFTtGaiMk9Pv5aMqXUc8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe3bfa56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2626&min_rtt=1526&rtt_var=981&sent=119&recv=83&lost=0&retrans=0&sent_bytes=45374&recv_bytes=20600&delivery_rate=218280&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=854&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| | 172.67.208.82 | 200 OK | 74 kB |
URL User Request GET HTTPS m.xzjmtzs.com/ IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738325 Size74 kB (73535 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4m43aYaF6qqtfLMDev8gdC7eCMKyKmLIaougAI8PWW%2BgvfJqhUwZyJsp3PQdnAEPc3fGESLWGWzAnt9G0xJdd5XkQ1uaoRFSR9%2F7Lo%2BenChHqXZnWAf8SsOOc%2Bxd8p3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecab7fd9c0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5813&min_rtt=525&rtt_var=10607&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3198&recv_bytes=1116&delivery_rate=7252086&cwnd=253&unsent_bytes=0&cid=7b3a1e27013afb8c&ts=751&x=0"
X-Firefox-Spdy: h2
|
|
| GET m.xzjmtzs.com/static/css/swiper.min.css | 172.67.208.82 | 200 OK | 20 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/swiper.min.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738325 Size20 kB (19775 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/swiper.min.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:38 GMT
vary: Accept-Encoding
etag: W/"65426186-4d3f"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bCWSAQ%2F4uc8mcM8O4UrX3n%2Fzz%2BWa6J22%2Bx1qCF1b6bzZxZVvNT4qrHC%2FmyUngE8x8HWzXx%2Fpgh0Uo%2B3M227JmOBWVDYO8g3yLKQRQt%2BLXPoVyPwoXkKiG%2F6xm12sWrLR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe4c0c56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2184&min_rtt=541&rtt_var=1143&sent=132&recv=86&lost=0&retrans=0&sent_bytes=56945&recv_bytes=20735&delivery_rate=3345&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=869&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/default.css | 172.67.208.82 | 200 OK | 14 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/default.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738325 Size14 kB (14354 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/default.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:42 GMT
vary: Accept-Encoding
etag: W/"6542618a-3812"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gwzy1K3As8x%2BN8Aq0miKUowFvwf7cwugWtUTNhEyYNODQwOA2tmSPTAQwE5mEon1QcfHiGoCeRODl7vGeH89Z7AL28tcncZOzx3NCSdzexa6wJqJ%2BBFJfqZXKJQmcljl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe4c0f56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3233&min_rtt=1562&rtt_var=1857&sent=86&recv=75&lost=0&retrans=0&sent_bytes=18710&recv_bytes=19946&delivery_rate=1004675&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=811&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/responsive.css | 172.67.208.82 | 200 OK | 7.6 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/responsive.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeASCII text, with very long lines (8507), with no line terminators First Seen2024-02-01 Last Seen2025-04-06 Times Seen209 Size7.6 kB (7624 bytes) MD587b38be685f58fd37c43e90a37b05ed0 SHA1fe66fc02297734ea3741acbe025e7a48f3d76e34 SHA2565b42c1cdfa964f3cf69751fa83cd1ac0e45844ee5b5709a4b7af626bb872853e Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/responsive.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:46 GMT
vary: Accept-Encoding
etag: W/"6542618e-1dc8"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rSxaqEn9qnhqvNUmweKOF%2BPPOy%2FxxAKeVcNtY1f5yavKgmGuPobtdP%2BV42P9zpgEhA9jeCcUscrzjpMklxj%2FQQcHbDmzjYYYDCntO3sHrdIQIa3lIDwtHsAVMKrviBAs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe4c1656be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3738&min_rtt=1757&rtt_var=1741&sent=74&recv=73&lost=0&retrans=0&sent_bytes=7076&recv_bytes=19855&delivery_rate=1093&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=801&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/meanmenu.min.js | 172.67.208.82 | 200 OK | 4.0 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/meanmenu.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (4201), with no line terminators First Seen2023-04-10 Last Seen2025-04-06 Times Seen289 Size4.0 kB (4019 bytes) MD51207dbf88055434dc48ed2de7d47438c SHA124c3c5662d32467d42a5f43a85e4d4fb22eb19cf SHA256432177ce405d2352908d1d7007edeb762887b0b9fee13f707e531611fc7f5b20 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/meanmenu.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:38 GMT
vary: Accept-Encoding
etag: W/"654261c2-fb3"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fxv5A%2BCMIc8mpRtX0Ls14j0rZr3sE1PQ0%2BHF3WOcXaQpVprVX6U3VUqnYOCudjw4s0o3OpOElYHeJe6qI7sDEgI639ucbcmtxGwoilLXmKpDK3xvkQKlBeh2bkZ0H1Vo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabefcfd56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2063&min_rtt=535&rtt_var=1237&sent=249&recv=109&lost=0&retrans=0&sent_bytes=170545&recv_bytes=21786&delivery_rate=172452&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=959&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/bootstrap.min.css | 172.67.208.82 | 200 OK | 141 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/bootstrap.min.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738325 Size141 kB (140940 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/bootstrap.min.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:22 GMT
vary: Accept-Encoding
etag: W/"65426176-2268c"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GQtimMLykdIOMJVoX4HWG2YoQwYproBjYWthMd7N53USY9EFhAnyHJp07tNyv1iReXxE3i6yB1SGAqZD7jstFIGOTdhmC6oU6GXeBIS4Dd2C21kOklJFAIzCRBtWj0Qg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe3bef56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1996&min_rtt=535&rtt_var=787&sent=275&recv=113&lost=0&retrans=1&sent_bytes=194487&recv_bytes=21969&delivery_rate=406106&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=1037&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/js/magnific-popup.min.js | 172.67.208.82 | 200 OK | 20 kB |
URL GET HTTPS m.xzjmtzs.com/static/js/magnific-popup.min.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (20087) First Seen2023-03-07 Last Seen2025-08-09 Times Seen17465 Size20 kB (20216 bytes) MD5ba6cf724c8bb1cf5b084e79ff230626e SHA1f455c5f153f872e52265f87a644ff89fe14a6fb6 SHA2563fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/js/magnific-popup.min.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 14:33:42 GMT
vary: Accept-Encoding
etag: W/"654261c6-4ef8"
expires: Mon, 20 Jan 2025 23:41:01 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QJDL%2FVRm7%2FAQtiB8TaHCp1l5G0WiOqKHEOiSC2v3Le47RpF%2FKDH6JKxkbiFcz140ZIbLLVjjWiyafZIAjoK1gT8NWVt6L42PUi0iHCtGt1oZfnO05mxwrqVoGxfDtH4H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabefcfe56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2119&min_rtt=535&rtt_var=721&sent=262&recv=112&lost=0&retrans=0&sent_bytes=182556&recv_bytes=21923&delivery_rate=1432011&cwnd=20400&unsent_bytes=0&cid=5e616046511c513c&ts=1003&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/tj.js | 172.67.208.82 | 200 OK | 362 B |
URL GET HTTPS m.xzjmtzs.com/tj.js IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeJavaScript source, ASCII text, with very long lines (377), with no line terminators First Seen2024-09-19 Last Seen2025-04-06 Times Seen55 Size362 B (362 bytes) MD58a6b988c4c8a68345320714bb07b4950 SHA16fefbbac8abbad6989eee1ad0eb6b2d61e019f95 SHA2561e3219b5488e1be11331f1a5ff2c8af16b8b6729af934aa27520b6c89a079238 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /tj.js HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: application/javascript
last-modified: Tue, 10 Sep 2024 05:42:08 GMT
etag: W/"66dfdc30-16a"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hsZLehM9gK6pUhu%2FZc1Z0k8ER7PtEQky89Ev9yjjOvy4jHMmcsb1ugE4Vl%2Fd0GGJIrsxzD670uV4lOILfte9NdUU4WqbCk0ojxVcZfoosgMJpzBhHC9ZV6vrQJBAchOi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecabe5c1756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2915&min_rtt=1533&rtt_var=868&sent=115&recv=81&lost=0&retrans=0&sent_bytes=43198&recv_bytes=20508&delivery_rate=2184845&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=838&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/fontawesome-all.min.css | 172.67.208.82 | 200 OK | 31 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/fontawesome-all.min.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738325 Size31 kB (30929 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/fontawesome-all.min.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:50 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:32:30 GMT
vary: Accept-Encoding
etag: W/"6542617e-78d1"
expires: Mon, 20 Jan 2025 23:41:00 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2F2bIXoDH9hH2YSZJKbe8XfUanUdegmQOTW5QUL0zw9kW0DN3PzrVRXXd484R8GWy72R6fpROmdYVhvvUvFbdnxiuQ33pZrjIJ9lBR9wLRFRKp7jdvJS3l1OZeU2NbBm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecabe3bff56be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2626&min_rtt=1526&rtt_var=981&sent=122&recv=83&lost=0&retrans=0&sent_bytes=48199&recv_bytes=20600&delivery_rate=218280&cwnd=12000&unsent_bytes=0&cid=5e616046511c513c&ts=855&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css | 172.67.208.82 | 200 OK | 9.9 kB |
URL GET HTTPS m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeASCII text, with very long lines (10144), with no line terminators First Seen2024-02-01 Last Seen2025-04-06 Times Seen202 Size9.9 kB (9850 bytes) MD5ed452948b1ee7064314a52112f4485c5 SHA16c7e4366821e8ca2991dd8544dd9ced3e4567b13 SHA256bd899d50375b53e94ef7303a9c3b30b9074e19e21a1f1e3d906b01c87537f3e3 Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/css/c9e1b5dc2b1b4169961debffbf206f94.css HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/style.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:51 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 14:50:58 GMT
vary: Accept-Encoding
etag: W/"654265d2-267a"
expires: Mon, 20 Jan 2025 23:41:01 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DwlCQNtFDzjRm4HSCcMXMUjcH8b0BqqlGg7KSigBKDIKWj0eQ7b%2BW4PTBpJeq93OpdB5lkqeeODBF4tvX0iGKpNabPqHNX6fBfoCgnAtEk3fynjg7Nghy5W8vdTv7NQc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 904ecac1bfe956be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1506&min_rtt=535&rtt_var=252&sent=739&recv=138&lost=0&retrans=1&sent_bytes=739178&recv_bytes=23110&delivery_rate=17995547&cwnd=81600&unsent_bytes=0&cid=5e616046511c513c&ts=1383&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET m.xzjmtzs.com/static/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 | 172.67.208.82 | 200 OK | 7.9 kB |
URL GET HTTPS m.xzjmtzs.com/static/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 IP / ASN  172.67.208.82 #13335 CLOUDFLARENET Requested byhttps://m.xzjmtzs.com/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 7900, version 1.0 First Seen2023-04-08 Last Seen2025-08-08 Times Seen2036 Size7.9 kB (7900 bytes) MD59ed361bba8488aeb2797b82befda20f1 SHA16f80d965a066aff81c0a344d4b7297bd009cc099 SHA25641e46faff74c6a77d581689ec35eb040f6c96d17f4d2c5b25dccd42ed498b01c Certificate Info IssuerGoogle Trust Services Subjectxzjmtzs.com FingerprintD6:4E:51:C1:B2:24:74:EA:BE:25:DF:4E:F8:7A:FA:C8:85:EF:52:0B ValidityWed, 11 Dec 2024 04:09:37 GMT - Tue, 11 Mar 2025 05:02:14 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 HTTP/1.1
Host: m.xzjmtzs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.xzjmtzs.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=hc3a500ll470rd0bh7s16t5kgq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Jan 2025 11:40:53 GMT
content-type: font/woff2
content-length: 7900
last-modified: Wed, 01 Nov 2023 14:57:32 GMT
etag: "6542675c-1edc"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A0kcG8Q%2BRvuZXwQOtq2Z%2FVeZlFCk9a3ZN%2B3C5DfUrKsqDeS55UfLP8LykiYoz%2F5x07TJQ3GUBt6DH0abtoQgZGBScSs1Ns05%2Bquq49gpSO22%2FhjVweCdWE1DDYshaGkl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904ecacdfc0756be-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16958&min_rtt=535&rtt_var=26158&sent=4762&recv=233&lost=144&retrans=145&sent_bytes=5436251&recv_bytes=32239&delivery_rate=11298509&cwnd=218553&unsent_bytes=0&cid=5e616046511c513c&ts=3345&x=1", cfExtPri, cfHdrFlush;dur=0
|
|