| GET 1d2200.tjs65.buzz/e/data/tmp/titlepic/867d9ab62d12200cf9abc7af1b1971d2.jpg | 104.21.45.106 | 200 OK | 5.1 kB |
URL GET HTTPS 1d2200.tjs65.buzz/e/data/tmp/titlepic/867d9ab62d12200cf9abc7af1b1971d2.jpg IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 148x148, components 3 First Seen2024-05-30 Last Seen2025-06-13 Times Seen10 Size5.1 kB (5090 bytes) MD53b87e50e1450f3f966b320b781504ad9 SHA1cd2cf8a873d227b1ef968e0fbf5f48a113737d5d SHA2564d19654e2b7766f5fceb3e8b685927d5b439eac4a5cf03f1d758afa65b4fb011 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /e/data/tmp/titlepic/867d9ab62d12200cf9abc7af1b1971d2.jpg HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/jpeg
content-length: 5090
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "13e2-60906a6b0f6b8"
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OzFs%2FEVfL7gFqxAhS5UTyw7%2FBdg7aEXe6%2FDTTXqQO4dxOYeVm21%2F%2BAxpwHYCcW%2FLS1cbV9cQw%2FCdoREyCtgpBd2zZugeYmHtbEuEDofZIQ%3D%3D"}]}
cf-ray: 94ee3ecb4da1568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/skin/bld/jquery.min.js | 104.21.45.106 | 200 OK | 83 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/jquery.min.js IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJavaScript source, ASCII text, with very long lines (32110) First Seen2023-03-07 Last Seen2025-08-08 Times Seen1068 Size83 kB (83095 bytes) MD52edc942c0bd2476be8967a9f788d9e26 SHA10be05c714a7e6cf28fe692629ece5b3769901dca SHA256d482871a5e948cb4884fa0972ea98a81abca057b6bd3f8c995a18c12487e761c Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/jquery.min.js HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: application/javascript
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xawFo5ZEJNJTe0w5%2Bfnm9wP0ulW0hAB7HBqq0CfPB4xGH3USBgBF8FnBC4YWU81H%2FUwMZsVpitJEnvFWatGVphLhUvPqeo5n1Hefv8eh0w%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"14497-60906a6b432d8"
content-encoding: br
cf-ray: 94ee3eca6d4e568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET np49.vip/static/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP np49.vip/static/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/favicon.ico HTTP/1.1
Host: np49.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 1d2200.tjs65.buzz/skin/bld/index.css | 104.21.45.106 | 200 OK | 10 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/index.css IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeUnicode text, UTF-8 text, with very long lines (375) First Seen2024-05-30 Last Seen2025-06-13 Times Seen5 Size10 kB (10075 bytes) MD5851032c6d1f4e6e9c4b66c76248b819b SHA18845cdeb06cc61017674a354f761e430d75b66f7 SHA25679f082e666d45bafaf8b6ee60da7a741f40cae9a7fa703751a2eed773305db3e Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/index.css HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=nGqhDPM7aAPii8cdovxqqvJzsY0FyBHrw7URVQZlgrnOetvbp6u5rtCVmp9utaCIffpq7bxLtA1jtEDOCdV96z%2BAphJMdPlmeO%2B23jrAGg%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"275b-60906a6b42b08"
content-encoding: br
cf-ray: 94ee3eca4d45568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET stringgame2.gozfpup.buzz/d/file/mz/2023-01-29/8299edb25e008a2cf2cf542449ad3c49.ico | 103.224.182.208 | 403 Forbidden | 0 B |
URL GET HTTPS stringgame2.gozfpup.buzz/d/file/mz/2023-01-29/8299edb25e008a2cf2cf542449ad3c49.ico IP / ASN  103.224.182.208 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectd8881.us FingerprintA0:95:DD:0D:8D:D7:33:98:45:A4:34:79:23:3B:37:0D:C6:CA:54:25 ValidityWed, 11 Jun 2025 14:19:53 GMT - Tue, 09 Sep 2025 14:19:52 GMT GET /d/file/mz/2023-01-29/8299edb25e008a2cf2cf542449ad3c49.ico HTTP/1.1
Host: stringgame2.gozfpup.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET np49.vip/static/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP np49.vip/static/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/favicon.ico HTTP/1.1
Host: np49.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 19e360.zfp86.buzz/d/file/fl/2024-09-06/c8b90b293737c4c9c4ae0c44bfea6030.gif | 188.114.96.1 | 200 OK | 916 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/fl/2024-09-06/c8b90b293737c4c9c4ae0c44bfea6030.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 950 x 120 First Seen2024-09-22 Last Seen2025-06-13 Times Seen9 Size916 kB (915513 bytes) MD5843547cc5c76b40e3192d59c812b14db SHA1e828a29e3c92718b512033163340ad261c584a75 SHA256adb007f5e191cb60edc010f6281e9dffd660be3b361f4da22a27bf36a9b268d7 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/fl/2024-09-06/c8b90b293737c4c9c4ae0c44bfea6030.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 915513
server: cloudflare
last-modified: Fri, 06 Sep 2024 08:21:54 GMT
etag: "df839-6216f198f746c"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h4OrlkVjCUwUGvF9iOi0WXkkidqV64naJh4l1kmdd%2FE64hwr1i4vB05ZPOxw%2FZhhz0r2pTVHvpxyieoyuopeIIeFbFs3ETMB7FWF2GwJEg%3D%3D"}]}
cf-ray: 94ee3ed14b5156b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2025-03-01/d3c4fb81b77c778d9c940c0ddd7105a4.gif | 188.114.96.1 | 200 OK | 28 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2025-03-01/d3c4fb81b77c778d9c940c0ddd7105a4.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 300 x 300 First Seen2025-03-15 Last Seen2025-08-01 Times Seen19 Size28 kB (27818 bytes) MD5e00ef4da9dab8d3dd635294c8e9d7ee2 SHA1d1795f5829f0f1d59e3fcde6aac73dcad400a4b0 SHA25666741c8a7a3271505c64b09c2cb50fddc44d8aad8ec84e78404ee617d4ca9b82 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2025-03-01/d3c4fb81b77c778d9c940c0ddd7105a4.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 27818
server: cloudflare
last-modified: Sat, 01 Mar 2025 06:28:39 GMT
etag: "6caa-62f4208a55b74"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oiPut7YKJWwIAxVxyr4GYrnU%2F3V%2Fxj%2F7Bh3FqiPsxhvIjB1shG20nRPD6Fr6ght2kdSKE4rLkCoOBvgLdxC3sfCK9ddKQ7DoSb0iwMZJdg%3D%3D"}]}
cf-ray: 94ee3ed12b3d56b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.supxxx.me/favicon.ico | 103.224.182.215 | 403 Forbidden | 0 B |
URL GET HTTPS www.supxxx.me/favicon.ico IP / ASN  103.224.182.215 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectoralitystrategies.org Fingerprint20:06:95:EF:C1:38:CB:45:4C:90:28:C3:57:D1:7F:1B:53:62:55:40 ValidityTue, 22 Apr 2025 19:55:21 GMT - Mon, 21 Jul 2025 19:55:20 GMT GET /favicon.ico HTTP/1.1
Host: www.supxxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET btrxq10.xyz/static/images/favicon.png | 0.0.0.0 | | 0 B |
URL GET HTTP btrxq10.xyz/static/images/favicon.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/favicon.png HTTP/1.1
Host: btrxq10.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET aitrader.wiki/logo/logo-site.png | 104.21.16.1 | 200 OK | 292 kB |
URL GET HTTPS aitrader.wiki/logo/logo-site.png IP / ASN  104.21.16.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x1280, components 3 First Seen2025-06-01 Last Seen2025-06-13 Times Seen3 Size292 kB (292362 bytes) MD5f1060e111b682e98b7d856b576707eb9 SHA1573e360850543653aebb3b53abb9c5798de36699 SHA25622d24d66278d74f6e7a16d73037e2e387ecdfa8070868da854a1ff16e99db33e Certificate Info IssuerGoogle Trust Services Subjectaitrader.wiki Fingerprint73:DC:46:2A:01:AA:37:C5:04:FD:7E:33:8D:38:6D:3E:13:F7:E2:63 ValidityFri, 30 May 2025 17:42:43 GMT - Thu, 28 Aug 2025 18:41:24 GMT GET /logo/logo-site.png HTTP/1.1
Host: aitrader.wiki
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/png
content-length: 292362
cf-ray: 94ee3ed088c3569b-OSL
set-cookie: x-domain=aitrader.wiki; Path=/
x-default-title=AI%E9%A3%8E%E6%9C%88; Path=/
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Thu, 05 Jun 2025 13:41:49 GMT
etag: W/"4760a-19740539548"
vary: accept-encoding, authorization
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=njcHVqKVsEMQe0Fi4Vk8Z9G2CM9Qms0FSl%2Bsb9cZaihP88kTJTorzs447nYchBdf1%2Bic9OOH8uwAcgfwaXz1h5pkBlH%2Bj7SWPU6My57yYx3PP5jS2Kgd01Xncdz%2FmcvY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=631&min_rtt=396&rtt_var=467&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3204&recv_bytes=1088&delivery_rate=7841155&cwnd=254&unsent_bytes=0&cid=23545c10c565b656&ts=235&x=0"
X-Firefox-Spdy: h2
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2024-07-11/0528827e984eec388e4f57ce13c5556c.gif | 188.114.96.1 | 200 OK | 214 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2024-07-11/0528827e984eec388e4f57ce13c5556c.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 200 x 200 First Seen2024-07-21 Last Seen2025-06-13 Times Seen14 Size214 kB (213615 bytes) MD5a3b96cd48cdce25b4ec4e630d2eb43e4 SHA122f77b86deb58ee46eec9530321d96c09108938d SHA256ba04bb8a4d606769d1edbfbe70fa8b2dac4e995e77fffb26c5587c0bb0ab6ba6 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2024-07-11/0528827e984eec388e4f57ce13c5556c.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 213615
server: cloudflare
last-modified: Thu, 11 Jul 2024 09:48:54 GMT
etag: "3426f-61cf5abc40ce5"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VUM0kaBVnuqU958paRNZJavAZdnC5H%2BsZfTlLGDEm1Xozt7mpf4ZmMri5b1%2FiIgagE5pmswJKPVlXu62kLlW2%2BHsMYymMct2UJp8X4ymRw%3D%3D"}]}
cf-ray: 94ee3ed13b4456b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET p20.336t.com/f/5/skin/ecms082/images/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP p20.336t.com/f/5/skin/ecms082/images/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /f/5/skin/ecms082/images/favicon.ico HTTP/1.1
Host: p20.336t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET static.zafbpzafbp.xyz/go/d/file/tjimg/2025-04-01/f441f523160f3aab2053a7d32b97518b.gif | 104.21.34.175 | 301 Moved Permanently | 22 kB |
URL GET HTTPS static.zafbpzafbp.xyz/go/d/file/tjimg/2025-04-01/f441f523160f3aab2053a7d32b97518b.gif IP / ASN  104.21.34.175 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size22 kB (21491 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectzafbpzafbp.xyz Fingerprint8B:98:87:E7:5C:CD:5D:61:B8:1F:70:C8:A5:AD:5C:9C:72:62:F5:E0 ValidityMon, 05 May 2025 03:02:57 GMT - Sun, 03 Aug 2025 04:01:05 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /go/d/file/tjimg/2025-04-01/f441f523160f3aab2053a7d32b97518b.gif HTTP/1.1
Host: static.zafbpzafbp.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2025-04-01/f441f523160f3aab2053a7d32b97518b.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hNj9ofsov52LbWYxka10GXU9HgKE8n8N1ZsHlV0fn%2F7iv8ot9KCncx%2B%2BFbwpb18Za705UlTkCWg%2FHgCUk8GRFaqkBVG0eQAg4gWR54FrC0%2BMG3A%3D"}]}
cf-ray: 94ee3ecc0fe756b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/d/file/fl/2022-04-03/87729ac8244316e9a139e58dffd8ff60.ico | 104.21.45.106 | 200 OK | 38 kB |
URL GET HTTPS 1d2200.tjs65.buzz/d/file/fl/2022-04-03/87729ac8244316e9a139e58dffd8ff60.ico IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeMS Windows icon resource - 1 icon, 96x96, 32 bits/pixel First Seen2023-08-17 Last Seen2025-06-13 Times Seen16 Size38 kB (38078 bytes) MD5c2c5e25bd0d3df08ce13e0dfe8983dbc SHA188557b3003833c36523ffdc1046ae08513ca0ad9 SHA256ea48539b57dfc8b90a25baf684071bfb966f4d005e0637dec06772a46ec507b0 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /d/file/fl/2022-04-03/87729ac8244316e9a139e58dffd8ff60.ico HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/vnd.microsoft.icon
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Nw5kYOFbcg0W9IchkPQTBdwkcYuz523XX2Fj%2FlyJ3LD9AvHL3WNaV8HtKxp0lKnDefgr4pHPJpRloGvkOXCH%2F7sOnbYPA1B5gDiVBH0VqQ%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"94be-60906a6b5cd00"
content-encoding: br
cf-ray: 94ee3ecb3d98568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET dbdh1.xyz/favicon.ico | 103.224.212.213 | 403 Forbidden | 0 B |
URL GET HTTPS dbdh1.xyz/favicon.ico IP / ASN  103.224.212.213 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectflwildlifeandfish.com FingerprintAB:A7:22:E4:F9:B8:14:0F:04:94:99:D5:4D:B5:FA:52:65:1C:7D:A6 ValidityWed, 16 Apr 2025 22:36:06 GMT - Tue, 15 Jul 2025 22:36:05 GMT GET /favicon.ico HTTP/1.1
Host: dbdh1.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2024-07-27/b9602b3c5483a88bbfb5c318add99b35.gif | 188.114.96.1 | 200 OK | 7.4 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2024-07-27/b9602b3c5483a88bbfb5c318add99b35.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 500 x 500 First Seen2023-06-20 Last Seen2025-08-01 Times Seen48 Size7.4 kB (7421 bytes) MD50e9b9de0d9d5189929324ebd902c7fa5 SHA11139bacb30016acc306dfd9132a698d0c8571600 SHA2563516f0bdb8abcbf0890c75d2dea38db662cde4b3b5725e03a456c6f7f87a82bf Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2024-07-27/b9602b3c5483a88bbfb5c318add99b35.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 7421
server: cloudflare
last-modified: Sat, 27 Jul 2024 03:21:22 GMT
etag: "1cfd-61e321f510f0f"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yYK0%2BVNX6EG6iyZflsroTxDa0yYlVmaB8Km5KZ7Mt2in2jbHzstJWJo3ZwVUcEhJR80EbalQLpAnYQ3nqcJwhW9nnwqAtSyQ3iG%2FLJd4oQ%3D%3D"}]}
cf-ray: 94ee3ed12b3e56b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/skin/bld/theme/default/layer.css?v=3.1.1 | 104.21.45.106 | 404 Not Found | 349 B |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/theme/default/layer.css?v=3.1.1 IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeHTML document, ASCII text First Seen2024-05-30 Last Seen2025-06-13 Times Seen4 Size349 B (349 bytes) MD5bc4f2c5c10c1559f1715cb3c4e6b8ff3 SHA125327d484f9e4ac677cdf07134fbc09e37bd88de SHA25619bb325f699ed4a7e062748f6388d1ed9f3f36c4441683d8a7366e4353752530 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/theme/default/layer.css?v=3.1.1 HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: text/html; charset=iso-8859-1
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UBIknvP8zAskb34W4euVZUhG5a8cJ9WFPJoH%2B6Ib12ePa3rT9A4uRqmXD3GDzQ8Nx2W8xVFr0IHCogLUIJZfL7NC4Wz8TgFS2KePJDplMFwbxfNIZwdDFQTeAfY39YIsx0Qt%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 94ee3ed10c65b4f1-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8558&min_rtt=643&rtt_var=6503&sent=197&recv=223&lost=0&retrans=0&sent_bytes=13811&recv_bytes=12965&delivery_rate=269596&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=041a5821cc5643ad&ts=1699&inflight_dur=84&x=80"
|
|
| GET static.zafbpzafbp.xyz/go/d/file/fl/2024-09-06/c8b90b293737c4c9c4ae0c44bfea6030.gif | 104.21.34.175 | 301 Moved Permanently | 916 kB |
URL GET HTTPS static.zafbpzafbp.xyz/go/d/file/fl/2024-09-06/c8b90b293737c4c9c4ae0c44bfea6030.gif IP / ASN  104.21.34.175 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size916 kB (915513 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectzafbpzafbp.xyz Fingerprint8B:98:87:E7:5C:CD:5D:61:B8:1F:70:C8:A5:AD:5C:9C:72:62:F5:E0 ValidityMon, 05 May 2025 03:02:57 GMT - Sun, 03 Aug 2025 04:01:05 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /go/d/file/fl/2024-09-06/c8b90b293737c4c9c4ae0c44bfea6030.gif HTTP/1.1
Host: static.zafbpzafbp.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/fl/2024-09-06/c8b90b293737c4c9c4ae0c44bfea6030.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=G8z995AIaKHz1RfTnjj8kmwjbfZRSSQUqHDX%2F2ssbIks45pzdyJI1mUQUg%2BDSkNiUcFJtx4KuKbTXoW5Uj1bFGePcctBszrBO%2FkV%2Bm%2FrGN06KPA%3D"}]}
cf-ray: 94ee3ecb9fc256b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET anada8.xyz/go/d/file/tjimg/2024-05-25/58fb51e0ae7a8ab27cdc4fcd77cb023a.jpg | 172.67.217.229 | 301 Moved Permanently | 38 kB |
URL GET HTTPS anada8.xyz/go/d/file/tjimg/2024-05-25/58fb51e0ae7a8ab27cdc4fcd77cb023a.jpg IP / ASN  172.67.217.229 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size38 kB (37741 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectanada8.xyz FingerprintE0:F9:0C:5C:36:FA:2A:EB:2C:74:3A:72:3D:3C:04:E1:69:47:4A:7C ValidityWed, 07 May 2025 20:20:16 GMT - Tue, 05 Aug 2025 21:18:50 GMT GET /go/d/file/tjimg/2024-05-25/58fb51e0ae7a8ab27cdc4fcd77cb023a.jpg HTTP/1.1
Host: anada8.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2024-05-25/58fb51e0ae7a8ab27cdc4fcd77cb023a.jpg
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: EXPIRED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CQFtmf9byjS1U1MDaVQOgsDl3s8A2SeO1W4k4p9mEkBqlQj%2BuF2t569n32tMPmlaRoR37RhW1m484Q3hRtyzNxINe7tPN2we"}]}
cf-ray: 94ee3ecc4aeeb4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET smdh13.xyz/template/smdh/img/logo2.png | 0.0.0.0 | | 0 B |
URL GET HTTP smdh13.xyz/template/smdh/img/logo2.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/smdh/img/logo2.png HTTP/1.1
Host: smdh13.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 5g0kp.flyd28.buzz/%E5%A4%A7%E5%90%89%E5%A4%A7%E5%88%A9/data/85-85.ico | 0.0.0.0 | | 0 B |
URL GET HTTPS 5g0kp.flyd28.buzz/%E5%A4%A7%E5%90%89%E5%A4%A7%E5%88%A9/data/85-85.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subject5g0kp.flyd28.buzz Fingerprint82:05:17:AC:5F:DF:F6:BA:93:9B:51:C8:1C:6F:73:15:E9:12:D9:A4 ValidityWed, 11 Jun 2025 04:22:54 GMT - Tue, 09 Sep 2025 04:22:53 GMT GET /%E5%A4%A7%E5%90%89%E5%A4%A7%E5%88%A9/data/85-85.ico HTTP/1.1
Host: 5g0kp.flyd28.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET xn--yds422hm4f.nupuu-up.sbs/template/mb4/favicon.ico | 103.224.182.208 | 403 Forbidden | 0 B |
URL GET HTTPS xn--yds422hm4f.nupuu-up.sbs/template/mb4/favicon.ico IP / ASN  103.224.182.208 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subject3573.online FingerprintD0:2F:8E:9E:25:5E:93:66:A7:86:1A:96:FB:EF:8D:AA:D4:70:CD:66 ValidityWed, 16 Apr 2025 18:12:37 GMT - Tue, 15 Jul 2025 18:12:36 GMT GET /template/mb4/favicon.ico HTTP/1.1
Host: xn--yds422hm4f.nupuu-up.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET yuenuge178.xyz/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP yuenuge178.xyz/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: yuenuge178.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 1d2200.tjs65.buzz/skin/bld/layer.css | 104.21.45.106 | 200 OK | 14 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/layer.css IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeASCII text, with very long lines (14367), with no line terminators First Seen2023-04-05 Last Seen2025-08-09 Times Seen2390 Size14 kB (14367 bytes) MD53d2e0d91c5c0b96abb8dbdc2234aba77 SHA19d55e153b30fd7414fada5718e20918e9c7f65e7 SHA256e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/layer.css HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ssSNvIvY0Lci6SsbVg%2F46QHuAVLQ%2Fic2VlvA%2F%2Fwo%2FjIB0XutaT5qF%2FUoSRiE3mHt%2BcDDG2CZSHJPavIc1Li4TsUcqtqAF9ZZlFk9H5EnaQ%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"381f-60906a6b44e30"
content-encoding: br
cf-ray: 94ee3eca7d53568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET p20.336t.com/f/5/skin/ecms082/images/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP p20.336t.com/f/5/skin/ecms082/images/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /f/5/skin/ecms082/images/favicon.ico HTTP/1.1
Host: p20.336t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2025-03-31/f451740afda971589efeb328ff8dcd8a.jpg | 188.114.96.1 | 200 OK | 42 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2025-03-31/f451740afda971589efeb328ff8dcd8a.jpg IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 512x512, components 3 First Seen2025-06-06 Last Seen2025-06-13 Times Seen2 Size42 kB (41676 bytes) MD5c3edaa0778b225a95cf4075e1a47b7d0 SHA18d73965723c8b856604cbd3eafef73c6db933ac2 SHA256abaa43ae62dbf70a7e6a4fe9a4d5ce74fe4298d9b13fffe77567997bcb8b4c2e Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2025-03-31/f451740afda971589efeb328ff8dcd8a.jpg HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/jpeg
content-length: 41676
server: cloudflare
last-modified: Mon, 31 Mar 2025 12:36:07 GMT
etag: "a2cc-631a2aa05eb16"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=b2cXBjOEsD7WgOcgnb3akgkhDm%2FKj7VuiSN8D4Sk2c8kloLmcuMrEZk7qdCtmBF1jUlTcEUYy%2B%2Flng7o5tvXmmLLS6ruhApsFbC%2BJIHemw%3D%3D"}]}
cf-ray: 94ee3ed13b4556b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.shenyebjs.cc/template/video/favicon1.ico | 0.0.0.0 | | 0 B |
URL GET HTTP www.shenyebjs.cc/template/video/favicon1.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/video/favicon1.ico HTTP/1.1
Host: www.shenyebjs.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.1111mod.net/template/1111mod/html/favicon.ico | 185.107.56.55 | 404 Not Found | 0 B |
URL GET HTTPS www.1111mod.net/template/1111mod/html/favicon.ico IP / ASN  185.107.56.55 #43350 NForce Entertainment B.V. Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subject1111mod.net FingerprintF9:37:BC:C3:25:AD:8B:95:7B:8E:39:C9:AD:58:56:32:AA:C8:BE:B2 ValidityWed, 30 Apr 2025 19:11:12 GMT - Tue, 29 Jul 2025 19:11:11 GMT GET /template/1111mod/html/favicon.ico HTTP/1.1
Host: www.1111mod.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: max-age=0, private, must-revalidate
content-length: 9
date: Fri, 13 Jun 2025 02:44:18 GMT
server: Cowboy
set-cookie: sid=4d8f506f-4800-11f0-a60f-b5ec44fbb067; path=/; domain=.1111mod.net; expires=Wed, 01 Jul 2093 05:58:25 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2024-06-09/63e4da58ba98cf497367417165ea21c6.gif | 188.114.96.1 | 200 OK | 141 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2024-06-09/63e4da58ba98cf497367417165ea21c6.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 150 x 150 First Seen2023-05-02 Last Seen2025-08-01 Times Seen113 Size141 kB (140695 bytes) MD5fe7300fc3c8f5e961eba92613e70958b SHA152efb7f5b617e22abf6edb905d24c6e42aa52ea7 SHA256ea0e9ab74f69182bb0eb28335c51f787528deae2fcd69e456af359bbec801b33 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2024-06-09/63e4da58ba98cf497367417165ea21c6.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 140695
server: cloudflare
last-modified: Sun, 09 Jun 2024 01:46:57 GMT
etag: "22597-61a6b35460580"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sfsJjGeW9XXMHA7G04Z45WdHy1cNXvEZZJYsEjtFS76i9RLJGk8JXyLjvclARyC%2FAHcfPvLJYmx%2FPf1FBT1rXW1bKlzce6I%2FLFGDcQZKhw%3D%3D"}]}
cf-ray: 94ee3ed12b3c56b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.mmcku.click/template/mmck/favicon.ico | 103.224.182.216 | 403 Forbidden | 0 B |
URL GET HTTPS www.mmcku.click/template/mmck/favicon.ico IP / ASN  103.224.182.216 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectcasinofreespins24.com Fingerprint93:6D:0D:0F:82:06:60:D4:00:AE:DE:BA:58:B3:19:8A:BD:84:6F:E7 ValidityThu, 17 Apr 2025 07:28:55 GMT - Wed, 16 Jul 2025 07:28:54 GMT GET /template/mmck/favicon.ico HTTP/1.1
Host: www.mmcku.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET www.posdd.pw/template/hn/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP www.posdd.pw/template/hn/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/hn/favicon.ico HTTP/1.1
Host: www.posdd.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET stringgame2.gozfpup.buzz/d/file/lt/2023-08-22/f7689c8e41bff84a366eee45f03889ac.jpg | 103.224.182.208 | 403 Forbidden | 0 B |
URL GET HTTPS stringgame2.gozfpup.buzz/d/file/lt/2023-08-22/f7689c8e41bff84a366eee45f03889ac.jpg IP / ASN  103.224.182.208 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectd8881.us FingerprintA0:95:DD:0D:8D:D7:33:98:45:A4:34:79:23:3B:37:0D:C6:CA:54:25 ValidityWed, 11 Jun 2025 14:19:53 GMT - Tue, 09 Sep 2025 14:19:52 GMT GET /d/file/lt/2023-08-22/f7689c8e41bff84a366eee45f03889ac.jpg HTTP/1.1
Host: stringgame2.gozfpup.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET 1d2200.tjs65.buzz/favicon.png | 104.21.45.106 | 200 OK | 126 kB |
URL GET HTTPS 1d2200.tjs65.buzz/favicon.png IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typePNG image data, 601 x 618, 8-bit/color RGBA, non-interlaced First Seen2024-05-30 Last Seen2025-06-13 Times Seen10 Size126 kB (125983 bytes) MD554d1c07f20d43a901562f7070af3a350 SHA11fd32126726a07a813de76b54db6dc2fd7993f8a SHA25687cbac5856482654d7f721f3b29f17391e0816742ec08fe794f38cf34e2129e7 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /favicon.png HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Cookie: _ga_CT5BTP05M6=GS2.1.s1749782659$o1$g0$t1749782659$j60$l0$h0; _ga=GA1.1.238519718.1749782659
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:44:21 GMT
content-type: image/png
content-length: 125983
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16SgxOdwtZeF8%2BULpLEhmat4N7c9Ati9UKekVKfxp37PK8hq9MQeUu06pPihLLqS4hI7y517or6fwivWXfiqee%2Febda%2BinaFEXRVsmi%2FaL3xQYrjThKD8RNvdLwYDUUk%2B3QPvA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 31 Oct 2023 17:40:32 GMT
etag: "1ec1f-60906a6bbe398"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 94ee3edf8c71b4f1-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=698&min_rtt=623&rtt_var=71&sent=933&recv=432&lost=0&retrans=0&sent_bytes=746485&recv_bytes=23182&delivery_rate=9952797&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=041a5821cc5643ad&ts=4014&inflight_dur=397&x=80"
|
|
| GET dd.lltt107.top/template/conch/asset/img/favicon.png | 0.0.0.0 | | 0 B |
URL GET HTTP dd.lltt107.top/template/conch/asset/img/favicon.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /template/conch/asset/img/favicon.png HTTP/1.1
Host: dd.lltt107.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.avjzy30.xyz/favicon.ico | 103.224.212.216 | 403 Forbidden | 0 B |
URL GET HTTPS www.avjzy30.xyz/favicon.ico IP / ASN  103.224.212.216 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectparos.pro FingerprintDC:3C:72:E5:C7:ED:CB:1A:18:64:89:CD:7A:46:7D:3D:D0:CC:27:76 ValidityTue, 22 Apr 2025 19:53:09 GMT - Mon, 21 Jul 2025 19:53:08 GMT GET /favicon.ico HTTP/1.1
Host: www.avjzy30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET vd008-universe-portal-wap.chuanyuwenhua.com/favicon.ico?v=3 | 0.0.0.0 | | 0 B |
URL GET HTTP vd008-universe-portal-wap.chuanyuwenhua.com/favicon.ico?v=3 IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /favicon.ico?v=3 HTTP/1.1
Host: vd008-universe-portal-wap.chuanyuwenhua.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 1d2200.tjs65.buzz/e/data/tmp/titlepic/7f5a024ef19e26c38dba43940272ef3f.png | 104.21.45.106 | 200 OK | 419 B |
URL GET HTTPS 1d2200.tjs65.buzz/e/data/tmp/titlepic/7f5a024ef19e26c38dba43940272ef3f.png IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typePNG image data, 30 x 30, 8-bit colormap, non-interlaced First Seen2024-05-30 Last Seen2025-06-13 Times Seen10 Size419 B (419 bytes) MD5590112d27ea804bba0e712b6f2d6a6f2 SHA12a76fdb33682067124d7f3a691951d60621b39b8 SHA2563524e10ef18333cbf7e745db156860cb24c89031d1b4b42292788802b1a31850 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /e/data/tmp/titlepic/7f5a024ef19e26c38dba43940272ef3f.png HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/png
content-length: 419
server: cloudflare
last-modified: Thu, 12 Jun 2025 16:16:32 GMT
etag: "1a3-6376240b6501e"
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=u5V7SyJS5NjVxK4DYDowpsBhBo88QdGlKcB0x3qXBNypL9CCHC8ZIb5fdcePpaOI2zPLq0RZrxRdunr1HYRT3tciuIqXe%2B3ZrSj%2FLciJ5w%3D%3D"}]}
cf-ray: 94ee3ecb3d99568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET hxzdh13.top/favicon.png | 0.0.0.0 | | 0 B |
URL GET HTTP hxzdh13.top/favicon.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.png HTTP/1.1
Host: hxzdh13.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET hello.38shunv11.buzz/static/template/38shu/ico.png | 104.21.1.237 | 523 No Reason Phrase | 0 B |
URL GET HTTPS hello.38shunv11.buzz/static/template/38shu/ico.png IP / ASN  104.21.1.237 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subject38shunv11.buzz FingerprintDE:5F:40:F5:13:6B:9D:90:9C:7C:8C:A3:4C:D1:8E:BF:18:7A:45:67 ValidityMon, 26 May 2025 16:20:35 GMT - Sun, 24 Aug 2025 17:18:56 GMT GET /static/template/38shu/ico.png HTTP/1.1
Host: hello.38shunv11.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 523 No Reason Phrase
date: Fri, 13 Jun 2025 02:44:18 GMT
content-length: 0
server: cloudflare
cache-control: private, max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=i5AtbgW9ZkEnJ%2By3gxTRiDPJIJcGhBrIkp7lOxK1rYcqIjw%2FEyI2ORs9dl6Xm0geEl98HK0un5IWGVrY4sXUsRsoolK0XtA2NsDnGkJ7bfV4dg%3D%3D"}]}
cf-ray: 94ee3ece5fb6569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET stringgame2.gozfpup.buzz/skin/1jia0/more/images/favicon.ico | 103.224.182.208 | 403 Forbidden | 0 B |
URL GET HTTPS stringgame2.gozfpup.buzz/skin/1jia0/more/images/favicon.ico IP / ASN  103.224.182.208 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectd8881.us FingerprintA0:95:DD:0D:8D:D7:33:98:45:A4:34:79:23:3B:37:0D:C6:CA:54:25 ValidityWed, 11 Jun 2025 14:19:53 GMT - Tue, 09 Sep 2025 14:19:52 GMT GET /skin/1jia0/more/images/favicon.ico HTTP/1.1
Host: stringgame2.gozfpup.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET anada8.xyz/go/d/file/tjimg/2024-07-27/b9602b3c5483a88bbfb5c318add99b35.gif | 172.67.217.229 | 301 Moved Permanently | 7.4 kB |
URL GET HTTPS anada8.xyz/go/d/file/tjimg/2024-07-27/b9602b3c5483a88bbfb5c318add99b35.gif IP / ASN  172.67.217.229 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size7.4 kB (7421 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectanada8.xyz FingerprintE0:F9:0C:5C:36:FA:2A:EB:2C:74:3A:72:3D:3C:04:E1:69:47:4A:7C ValidityWed, 07 May 2025 20:20:16 GMT - Tue, 05 Aug 2025 21:18:50 GMT GET /go/d/file/tjimg/2024-07-27/b9602b3c5483a88bbfb5c318add99b35.gif HTTP/1.1
Host: anada8.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2024-07-27/b9602b3c5483a88bbfb5c318add99b35.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: EXPIRED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ssk9Nsk4xAaGxKwp8r3cXTl3C07sIMNq3qNECDBSY0%2BCev7n%2BBkZYRlbayorWpGE5RK9FJKvpzPgiBW2VzRCBx%2FNTWgfBuNI"}]}
cf-ray: 94ee3ecc6af6b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/e/data/tmp/titlepic/3e8354363713a1df49da6628c79c4c24.png | 104.21.45.106 | 200 OK | 31 kB |
URL GET HTTPS 1d2200.tjs65.buzz/e/data/tmp/titlepic/3e8354363713a1df49da6628c79c4c24.png IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typePNG image data, 192 x 187, 8-bit/color RGB, non-interlaced First Seen2023-05-21 Last Seen2025-06-13 Times Seen15 Size31 kB (30732 bytes) MD59d15adabef0732434f3f352bbeed8e69 SHA113f75518ffb055a6fcd0988ad7b8b277da8b2218 SHA2562930d3312d77153943b6dc5a12074738999a1adeb695f5852ab0504f95ad093c Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /e/data/tmp/titlepic/3e8354363713a1df49da6628c79c4c24.png HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/png
content-length: 30732
server: cloudflare
last-modified: Thu, 12 Jun 2025 16:16:32 GMT
etag: "780c-6376240b6407e"
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=aR%2BIt6uqIBQ8GauCqgLJuz%2BLnJM8l9eP0Qd3KYuKGHn9jfIrc1gODJiCX0ciV2qrPc3WlQiFmt73vCS2X5URrCvKmqZO5nb9DpQHV5Pnlg%3D%3D"}]}
cf-ray: 94ee3ecafd7c568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2025-04-19/b04ca6ffe221998bbda25b3c9f676746.gif | 188.114.96.1 | 200 OK | 801 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2025-04-19/b04ca6ffe221998bbda25b3c9f676746.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 200 x 200 First Seen2023-05-03 Last Seen2025-07-28 Times Seen152 Size801 kB (800906 bytes) MD5b67d8e3b2e6a17ef65cca5924479bcaf SHA1170f0e54f86d9fe303bca99f7524cee878289a3f SHA2562b6a9b53114e36c800d36b460001279b5b27d86ad0b0f79d71bd5157d7d2ba8c Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2025-04-19/b04ca6ffe221998bbda25b3c9f676746.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 800906
server: cloudflare
last-modified: Sat, 19 Apr 2025 11:41:57 GMT
etag: "c388a-633201f52f9b0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=EyQk%2FWr1uqwj15UF%2FLSMqMzharPPufA%2Bgpb8nLGINHzVdbsbTUDVP%2BS0365g0juNKT5G%2Bm5D4q09DVFJ7wPIU5rAowBViIlEXmgbwZq0cw%3D%3D"}]}
cf-ray: 94ee3ed17b5f56b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 9cha22.cc/MDassets/images/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP 9cha22.cc/MDassets/images/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /MDassets/images/favicon.ico HTTP/1.1
Host: 9cha22.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET static.zafbpzafbp.xyz/go/d/file/tjimg/2025-04-05/213bd966a086c53a85fb4fe2840798eb.png | 104.21.34.175 | 301 Moved Permanently | 21 kB |
URL GET HTTPS static.zafbpzafbp.xyz/go/d/file/tjimg/2025-04-05/213bd966a086c53a85fb4fe2840798eb.png IP / ASN  104.21.34.175 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size21 kB (21170 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectzafbpzafbp.xyz Fingerprint8B:98:87:E7:5C:CD:5D:61:B8:1F:70:C8:A5:AD:5C:9C:72:62:F5:E0 ValidityMon, 05 May 2025 03:02:57 GMT - Sun, 03 Aug 2025 04:01:05 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /go/d/file/tjimg/2025-04-05/213bd966a086c53a85fb4fe2840798eb.png HTTP/1.1
Host: static.zafbpzafbp.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2025-04-05/213bd966a086c53a85fb4fe2840798eb.png
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9GUrxYKPF%2FDysOLVucczfY%2FRiZ2cJJSNz0KKkFCP%2BkA3apxoyonMBYcYKhuHvVUYe%2BbT5AjWH6pOuKJX9srXEfOcrXwIzf24WSb8RZzW2rMj%2BwY%3D"}]}
cf-ray: 94ee3ecb7fbd56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET xn--zlz31p.jokerlu.today/favicon.ico | 103.224.182.208 | 403 Forbidden | 0 B |
URL GET HTTPS xn--zlz31p.jokerlu.today/favicon.ico IP / ASN  103.224.182.208 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectwindrawwin.bet Fingerprint6C:97:F9:FF:93:FD:B4:EE:73:B0:95:FE:F0:62:DD:16:E5:02:F4:35 ValidityThu, 01 May 2025 09:19:28 GMT - Wed, 30 Jul 2025 09:19:27 GMT GET /favicon.ico HTTP/1.1
Host: xn--zlz31p.jokerlu.today
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET yn18j100.buzz/static/template/yn18j/img/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP yn18j100.buzz/static/template/yn18j/img/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/template/yn18j/img/favicon.ico HTTP/1.1
Host: yn18j100.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.jp9.xyz/favicon.ico | 103.224.212.210 | 403 Forbidden | 0 B |
URL GET HTTPS www.jp9.xyz/favicon.ico IP / ASN  103.224.212.210 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectflwildlifeandfish.com FingerprintAB:A7:22:E4:F9:B8:14:0F:04:94:99:D5:4D:B5:FA:52:65:1C:7D:A6 ValidityWed, 16 Apr 2025 22:36:06 GMT - Tue, 15 Jul 2025 22:36:05 GMT GET /favicon.ico HTTP/1.1
Host: www.jp9.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET 1d2200.tjs65.buzz/skin/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.21.45.106 | 200 OK | 77 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/fonts/fontawesome-webfont.woff2?v=4.7.0 IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 First Seen2023-04-05 Last Seen2025-08-09 Times Seen173607 Size77 kB (77160 bytes) MD5af7ae505a9eed503f8b8e6982036873e SHA1d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c SHA2562adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/skin/bld/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-length: 77160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oAg4CN9CpJpoMy6k6Lw9vFr3Ol98XLuv5GsbDxe0l2x0JF%2BWmyaG%2FwhtPnzBpfQ%2FR5T%2BVzEToo0QN3%2BppWsr%2BETAcnKddFDHUjaTbqhqDb5jXusqAvFPm1QHiSwpCmNSJKP51g%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "12d68-60906a6b49098"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 94ee3ed2fc69b4f1-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7699&min_rtt=643&rtt_var=6597&sent=198&recv=224&lost=0&retrans=0&sent_bytes=14755&recv_bytes=13010&delivery_rate=269596&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=041a5821cc5643ad&ts=1979&inflight_dur=105&x=80"
|
|
| GET static.zafbpzafbp.xyz/go/d/file/tjimg/2025-03-31/f451740afda971589efeb328ff8dcd8a.jpg | 104.21.34.175 | 301 Moved Permanently | 42 kB |
URL GET HTTPS static.zafbpzafbp.xyz/go/d/file/tjimg/2025-03-31/f451740afda971589efeb328ff8dcd8a.jpg IP / ASN  104.21.34.175 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size42 kB (41676 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectzafbpzafbp.xyz Fingerprint8B:98:87:E7:5C:CD:5D:61:B8:1F:70:C8:A5:AD:5C:9C:72:62:F5:E0 ValidityMon, 05 May 2025 03:02:57 GMT - Sun, 03 Aug 2025 04:01:05 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /go/d/file/tjimg/2025-03-31/f451740afda971589efeb328ff8dcd8a.jpg HTTP/1.1
Host: static.zafbpzafbp.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2025-03-31/f451740afda971589efeb328ff8dcd8a.jpg
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=s2UZTxVSecJWSkpNVUTtNJzGd1wMgIslKXd%2FAyfG%2BBAorPvJINMkjT6y2O4xDZ26xuwFK6uK6EdyZQUCqpYp5FRKIFJFSVL%2BKDlc9gUs3y9E6Qc%3D"}]}
cf-ray: 94ee3ecbbfce56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/d/file/tjimg/2022-12-05/8cdf50d73b7e63e86a5958b12817cf88.png | 104.21.45.106 | 200 OK | 47 kB |
URL GET HTTPS 1d2200.tjs65.buzz/d/file/tjimg/2022-12-05/8cdf50d73b7e63e86a5958b12817cf88.png IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced First Seen2023-05-14 Last Seen2025-06-13 Times Seen20 Size47 kB (47257 bytes) MD5ed8b78a84dd4881bd0ded5bb68adb5f2 SHA1ae7701799d1358c995eaa47b77635787afd1b939 SHA25618c611616fc95a7c9db154bd36f01b7c98f867611c58884b52327842354726c1 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /d/file/tjimg/2022-12-05/8cdf50d73b7e63e86a5958b12817cf88.png HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/png
content-length: 47257
cf-ray: 94ee3ecafd78568f-OSL
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "b899-60906a6b9a948"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8bnbTDXI7HSetXnezapIhBtXOxcfKd6Ar7HQE%2FSPpfw2dDKJBolZ60doYu1ujxW80yE2mKvnUyZmq8pZg9IIDO0II4vAMKiEOP41g20AEVlkZVySBpKU64QiZosQCoeRrxZ0LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1342&min_rtt=383&rtt_var=1281&sent=48&recv=54&lost=0&retrans=0&sent_bytes=32385&recv_bytes=2659&delivery_rate=15912087&cwnd=257&unsent_bytes=0&cid=9e81d2960e8bbdd0&ts=1303&x=0"
X-Firefox-Spdy: h2
|
|
| GET www.googletagmanager.com/gtag/js?id=G-CT5BTP05M6 | 142.250.74.168 | 200 OK | 382 kB |
URL GET HTTPS www.googletagmanager.com/gtag/js?id=G-CT5BTP05M6 IP / ASN  142.250.74.168 #15169 GOOGLE Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJavaScript source, ASCII text, with very long lines (6004) First Seen2025-06-13 Last Seen2025-06-13 Times Seen1 Size382 kB (382116 bytes) MD519a8d29b229dcadc5644d67c2bea5114 SHA180644f809c88a7dc6049caed17fafca1162c72c8 SHA25698737bd6f6942048ed6bf9ae4722d3a177ee724b60a97d5bb9f9409fc169f3af Certificate Info IssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:76:57:2F:C3:21:F2:5F:71:E4:85:A5:DB:F7:65:3F:51:03:55:07 ValidityMon, 12 May 2025 08:42:57 GMT - Mon, 04 Aug 2025 08:42:56 GMT GET /gtag/js?id=G-CT5BTP05M6 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 13 Jun 2025 02:44:18 GMT
expires: Fri, 13 Jun 2025 02:44:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 129083
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2024-06-30/04fdbe995d38cf70647256b4d823e48c.gif | 188.114.96.1 | 200 OK | 54 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2024-06-30/04fdbe995d38cf70647256b4d823e48c.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 150 x 150 First Seen2024-07-21 Last Seen2025-06-13 Times Seen4 Size54 kB (54204 bytes) MD5460ad3fa7857b388b149deb5f93216c4 SHA1bd5d99b5e1288b1acdd4401314322ffdf7a8192c SHA256b6e0f43cba25452e0d5b994926f88668ff989ed3adb0dc2359a0febf7256c179 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2024-06-30/04fdbe995d38cf70647256b4d823e48c.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 54204
server: cloudflare
last-modified: Sun, 30 Jun 2024 00:28:40 GMT
etag: "d3bc-61c108ff263b3"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=v5Pi4lLmnz2B0uL%2F%2BzU1SEzllQHZ61xXddFEF9ZCeoWeynzvikLLBoZUSW1I5bSYzUg1xWKVKerBD0tPGne%2FpNt1SYDS9Y2pPAaa4sapww%3D%3D"}]}
cf-ray: 94ee3ed15b5656b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET yuenuge178.xyz/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP yuenuge178.xyz/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: yuenuge178.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.36huo126che.xyz/template/36huoche/images/logo.png | 104.21.84.77 | 404 Not Found | 0 B |
URL GET HTTPS www.36huo126che.xyz/template/36huoche/images/logo.png IP / ASN  104.21.84.77 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subject36huo126che.xyz Fingerprint3C:D6:A6:05:B4:50:27:5B:8D:AA:0C:9B:36:14:35:D6:BB:42:08:C7 ValidityTue, 10 Jun 2025 11:55:07 GMT - Mon, 08 Sep 2025 12:53:29 GMT GET /template/36huoche/images/logo.png HTTP/1.1
Host: www.36huo126che.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZZxlsv8KKe0YCLWctsNkkhGhslMaGT6Gi2LwYkFNvmHkReqJ6IbsIhwGyfXWjEa8aOE8OD5IkkSq22ldRzIRhyIgisjm7kob%2FZhgCGf6Nm814B2qUFthz2Uz4cNTLAizRZPUsz3"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 94ee3ed1b84e56ca-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8282&min_rtt=5373&rtt_var=7032&sent=36&recv=36&lost=0&retrans=0&sent_bytes=5046&recv_bytes=2660&delivery_rate=520202&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=75146617257f4be5&ts=737&inflight_dur=49&x=80"
|
|
| GET anada8.xyz/go/d/file/tjimg/2024-06-09/63e4da58ba98cf497367417165ea21c6.gif | 172.67.217.229 | 301 Moved Permanently | 141 kB |
URL GET HTTPS anada8.xyz/go/d/file/tjimg/2024-06-09/63e4da58ba98cf497367417165ea21c6.gif IP / ASN  172.67.217.229 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size141 kB (140695 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectanada8.xyz FingerprintE0:F9:0C:5C:36:FA:2A:EB:2C:74:3A:72:3D:3C:04:E1:69:47:4A:7C ValidityWed, 07 May 2025 20:20:16 GMT - Tue, 05 Aug 2025 21:18:50 GMT GET /go/d/file/tjimg/2024-06-09/63e4da58ba98cf497367417165ea21c6.gif HTTP/1.1
Host: anada8.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2024-06-09/63e4da58ba98cf497367417165ea21c6.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UMPbqbhPym2yDutfJmyKouEWkqt2J%2B5q5ChD%2BY3vU16i3IsdnPCutsKwHkKOa8Tdeg597PNEsCVG5bd%2Fd9Yl7U4fb%2FK8k%2FYl"}]}
cf-ray: 94ee3ecc5af2b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/skin/bld/default_icon.jpg | 104.21.45.106 | 200 OK | 34 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/default_icon.jpg IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2022:12:04 23:17:30], baseline, precision 8, 604x421, components 3 First Seen2024-05-30 Last Seen2025-06-13 Times Seen10 Size34 kB (34098 bytes) MD5aa89c7cee5050693bdac59a0f94eabc8 SHA1ed854b4ca3f960e61b7cca1054fbaad43fdfb30c SHA2565dce9d7a8118027dc4fea1cef2701eacbdf956987ec2783b00a2b28a9810f054 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/default_icon.jpg HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/jpeg
content-length: 34098
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "8532-60906a6b43e90"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fq47lPJf2YTYhYDczcngmJYZn8rOKVzFerJZPOxkjbCdDxi%2FxVDEwYrYwisRufflVeYASKC%2BNPgB8V6P8l5TVhL2Q4M45Vcuv3DocX302A%3D%3D"}]}
cf-ray: 94ee3ecafd7e568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/skin/bld/logo.png | 104.21.45.106 | 200 OK | 14 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/logo.png IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typePNG image data, 200 x 64, 8-bit/color RGBA, non-interlaced First Seen2024-05-30 Last Seen2025-06-13 Times Seen10 Size14 kB (13943 bytes) MD57b2e2d16ef2037b813533a140860e89e SHA1fa25fe4926be28954425f666ca76867318e95a8c SHA256aa3611e7a4a0fa121b15f2e65d4f748602bf878438528aa657fe22d74f54a9fa Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/logo.png HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/png
content-length: 13943
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "3677-60906a6b42ef0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2aQ72Of%2BpN5IqokUq8biV4Iyvijw3y4bzKjFaj%2ByC2fJFh%2BHF6sruXsyRaUjcURQ4V%2Bh3x4mEROybrboAWUkge6HN%2F8IdZiMtLB4PAQpog%3D%3D"}]}
cf-ray: 94ee3eca7d54568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.36huo126che.xyz/template/36huoche/images/logo.png | 104.21.84.77 | 404 Not Found | 0 B |
URL GET HTTPS www.36huo126che.xyz/template/36huoche/images/logo.png IP / ASN  104.21.84.77 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subject36huo126che.xyz Fingerprint3C:D6:A6:05:B4:50:27:5B:8D:AA:0C:9B:36:14:35:D6:BB:42:08:C7 ValidityTue, 10 Jun 2025 11:55:07 GMT - Mon, 08 Sep 2025 12:53:29 GMT GET /template/36huoche/images/logo.png HTTP/1.1
Host: www.36huo126che.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=INZmJbfz%2FIc2T1K6ZWhQ8iTh0LoNzHrrNItZ8aE1i06mkIK6lh%2BPL50enwHf9MgHRblEeHn9EPloycUiaEcNmGYS5sbDPH04Cej%2FbCcl1P3W"}]}
cache-control: max-age=14400
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 94ee3ecc8d4e5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.xinaicy.top/template/video/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP www.xinaicy.top/template/video/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/video/favicon.ico HTTP/1.1
Host: www.xinaicy.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| | 104.21.45.106 | 200 OK | 25 kB |
URL User Request GET HTTPS 1d2200.tjs65.buzz/ IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Resource Info File typeHTML document, Unicode text, UTF-8 text, with very long lines (3077), with CRLF line terminators First Seen2025-06-13 Last Seen2025-06-13 Times Seen1 Size25 kB (25059 bytes) MD5605e87bfaa63bbf57d185487850b6ceb SHA1522ff6f73a949c482e0133e3086629d7c6cd83d9 SHA2569acabc2c342cb92c746d166261236f7a765ab096aa59edc84bc75a03cd70233e Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET / HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:17 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
last-modified: Thu, 12 Jun 2025 16:16:32 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=SVHtKNztcua%2F9n9%2BtbCRN83Ee5W8wOfCULHG20s4QFFyUtMjZqQv4XEX%2Bw5sclu%2BDjozvuNBAd5M%2BUfmc9aBKaxL9My1uYkTItunwdyrxw%3D%3D"}]}
vary: accept-encoding
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 94ee3ec55b76568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 9cha22.cc/MDassets/images/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP 9cha22.cc/MDassets/images/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /MDassets/images/favicon.ico HTTP/1.1
Host: 9cha22.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET p20.336t.com/f/4/skin/ecms813/img/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP p20.336t.com/f/4/skin/ecms813/img/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /f/4/skin/ecms813/img/favicon.ico HTTP/1.1
Host: p20.336t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2025-04-05/213bd966a086c53a85fb4fe2840798eb.png | 188.114.96.1 | 200 OK | 21 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2025-04-05/213bd966a086c53a85fb4fe2840798eb.png IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 300x300, components 3 First Seen2025-06-06 Last Seen2025-07-19 Times Seen3 Size21 kB (21170 bytes) MD567dec887274f7c8c57d3e60dead53f0b SHA1dd0b2ed377abce476db5f509ddb78e702908a074 SHA25679a91e0e89ed9d9d364cc0408c3606f43cdac6fc88fe643250670316dd20bd64 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2025-04-05/213bd966a086c53a85fb4fe2840798eb.png HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/png
content-length: 21170
server: cloudflare
last-modified: Sat, 05 Apr 2025 00:16:35 GMT
etag: "52b2-631fcea775e6a"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=B50%2BAGiwOvjKZ4Og48NslRRJT2rzcAcyaktkX1IM8JjR6ZKU92MwQ%2FDrAheSvSzBE67C4L7R5ljohtEoJJeLOwiSMeGxDeY3iMde4dqKWA%3D%3D"}]}
cf-ray: 94ee3ed19b6856b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2024-05-25/58fb51e0ae7a8ab27cdc4fcd77cb023a.jpg | 188.114.96.1 | 200 OK | 38 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2024-05-25/58fb51e0ae7a8ab27cdc4fcd77cb023a.jpg IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 512x512, components 3 First Seen2024-05-26 Last Seen2025-07-26 Times Seen39 Size38 kB (37741 bytes) MD57faf370adeb02c9331800784a4248732 SHA19b827efc0d8fa985a5fc83b17e1e4ce7a82e94e1 SHA256b5151a4974be39fb2981df976c5464b94ea0811c258c5f822ec0cb92537ffe85 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2024-05-25/58fb51e0ae7a8ab27cdc4fcd77cb023a.jpg HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/jpeg
content-length: 37741
server: cloudflare
last-modified: Sat, 25 May 2024 12:15:21 GMT
etag: "936d-619463cf710df"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9%2FnnOwjvktzk8oAao5WXlX4%2BE3Nx%2B8rJI26FjRvktRy60JHAWbr%2FROjAOOo06ijBgCrkgjY%2BaNxT5js9geg%2B3ls6VOI2J8y2%2BAwDiEBGYg%3D%3D"}]}
cf-ray: 94ee3ed13b3f56b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.posdd.pw/template/hn/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP www.posdd.pw/template/hn/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/hn/favicon.ico HTTP/1.1
Host: www.posdd.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 1d2200.tjs65.buzz/e/data/tmp/titlepic/7272cc0eecf515ef83fafd9516d1223f.jpg | 104.21.45.106 | 200 OK | 15 kB |
URL GET HTTPS 1d2200.tjs65.buzz/e/data/tmp/titlepic/7272cc0eecf515ef83fafd9516d1223f.jpg IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 218x291, components 3 First Seen2023-08-17 Last Seen2025-06-13 Times Seen15 Size15 kB (14763 bytes) MD559508b06518c117a7098c6b9366cfe89 SHA12cd7a11d7c9ff79e104f9aa6a90ca5d729361e20 SHA2564644afe4fad6f75c571f1bf36e01491dbd961e5bf9c082184c4497e0211bc020 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /e/data/tmp/titlepic/7272cc0eecf515ef83fafd9516d1223f.jpg HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/jpeg
content-length: 14763
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "39ab-60906a6b0db60"
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jAg%2B8xWe8gZf1syI5WRgJ7iAPIrdDpnYg2oO47CxXLKYtb1yoWED7vgxKkjRrGSWwWaGcC%2FyiNyjNUvsNODJIa8DVEfrY%2F51gm%2F9S%2Fes5g%3D%3D"}]}
cf-ray: 94ee3ecb0d83568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.xinaicy.top/template/video/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP www.xinaicy.top/template/video/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/video/favicon.ico HTTP/1.1
Host: www.xinaicy.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.saonidh.live/template/dxy/saoni.png | 199.59.243.228 | 200 OK | 1.1 kB |
URL GET HTTPS www.saonidh.live/template/dxy/saoni.png IP / ASN  199.59.243.228 #16509 AMAZON-02 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeHTML document, ASCII text, with very long lines (402) First Seen2025-06-13 Last Seen2025-06-13 Times Seen1 Size1.1 kB (1134 bytes) MD5d66f9bc7b974ce54f519702aff1780c2 SHA1aa1f27c7dd04ba9b3a958b24f71d5c8bf15baf0b SHA256a078777f0164370475240c4fee929667aabc0b7a6cb7a5cffb627c880190508e Certificate Info IssuerLet's Encrypt Subjectsaonidh.live Fingerprint06:F4:80:F8:F4:AC:E9:A9:43:A9:BE:3E:D5:C9:2E:EF:D6:6D:A5:26 ValidityWed, 04 Jun 2025 08:50:30 GMT - Tue, 02 Sep 2025 08:50:29 GMT GET /template/dxy/saoni.png HTTP/1.1
Host: www.saonidh.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jun 2025 02:44:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1134
X-Request-Id: 5f1cf63d-db3d-4894-af35-445243bbf872
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Tq0tKVJ1cdr6H6T94RbmvOi87QATrEDBgYp2YZsnqFryHs0U9LA77i/izFaTeOC8Y11+p1KNMjz8VDZIrScLnA==
Set-Cookie: parking_session=5f1cf63d-db3d-4894-af35-445243bbf872; expires=Fri, 13 Jun 2025 02:59:19 GMT; path=/
Connection: close
|
|
| GET 1d2200.tjs65.buzz/favicon.png | 104.21.45.106 | 200 OK | 126 kB |
URL GET HTTPS 1d2200.tjs65.buzz/favicon.png IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typePNG image data, 601 x 618, 8-bit/color RGBA, non-interlaced First Seen2024-05-30 Last Seen2025-06-13 Times Seen10 Size126 kB (125983 bytes) MD554d1c07f20d43a901562f7070af3a350 SHA11fd32126726a07a813de76b54db6dc2fd7993f8a SHA25687cbac5856482654d7f721f3b29f17391e0816742ec08fe794f38cf34e2129e7 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /favicon.png HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Cookie: _ga_CT5BTP05M6=GS2.1.s1749782659$o1$g0$t1749782659$j60$l0$h0; _ga=GA1.1.238519718.1749782659
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:44:21 GMT
content-type: image/png
content-length: 125983
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o8j%2FAzuj6XK3boic15b4IJ7yZGfBGId%2BVw2Y43coKq9couIXmI15NTfKMLYx8OCUzcxyYcjjrGKfsmqsZaH6PuL7UZLWG36QZuf0Y9E%2B%2FsI1W0XvPJLm8HoscjPp34kdk6WTsA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 31 Oct 2023 17:40:32 GMT
etag: "1ec1f-60906a6bbe398"
accept-ranges: bytes
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ee3edf9c72b4f1-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=698&min_rtt=623&rtt_var=71&sent=933&recv=432&lost=0&retrans=0&sent_bytes=746485&recv_bytes=23182&delivery_rate=9952797&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=041a5821cc5643ad&ts=4013&inflight_dur=397&x=80"
|
|
| GET static.zafbpzafbp.xyz/go/d/file/tjimg/2025-04-19/b04ca6ffe221998bbda25b3c9f676746.gif | 104.21.34.175 | 301 Moved Permanently | 801 kB |
URL GET HTTPS static.zafbpzafbp.xyz/go/d/file/tjimg/2025-04-19/b04ca6ffe221998bbda25b3c9f676746.gif IP / ASN  104.21.34.175 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size801 kB (800906 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectzafbpzafbp.xyz Fingerprint8B:98:87:E7:5C:CD:5D:61:B8:1F:70:C8:A5:AD:5C:9C:72:62:F5:E0 ValidityMon, 05 May 2025 03:02:57 GMT - Sun, 03 Aug 2025 04:01:05 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /go/d/file/tjimg/2025-04-19/b04ca6ffe221998bbda25b3c9f676746.gif HTTP/1.1
Host: static.zafbpzafbp.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2025-04-19/b04ca6ffe221998bbda25b3c9f676746.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WmtjzZC74gQk8vHIfoHFcJMsiUsmWxwvLFCnV1hLgFA1MJ8ruZb%2BicLRja1dQEgZYB7rlDcO562u6XYDN4dCT3fAl%2B6%2BhQkvCANozKOpDGAv%2BE4%3D"}]}
cf-ray: 94ee3ecb8fc056b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET yn18j100.buzz/static/template/yn18j/img/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP yn18j100.buzz/static/template/yn18j/img/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/template/yn18j/img/favicon.ico HTTP/1.1
Host: yn18j100.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET smdh13.xyz/template/smdh/img/logo2.png | 0.0.0.0 | | 0 B |
URL GET HTTP smdh13.xyz/template/smdh/img/logo2.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/smdh/img/logo2.png HTTP/1.1
Host: smdh13.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2025-04-01/f441f523160f3aab2053a7d32b97518b.gif | 188.114.96.1 | 200 OK | 22 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2025-04-01/f441f523160f3aab2053a7d32b97518b.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 75 x 75 First Seen2025-06-06 Last Seen2025-06-30 Times Seen3 Size22 kB (21491 bytes) MD54a123b52cf59411dd091d5d56f4f51ad SHA100f47975baa5b3bff471d5cf1271e228036a0d55 SHA2560ab4bfce63a62c545ea0d2a1a449c9b0da137f3db307c436b90ad9082495f454 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2025-04-01/f441f523160f3aab2053a7d32b97518b.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 21491
server: cloudflare
last-modified: Tue, 01 Apr 2025 11:39:21 GMT
etag: "53f3-631b5fcdae23b"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Se0g%2FVIAWoJCmFoel%2BC4jsu0mUY6812F8doRWXAg%2BrdB0Z8QxysYRaD9ETRx5%2BrXsg8scVahn%2BZB2DrVkaq6eZpst8Y2kHi%2FjGp2GHNCTQ%3D%3D"}]}
cf-ray: 94ee3ed12b3b56b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 19e360.zfp86.buzz/d/file/tjimg/2024-05-20/81dbac973f20abf02cbbbd8903d13198.gif | 188.114.96.1 | 200 OK | 204 kB |
URL GET HTTPS 19e360.zfp86.buzz/d/file/tjimg/2024-05-20/81dbac973f20abf02cbbbd8903d13198.gif IP / ASN  188.114.96.1 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 120 x 120 First Seen2023-12-14 Last Seen2025-07-04 Times Seen24 Size204 kB (203457 bytes) MD5118fd12a8a38be6d5bd9ca3516cada69 SHA1d048ab6c31b642c8c63838aac8d2047d9ab6a116 SHA25682d55ab8cc894f67573cac0d70f76e975454f639d2d4e95dcf4f0686008a8662 Certificate Info IssuerGoogle Trust Services Subjectzfp86.buzz Fingerprint6E:90:83:30:E6:50:A2:FB:D5:25:65:58:47:2C:FC:93:C2:DC:EF:45 ValidityMon, 02 Jun 2025 04:56:25 GMT - Sun, 31 Aug 2025 05:53:00 GMT GET /d/file/tjimg/2024-05-20/81dbac973f20abf02cbbbd8903d13198.gif HTTP/1.1
Host: 19e360.zfp86.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/gif
content-length: 203457
server: cloudflare
last-modified: Mon, 20 May 2024 13:48:45 GMT
etag: "31ac1-618e2f5cffb3f"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=eA07O4P2E3XZD%2Fhqzw9ciIvcZusbKNJKX7%2FbxgUG7TLCdegIuPfM%2F%2BA8NpvU6rG4p%2ByhtQ0ObjLMCkKDCus8hqXoG4wCxQT7h7UOCcVExQ%3D%3D"}]}
cf-ray: 94ee3ed13b4356b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET dd.lltt107.top/template/conch/asset/img/favicon.png | 0.0.0.0 | | 0 B |
URL GET HTTP dd.lltt107.top/template/conch/asset/img/favicon.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /template/conch/asset/img/favicon.png HTTP/1.1
Host: dd.lltt107.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 1d2200.tjs65.buzz/skin/bld/font-awesome.min.css | 104.21.45.106 | 200 OK | 31 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/font-awesome.min.css IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeASCII text, with very long lines (30837) First Seen2023-04-05 Last Seen2025-08-09 Times Seen115390 Size31 kB (31000 bytes) MD5269550530cc127b6aa5a35925a7de6ce SHA1512c7d79033e3028a9be61b540cf1a6870c896f8 SHA256799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/font-awesome.min.css HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6RC5EdBzft%2F0kUSrOBa7GjPflDUeObYgBJZxV72ZsOqeJ%2F7WdytphWDf4oR%2FHMy9IUGfRA3uAIW7phVgKsZLDAMRGI0AukeX7Xxy4APlYQ%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"7918-60906a6b41398"
content-encoding: br
cf-ray: 94ee3eca6d4c568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET static.zafbpzafbp.xyz/go/d/file/tjimg/2024-06-30/04fdbe995d38cf70647256b4d823e48c.gif | 104.21.34.175 | 301 Moved Permanently | 54 kB |
URL GET HTTPS static.zafbpzafbp.xyz/go/d/file/tjimg/2024-06-30/04fdbe995d38cf70647256b4d823e48c.gif IP / ASN  104.21.34.175 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size54 kB (54204 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectzafbpzafbp.xyz Fingerprint8B:98:87:E7:5C:CD:5D:61:B8:1F:70:C8:A5:AD:5C:9C:72:62:F5:E0 ValidityMon, 05 May 2025 03:02:57 GMT - Sun, 03 Aug 2025 04:01:05 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /go/d/file/tjimg/2024-06-30/04fdbe995d38cf70647256b4d823e48c.gif HTTP/1.1
Host: static.zafbpzafbp.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2024-06-30/04fdbe995d38cf70647256b4d823e48c.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=en%2FWlTcwjP1eQIbVyj3CeeU%2BX%2BcIrUz1Ng0zZeYwBITjUZPB6nD0SnEL7XUWzEgG85eTZ0gNeNaVzvdBMA2DAOFQSUzIuOv8YjRPfWLARfqwiXI%3D"}]}
cf-ray: 94ee3ecb9fc156b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 95c824xiuxiu275.kaiche2.com/template/kaiche/images/favicon.png | 172.67.186.44 | 404 Not Found | 0 B |
URL GET HTTPS 95c824xiuxiu275.kaiche2.com/template/kaiche/images/favicon.png IP / ASN  172.67.186.44 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectkaiche2.com FingerprintA9:96:32:02:EA:0D:55:C2:5C:FC:F8:37:44:67:8D:E6:9A:C5:08:0F ValidityTue, 22 Apr 2025 06:24:34 GMT - Mon, 21 Jul 2025 07:22:50 GMT GET /template/kaiche/images/favicon.png HTTP/1.1
Host: 95c824xiuxiu275.kaiche2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FP9p1Z1erLOk2w0stJKpgikJIlFnyBoDCwXyPy8YNL4lGlJBom1H08yZvk0di9YOFRzT5J54jWY2DfKUevZegimaIKpBE6HMXGD4txvTjp1uIyK7MsDY4Js%3D"}]}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 94ee3ed2cb70569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET btrxq10.xyz/static/images/favicon.png | 0.0.0.0 | | 0 B |
URL GET HTTP btrxq10.xyz/static/images/favicon.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/images/favicon.png HTTP/1.1
Host: btrxq10.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.juzihot.top/template/juzi/favicon.ico | 103.224.182.248 | 403 Forbidden | 0 B |
URL GET HTTPS www.juzihot.top/template/juzi/favicon.ico IP / ASN  103.224.182.248 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectplayonhunt.com FingerprintB5:7D:AF:72:EF:26:ED:43:C5:CE:94:A4:93:D8:FB:E9:DB:51:77:33 ValidityThu, 15 May 2025 06:25:47 GMT - Wed, 13 Aug 2025 06:25:46 GMT GET /template/juzi/favicon.ico HTTP/1.1
Host: www.juzihot.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|
| GET 5g0kp.flyd28.buzz/%E5%A4%A7%E5%90%89%E5%A4%A7%E5%88%A9/data/85-85.ico | 0.0.0.0 | | 0 B |
URL GET HTTPS 5g0kp.flyd28.buzz/%E5%A4%A7%E5%90%89%E5%A4%A7%E5%88%A9/data/85-85.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subject5g0kp.flyd28.buzz Fingerprint82:05:17:AC:5F:DF:F6:BA:93:9B:51:C8:1C:6F:73:15:E9:12:D9:A4 ValidityWed, 11 Jun 2025 04:22:54 GMT - Tue, 09 Sep 2025 04:22:53 GMT GET /%E5%A4%A7%E5%90%89%E5%A4%A7%E5%88%A9/data/85-85.ico HTTP/1.1
Host: 5g0kp.flyd28.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.shenyebjs.cc/template/video/favicon1.ico | 0.0.0.0 | | 0 B |
URL GET HTTP www.shenyebjs.cc/template/video/favicon1.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /template/video/favicon1.ico HTTP/1.1
Host: www.shenyebjs.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 1d2200.tjs65.buzz/skin/bld/bg.png | 104.21.45.106 | 200 OK | 631 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/bg.png IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typePNG image data, 700 x 700, 8-bit/color RGB, non-interlaced First Seen2024-05-30 Last Seen2025-06-13 Times Seen10 Size631 kB (631320 bytes) MD5b9964203f3d78a0e6f29eba5ca38be70 SHA1e55d5bdf19c41598cc9bcd825b63d1a9f6079bb1 SHA256512e98cfae3f101a947c9236ac94e327b8b7d8ca041a9ab61f7efe4acd4d6e24 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/bg.png HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/skin/bld/index.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:44:19 GMT
content-type: image/png
content-length: 631320
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GV6EbV29ZhOo%2BizD0M9IRETc0GtV0Visj7pq9CUjkW5MLqzjPxXaT2I10CR1DjeADlPkdFce3ZLLjO6LViYqOPXRNBCnW85iZOcMn5gfJ70EhonATaenJIQDUKMEm8BLydnRg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "9a218-60906a6b42338"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 94ee3ed2fc68b4f1-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6524&min_rtt=643&rtt_var=5656&sent=211&recv=226&lost=0&retrans=0&sent_bytes=29977&recv_bytes=13098&delivery_rate=7184518&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24000&unsent_bytes=0&cid=041a5821cc5643ad&ts=1993&inflight_dur=109&x=80"
|
|
| GET 1d2200.tjs65.buzz/skin/bld/layer.min.js | 104.21.45.106 | 200 OK | 22 kB |
URL GET HTTPS 1d2200.tjs65.buzz/skin/bld/layer.min.js IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeJavaScript source, ASCII text, with very long lines (21713), with no line terminators First Seen2023-03-07 Last Seen2025-08-09 Times Seen166 Size22 kB (21713 bytes) MD5060444af631570264c5b3f957e26f5e3 SHA18278c4d47ac985481da0e5efb922457eaaf1dc0c SHA2567ed41c1149adf244bf700213886bfe8648d164942eb68527a7476bb7955c5af9 Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /skin/bld/layer.min.js HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: application/javascript
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0L5nwYsA9olAMtU353kxGXwXIVJCaN3hoZQ14myMlRTl6AnMZXypSxQNOd8ehsRoecbpbVm5DICiRNKcZf1fzkri6wFyo5IiLBoZTosvyg%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"54d1-60906a6b42b08"
content-encoding: br
cf-ray: 94ee3eca7d51568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 45cdqqcp2d.mengm122.cc/meng/template/luluxia/images/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP 45cdqqcp2d.mengm122.cc/meng/template/luluxia/images/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /meng/template/luluxia/images/favicon.ico HTTP/1.1
Host: 45cdqqcp2d.mengm122.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET anada8.xyz/go/d/file/tjimg/2024-07-11/0528827e984eec388e4f57ce13c5556c.gif | 172.67.217.229 | 301 Moved Permanently | 214 kB |
URL GET HTTPS anada8.xyz/go/d/file/tjimg/2024-07-11/0528827e984eec388e4f57ce13c5556c.gif IP / ASN  172.67.217.229 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size214 kB (213615 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectanada8.xyz FingerprintE0:F9:0C:5C:36:FA:2A:EB:2C:74:3A:72:3D:3C:04:E1:69:47:4A:7C ValidityWed, 07 May 2025 20:20:16 GMT - Tue, 05 Aug 2025 21:18:50 GMT GET /go/d/file/tjimg/2024-07-11/0528827e984eec388e4f57ce13c5556c.gif HTTP/1.1
Host: anada8.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2024-07-11/0528827e984eec388e4f57ce13c5556c.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1S08kzPRw0JjlloDdDON2MzrTR5IGYEhPrKUp3MIyF5F5GMLaENtTOR1rwzGAbQ5v1kQXkvQn7O%2F3r8Lb6u%2BpArQxS4vSMxK"}]}
cf-ray: 94ee3ecc7af8b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.saonidh.live/template/dxy/saoni.png | 199.59.243.228 | 200 OK | 1.1 kB |
URL GET HTTPS www.saonidh.live/template/dxy/saoni.png IP / ASN  199.59.243.228 #16509 AMAZON-02 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeHTML document, ASCII text, with very long lines (402) First Seen2025-06-13 Last Seen2025-06-13 Times Seen1 Size1.1 kB (1134 bytes) MD516fc7e95f2a221c0235161b49807e8eb SHA18905bd9f8255e133a645aca96e9fc733c433ed99 SHA256d0ea4c243309bf74d18e6e0a8f5c72d639f8a9b8a418b7d46226051415da5298 Certificate Info IssuerLet's Encrypt Subjectsaonidh.live Fingerprint06:F4:80:F8:F4:AC:E9:A9:43:A9:BE:3E:D5:C9:2E:EF:D6:6D:A5:26 ValidityWed, 04 Jun 2025 08:50:30 GMT - Tue, 02 Sep 2025 08:50:29 GMT GET /template/dxy/saoni.png HTTP/1.1
Host: www.saonidh.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jun 2025 02:44:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1134
X-Request-Id: a23ff2ed-4318-4972-9574-730a6e114e44
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Tq0tKVJ1cdr6H6T94RbmvOi87QATrEDBgYp2YZsnqFryHs0U9LA77i/izFaTeOC8Y11+p1KNMjz8VDZIrScLnA==
Set-Cookie: parking_session=a23ff2ed-4318-4972-9574-730a6e114e44; expires=Fri, 13 Jun 2025 02:59:18 GMT; path=/
Connection: close
|
|
| GET 3036.efmuyibcu.tips/2024/v2/images/logoo.png | 0.0.0.0 | | 0 B |
URL GET HTTP 3036.efmuyibcu.tips/2024/v2/images/logoo.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /2024/v2/images/logoo.png HTTP/1.1
Host: 3036.efmuyibcu.tips
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET anada8.xyz/go/d/file/tjimg/2024-05-20/81dbac973f20abf02cbbbd8903d13198.gif | 172.67.217.229 | 301 Moved Permanently | 204 kB |
URL GET HTTPS anada8.xyz/go/d/file/tjimg/2024-05-20/81dbac973f20abf02cbbbd8903d13198.gif IP / ASN  172.67.217.229 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size204 kB (203457 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectanada8.xyz FingerprintE0:F9:0C:5C:36:FA:2A:EB:2C:74:3A:72:3D:3C:04:E1:69:47:4A:7C ValidityWed, 07 May 2025 20:20:16 GMT - Tue, 05 Aug 2025 21:18:50 GMT GET /go/d/file/tjimg/2024-05-20/81dbac973f20abf02cbbbd8903d13198.gif HTTP/1.1
Host: anada8.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2024-05-20/81dbac973f20abf02cbbbd8903d13198.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cH2xqBQP84tYQTG734rVpPmWpLFfNaFG7sUVHLFHJy7Clj%2BQ7GYrOKS%2Fex7F53UF%2F2EtGbx%2BfCHKq%2FnQ2XfLLWgypZcN4KUz"}]}
cf-ray: 94ee3ecc7afbb4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 1d2200.tjs65.buzz/e/data/tmp/titlepic/56f7c4abda3c5622ea9abcaedd18f2e4.gif | 104.21.45.106 | 200 OK | 254 B |
URL GET HTTPS 1d2200.tjs65.buzz/e/data/tmp/titlepic/56f7c4abda3c5622ea9abcaedd18f2e4.gif IP / ASN  104.21.45.106 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeGIF image data, version 89a, 16 x 17 First Seen2023-04-08 Last Seen2025-08-03 Times Seen2199 Size254 B (254 bytes) MD5b013f8fa3ec997fe20dc80b82af0ad0a SHA1e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9 SHA256119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef Certificate Info IssuerGoogle Trust Services Subjecttjs65.buzz FingerprintCA:AB:3B:36:41:BA:E2:06:7C:B7:CC:0F:2B:C9:CF:1E:44:8C:BF:D3 ValiditySun, 08 Jun 2025 04:22:23 GMT - Sat, 06 Sep 2025 05:19:46 GMT GET /e/data/tmp/titlepic/56f7c4abda3c5622ea9abcaedd18f2e4.gif HTTP/1.1
Host: 1d2200.tjs65.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1d2200.tjs65.buzz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: image/gif
content-length: 254
server: cloudflare
last-modified: Tue, 31 Oct 2023 17:40:31 GMT
etag: "fe-60906a6b0db60"
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CeqDIz2%2BtOQyAI8BbQ7ljUSheSkItFzh8lHbcvD%2BQ0L4ioOkBWEBRMfwJIPdpN179x1%2FB0pVC9vgoW4MJ%2FmZsDUSt%2FaO5%2BnJxLAMMeVXjA%3D%3D"}]}
cf-ray: 94ee3ecafd7b568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 95c824xiuxiu275.kaiche2.com/template/kaiche/images/favicon.png | 172.67.186.44 | 404 Not Found | 0 B |
URL GET HTTPS 95c824xiuxiu275.kaiche2.com/template/kaiche/images/favicon.png IP / ASN  172.67.186.44 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectkaiche2.com FingerprintA9:96:32:02:EA:0D:55:C2:5C:FC:F8:37:44:67:8D:E6:9A:C5:08:0F ValidityTue, 22 Apr 2025 06:24:34 GMT - Mon, 21 Jul 2025 07:22:50 GMT GET /template/kaiche/images/favicon.png HTTP/1.1
Host: 95c824xiuxiu275.kaiche2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=T7HMEvtzKCLSrYkrswmLLeXNWsDG13zD6pr4k4zeXZyNrmkLt3th%2FCnzfTdO7soTCxUF3qhxvdQquf9IXXTs4OB%2BO%2BrnI9jVH4kzQTm27Z%2BexzbTe%2FTrEOo%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 94ee3eccd930569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 7788.vywaax.com/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP 7788.vywaax.com/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /favicon.ico HTTP/1.1
Host: 7788.vywaax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 7788.vywaax.com/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP 7788.vywaax.com/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /favicon.ico HTTP/1.1
Host: 7788.vywaax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET 3036.efmuyibcu.tips/2024/v2/images/logoo.png | 0.0.0.0 | | 0 B |
URL GET HTTP 3036.efmuyibcu.tips/2024/v2/images/logoo.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /2024/v2/images/logoo.png HTTP/1.1
Host: 3036.efmuyibcu.tips
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET hxzdh13.top/favicon.png | 0.0.0.0 | | 0 B |
URL GET HTTP hxzdh13.top/favicon.png IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.png HTTP/1.1
Host: hxzdh13.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET p20.336t.com/f/4/skin/ecms813/img/favicon.ico | 0.0.0.0 | | 0 B |
URL GET HTTP p20.336t.com/f/4/skin/ecms813/img/favicon.ico IP / ASN  0.0.0.0 #0 Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 GET /f/4/skin/ecms813/img/favicon.ico HTTP/1.1
Host: p20.336t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET static.zafbpzafbp.xyz/go/d/file/tjimg/2025-03-01/d3c4fb81b77c778d9c940c0ddd7105a4.gif | 104.21.34.175 | 301 Moved Permanently | 28 kB |
URL GET HTTPS static.zafbpzafbp.xyz/go/d/file/tjimg/2025-03-01/d3c4fb81b77c778d9c940c0ddd7105a4.gif IP / ASN  104.21.34.175 #13335 CLOUDFLARENET Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size28 kB (27818 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectzafbpzafbp.xyz Fingerprint8B:98:87:E7:5C:CD:5D:61:B8:1F:70:C8:A5:AD:5C:9C:72:62:F5:E0 ValidityMon, 05 May 2025 03:02:57 GMT - Sun, 03 Aug 2025 04:01:05 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /go/d/file/tjimg/2025-03-01/d3c4fb81b77c778d9c940c0ddd7105a4.gif HTTP/1.1
Host: static.zafbpzafbp.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 02:44:18 GMT
content-type: text/html; charset=UTF-8
location: https://19e360.zfp86.buzz/d/file/tjimg/2025-03-01/d3c4fb81b77c778d9c940c0ddd7105a4.gif
server: cloudflare
x-powered-by: PHP/5.4.16
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mNAwi65TCPKwImrssEuDsQ8pTnSMYoqlasMnNPrzrXm8STfcqNjvyTBjoFQpaBeujErl%2Brjz%2F2b8lGQ5EZPgwjpeLoB%2FGdpMvg8eQ%2F6fSIz8KDg%3D"}]}
cf-ray: 94ee3ecc0fe956b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.deeptheen.cc/favicon.ico | 103.224.182.251 | 403 Forbidden | 0 B |
URL GET HTTPS www.deeptheen.cc/favicon.ico IP / ASN  103.224.182.251 #133618 Trellian Pty. Limited Requested byhttps://1d2200.tjs65.buzz/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-09 Times Seen5738354 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectswaymarkets.io Fingerprint2A:9E:13:C8:A3:3A:23:46:7A:51:00:89:24:FB:04:34:2F:33:17:C7 ValidityFri, 02 May 2025 23:50:07 GMT - Thu, 31 Jul 2025 23:50:06 GMT GET /favicon.ico HTTP/1.1
Host: www.deeptheen.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1d2200.tjs65.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
|
|