117.141.116.125/nature/details/737
200 OK 19 kB URL User Request GET HTTP/1.1 117.141.116.125/nature/details/737
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type HTML document, Unicode text, UTF-8 text, with very long lines (440), with CRLF line terminators
Hash ee822b27fcf1077ca22ca27e18c7377f
8467dff4d2076719b8853301e90ca249b9318714
d27851787074d7e1d7220b6194d2e858542243c4f44a75e76252be96acee0503
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /nature/details/737 HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:40 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
X-Powered-By: PHP/5.2.17
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; path=/
ICMS[visit_times]=1; expires=Sat, 26-Apr-2025 10:29:40 GMT; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
117.141.116.125/templates/zrbwg/pc/js/menu.js
200 OK 258 B URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/js/menu.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 6345124e4dba724ed58831a72faeac12
80170f44d16ac00d3b39371614bbae5cd98ac492
0a5c806e84b609f12fc96a689d5399a29d19985e755924e99ce9235c27befa41
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/js/menu.js HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:41 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:43 GMT
ETag: "102-55dd87c4c17da"
Accept-Ranges: bytes
Content-Length: 258
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
117.141.116.125/templates/zrbwg/pc/js/common.js
200 OK 360 B URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/js/common.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Hash 5fcfd8e2939abd42d7c6ff92897f7b80
f962ca9079fd9f901923d0594d6fed74648c435e
4203ef5ee8defe796174e277060359302b832f088ebf20036e54d36c4d9a396d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/js/common.js HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:41 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:44 GMT
ETag: "168-55dd87c5bfa42"
Accept-Ranges: bytes
Content-Length: 360
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
117.141.116.125/templates/zrbwg/pc/js/js.js
200 OK 612 B URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/js/js.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 7aaf4055eab9a50e4ece2d538467c392
1b6efea51ed5b7f024543e5fe09fcecbfbb1591c
72ed2649683cf0d0eaccbe0612f7d5c39be71312c7d0999dc685ab2fdc0c5c0b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/js/js.js HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:41 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:43 GMT
ETag: "264-55dd87c50f5f2"
Accept-Ranges: bytes
Content-Length: 612
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
117.141.116.125/templates/zrbwg/pc/css/style.css
200 OK 20 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/css/style.css
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 7c78cef838439051c5d594194c9ea275
b1b9e7e2a76577ee0cd39345d8ebf7a83ddf7b7d
b86265f251402e836985da0d0377ebd0157d3cf3808cb28a47b3edb21f22127e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/css/style.css HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:41 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 08 Dec 2022 01:51:48 GMT
ETag: "4d60-5ef4747b1167e"
Accept-Ranges: bytes
Content-Length: 19808
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
117.141.116.125/templates/zrbwg/pc/js/jquery.min.js
200 OK 95 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/js/jquery.min.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)
Hash b8d64d0bc142b3f670cc0611b0aebcae
abcd2ba13348f178b17141b445bc99f1917d47af
47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/js/jquery.min.js HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:41 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:43 GMT
ETag: "17278-55dd87c54553a"
Accept-Ranges: bytes
Content-Length: 94840
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
117.141.116.125/templates/zrbwg/pc/js/jquery-1.4.2.js
200 OK 164 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/js/jquery-1.4.2.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JavaScript source, ASCII text, with very long lines (357)
Size 164 kB (163855 bytes)
Hash c0ac4e323dfd52aaf1f80c9880b35e7b
265a86a9d9df5dfdbad77e06c85605bec4beb32a
95c023c80dfe0d30304c58244878995061f87801a66daa5d6bf4f2512be0e6f9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/js/jquery-1.4.2.js HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:41 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:44 GMT
ETag: "2800f-55dd87c586c1a"
Accept-Ranges: bytes
Content-Length: 163855
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
117.141.116.125/templates/zrbwg/pc/img/0000.png
200 OK 1.5 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/img/0000.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 27 x 35, 8-bit/color RGBA, non-interlaced
Hash ec2d83e5589b93ae50ef91abe719feff
1e8a740ee3cb78272c09cd9d5d9ca7de0bb45ebc
02a263e7af8a3f9840087373b092b250f049dbe5b85a150281bb5df77b593037
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/img/0000.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:42 GMT
ETag: "5fd-55dd87c486a72"
Accept-Ranges: bytes
Content-Length: 1533
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
117.141.116.125/templates/zrbwg/pc/img/zrbwg3.jpg
200 OK 939 B URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/img/zrbwg3.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 21x19, components 3
Hash b127044d10073b0610a02339c75fbc50
83dd8384d53c2c4e911e8db4124566c85943c96b
1be26887795f8fe4ec5d13aa33e8787b71177802f075fb72822650ccf4da4d68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/img/zrbwg3.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/templates/zrbwg/pc/css/style.css
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:38 GMT
ETag: "3ab-55dd87c05db62"
Accept-Ranges: bytes
Content-Length: 939
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
117.141.116.125/templates/zrbwg/pc/img/zrbwg4.png
200 OK 1.7 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/img/zrbwg4.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 108 x 36, 8-bit/color RGBA, non-interlaced
Hash 642ce53b18133d6f5af224899e2fb631
fa5c9b5ad1650daf83a90cf06930a81e963a4b1f
3c36338b862b7a4b45bb82f9cfc98ad4f697d787a3414cdfd367560fe21a4695
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/img/zrbwg4.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/templates/zrbwg/pc/css/style.css
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:37 GMT
ETag: "6b1-55dd87bf19fb2"
Accept-Ranges: bytes
Content-Length: 1713
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
200 OK 2.3 kB URL GET HTTP/1.1 i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://117.141.116.125/nature/details/737
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (1437), with CRLF line terminators
Hash 03c47f8d341ee855d14acdf338da3735
c01dee816e3464d8b592541d6606a66790c35d73
664f9418e0a91a38c888069379bfd3e1dc5dae7fbc184018043ea490ce46fd63
GET /index.php?c=code&id=12&icon=2&num=5 HTTP/1.1
Host: i.tianqi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=UTF-8
Content-Length: 2345
Connection: keep-alive
Date: Fri, 26 Apr 2024 10:29:47 GMT
Vary: Accept-Encoding
Expires: Fri, 26 Apr 2024 10:29:47 GMT
Pragma: no-cache
Cache-Control: max-age=0
Set-Cookie: ipPy=beijing; expires=Sun, 26-May-2024 10:29:47 GMT; Max-Age=2592000; path=/
PATHURL=c%3Dcode%26id%3D12%26icon%3D2%26num%3D5; path=/; domain=tianqi.com
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714127387
Via: cache16.l2de2[320,319,200-0,M], cache26.l2de2[321,0], ens-cache3.it5[336,335,200-0,M], ens-cache10.it5[342,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 26 Apr 2024 10:29:47 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: a3b5329e17141273868327560e
117.141.116.125/upload/image/20220929/20220929093616_52626.jpg
200 OK 249 kB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929093616_52626.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, description=DCIM\100MEDIA\DJI_0012.JPG], baseline, precision 8, 800x450, components 3
Size 249 kB (248959 bytes)
Hash 688ed6752624f9d3cc25ad577428f3f6
89bc33d2d36d6be2ec932c22e2133af7f73d6b6d
2de6811da4eccc8e7e1ad5af3f0f2917f07e4be15aad9ca2cc6b175cddb2e78d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929093616_52626.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:36:16 GMT
ETag: "3cc7f-5e9c6e7414397"
Accept-Ranges: bytes
Content-Length: 248959
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
117.141.116.125/templates/zrbwg/pc/img/zrbwg17.jpg
200 OK 6.9 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/img/zrbwg17.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 979x50, components 3
Hash 67080894f4274ba575db3daa79ea8767
24eb498c5b7039c781b0fa17b008144f03196fab
b74441aed04c527ee28a5129e797f17dbc1dd47876c69c7baa81f5a314b16881
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/img/zrbwg17.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/templates/zrbwg/pc/css/style.css
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:40 GMT
ETag: "1af2-55dd87c1e976a"
Accept-Ranges: bytes
Content-Length: 6898
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
plugin.tianqistatic.com/static/js/jquery-1.8.2.min.js
200 OK 34 kB URL GET HTTP/1.1 plugin.tianqistatic.com/static/js/jquery-1.8.2.min.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65480), with CRLF line terminators
Hash 61551013be89774882ceee7d71cd8bdb
d3663481db6e4ab073c63c446c97c92ee7d775ba
66d90e5e13ae94c17031290690e477df30e56e72eff21a0c8e102bebc80aaea2
GET /static/js/jquery-1.8.2.min.js HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 33689
Connection: keep-alive
Date: Sun, 21 Jan 2024 08:26:19 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:22 GMT
Vary: Accept-Encoding
ETag: W/"6120c4a2-16cfb"
Expires: Sun, 21 Jan 2024 20:26:19 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1705825579
Via: cache14.l2de2[0,0,200-0,H], cache15.l2de2[0,0], ens-cache7.se2[0,0,200-0,H], ens-cache6.se2[1,0]
Age: 8301808
X-Cache: HIT TCP_MEM_HIT dirn:9:8507419
X-Swift-SaveTime: Mon, 01 Apr 2024 03:04:41 GMT
X-Swift-CacheTime: 24988898
Timing-Allow-Origin: *
EagleId: 2ff62c9a17141273874593057e
plugin.tianqistatic.com/static/js/provincesData.js
200 OK 47 kB URL GET HTTP/1.1 plugin.tianqistatic.com/static/js/provincesData.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (60199), with no line terminators
Hash 593dc9384cb87e1b06063eab02b11df4
fa36f7bb48cc8e3f5e2204755e2b985c9e165c77
54451fc55486dae611c1a926bf2f316882caa9c0d02cc6698c1cdc66235df93c
GET /static/js/provincesData.js HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 47358
Connection: keep-alive
Date: Tue, 31 Oct 2023 15:28:10 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:22 GMT
Vary: Accept-Encoding
ETag: W/"6120c4a2-31013"
Expires: Wed, 01 Nov 2023 03:28:10 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1698766090
Via: cache26.l2de2[0,0,200-0,H], cache23.l2de2[3,0], ens-cache6.se2[0,0,200-0,H], ens-cache5.se2[0,0]
Age: 15361297
X-Cache: HIT TCP_MEM_HIT dirn:3:11598077
X-Swift-SaveTime: Thu, 28 Mar 2024 21:19:44 GMT
X-Swift-CacheTime: 18209306
Timing-Allow-Origin: *
EagleId: 2ff62c9917141273874593549e
plugin.tianqistatic.com/static/js/jquery.provincesCity.js
200 OK 789 B URL GET HTTP/1.1 plugin.tianqistatic.com/static/js/jquery.provincesCity.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 5b35b66b70e5cdd89c793a06d09c64f2
35247aed3eee0f0bafff4dd0f473e94195dab947
94acd62b2ff0bd7028979ce4515ab3ea73c47940a4eaebe934d4132111ccdc23
GET /static/js/jquery.provincesCity.js HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 789
Connection: keep-alive
Date: Sun, 17 Mar 2024 10:28:16 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:22 GMT
Vary: Accept-Encoding
ETag: W/"6120c4a2-9c0"
Expires: Sun, 17 Mar 2024 22:28:16 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1710671296
Via: cache16.l2de2[0,0,200-0,H], cache17.l2de2[1,0], ens-cache13.se2[0,0,200-0,H], ens-cache2.se2[1,0]
Age: 3456091
X-Cache: HIT TCP_MEM_HIT dirn:11:5714742
X-Swift-SaveTime: Thu, 28 Mar 2024 21:19:44 GMT
X-Swift-CacheTime: 30114512
Timing-Allow-Origin: *
EagleId: 2ff62c9617141273874815058e
117.141.116.125/upload/info/20171108093644.png
200 OK 56 kB URL GET HTTP/1.1 117.141.116.125/upload/info/20171108093644.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 466 x 119, 8-bit/color RGBA, non-interlaced
Hash 10b2464b67fb16ada38d96684493540e
8dc09038e1205b7157e0e7058d589d4a73fe9f65
df716369c60ae8d4c11f6b8f4284dcf25f86e0fb84c44454939a64053d8cfe24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/info/20171108093644.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:48:56 GMT
ETag: "db5d-55dd880ab822a"
Accept-Ranges: bytes
Content-Length: 56157
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
117.141.116.125/templates/zrbwg/pc/img/cs.png
200 OK 19 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/img/cs.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Hash d0289dc0a46fc5b15b3363ffa78cf6c7
29c400bc3b89f6085766dac4e0330ded5cb73d52
a20583c81805fe64f7fa210851ce29754af9d25fd6aa5a3225a9557529602513
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/img/cs.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:41 GMT
ETag: "4b38-55dd87c385d12"
Accept-Ranges: bytes
Content-Length: 19256
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
117.141.116.125/templates/zrbwg/pc/img/main_contentbg.jpg
200 OK 12 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/img/main_contentbg.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2015:06:02 10:59:05], progressive, precision 8, 974x119, components 3
Hash 42c5444efcef4bbb8b2d10bccb9d3475
c353c5a2583251a52af0a54eac403e6e0737913d
7bea162a4d9e473b062db80b378225b547b62ae40f32ce8914e7d94535d5fdcc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/img/main_contentbg.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/templates/zrbwg/pc/css/style.css
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:44 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:41 GMT
ETag: "2f05-55dd87c36fd82"
Accept-Ranges: bytes
Content-Length: 12037
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
117.141.116.125/templates/zrbwg/pc/images/pro_down.png
404 Not Found 236 B URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/images/pro_down.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type HTML document, ASCII text
Hash e9e1d87ff3dd090b10e96aeb8a4a4e87
e47cc386589df23249265f378c8a2c5677102f3a
671fd68c4dfd386e9a414f9519fffdf242d8d989d523d4660c5af81cea782952
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/images/pro_down.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/templates/zrbwg/pc/css/style.css
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 10:29:44 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Content-Length: 236
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
117.141.116.125/templates/zrbwg/pc/img/zrbwg18.jpg
200 OK 132 kB URL GET HTTP/1.1 117.141.116.125/templates/zrbwg/pc/img/zrbwg18.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1918x1750, components 3
Size 132 kB (131649 bytes)
Hash b92fdd5369391ed345594babccd2f351
fb649e515ea9a2f355d12f041eb1e0563b0b2a97
8ba31890d8bba8d3d9fa88c6a44ec998e35713026e8f5460a1ebb3b3b20eb19c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/zrbwg/pc/img/zrbwg18.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:44 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:47:40 GMT
ETag: "20241-55dd87c1c5162"
Accept-Ranges: bytes
Content-Length: 131649
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
static.tianqistatic.com/static/css/mobile.css
200 OK 2.7 kB URL GET HTTP/1.1 static.tianqistatic.com/static/css/mobile.css
IP
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type Unicode text, UTF-8 text, with very long lines (5092)
Hash e17b9906e937cb981560a5e088669794
4f7d38ec215cffda1527807111238d69262b2679
14dc59cc9984e82aa00393c1140514a186b2ceafbc3f28c394c05a0f0232f979
GET /static/css/mobile.css HTTP/1.1
Host: static.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/css
Content-Length: 2693
Connection: keep-alive
Date: Thu, 25 Apr 2024 02:08:05 GMT
Last-Modified: Sat, 13 Apr 2024 06:49:56 GMT
Vary: Accept-Encoding
ETag: W/"661a2b14-4118"
Expires: Thu, 25 Apr 2024 14:08:05 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714010885
Via: cache60.l2cn1827[0,0,200-0,H], cache37.l2cn1827[1,0], kunlun3.cn6425[0,0,200-0,H], kunlun5.cn6425[0,0]
Age: 116503
X-Cache: HIT TCP_MEM_HIT dirn:11:703455688
X-Swift-SaveTime: Thu, 25 Apr 2024 02:08:06 GMT
X-Swift-CacheTime: 25919999
Timing-Allow-Origin: *
EagleId: 3da0c00f17141273885058816e
plugin.tianqistatic.com/static/images/tianqibig/b0.png
6.7 kB URL GET plugin.tianqistatic.com/static/images/tianqibig/b0.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Hash ba7de6621799216217699c008ad6076e
cb6158d5aa6e24f7adf9f7352f70fa27c20a7c4d
7d67a3b4ce8229c58f742b77f04a74b57d571bd288b2119b1b0161a9f31ce1c7
GET /static/images/tianqibig/b0.png HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 6738
Connection: keep-alive
Date: Thu, 28 Mar 2024 21:42:14 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:19 GMT
Vary: Accept-Encoding
ETag: W/"6120c49f-1a36"
Expires: Sat, 27 Apr 2024 21:42:14 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1711662134
Via: cache8.l2de2[452,452,200-0,M], cache9.l2de2[455,0], ens-cache2.se2[0,0,200-0,H], ens-cache6.se2[1,0]
Age: 2465254
X-Cache: HIT TCP_HIT dirn:11:37036857
X-Swift-SaveTime: Thu, 28 Mar 2024 21:42:14 GMT
X-Swift-CacheTime: 31104000
Timing-Allow-Origin: *
EagleId: 2ff62c9a17141273886503742e
plugin.tianqistatic.com/static/images/tianqibig/b7.png
6.4 kB URL GET plugin.tianqistatic.com/static/images/tianqibig/b7.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Hash 6b580c8eca2b3cd35b2d7089828d1f3d
7cbd3a73155c4961ed95c1da9ffbdebe3fbbb5d9
746a5510595432d8a7d1230546b92eb8b226f6859bea899818322cda553295e2
GET /static/images/tianqibig/b7.png HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 6446
Connection: keep-alive
Date: Sat, 23 Mar 2024 18:04:53 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:19 GMT
Vary: Accept-Encoding
ETag: W/"6120c49f-1912"
Expires: Mon, 22 Apr 2024 18:04:53 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1711217093
Via: cache9.l2de2[0,0,200-0,H], cache17.l2de2[1,0], ens-cache3.se2[0,0,200-0,H], ens-cache5.se2[1,0]
Age: 2910295
X-Cache: HIT TCP_HIT dirn:10:271374434
X-Swift-SaveTime: Thu, 28 Mar 2024 23:28:31 GMT
X-Swift-CacheTime: 30652582
Timing-Allow-Origin: *
EagleId: 2ff62c9917141273886474210e
plugin.tianqistatic.com/static/images/tianqibig/b1.png
7.0 kB URL GET plugin.tianqistatic.com/static/images/tianqibig/b1.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Hash 06925db3d9547f27ce4837ff43a30e38
8661f8787425a46ec67f0a73c3d3ed91b741a82a
41f6a3be93c300a3a2411603b4c9894d1685b512ed9aa147df8035f5a34be2c9
GET /static/images/tianqibig/b1.png HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 7048
Connection: keep-alive
Date: Mon, 04 Mar 2024 07:22:00 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:19 GMT
Vary: Accept-Encoding
ETag: W/"6120c49f-1b6c"
Expires: Wed, 03 Apr 2024 07:22:00 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1709536920
Via: cache17.l2de2[0,10,200-0,H], cache11.l2de2[17,0], ens-cache11.se2[0,0,200-0,H], ens-cache2.se2[1,0]
Age: 4590468
X-Cache: HIT TCP_HIT dirn:11:92622917
X-Swift-SaveTime: Thu, 28 Mar 2024 21:42:13 GMT
X-Swift-CacheTime: 28978787
Timing-Allow-Origin: *
EagleId: 2ff62c9617141273886595972e
117.141.116.125/upload/image/20220929/20220929092109_46048.png
200 OK 847 kB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929092109_46048.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 1205 x 926, 8-bit/color RGBA, non-interlaced
Size 847 kB (846938 bytes)
Hash bd81ae38191b419bf1031bdcc9db74e8
9426befa754a540feaea02cc82c8757c5ad0ee9b
d1c11960fe3d7faa1b7438ec7a37994ed5be30efc2f6306678c8c6534a69fe5b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929092109_46048.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:44 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:21:09 GMT
ETag: "cec5a-5e9c6b130991e"
Accept-Ranges: bytes
Content-Length: 846938
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
117.141.116.125/upload/image/20220929/20220929093459_58422.jpg
200 OK 181 kB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929093459_58422.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, description=DCIM\100MEDIA\DJI_0020.JPG], baseline, precision 8, 800x450, components 3
Size 181 kB (181039 bytes)
Hash e64167ea24f7d2678b3b03b9eab30a62
47c93d9e09d9e4d85f1393685017df05414d48cb
1d15c9c6086bff7c5fb6b8bad82ee926b430b4ea755d29d96a6d899f9ecb6835
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929093459_58422.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:34:59 GMT
ETag: "2c32f-5e9c6e2b1b397"
Accept-Ranges: bytes
Content-Length: 181039
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
117.141.116.125/upload/info/20150611120337.png
200 OK 166 kB URL GET HTTP/1.1 117.141.116.125/upload/info/20150611120337.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 545 x 546, 8-bit/color RGB, non-interlaced
Size 166 kB (166126 bytes)
Hash df67f1d93aff0a0eab807eb120f478e0
f8246be593ba80cf6b4e37abba542c1bbb75155f
c5631037df43c05ea47c0941d08d58baa40401eb2bf99a17524879943ee5fc60
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/info/20150611120337.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:44 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Mon, 13 Nov 2017 07:49:06 GMT
ETag: "288ee-55dd8814126c2"
Accept-Ranges: bytes
Content-Length: 166126
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
plugin.tianqistatic.com/static/images/tqicon2/b1.png
4.3 kB URL GET plugin.tianqistatic.com/static/images/tqicon2/b1.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type PNG image data, 50 x 46, 8-bit colormap, non-interlaced
Hash c43c03805bf1ce9839324c4855ea6dac
06c1be9ec943aaf8722ecf5eeea825c2ddc1d9d7
fa741640e7e876ddc3c55345cbe78511d6627d0b8e3b22aa2c1685a4e8afed29
GET /static/images/tqicon2/b1.png HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4279
Connection: keep-alive
Date: Fri, 26 Apr 2024 03:27:35 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:21 GMT
Vary: Accept-Encoding
ETag: W/"6120c4a1-12f7"
Expires: Sun, 26 May 2024 03:27:35 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714102055
Via: cache12.l2de2[0,0,200-0,H], cache19.l2de2[1,0], ens-cache19.se2[84,86,200-0,M], ens-cache6.se2[88,0]
Age: 25333
X-Cache: MISS TCP_MISS dirn:11:417005739
X-Swift-SaveTime: Fri, 26 Apr 2024 10:29:48 GMT
X-Swift-CacheTime: 31078667
Timing-Allow-Origin: *
EagleId: 2ff62c9a17141273888593856e
117.141.116.125/upload/image/20220929/20220929093412_29756.png
200 OK 481 kB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929093412_29756.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced
Size 481 kB (481302 bytes)
Hash e6842d28d7f79fe7bdda6f9648337d6b
bce666c7056f95ef0ff5c651a4764e4b88f74625
d5224a9824dbcdaaf33c7d2dd54a76faea84e412136be9ea78599b230f18f584
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929093412_29756.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:34:12 GMT
ETag: "75816-5e9c6dfe3e314"
Accept-Ranges: bytes
Content-Length: 481302
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
117.141.116.125/upload/image/20220929/20220929092144_17454.jpg
200 OK 183 kB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929092144_17454.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, description=DCIM\100MEDIA\DJI_0029.JPG], baseline, precision 8, 800x361, components 3
Size 183 kB (182895 bytes)
Hash 98cb68911c0c78034ca0829d058def9b
2d66afdb355f1aeac7a10f5c5ad0187e14c93a53
7ed2144559c02f977f0e3a99e516f5871e96a0a0629c1963f11a222388191c14
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929092144_17454.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:45 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:21:44 GMT
ETag: "2ca6f-5e9c6b34b10d9"
Accept-Ranges: bytes
Content-Length: 182895
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
117.141.116.125/upload/image/20220929/20220929093352_43310.jpg
200 OK 159 kB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929093352_43310.jpg
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=13, manufacturer=NIKON CORPORATION, model=NIKON D500, orientation=upper-left, xresolution=199, yresolution=207, resolutionunit=2, software=ACDSee Home 2022, datetime=2022:09:28 16:29:29], baseline, precision 8, 800x451, components 3
Size 159 kB (158776 bytes)
Hash d2d792500c368ef19abaed6426a6d8d3
a597f79b865fe9c6e63379818bf5e515424c56fa
83278901f15a8297d6b443696924a97b65d0e191900b4aaa0f00a8b0cf6c732c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929093352_43310.jpg HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:45 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:33:52 GMT
ETag: "26c38-5e9c6deb4539a"
Accept-Ranges: bytes
Content-Length: 158776
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
plugin.tianqistatic.com/static/images/tqicon2/b7.png
4.1 kB URL GET plugin.tianqistatic.com/static/images/tqicon2/b7.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type PNG image data, 50 x 46, 8-bit colormap, non-interlaced
Hash bcae6dda692dff9838e0167516cee918
cf8082aa4acb048f0d65020ccd216d80120ccc08
d18f67f7de6300ceb5d80044792b1642930b4301539fdf1800a4449da648757a
GET /static/images/tqicon2/b7.png HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4102
Connection: keep-alive
Date: Fri, 26 Apr 2024 10:29:49 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:21 GMT
Vary: Accept-Encoding
ETag: W/"6120c4a1-124a"
Expires: Sun, 26 May 2024 10:29:49 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714127389
Via: cache26.l2de2[451,451,200-0,M], cache19.l2de2[453,0], ens-cache4.se2[539,539,200-0,M], ens-cache5.se2[541,0]
Age: 0
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 26 Apr 2024 10:29:49 GMT
X-Swift-CacheTime: 31104000
Timing-Allow-Origin: *
EagleId: 2ff62c9917141273888574330e
plugin.tianqistatic.com/static/images/tqicon2/b0.png
4.1 kB URL GET plugin.tianqistatic.com/static/images/tqicon2/b0.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
File type PNG image data, 50 x 46, 8-bit colormap, non-interlaced
Hash bf30b3f2ed1378c1bc88e1f1fff63b3c
47e44a56002f5a17332e239df4bb8578a81a2290
5f450813a4afd4db718c39733bba4269d68ddc4e2c35c26103109d4dbba144fd
GET /static/images/tqicon2/b0.png HTTP/1.1
Host: plugin.tianqistatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4115
Connection: keep-alive
Date: Fri, 26 Apr 2024 10:29:49 GMT
Last-Modified: Sat, 21 Aug 2021 09:17:21 GMT
Vary: Accept-Encoding
ETag: W/"6120c4a1-1250"
Expires: Sun, 26 May 2024 10:29:49 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714127389
Via: cache5.l2de2[442,442,200-0,M], cache20.l2de2[443,0], ens-cache14.se2[527,527,200-0,M], ens-cache2.se2[529,0]
Age: 0
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 26 Apr 2024 10:29:49 GMT
X-Swift-CacheTime: 31104000
Timing-Allow-Origin: *
EagleId: 2ff62c9617141273888696126e
117.141.116.125/upload/image/20220929/20220929092808_59869.png
200 OK 1.1 MB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929092808_59869.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 1195 x 920, 8-bit/color RGBA, non-interlaced
Size 1.1 MB (1074564 bytes)
Hash 9d6457b562a42a2fee1a0308a5856312
7f8d2c8abfe26a2f2462b37a269cbcbe6ca6ee86
83b2c961c61fe2eb66e7e6ec9a473bb9bedb5057cb1df8df3c9f7b332bbcc199
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929092808_59869.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:45 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:28:08 GMT
ETag: "106584-5e9c6ca327beb"
Accept-Ranges: bytes
Content-Length: 1074564
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
117.141.116.125/upload/image/20220929/20220929092038_78554.png
200 OK 1.0 MB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929092038_78554.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 1198 x 923, 8-bit/color RGBA, non-interlaced
Size 1.0 MB (1047470 bytes)
Hash 6559dd4a4a423ef5e1e7b9b80628605f
b97569e3c03796f44e43000602dde26ce31e2aa5
3ff2ca16491a48cb32c98e0e8122511fe4711f1c046c7eb6fb5119b2a716193a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929092038_78554.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:44 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:20:38 GMT
ETag: "ffbae-5e9c6af5e08b1"
Accept-Ranges: bytes
Content-Length: 1047470
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
hm.baidu.com/hm.js?86f43783acc56b0c8abb5bb039edc763
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?86f43783acc56b0c8abb5bb039edc763
IP
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type JavaScript source, ASCII text, with very long lines (621)
Hash 468cc41da4407a99b3f900adaccd94f6
205722a13210f3167d25bd9ed03290d8535e8354
cb64c89d768620a7ba97c87b30cb1e4f1ae1f7219c2479ab5c5b089dbbfa3509
GET /hm.js?86f43783acc56b0c8abb5bb039edc763 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Fri, 26 Apr 2024 10:29:50 GMT
Etag: 1020bb6085ed88ebb6e50f6fccb09f6a
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=B7A29DDD67230C67; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=60&et=0&ja=0&ln=en-us&lo=0&rnd=2146064639&si=86f43783acc56b0c8abb5bb039edc763&su=http%3A%2F%2F117.141.116.125%2F&v=1.3.0&lv=1&sn=59466&r=0&ww=300&u=http%3A%2F%2Fi.tianqi.com%2Findex.php%3Fc%3Dcode%26id%3D12%26icon%3D2%26num%3D5&tt=%E5%8C%97%E4%BA%AC%E5%A4%A9%E6%B0%94%E9%A2%84%E6%8A%A5%E4%BB%A3%E7%A0%81%E8%B0%83%E7%94%A8
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=60&et=0&ja=0&ln=en-us&lo=0&rnd=2146064639&si=86f43783acc56b0c8abb5bb039edc763&su=http%3A%2F%2F117.141.116.125%2F&v=1.3.0&lv=1&sn=59466&r=0&ww=300&u=http%3A%2F%2Fi.tianqi.com%2Findex.php%3Fc%3Dcode%26id%3D12%26icon%3D2%26num%3D5&tt=%E5%8C%97%E4%BA%AC%E5%A4%A9%E6%B0%94%E9%A2%84%E6%8A%A5%E4%BB%A3%E7%A0%81%E8%B0%83%E7%94%A8
IP
Requested by http://i.tianqi.com/index.php?c=code&id=12&icon=2&num=5
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=60&et=0&ja=0&ln=en-us&lo=0&rnd=2146064639&si=86f43783acc56b0c8abb5bb039edc763&su=http%3A%2F%2F117.141.116.125%2F&v=1.3.0&lv=1&sn=59466&r=0&ww=300&u=http%3A%2F%2Fi.tianqi.com%2Findex.php%3Fc%3Dcode%26id%3D12%26icon%3D2%26num%3D5&tt=%E5%8C%97%E4%BA%AC%E5%A4%A9%E6%B0%94%E9%A2%84%E6%8A%A5%E4%BB%A3%E7%A0%81%E8%B0%83%E7%94%A8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://i.tianqi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 26 Apr 2024 10:29:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=1AA66A3358633266; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
117.141.116.125/favicon.ico
404 Not Found 1.2 kB URL GET HTTP/1.1 117.141.116.125/favicon.ico
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type HTML document, ASCII text
Hash 4f7aa457629647636b72bda5fb3b604e
4930b3c0b5e5aa30fe8291157b6183b5c287d9d6
3ad7314a945cb9687895797dd2afe6fd0ddfd46eff59f9fb0897841bb135d643
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 10:29:48 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
X-Powered-By: PHP/5.2.17
Content-Length: 1175
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html
zrbwg.topnic.net/templates/zrbwg/pc/img/nav01.jpg
0 B URL GET zrbwg.topnic.net/templates/zrbwg/pc/img/nav01.jpg
IP
Requested by http://117.141.116.125/nature/details/737
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/zrbwg/pc/img/nav01.jpg HTTP/1.1
Host: zrbwg.topnic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/
Pragma: no-cache
Cache-Control: no-cache
117.141.116.125/upload/image/20220929/20220929093548_32354.png
200 OK 956 kB URL GET HTTP/1.1 117.141.116.125/upload/image/20220929/20220929093548_32354.png
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://117.141.116.125/nature/details/737
File type PNG image data, 1197 x 927, 8-bit/color RGBA, non-interlaced
Size 956 kB (955595 bytes)
Hash 4ef506a69648d19057f44880a1b1f763
1150ddabb1f04c8e5450081d10ea68c13f131983
d37d2f1e2274a6964529a22bc3fc756c90819b4ef42b41d72b2fefc696ff0762
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /upload/image/20220929/20220929093548_32354.png HTTP/1.1
Host: 117.141.116.125
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/nature/details/737
Cookie: PHPSESSID=d639f2efb1ac26434615e381fe02449d; ICMS[visit_times]=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 10:29:43 GMT
Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.2.17
Last-Modified: Thu, 29 Sep 2022 01:35:48 GMT
ETag: "e94cb-5e9c6e593f6c6"
Accept-Ranges: bytes
Content-Length: 955595
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
dcs.conac.cn/js/21/000/0000/40939294/CA210000000409392940002.js
0 B URL GET dcs.conac.cn/js/21/000/0000/40939294/CA210000000409392940002.js
IP
Requested by http://117.141.116.125/nature/details/737
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/21/000/0000/40939294/CA210000000409392940002.js HTTP/1.1
Host: dcs.conac.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.141.116.125/
Pragma: no-cache
Cache-Control: no-cache
117.141.116.125
163.181.50.236
47.246.44.242
0.0.0.0