URL User Request GET HTTP/1.1IP168.76.253.241:80 ASN#137951 ASLINE LIMITED
File typeHTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators Hashad07fc3f16af51117e9ef6463ea456b7 256c7edcfec7482d637eedc66998020e77ea9def 82cb88401efa8dbafd723756e5e15ba6be7684f27c822fdfb3dcdd0cee303492
GET / HTTP/1.1
Host: ekalduc.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 10:20:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Trace-Id: f518e9a42030c917c67a9e5d002f7aca
X-Cache: MISS
Content-Encoding: gzip
|
| ekalduc.cn/public/css/css8.css | 168.76.253.241 | 200 OK | 4.2 kB |
URL GET HTTP/1.1ekalduc.cn/public/css/css8.css IP168.76.253.241:80 ASN#137951 ASLINE LIMITED
Hash85d45beb74a6f0d497342a94460227a2 0507877f094f65c37d0a178e6eef33e53ac391bd bec739335e3910784011b08807747651ebd0f246ed8b5cb151f0210a29065721
GET /public/css/css8.css HTTP/1.1
Host: ekalduc.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ekalduc.cn/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 10:20:50 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 29 Nov 2023 12:08:07 GMT
X-Cache: MISS
Content-Encoding: gzip
|
| 43.139.22.16:1668/pic/11088.jpg | 43.139.22.16 | 200 OK | 8.8 kB |
URL GET HTTP/1.143.139.22.16:1668/pic/11088.jpg IP43.139.22.16:1668 ASN#45090 Shenzhen Tencent Computer Systems Company Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 40", baseline, precision 8, 363x225, components 3 Hash3a6eca1a9a1ef911ffb0d5dfac1b0531 746a3f8d8f090f9e1cd7d7c5bb8623539ba8c250 618b14cdd1bb2aa41a808540e6c20079b3b374284cf21e01b66fb359dd45db05
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /pic/11088.jpg HTTP/1.1
Host: 43.139.22.16:1668
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ekalduc.cn/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 10:20:50 GMT
Content-Type: image/jpeg
Content-Length: 8820
Last-Modified: Mon, 23 Oct 2023 07:06:40 GMT
Connection: keep-alive
ETag: "65361b80-2274"
Expires: Fri, 24 May 2024 10:20:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
IP168.76.253.241:80 ASN#137951 ASLINE LIMITED
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hashda865a0b09efc4afb8b82adb67bd1923 dd9bf440da4950cf6a004d4d3803dd4db9718e93 5bb8acdc25ba3e8be7607d4ea4095347f74e081d817eee079345056b741473f8
GET /favicon.ico HTTP/1.1
Host: ekalduc.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ekalduc.cn/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 10:20:51 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Tue, 12 Sep 2023 10:12:35 GMT
X-Cache: MISS
Accept-Ranges: bytes
|
| 43.139.22.16:1668/web/web8/banner.jpg | 43.139.22.16 | 200 OK | 37 kB |
URL GET HTTP/1.143.139.22.16:1668/web/web8/banner.jpg IP43.139.22.16:1668 ASN#45090 Shenzhen Tencent Computer Systems Company Limited
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1067x600, components 3 Hashe58e44ed6577a4bcb061b04e92ba6fbf b220cef9d3588e6aeb3e1397fb670028aa10f77f 3ebe9c425ded6333b7b555370d58663747ceb9749f932d77d8e95ca615a3fdc9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /web/web8/banner.jpg HTTP/1.1
Host: 43.139.22.16:1668
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ekalduc.cn/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 10:20:51 GMT
Content-Type: image/jpeg
Content-Length: 36687
Last-Modified: Sat, 18 Nov 2023 05:49:12 GMT
Connection: keep-alive
ETag: "65585058-8f4f"
Expires: Fri, 24 May 2024 10:20:51 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|