| |  38.174.236.149 | 301 Moved Permanently | 162 B |
URL User Request GET HTTP/1.1IP38.174.236.149:80
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bet365 |
GET / HTTP/1.1
Host: longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 May 2024 16:36:29 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://www.longsheng818.com/
|
|
| | 38.174.236.149 | | 7.7 kB |
IP38.174.236.149:0
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (585), with CRLF, LF line terminators Hash8188d6f84da1ef948792f8c0b6835c45 2a47bc21b59a8325fdabf5fd02346df5edfa74bd 35151735bc67aed01905f002fddcdc897b8bb0c85c3e67254a96242262bd114e
GET / HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:30 GMT
Content-Type: text/html; charset=utf-8
Last-Modified: Tue, 12 Dec 2023 21:44:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6578d440-671a"
Content-Encoding: gzip
|
|
| www.longsheng818.com/css/style.css | 38.174.236.149 | 200 OK | 10 kB |
URL GET HTTP/1.1www.longsheng818.com/css/style.css IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash42d1fd56e7cf1ee9f3ebcddcc78a46b9 aecd37fd996bb616c8c797e78d1ba333b1b6d25c 3e60b51e0ae378f42f3659f19da95ed106292d220717deb47b485950fdfe5888
GET /css/style.css HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: text/css
Last-Modified: Sat, 09 Dec 2023 07:40:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ea-ae37"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/js/superslide.js | 38.174.236.149 | 200 OK | 3.6 kB |
URL GET HTTP/1.1www.longsheng818.com/js/superslide.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (11042), with CRLF line terminators Hashbdcc60a5d12cad4ef8a7d16c00a51842 3a27142c55be241e37f654f8e4cfdf1e94d87899 fb4834dd8426ab42bca74128f45da61c5423a8c2a46e59789d9e137c58989718
GET /js/superslide.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419eb-2b27"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/sitegray/sitegray.js | 38.174.236.149 | 200 OK | 95 B |
URL GET HTTP/1.1www.longsheng818.com/sitegray/sitegray.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeASCII text, with CRLF line terminators Hashcb16b8b2fae1a2cb3ddba43817fdc763 c1bb1153a3ebb528f86fa5cc57ddd4bfbe9bd4af 66897f9cf68b725abd635d7dc7c1f4e91c80a41779c91bd25cf3a504d8f07407
GET /sitegray/sitegray.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 95
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Connection: keep-alive
ETag: "657419eb-5f"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/js/soChange.js | 38.174.236.149 | 200 OK | 1.3 kB |
URL GET HTTP/1.1www.longsheng818.com/js/soChange.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hashe88e16112201c70fd1371836fcc623bd 1edf439604d90e3e98e1575a29b2a929fad18054 602a91cbeb98cb98010b9e63fe10e1b2325d59d66ff36ed3b0c66c02599380ab
GET /js/soChange.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ea-cd3"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/js/index.js | 38.174.236.149 | 200 OK | 343 B |
URL GET HTTP/1.1www.longsheng818.com/js/index.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash91f6a60f28f42953ea4e4eb611e93cdc 5b9d4a63ff849c4a3532cececa6a062372c0dbbe 5e556b9466dad07b033cfab46ef2db8880620f6f8095f531a3045b5847f44620
GET /js/index.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419eb-4a5"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/sitegray/sitegray_d.css | 38.174.236.149 | 200 OK | 20 B |
URL GET HTTP/1.1www.longsheng818.com/sitegray/sitegray_d.css IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeASCII text, with no line terminators Hash311749c1d5f9bcf240ca9c25eae61f47 29703f0938cab5945db52e553f3f22cbd7f0b478 183f83b69b6f7ced023f06bc9b98b2d00c9e08b5c627c1f6e9002f48f0bbfb5c
GET /sitegray/sitegray_d.css HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: text/css
Content-Length: 20
Last-Modified: Sat, 09 Dec 2023 07:40:26 GMT
Connection: keep-alive
ETag: "657419ea-14"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/index.vsb.css | 38.174.236.149 | 200 OK | 320 B |
URL GET HTTP/1.1www.longsheng818.com/index.vsb.css IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
Hash69839a4f48ed9348e143a9ba6340bebf f6c83096e8ad844c4fcad7a6f4edfb71058781f3 f163f99078fe5f4a4c3dd6df91f366d9f5d17a3dafdcfc6404576373d127a18c
GET /index.vsb.css HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: text/css
Content-Length: 320
Last-Modified: Sat, 09 Dec 2023 07:40:26 GMT
Connection: keep-alive
ETag: "657419ea-140"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/system/resource/js/counter.js | 38.174.236.149 | 200 OK | 762 B |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/counter.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (831), with CRLF line terminators Hash7d62c6043b946796b8446a113629e597 650f80553b43a5518814a92f1185ecd3d31a13fe ac09ff2c779832d9df2e3370a647bce1422ada5e0faa7195b135a03559c61b56
GET /system/resource/js/counter.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419eb-531"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/system/resource/js/openlink.js | 38.174.236.149 | 200 OK | 648 B |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/openlink.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashccdba8a8ed118a385b33092b30261504 e41c77d81641795fc0ccc109c4a058ee5ab94bce e28b393862a9191fe08877274ebcbb34d820752593fe4923b20782e5267a4c12
GET /system/resource/js/openlink.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 648
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Connection: keep-alive
ETag: "657419eb-288"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/system/resource/js/dynclicks.js | 38.174.236.149 | 200 OK | 1.1 kB |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/dynclicks.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashc9e070e7c80cb1b8886b468295f9cdcf a6766650411a7b984ec4f467ea91b359c46936f5 2d90992d9b2819970ac3306740f825a772186030145a9a50e7d711ad96cecd0b
GET /system/resource/js/dynclicks.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419eb-db0"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/@public/base.js | 38.174.236.149 | 200 OK | 1.3 kB |
URL GET HTTP/1.1www.longsheng818.com/@public/base.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, ASCII text, with very long lines (2361) Hash5396594dbc5e2915cd739aff5c7e2148 42f207d140e06eca1191c6d1ba8faeec3a0b6c9a 8fa0709a747cbb3647aace894d84d23a81d46fbfad6a1bd752d27953d5f8ad34
GET /@public/base.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 17 Jan 2024 12:04:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65a7c247-93a"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/system/resource/js/base64.js | 38.174.236.149 | 200 OK | 1.5 kB |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/base64.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashcd5feacbf2a020d90e4b82e0dc15129c ea3b6e245b290a40d3a550cb5b8d02eeb7152d59 dd6e994e2eafc16f487bccc7d8e6c9e8825763d8d11fc714b5710daa7c15ab9f
GET /system/resource/js/base64.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419eb-128d"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/system/resource/js/formfunc.js | 38.174.236.149 | 200 OK | 654 B |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/formfunc.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashfd24ae63f2add176f3c498b8c2aae15a 3c9ccf52cea223409ff472f78908fe73e5b822df a1a6355f5d3038d181b35972e29964227a00c96aa7111235389f23221a5cf834
GET /system/resource/js/formfunc.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419eb-54c"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/system/resource/style/component/news/list/imagechangenews.css | 38.174.236.149 | 200 OK | 323 B |
URL GET HTTP/1.1www.longsheng818.com/system/resource/style/component/news/list/imagechangenews.css IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeISO-8859 text, with CRLF line terminators Hash7d3c7e21be886249c60c92a32a26b8b4 09e31e730b3baeaf5e2e2045bae4854d7ef15be4 64d4f3a2e4fe19200fec161f7f66d7ce959d3447dffb59ede5eb3791a0ca1611
GET /system/resource/style/component/news/list/imagechangenews.css HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: text/css
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419eb-6d9"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/js/bd.js | 38.174.236.149 | 200 OK | 37 kB |
URL GET HTTP/1.1www.longsheng818.com/js/bd.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (32087), with CRLF line terminators Hash3261d02af34275b46f0b9cbb588ae9d7 bdd83480de5d0b8d7cb73ebeae6453de6a754242 fe1d15527d38fc5a2e0ac23fb66b4bacbf2b4e5c8565057c5d1d2450bfd09df2
GET /js/bd.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ea-16964"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/system/resource/js/news/imagechangenews.js | 38.174.236.149 | 200 OK | 2.3 kB |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/news/imagechangenews.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash262e8603e9d07c77230907a22d57d982 980fd855fdc621d33a836c5e3204ab28b56bf3c6 d0dc7c827a04a004b0b4df59ffec509ca48391ae54825692289cef3cc85492c7
GET /system/resource/js/news/imagechangenews.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ec-1ed1"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/system/resource/js/centerCutImg.js | 38.174.236.149 | 200 OK | 1.6 kB |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/centerCutImg.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hashcc64898580036e26ed0040202a5b5187 2078be44f771078a135db73f8fd30c4d99fff2d5 e05834bbc0d5f34a68b104ad2a7200f92f17301d24d70f7511643cf0eae1e7f4
GET /system/resource/js/centerCutImg.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ec-1b71"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/system/resource/js/ajax.js | 38.174.236.149 | 200 OK | 2.3 kB |
URL GET HTTP/1.1www.longsheng818.com/system/resource/js/ajax.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash910b0be124413cb49c6b9bb007baf456 ff4caa611c6477983c297b9d28afa66acbfdbd90 2e4f07ca3e11cc046fc9dfe772e4c7a8534fd8b4f1f85df21902c07534dc0390
GET /system/resource/js/ajax.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ec-1a6f"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/@public/js.js | 38.174.236.149 | 200 OK | 455 B |
URL GET HTTP/1.1www.longsheng818.com/@public/js.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (491) Hashc0a8be26cf18b83e8b6710939bfa1c59 3622a8e2cb708893dd6c18edb78def8207499ffa 37bce509d448082f99aaee61f624776c29902145fb37a907c9566890d6e8f77e
GET /@public/js.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 04 Jan 2024 11:48:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65969af9-5eb"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/css/publice.css | 38.174.236.149 | 200 OK | 890 B |
URL GET HTTP/1.1www.longsheng818.com/css/publice.css IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash590772e1e6675152f9226a4f3d726a5a eb63cda07676ef4d798cba1dff814c4bd266738d 757853df4cfeef9e14b4ed3af362f6a3946485e99320b701fa40faa4071cac3e
GET /css/publice.css HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: text/css
Last-Modified: Sat, 09 Dec 2023 07:40:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ea-8a7"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/js/min.js | 38.174.236.149 | 200 OK | 38 kB |
URL GET HTTP/1.1www.longsheng818.com/js/min.js IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with CRLF line terminators Hashc7c62582496a977ccac5b742139875ce 60a2c837447d1e120962d8006dc2a26f001c784a 2867e269e94bfad536d30ee980514dae8073e11df799edfb0ec8bd181339c75e
GET /js/min.js HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 09 Dec 2023 07:40:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"657419ea-16d94"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
|
|
| www.longsheng818.com/temp/more.jpg | 38.174.236.149 | 200 OK | 1.1 kB |
URL GET HTTP/1.1www.longsheng818.com/temp/more.jpg IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typePNG image data, 33 x 5, 8-bit/color RGBA, non-interlaced Hash93dfcf432095e0b3328008882e973ea3 89f486921bb71590b5628df214f58ed089ebf8f1 bb9939c86c9dbac2108876e1653bd1940cbf46bdff54827a22699262bb3789d0
GET /temp/more.jpg HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: image/jpeg
Content-Length: 1099
Last-Modified: Sat, 09 Dec 2023 07:40:27 GMT
Connection: keep-alive
ETag: "657419eb-44b"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/system/resource/images/space.gif | 38.174.236.149 | 200 OK | 802 B |
URL GET HTTP/1.1www.longsheng818.com/system/resource/images/space.gif IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeGIF image data, version 87a, 3 x 3 Hash9be61bf1d1e6ff9b25ac2f7a804951d8 8990f83e1a63964e39dfa25b9e436005c93fda19 b2133465df5a0567fcf78a33e610cd5e0040fc70f22e065094ba80964f5060fd
GET /system/resource/images/space.gif HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: image/gif
Content-Length: 802
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Connection: keep-alive
ETag: "657419ec-322"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/img/w_more.jpg | 38.174.236.149 | 200 OK | 987 B |
URL GET HTTP/1.1www.longsheng818.com/img/w_more.jpg IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typePNG image data, 33 x 5, 8-bit/color RGBA, non-interlaced Hash74090ff1af004620aba40f7a0f39dd6a 1292c9a6f4f7a3e749b11675bcc9f2c6db40530f 9ef26ba80967efcc56a08ba2d33bf9111e18d5e94c356ad0af88424753806060
GET /img/w_more.jpg HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: image/jpeg
Content-Length: 987
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Connection: keep-alive
ETag: "657419ec-3db"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/img/top_hunt.png | 38.174.236.149 | 200 OK | 1.3 kB |
URL GET HTTP/1.1www.longsheng818.com/img/top_hunt.png IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced Hasha5a9e6eb4ac512aae3767eac3a9e2a92 bef4be84cb34edda8c0a0efff8824f0962a2e5b8 3307cb652455fe2987ef0a5b6995dd1b0a2d5bd18d8e054c57f360e70e68b900
GET /img/top_hunt.png HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/png
Content-Length: 1305
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Connection: keep-alive
ETag: "657419ec-519"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/img/top_hunt_bg.png | 38.174.236.149 | 200 OK | 1.7 kB |
URL GET HTTP/1.1www.longsheng818.com/img/top_hunt_bg.png IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typePNG image data, 287 x 34, 8-bit/color RGBA, non-interlaced Hash84bb49e06c5daf6fc2e7f3f1e76a1aa3 cfd0de07191db56490b313243a8fd374d042c166 97b6c81e93564cd15b482eecbcf1ae5c8faf8335a33078ac772564ea6f01f865
GET /img/top_hunt_bg.png HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/png
Content-Length: 1717
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Connection: keep-alive
ETag: "657419ec-6b5"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/img/xdd.png | 38.174.236.149 | 200 OK | 930 B |
URL GET HTTP/1.1www.longsheng818.com/img/xdd.png IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typePNG image data, 4 x 4, 8-bit/color RGB, non-interlaced Hash92108180f726166a89cd6e56ceb9cc1e f3c2aa12b93b1a9177080109ce3d6b4bdc37cbb7 e3f547fcdf3a0a2775358853a207b2d60fb1f1b59b3cf472ddc30291707e9ffa
GET /img/xdd.png HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/png
Content-Length: 930
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Connection: keep-alive
ETag: "657419ec-3a2"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/system/resource/images/space.gif | 38.174.236.149 | 200 OK | 802 B |
URL GET HTTP/1.1www.longsheng818.com/system/resource/images/space.gif IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeGIF image data, version 87a, 3 x 3 Hash9be61bf1d1e6ff9b25ac2f7a804951d8 8990f83e1a63964e39dfa25b9e436005c93fda19 b2133465df5a0567fcf78a33e610cd5e0040fc70f22e065094ba80964f5060fd
GET /system/resource/images/space.gif HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/gif
Content-Length: 802
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Connection: keep-alive
ETag: "657419ec-322"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/images/jxkx.jpg | 38.174.236.149 | 200 OK | 40 kB |
URL GET HTTP/1.1www.longsheng818.com/images/jxkx.jpg IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typePNG image data, 706 x 75, 8-bit/color RGBA, non-interlaced Hash66ca5b08b86c7315c5cdfb2f36f262bc 50fdcab415371792dad9cf2dedad4e4fad8931e5 486a4af1beed965838d4c8923cb5a7bc391b549a2df3e1c7e741626e57271658
GET /images/jxkx.jpg HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:31 GMT
Content-Type: image/jpeg
Content-Length: 39956
Last-Modified: Sat, 09 Dec 2023 07:40:28 GMT
Connection: keep-alive
ETag: "657419ec-9c14"
Expires: Mon, 03 Jun 2024 16:36:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/__local/3/69/1B/A57340CF6306DD5DA9E51F8EEC7_319EAE9A_D1AC.jpg | 38.174.236.149 | 200 OK | 54 kB |
URL GET HTTP/1.1www.longsheng818.com/__local/3/69/1B/A57340CF6306DD5DA9E51F8EEC7_319EAE9A_D1AC.jpg IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 640x480, components 3 Hash3691ba57340cf6306dd5da9e51f8eec7 f7bfc60b495671792319cd3999ec8d90d990bb50 2e1a70780fbfacec8e3ef83ef648c6d4900f0087aa62166b1c370880e926b776
GET /__local/3/69/1B/A57340CF6306DD5DA9E51F8EEC7_319EAE9A_D1AC.jpg HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/jpeg
Content-Length: 53676
Last-Modified: Sat, 09 Dec 2023 07:40:29 GMT
Connection: keep-alive
ETag: "657419ed-d1ac"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/__local/9/AF/3B/06F4A36D98262F9633CCBE500B3_5AF4C99A_AD76.jpg | 38.174.236.149 | 200 OK | 44 kB |
URL GET HTTP/1.1www.longsheng818.com/__local/9/AF/3B/06F4A36D98262F9633CCBE500B3_5AF4C99A_AD76.jpg IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 640x426, components 3 Hash9af3b06f4a36d98262f9633ccbe500b3 2d8bc86d3e0cd384d770bb8eccec07a3f12dfe28 fcd192294aac8a6fd5fcc299765c45057d3adb7eb24b35b84a46e4e3d4de7863
GET /__local/9/AF/3B/06F4A36D98262F9633CCBE500B3_5AF4C99A_AD76.jpg HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/jpeg
Content-Length: 44406
Last-Modified: Sat, 09 Dec 2023 07:40:29 GMT
Connection: keep-alive
ETag: "657419ed-ad76"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/__local/B/0C/CB/E2A7BD58580F6CD4E68F5D81432_5F21871E_CBAD.jpg | 38.174.236.149 | 200 OK | 52 kB |
URL GET HTTP/1.1www.longsheng818.com/__local/B/0C/CB/E2A7BD58580F6CD4E68F5D81432_5F21871E_CBAD.jpg IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 640x426, components 3 Hashb0ccbe2a7bd58580f6cd4e68f5d81432 40df0a828fc42a1aa777b1fcdd5179657a4c77ac 201650333882873c3bb75e48df23587930dce4220cbd908e9495e283d651e4d6
GET /__local/B/0C/CB/E2A7BD58580F6CD4E68F5D81432_5F21871E_CBAD.jpg HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/jpeg
Content-Length: 52141
Last-Modified: Tue, 12 Dec 2023 23:55:55 GMT
Connection: keep-alive
ETag: "6578f30b-cbad"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| push.zhanzhang.baidu.com/push.js |  182.61.201.93 | 200 OK | 227 B |
URL GET HTTP/1.1push.zhanzhang.baidu.com/push.js IP182.61.201.93:80 ASN#38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested byhttp://www.longsheng818.com/
File typeASCII text, with no line terminators Hash1bb5a3267c9865ad4abe8d937734b62b b5478dd2edb3e64242eced1db2dbd945ef81f592 674bc0c70f98d627b8a7e1d278a1f21ffe33815565f7d5371bf0275da57571b2
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Sat, 04 May 2024 16:30:54 GMT
Etag: "4078521116"
Expires: Sun, 04 May 2025 16:30:54 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=08B769EA7D160D2E6986C5401130A58D:FG=1; max-age=31536000; expires=Sun, 04-May-25 16:30:54 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
|
|
| www.longsheng818.com/__local/D/74/3F/EC4A2BB7CC0A40917521F454D1B_CCA2C53F_D511.jpg | 38.174.236.149 | 200 OK | 54 kB |
URL GET HTTP/1.1www.longsheng818.com/__local/D/74/3F/EC4A2BB7CC0A40917521F454D1B_CCA2C53F_D511.jpg IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 640x448, components 3 Hashd743fec4a2bb7cc0a40917521f454d1b 7d700fe294a05c42b99ff06a793009390bbbc671 7b7a2484c542c15c2ed6cb4d4f13527a0ae85730a9c17977af765c806607acfa
GET /__local/D/74/3F/EC4A2BB7CC0A40917521F454D1B_CCA2C53F_D511.jpg HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/jpeg
Content-Length: 54545
Last-Modified: Sat, 09 Dec 2023 07:40:29 GMT
Connection: keep-alive
ETag: "657419ed-d511"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| www.longsheng818.com/__local/B/CF/05/61A70A0B252BEC8CA5B7AEA3386_A4A3B73B_3DDB8.png | 38.174.236.149 | 200 OK | 253 kB |
URL GET HTTP/1.1www.longsheng818.com/__local/B/CF/05/61A70A0B252BEC8CA5B7AEA3386_A4A3B73B_3DDB8.png IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
File typePNG image data, 434 x 244, 8-bit/color RGBA, non-interlaced Size253 kB (253368 bytes) Hashbcf0561a70a0b252bec8ca5b7aea3386 8ad2d980bb237455bac51a24e1f64ec29d53e191 cfe701edbd55aa49ef1aeaf5f744ed7d40f110a3ce91ca499ecdee730ce471c4
GET /__local/B/CF/05/61A70A0B252BEC8CA5B7AEA3386_A4A3B73B_3DDB8.png HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:36:32 GMT
Content-Type: image/png
Content-Length: 253368
Last-Modified: Sat, 09 Dec 2023 07:40:30 GMT
Connection: keep-alive
ETag: "657419ee-3ddb8"
Expires: Mon, 03 Jun 2024 16:36:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| api.share.baidu.com/s.gif?l=http://www.longsheng818.com/ | 182.61.201.94 | 200 OK | 0 B |
URL GET HTTP/1.1api.share.baidu.com/s.gif?l=http://www.longsheng818.com/ IP182.61.201.94:80 ASN#38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested byhttp://www.longsheng818.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.longsheng818.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Sat, 04 May 2024 16:30:54 GMT
|
|
| sdk.51.la/js-sdk-pro.min.js |  47.246.44.239 | 200 OK | 13 kB |
URL GET HTTP/1.1sdk.51.la/js-sdk-pro.min.js IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (34110) Hash24bb520e9517f2ed3ed987b46aeaf723 846723563d7dd2bff3954f93633b11af0103adc8 d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 12846
Connection: keep-alive
Date: Sun, 21 Apr 2024 10:11:16 GMT
x-oss-request-id: 6624E644CC8CEC34394ACD92
x-oss-cdn-auth: success
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1713694276
Via: cache15.l2de2[0,0,304-0,H], cache4.l2de2[1,0], ens-cache18.se2[0,0,200-0,H], ens-cache3.se2[0,0]
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:34 GMT
x-oss-hash-crc64ecma: 5143829838470429443
Content-Encoding: gzip
Age: 1145979
X-Cache: HIT TCP_MEM_HIT dirn:11:314957921
X-Swift-SaveTime: Thu, 02 May 2024 02:56:26 GMT
X-Swift-CacheTime: 371690
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9717148402556521763e
|
|
| sdk.51.la/js-sdk-pro.min.js | 47.246.44.239 | 200 OK | 13 kB |
URL GET HTTP/1.1sdk.51.la/js-sdk-pro.min.js IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (34110) Hash24bb520e9517f2ed3ed987b46aeaf723 846723563d7dd2bff3954f93633b11af0103adc8 d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 12846
Connection: keep-alive
Date: Sun, 21 Apr 2024 10:11:16 GMT
x-oss-request-id: 6624E644CC8CEC34394ACD92
x-oss-cdn-auth: success
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1713694276
Via: cache15.l2de2[0,0,304-0,H], cache4.l2de2[1,0], ens-cache18.se2[0,0,200-0,H], ens-cache3.se2[0,0]
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:34 GMT
x-oss-hash-crc64ecma: 5143829838470429443
Content-Encoding: gzip
Age: 1145979
X-Cache: HIT TCP_MEM_HIT dirn:11:314957921
X-Swift-SaveTime: Thu, 02 May 2024 02:56:26 GMT
X-Swift-CacheTime: 371690
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9717148402556641771e
|
|
| sdk.51.la/js-sdk-pro.min.js | 47.246.44.239 | 200 OK | 13 kB |
URL GET HTTP/1.1sdk.51.la/js-sdk-pro.min.js IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.longsheng818.com/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (34110) Hash24bb520e9517f2ed3ed987b46aeaf723 846723563d7dd2bff3954f93633b11af0103adc8 d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 12846
Connection: keep-alive
Date: Sun, 21 Apr 2024 10:11:16 GMT
x-oss-request-id: 6624E644CC8CEC34394ACD92
x-oss-cdn-auth: success
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1713694276
Via: cache15.l2de2[0,0,304-0,H], cache4.l2de2[1,0], ens-cache18.se2[0,0,200-0,H], ens-cache1.se2[0,0]
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:34 GMT
x-oss-hash-crc64ecma: 5143829838470429443
Content-Encoding: gzip
Age: 1145979
X-Cache: HIT TCP_MEM_HIT dirn:11:314957921
X-Swift-SaveTime: Thu, 02 May 2024 02:56:26 GMT
X-Swift-CacheTime: 371690
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9517148402556788799e
|
|
| www.longsheng818.com/favicon.ico | 38.174.236.149 | 200 OK | 0 B |
URL GET HTTP/1.1www.longsheng818.com/favicon.ico IP38.174.236.149:80
Requested byhttp://www.longsheng818.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.longsheng818.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:36:34 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
cfrom: img
x-powered-by: java
Server: img
Set-Cookie: PHPSESSID=0r1a8grufflro27jh4adtsvns4; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
|
|
| collect-v6.51.la/v6/collect?dt=4 | 203.107.86.226 | 403 | 0 B |
URL POST HTTP/1.1collect-v6.51.la/v6/collect?dt=4 IP203.107.86.226:80 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttp://www.longsheng818.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 388
Origin: http://www.longsheng818.com
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403
Date: Sat, 04 May 2024 16:30:56 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=02c1ced5ed96f1b0cf97624e505711027dcd3bb5f8f4db4af8c57eedb2eafa24; Path=/; HttpOnly
acw_tc=ac11000117148402567026321ec69cbd0bb2412185134b2ae0d65a3a6dd253;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://www.longsheng818.com
Access-Control-Allow-Credentials: true
|
|
| vkg.hpdbfezgrqwn.vip/wdzmr.php |  122.10.48.4 | 200 OK | 394 B |
URL POST HTTP/2vkg.hpdbfezgrqwn.vip/wdzmr.php IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttp://www.longsheng818.com/ CertificateIssuerLet's Encrypt Subjectvkg.hpdbfezgrqwn.vip FingerprintDD:7F:2F:A4:DC:42:7F:7E:40:C5:F1:95:58:3F:23:77:21:F5:7B:B9 ValidityWed, 03 Apr 2024 15:10:14 GMT - Tue, 02 Jul 2024 15:10:13 GMT
File typeHTML document, Unicode text, UTF-8 text Hash70b7b9d84767167c32162c8924d9dd39 177ee7e412c54df71f72446d98812c80995407c9 65bd60b8088e80151d0b498e11c72259914177ee833a4e7571e4a5b48680a935
OPTIONS /wdzmr.php HTTP/1.1
Host: vkg.hpdbfezgrqwn.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://www.longsheng818.com/
Origin: http://www.longsheng818.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:55 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-request-id: 8c1e33eecca27d33000cfe81ba5e69bc
access-control-allow-origin: *
access-control-allow-headers: *
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| collect-v6.51.la/v6/collect?dt=4 | 203.107.86.226 | 403 | 0 B |
URL POST HTTP/1.1collect-v6.51.la/v6/collect?dt=4 IP203.107.86.226:80 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttp://www.longsheng818.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 388
Origin: http://www.longsheng818.com
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403
Date: Sat, 04 May 2024 16:30:56 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=f06d9ebe714272dc927e52224acb67a28377cff376980187e997d699bb4131f6; Path=/; HttpOnly
acw_tc=ac11000117148402567702629ea2ecd6dd7f2ca40dea0817e4ab97b094330b;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://www.longsheng818.com
Access-Control-Allow-Credentials: true
|
|
| fhr.hm9wjzdxizyz.com/imgs/gf.fc8d6758.png | 122.10.48.4 | 200 OK | 44 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/gf.fc8d6758.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 1200 x 400, 8-bit colormap, non-interlaced Hash43b40c5a1fc47f017a57395e31992b61 f6cda072c09b9db3369950314ad8c98fd5fddd56 40392200b620f505e667f22e1f63ca01f77c3c808bee540483ec8c9d127fcde5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/gf.fc8d6758.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: image/png
content-length: 43771
last-modified: Tue, 26 Dec 2023 13:01:58 GMT
etag: "658acec6-aafb"
expires: Mon, 03 Jun 2024 16:30:58 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/banner/banner.365.png | 122.10.48.4 | 200 OK | 24 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/banner/banner.365.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 1000 x 200, 8-bit colormap, non-interlaced Hash79f3d78478eae115eba1a4032479e94d a6c9cee0ddd8754e7e7d74b121a2c1fdcc6ca48e e8e98f9b2855fbf4311fdbf38d4ff1984a1adb73c26b6f0762b320a3d9e24c3c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/banner/banner.365.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: image/png
content-length: 24389
last-modified: Tue, 26 Dec 2023 12:23:54 GMT
etag: "658ac5da-5f45"
expires: Mon, 03 Jun 2024 16:30:58 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/mzb.png | 122.10.48.4 | 200 OK | 16 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/mzb.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 297 x 358, 8-bit colormap, non-interlaced Hashab00b4c954cc4270ec6945d66bccd25e bd96b780e9eb629b5e09af94dadff4a15042c849 1bde1c723d034f08dc1e8b529222c5cd19672f0e60dbfa38d43758899dd06a1a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/mzb.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: image/png
content-length: 16501
last-modified: Tue, 26 Dec 2023 13:02:03 GMT
etag: "658acecb-4075"
expires: Mon, 03 Jun 2024 16:30:58 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/spb.png | 122.10.48.4 | 200 OK | 121 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/spb.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 1080 x 1374, 8-bit colormap, non-interlaced Size121 kB (120915 bytes) Hash7a9e7ce92ce7979354b400502cc3ed1b 98fd02ed8f3bea46a92df74b466d7dd21fb35ba3 828e83d65b89ae4db1fab3dbe09091da233bc463194466175d6e12743886e5ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/spb.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: image/png
content-length: 120915
last-modified: Tue, 26 Dec 2023 13:02:04 GMT
etag: "658acecc-1d853"
expires: Mon, 03 Jun 2024 16:30:58 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/2024ozb.png | 122.10.48.4 | 200 OK | 314 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/2024ozb.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 2362 x 2950, 8-bit colormap, non-interlaced Size314 kB (314189 bytes) Hashc645e28b865d08dbaf78f4b5497d23da 069054c5b52b845762726b6cdff4154067530a79 08dee808cbdf40d8a6668906fe3d6fb41c48055574512615bc8f5017f51047b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/2024ozb.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: image/png
content-length: 314189
last-modified: Tue, 26 Dec 2023 13:01:54 GMT
etag: "658acec2-4cb4d"
expires: Mon, 03 Jun 2024 16:30:58 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/css/modalStyles.css | 122.10.48.4 | 200 OK | 14 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/css/modalStyles.css IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typegzip compressed data, from Unix Hashd96ae2342d1f0a35ea5a3cd5bd7ec6ba dc46ff6950ddf8afc79aaf132fa00aa2537888ff 92fb53f5bf77f08d28167312beb5c3764ab96f977a012cf0fb2ead4f97f7ac6c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/modalStyles.css HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: text/css
last-modified: Tue, 26 Mar 2024 12:14:43 GMT
vary: Accept-Encoding
etag: W/"6602bc33-200f"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/banner.js | 122.10.48.4 | 200 OK | 9.7 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/banner.js IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typegzip compressed data, from Unix Hashc779b62322aa98e8c33efaff8830013b b724cff34224ea37aa676e33efe7cc4ed0e1fb0e 58b5f50cb1258e7dc20bd767f142651c7b98554fbc1fcddc5ff9ebcc2367ee39
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /banner.js HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: application/javascript
last-modified: Tue, 30 Apr 2024 12:17:10 GMT
vary: Accept-Encoding
etag: W/"6630e146-940"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/jquery.min.js | 122.10.48.4 | 200 OK | 50 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/jquery.min.js IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typegzip compressed data, from Unix Hash9fae83ce1d5d3393ef2aae629768837e 53fdb7d823e804c2a05dbab393cb94f5030ae416 ce09f266863fdf24ebb70c3ae4cbd37657c837a9a1492cb07a16806131d3e17e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /jquery.min.js HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: application/javascript
last-modified: Tue, 26 Dec 2023 13:01:43 GMT
vary: Accept-Encoding
etag: W/"658aceb7-15d83"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/188jinbaobo.png | 122.10.48.4 | 200 OK | 9.6 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/188jinbaobo.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced Hash708ba4b6074262568e36e973d4dde565 d148992916c89df65e9cf07478525f832c737d97 c3ee8270c3a8f9a4f36430847ec0604736d9dac91c572d37ad7875b407a95414
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/188jinbaobo.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 9632
last-modified: Tue, 19 Mar 2024 08:04:02 GMT
etag: "65f946f2-25a0"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/?id=1 | 122.10.48.4 | 200 OK | 28 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/?id=1 IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttp://www.longsheng818.com/ CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typegzip compressed data, from Unix Hash60e6eea6b433ea11482c0f90eefb315e cdafa734db82a2f16cc3ffc4cf1a28fbdc6ffa74 8b8da0dc33f4b42b47eb0f1ee64a677afb187efdc78beea8597a5e95a2820c8a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?id=1 HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.longsheng818.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:57 GMT
content-type: text/html
last-modified: Tue, 30 Apr 2024 12:17:10 GMT
vary: Accept-Encoding
etag: W/"6630e146-c1ed"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/bootstrap.min.js | 122.10.48.4 | 200 OK | 41 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/bootstrap.min.js IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typegzip compressed data, from Unix Hash69f7c550f7065880d03e16241abdb9f3 f9415ef7cdbbacda2b36ee1f15bf4f5e1e43b9ee a35b2856104ab2a405b09b0049a519b767d755911e66141ce4942c8eae3b4073
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bootstrap.min.js HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: application/javascript
last-modified: Tue, 26 Dec 2023 13:01:43 GMT
vary: Accept-Encoding
etag: W/"658aceb7-ea63"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/kaiyun.png | 122.10.48.4 | 200 OK | 6.7 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/kaiyun.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hashdb9a2738f1564dee49a7088f71bb4846 563a3840f730ab89567c95a4cf890842163bd9ce a970f25015b9233babca2d20c02fc8432cb75574170b934d8dc19a313a24a4f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/kaiyun.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 6685
last-modified: Tue, 26 Dec 2023 13:02:00 GMT
etag: "658acec8-1a1d"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/weide.png | 122.10.48.4 | 200 OK | 15 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/weide.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced Hash98fdeaedee02dbb266e2a8776e16ad79 a3893c8f6bea6b0caecd071c5d76c84362ca4d41 776c629ac011b865ed9a0c54172181f9e57d4ce760b306d642c3539b8aec3580
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/weide.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 15345
last-modified: Tue, 26 Dec 2023 13:02:05 GMT
etag: "658acecd-3bf1"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/yl.png | 122.10.48.4 | 200 OK | 7.7 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/yl.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash8bc216c590926b56b3c35f0ad22b73f9 a999bde264c1b0a0cb79262b55c1eef9a8822018 aa3098cdf7a31ad14e814a54fed8ed890c9ca1cf67240a9b4dcd10fb242468ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/yl.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 7703
last-modified: Tue, 26 Dec 2023 13:02:09 GMT
etag: "658aced1-1e17"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/zhezhao.js | 122.10.48.4 | 200 OK | 1.5 MB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/zhezhao.js IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typegzip compressed data, from Unix Size1.5 MB (1497398 bytes) Hash507d4ae7442c5d3daa174350a46b8a52 60d02bbf336c7d48956c89239c55ae7470f3f5c4 30de274b0861bd0c1eb86899f05647c28f932ce701d9ca7f8284767408aeb769
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /zhezhao.js HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: application/javascript
last-modified: Tue, 09 Jan 2024 11:54:25 GMT
vary: Accept-Encoding
etag: W/"659d33f1-1342"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/wlxe.png | 122.10.48.4 | 200 OK | 16 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/wlxe.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced Hashc3d083556b87d118a0dc110202c54d3d 430fe427b144b5e4b5e3ad16f3380e4698948b37 64a264a15095ad3aa0e976da81c83bdd0b4962af5c602367400446971b77e2df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/wlxe.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 15871
last-modified: Tue, 26 Dec 2023 13:02:06 GMT
etag: "658acece-3dff"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/xpj.png | 122.10.48.4 | 200 OK | 10 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/xpj.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hashc7bfcb4d9ea78b0c8b3b30ae21fde47f 8751c9b6f703ed52055e67c01daddf4db5f84bb6 3a2c1cba147e9d0e8c2b1d9db16ef45bff41c346b2478aa1c92685ab344da08b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/xpj.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 10324
last-modified: Tue, 26 Dec 2023 13:02:07 GMT
etag: "658acecf-2854"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/venetian.png | 122.10.48.4 | 200 OK | 18 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/venetian.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash8d62bc744f7510802a0117a1490412a8 1e0bf856322c85b72784296f1436197f99b3b83b 9c88a77357f754d10e69fd520ccdc60016f3172001950186a3379dd5999dd48d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/venetian.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 17768
last-modified: Tue, 26 Dec 2023 13:02:05 GMT
etag: "658acecd-4568"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/yujiazai.js | 122.10.48.4 | 200 OK | 9.2 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/yujiazai.js IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typegzip compressed data, from Unix Hash9ce595d7eb28da635242cafbc9fb7c82 755c09a0486b922b12a30278d5afc269479de45a af81fcede1862a16d7845f9b4e6adf98329e3b6243991b029f36f04fbeb14c07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /yujiazai.js HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: application/javascript
last-modified: Tue, 26 Dec 2023 13:01:48 GMT
vary: Accept-Encoding
etag: W/"658acebc-e7f"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/pinbo.png | 122.10.48.4 | 200 OK | 7.4 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/pinbo.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit/color RGB, non-interlaced Hashba5c1049ec645d33713a20987364298a 46385311365cdff8db109867889fc707af85d8a0 e609b31811814b1eb1de147bb69c301d6c46aab6f6aa1150880021102313b2dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/pinbo.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 7353
last-modified: Tue, 12 Mar 2024 12:18:14 GMT
etag: "65f04806-1cb9"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/bwin.png | 122.10.48.4 | 200 OK | 12 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/bwin.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit/color RGB, non-interlaced Hash75ccb70a93f713d93be72499126a2de7 58735a25a0a5866a8b7ef385e8be97e04059a219 d365c0540b4835579c02f713c70710ce501a7b081c3972fcc6c6a555063e2861
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/bwin.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 12249
last-modified: Fri, 05 Jan 2024 06:49:02 GMT
etag: "6597a65e-2fd9"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/jianchabg.png | 122.10.48.4 | 200 OK | 8.8 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/jianchabg.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 300 x 650, 2-bit colormap, non-interlaced Hash9342eac8dfcd2a564cd28438d4c67bc7 9199e74069465e7a9939d2be9c813bfc2eb65767 7476595d753218db6f6a902fc817309078a35c1c6b614c64fb8afb22f8af3519
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/jianchabg.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 8772
last-modified: Tue, 26 Dec 2023 13:02:00 GMT
etag: "658acec8-2244"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/css/style.css | 122.10.48.4 | 200 OK | 336 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/css/style.css IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typeASCII text, with very long lines (4600) Size336 kB (336096 bytes) Hash9ec4fb8539b6867f3df343a22529d5dd a01f4f4faa82541cdce53934b2f1356b69778d68 5f791c7b916c5c25bd36db3239784d8e4a41b7204fe1fc8965d786574a5404a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/style.css HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: text/css
last-modified: Tue, 26 Mar 2024 12:19:51 GMT
vary: Accept-Encoding
etag: W/"6602bd67-520e0"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/css/bootstrap.min.css | 122.10.48.4 | 200 OK | 160 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/css/bootstrap.min.css IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typeASCII text, with very long lines (65326) Size160 kB (160257 bytes) Hash9593715f4442d1f9d4e1a79e04481212 b480b8701abf383a48c32c7535e2387a1bf04cf3 1535585d0a5316a2dd4237a2a10d314dd174701c571f244cc0c44528b8b7fb3b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/bootstrap.min.css HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: text/css
last-modified: Tue, 26 Dec 2023 13:01:53 GMT
vary: Accept-Encoding
etag: W/"658acec1-27201"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/tyc.png | 122.10.48.4 | 200 OK | 23 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/tyc.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hashf48a34e39a90b4c10ccae34221f29cc2 ee219fdfba9be34e4f1e1004603c3051596d7aa9 2c87bcc51fbc8d1f4c4098909d08bf3058fd73c1faa8babc6e209c5fe9ea89f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/tyc.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 23200
last-modified: Tue, 26 Dec 2023 13:02:05 GMT
etag: "658acecd-5aa0"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/popper.min.js | 122.10.48.4 | 200 OK | 21 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/popper.min.js IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typeJavaScript source, ASCII text, with very long lines (21084) Hashc6946dff4854d4611da8aef36666b938 9118198bd2a853baa4644c6e819427150ca35160 7028ef6262d35db7dc22b05df3cbb3e93595ce90cd340fdc356620d961b01224
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /popper.min.js HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:58 GMT
content-type: application/javascript
last-modified: Tue, 26 Dec 2023 13:01:44 GMT
vary: Accept-Encoding
etag: W/"658aceb8-52e2"
expires: Sun, 05 May 2024 04:30:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/bg.lanse.png | 122.10.48.4 | 200 OK | 1.5 MB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/bg.lanse.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
Size1.5 MB (1494897 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/bg.lanse.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 1494897
last-modified: Tue, 26 Dec 2023 13:01:58 GMT
etag: "658acec6-16cf71"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/bet365.png | 122.10.48.4 | 200 OK | 16 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/bet365.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash986b4145fbe1e4bf1146f950e8744c76 feb6f1e393bcf80f3d102bcfc6b6c7bc3401f017 b5066d2d373b97a5022aacb6c2ecac56c2be41fa0bb8b33f4acd16d15e4811ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/bet365.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 15495
last-modified: Tue, 26 Dec 2023 13:01:55 GMT
etag: "658acec3-3c87"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/betway.png | 122.10.48.4 | 200 OK | 7.5 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/betway.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hashb03f143c3fb18ad12cfb83dfc83f4c89 359283705914fedbfa76715e039938bd0a5a3ae0 e1c802090e64b1b929472bd71a4b3d2a512517df4585f6d27736197237854e71
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/betway.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 7496
last-modified: Thu, 28 Mar 2024 12:57:58 GMT
etag: "66056956-1d48"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fhr.hm9wjzdxizyz.com/imgs/jiancha.1.png | 122.10.48.4 | 200 OK | 12 kB |
URL GET HTTP/2fhr.hm9wjzdxizyz.com/imgs/jiancha.1.png IP122.10.48.4:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://fhr.hm9wjzdxizyz.com/?id=1 CertificateIssuerLet's Encrypt Subject9ejvts9cj22x.com Fingerprint85:D7:B2:99:10:05:EE:DF:35:B4:43:F1:37:03:4A:69:CD:A6:CE:23 ValiditySat, 23 Mar 2024 08:21:27 GMT - Fri, 21 Jun 2024 08:21:26 GMT
File typePNG image data, 350 x 315, 8-bit colormap, non-interlaced Hash1b9da652d4e74da536342f7f3ebde7af 81ca53dbe67cf97a29bf14b83ab1b58e97559490 4210e9bdfc552db3b4cd04e423b2acd5ede38686cc67ff20881437c630bd04c2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imgs/jiancha.1.png HTTP/1.1
Host: fhr.hm9wjzdxizyz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fhr.hm9wjzdxizyz.com/?id=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:30:59 GMT
content-type: image/png
content-length: 11574
last-modified: Tue, 09 Jan 2024 12:17:53 GMT
etag: "659d3971-2d36"
expires: Mon, 03 Jun 2024 16:30:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|