Report - mmmbg.com/ahtklh-Products-5820997

Report Overview

Submitted URL
mmmbg.com/ahtklh-Products-5820997
IP
50.2.65.227
ASN
#62904 AS62904
Submitted
2024-04-18 12:40:21
Access
public
Website Title
8040威尼斯-官方首页(欢迎您)
Final URL
mmmbg.com/ahtklh-Products-5820997
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.ybzhan.cn	unknown	2006-01-21	2013-07-26	2024-02-27	721 B	1.9 kB	58.218.215.167
chat.ybzhan.cn	unknown	2006-01-21	2013-11-27	2024-02-27	963 B	32 kB	58.218.215.164
img65.ybzhan.cn	unknown	2006-01-21	2015-04-15	2024-01-21	800 B	375 kB	120.52.95.234
www.ahtk1718.com	unknown	2009-12-28	2015-05-18	2024-02-27	5.5 kB	958 kB	110.185.108.35
	unknown				410 B	0 B	0.0.0.0
mmmbg.com	unknown	2021-10-07	2016-05-21	2024-03-04	6.8 kB	78 kB	50.2.65.227
www.mmmbg.com	unknown	2021-10-07	2017-04-23	2024-02-27	313 B	1.0 kB	50.2.65.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed
2024-04-18	medium	ahtk1718.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	chat.ybzhan.cn/Content/js/jquery.js	85 kB	2023-03-07	2024-04-18
Pretty URL chat.ybzhan.cn/Content/js/jquery.js IP 58.218.215.164 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:42:46 Last Seen2024-04-18 14:40:24 Times Seen104 Hash 421ce628a95a26088cab91e158a50837 0adfe2c48cb57357ca877d66280f3d651b21bfe1 0642cef09b069fc43b7da4350c0b42e3a8478d7541f726955a45d2651726e537 Loading...

	chat.ybzhan.cn/chat/KFCenterBox/6419	48 B	2023-03-13	2024-04-18
Pretty URL chat.ybzhan.cn/chat/KFCenterBox/6419 IP 58.218.215.164 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 02:33:14 Last Seen2024-04-18 14:40:24 Times Seen53 Hash 197d1b492463d5aca32b4d9e7dbe1545 75139096f18ce60275a75afa3271f8f2a062589d f0f40bc2631b0d7ec3fcdfb0d24a4e9a12de938ef2bae428da331ec7731e59af Loading...

	mmmbg.com/jquery.min.js	722 B	2023-03-07	2024-04-18
Pretty URL mmmbg.com/jquery.min.js IP 50.2.65.227 ASN #62904 AS62904 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:18:31 Last Seen2024-04-18 14:40:24 Times Seen43 Hash 68b068ff7c5333949099b79c6656e109 62f57648bd0e9188d15c097362d248953bad3d09 874bd0609dbe273f557e23b67e01f24b37315f7c32088ad829eb23fa7da5d1a1 Loading...

	mmmbg.com/js/JSChat.js	909 B	2023-03-07	2024-04-18
Pretty URL mmmbg.com/js/JSChat.js IP 50.2.65.227 ASN #62904 AS62904 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:26:02 Last Seen2024-04-18 14:40:24 Times Seen42 Hash 6607c201e93287b2e0ae2ef03d2627d9 827c42785b6e9bdcfcd248546fd59fc93d038887 108b52af210d8ac6df235e8579959d5349b60562e4c7149796947a0dd683e027 Loading...

	mmmbg.com/ahtklh-Products-5820997	78 B	2023-08-04	2024-04-18
Pretty URL mmmbg.com/ahtklh-Products-5820997 IP 50.2.65.227 ASN #62904 AS62904 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-04 23:24:01 Last Seen2024-04-18 14:40:24 Times Seen11 Hash 5c379406da5059e89fa612d6b3a2800a 476354f683b5a5e6b05b0041ac593e89498d245d 464e19c53af6738207c2053fa64e1ab30a5b0d3ba4bf81b46f2a58e4d839c919 Loading...

		Size	First Seen	Last Seen
	#1 Write - 4b2fe607d71eb9878686c0fd448dc416	134 B	2023-03-07	2024-04-18
Pretty Observations First Seen2023-03-07 14:18:31 Last Seen2024-04-18 14:40:24 Times Seen22 Hash 4b2fe607d71eb9878686c0fd448dc416 8f965cba7f61c5b5677f3a9ece6d9f1fc6fd5813 febbdd6f44c7e2f79055b0a6c378c321d54688fc10e14799139eccd8da202bde Loading...

HTTP Transactions (42)

URL IP Response Size

mmmbg.com/ahtklh-Products-5820997

50.2.65.227

6.8 kB

URL User Request GET
mmmbg.com/ahtklh-Products-5820997
IP
50.2.65.227:0
ASN
#62904 AS62904

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1098)
Size
6.8 kB (6832 bytes)
Hash
755649da79bbc83498d89f17f372e358
cf49475738e60ac006a80139b9dc307c6a42b65e
4c4ffe23bad888f9c57f51e2f005ca73ff721cb020d6685c3db6f39a56a4960c

HTTP Headers

GET /ahtklh-Products-5820997 HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:46 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/js/JSChat.js

50.2.65.227

200 OK

487 B

URL GET HTTP/1.1
mmmbg.com/js/JSChat.js
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
ISO-8859 text
Size
487 B (487 bytes)
Hash
570c6dc8072b94a60d8fa7ae24001ec9
f32dbf4018bf208ce6a84ef3bb71787683da97fd
41fb807e3fee249a51b1a6fbb46e25cc1874ad347d2b1d0707d6fd0d5cee8461

HTTP Headers

GET /js/JSChat.js HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/jquery.min.js

50.2.65.227

301 Moved Permanently

178 B

URL GET HTTP/1.1
mmmbg.com/jquery.min.js
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
HTML document, ASCII text, with CRLF line terminators
Size
178 B (178 bytes)
Hash
cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

HTTP Headers

GET /jquery.min.js HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: http://www.mmmbg.com/jquery.min.js

mmmbg.com/Skins/6419/js/base.js

50.2.65.227

200 OK

5.9 kB

URL GET HTTP/1.1
mmmbg.com/Skins/6419/js/base.js
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JavaScript source, ISO-8859 text, with very long lines (13738)
Size
5.9 kB (5918 bytes)
Hash
f2279a4a9058ae19592894cdf775ee26
e73487b7d391bd6a1a60d58ba643f7e68998c718
eedcf9e67ef6581acff3c08d1e9238616356a20008a4ec721bd76c38feab582e

HTTP Headers

GET /Skins/6419/js/base.js HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/Skins/6419/css/style.css

50.2.65.227

200 OK

8.9 kB

URL GET HTTP/1.1
mmmbg.com/Skins/6419/css/style.css
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
troff or preprocessor input, Unicode text, UTF-8 (with BOM) text, with very long lines (369)
Size
8.9 kB (8858 bytes)
Hash
72d9cdb0dd3a13c76f59d96fd741c131
40ff49399f580162991795e6f47c92d8acffa7d5
a7a5037db154d7236df237b355f70d4ac0a1f39b518c8fa35287b2216f650a5f

HTTP Headers

GET /Skins/6419/css/style.css HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: text/css;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/Skins/6419/js/jquery.SuperSlide.js

50.2.65.227

200 OK

3.0 kB

URL GET HTTP/1.1
mmmbg.com/Skins/6419/js/jquery.SuperSlide.js
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (310)
Size
3.0 kB (3003 bytes)
Hash
a1c53512246991077e740257db046609
323a390519d9b1c5a022ef6a37701f6c6fa423eb
78823b226d6452b8f91d89cc03a295c63cad98d3f4d3beb0acf4aee2fbf2c2f0

HTTP Headers

GET /Skins/6419/js/jquery.SuperSlide.js HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/css/property.css

50.2.65.227

200 OK

471 B

URL GET HTTP/1.1
mmmbg.com/css/property.css
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
ASCII text
Size
471 B (471 bytes)
Hash
fe027c43ba3934be2c8da24b50eed78b
cd958fc5a8e899562246bdd5107050be34996e62
0eabbedb64cf5029842f64999a9a8615816b8a80e87370a29f5600a804cbfa24

HTTP Headers

GET /css/property.css HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: text/css;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/css/MessageBoard_style.css

50.2.65.227

200 OK

2.5 kB

URL GET HTTP/1.1
mmmbg.com/css/MessageBoard_style.css
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (403)
Size
2.5 kB (2461 bytes)
Hash
169eec6cc29669bb70580206aecdce46
cf1e4257a0d84a78466d2e80d6ee20e8306ee58a
121c74c418b7f2ca2f8b35383b3441f7234febd525f96ec79c60c0105e369ed9

HTTP Headers

GET /css/MessageBoard_style.css HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: text/css;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/skins/Scripts/order.js?v=20210318

50.2.65.227

200 OK

2.7 kB

URL GET HTTP/1.1
mmmbg.com/skins/Scripts/order.js?v=20210318
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
Unicode text, UTF-8 (with BOM) text
Size
2.7 kB (2736 bytes)
Hash
4ff54d9126130457e7df3f074b12b64a
9408291ed95d22dc6a8876610bc1c409f9c5d4ce
4d4d416156c47db53edc6b97e4fe099494e25f46311388502d5ae7b56175d529

HTTP Headers

GET /skins/Scripts/order.js?v=20210318 HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/skins/6419/js/zzsc.js

50.2.65.227

200 OK

2.6 kB

URL GET HTTP/1.1
mmmbg.com/skins/6419/js/zzsc.js
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JavaScript source, Unicode text, UTF-8 text
Size
2.6 kB (2618 bytes)
Hash
fc7b0233f9dd430126452fac7c32cb3b
af6b3f97fccc5bca04a98384591704ccbb0eb6d5
aba392a2293202eb27cc2b2364fa8ea1f856bd6911d1da12829d7e5ecb367dd2

HTTP Headers

GET /skins/6419/js/zzsc.js HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/Skins/6419/js/jquery.pack.js

50.2.65.227

200 OK

38 kB

URL GET HTTP/1.1
mmmbg.com/Skins/6419/js/jquery.pack.js
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (32769)
Size
38 kB (37809 bytes)
Hash
b6120eb7728b22f44b5ed512bdc2cc90
409dede095e37ab71e2a4db934f66247be15f182
1a67968aede578c1322a2d2afa86e04b4d6916776ddd232b44772079574ba404

HTTP Headers

GET /Skins/6419/js/jquery.pack.js HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

www.mmmbg.com/jquery.min.js

50.2.65.227

200 OK

722 B

URL GET HTTP/1.1
www.mmmbg.com/jquery.min.js
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
ASCII text, with very long lines (721)
Size
722 B (722 bytes)
Hash
68b068ff7c5333949099b79c6656e109
62f57648bd0e9188d15c097362d248953bad3d09
874bd0609dbe273f557e23b67e01f24b37315f7c32088ad829eb23fa7da5d1a1

HTTP Headers

GET /jquery.min.js HTTP/1.1
Host: www.mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:47 GMT
Content-Type: application/javascript
Content-Length: 722
Last-Modified: Mon, 07 Nov 2022 09:54:10 GMT
Connection: keep-alive
ETag: "6368d5c2-2d2"
Expires: Thu, 18 Apr 2024 13:39:47 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

www.ybzhan.cn/mystat.aspx?u=ahtklh

58.218.215.167

262 B

URL GET
www.ybzhan.cn/mystat.aspx?u=ahtklh
IP
58.218.215.167:0
ASN
#4134 Chinanet

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
HTML document, ASCII text, with CRLF line terminators
Size
262 B (262 bytes)
Hash
72fa0fca20c82853e6dbbc1f13c78100
4e9b01e3ad0b56c9409bb02e5700430792fecacd
4555de589ff9b307e20c708d6f112bc47bb377df29ff0a5914f8fb0932926887

HTTP Headers

GET /mystat.aspx?u=ahtklh HTTP/1.1
Host: www.ybzhan.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Thu, 18 Apr 2024 12:39:56 GMT
Content-Type: text/html
Content-Length: 262
Connection: keep-alive
Location: https://www.ybzhan.cn/mystat.aspx?u=ahtklh
Via: kunlun10.cn192[,0]
Timing-Allow-Origin: *
EagleId: 3adad01e17134439968558139e

chat.ybzhan.cn/Content/js/jquery.js

58.218.215.164

200 OK

30 kB

URL GET HTTP/1.1
chat.ybzhan.cn/Content/js/jquery.js
IP
58.218.215.164:80
ASN
#4134 Chinanet

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JavaScript source, ASCII text, with very long lines (65154), with CRLF line terminators
Size
30 kB (30030 bytes)
Hash
421ce628a95a26088cab91e158a50837
0adfe2c48cb57357ca877d66280f3d651b21bfe1
0642cef09b069fc43b7da4350c0b42e3a8478d7541f726955a45d2651726e537

HTTP Headers

GET /Content/js/jquery.js HTTP/1.1
Host: chat.ybzhan.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Date: Thu, 18 Apr 2024 11:42:00 GMT
X-Powered-By: ASP.NET-hg4.62
Ali-Swift-Global-Savetime: 1713440520
Via: cache47.l2cn3129[37,37,304-0,M], cache44.l2cn3129[38,0], kunlun10.cn192[0,0,200-0,H], kunlun10.cn192[0,0]
Last-Modified: Mon, 12 Oct 2015 07:38:02 GMT
ETag: W/"0e996ecc04d11:0"
Age: 3477
X-Cache: HIT TCP_MEM_HIT dirn:9:1344360671
X-Swift-SaveTime: Thu, 18 Apr 2024 11:42:00 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 3adad01e17134439970538494e
Content-Encoding: gzip

chat.ybzhan.cn/chat/KFLeftBox/6419

58.218.215.164

72 B

URL GET
chat.ybzhan.cn/chat/KFLeftBox/6419
IP
58.218.215.164:0
ASN
#4134 Chinanet

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
ASCII text
Size
72 B (72 bytes)
Hash
197d1b492463d5aca32b4d9e7dbe1545
75139096f18ce60275a75afa3271f8f2a062589d
f0f40bc2631b0d7ec3fcdfb0d24a4e9a12de938ef2bae428da331ec7731e59af

HTTP Headers

GET /chat/KFLeftBox/6419 HTTP/1.1
Host: chat.ybzhan.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Date: Thu, 18 Apr 2024 12:39:57 GMT
Cache-Control: private
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
Set-Cookie: ASP.NET_SessionId=oyoo4fruokpd2hcaprhlmsqv; path=/; HttpOnly; SameSite=Lax
mtcached_mtsession_oyoo4fruokpd2hcaprhlmsqv=10.115.3.131:9718; domain=chat.ybzhan.cn; path=/; HttpOnly
X-Powered-By: ASP.NET-hg4.66
Ali-Swift-Global-Savetime: 1713443997
Via: cache32.l2cn3129[78,77,200-0,M], cache70.l2cn3129[79,0], kunlun10.cn192[90,89,200-0,M], kunlun1.cn192[91,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Thu, 18 Apr 2024 12:39:57 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 3adad01517134439970627591e
Content-Encoding: gzip

chat.ybzhan.cn/chat/KFCenterBox/6419

58.218.215.164

72 B

URL GET
chat.ybzhan.cn/chat/KFCenterBox/6419
IP
58.218.215.164:0
ASN
#4134 Chinanet

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
ASCII text
Size
72 B (72 bytes)
Hash
197d1b492463d5aca32b4d9e7dbe1545
75139096f18ce60275a75afa3271f8f2a062589d
f0f40bc2631b0d7ec3fcdfb0d24a4e9a12de938ef2bae428da331ec7731e59af

HTTP Headers

GET /chat/KFCenterBox/6419 HTTP/1.1
Host: chat.ybzhan.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Date: Thu, 18 Apr 2024 12:39:57 GMT
Cache-Control: private
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
Set-Cookie: ASP.NET_SessionId=d5vbuaakcovcykoo1au41bfj; path=/; HttpOnly; SameSite=Lax
mtcached_mtsession_d5vbuaakcovcykoo1au41bfj=10.115.3.131:9718; domain=chat.ybzhan.cn; path=/; HttpOnly
X-Powered-By: ASP.NET-4.61
Ali-Swift-Global-Savetime: 1713443997
Via: cache18.l2cn3129[56,55,200-0,M], cache6.l2cn3129[57,0], kunlun4.cn192[67,67,200-0,M], kunlun5.cn192[68,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Thu, 18 Apr 2024 12:39:57 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 3adad01917134439970741629e
Content-Encoding: gzip

mmmbg.com/Skins/6419/images/footlogo.png

50.2.65.227

302 Moved Temporarily

0 B

URL GET HTTP/1.1
mmmbg.com/Skins/6419/images/footlogo.png
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /Skins/6419/images/footlogo.png HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.ahtk1718.com/Skins/6419/images/footlogo.png

mmmbg.com/skins/6419/images/ba1.jpg

50.2.65.227

302 Moved Temporarily

0 B

URL GET HTTP/1.1
mmmbg.com/skins/6419/images/ba1.jpg
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /skins/6419/images/ba1.jpg HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.ahtk1718.com/skins/6419/images/ba1.jpg

mmmbg.com/skins/6419/images/side_ewm.jpg

50.2.65.227

302 Moved Temporarily

0 B

URL GET HTTP/1.1
mmmbg.com/skins/6419/images/side_ewm.jpg
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /skins/6419/images/side_ewm.jpg HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.ahtk1718.com/skins/6419/images/side_ewm.jpg

mmmbg.com/skins/6419/images/ba3.jpg

50.2.65.227

302 Moved Temporarily

0 B

URL GET HTTP/1.1
mmmbg.com/skins/6419/images/ba3.jpg
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /skins/6419/images/ba3.jpg HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.ahtk1718.com/skins/6419/images/ba3.jpg

mmmbg.com/Image.aspx

50.2.65.227

200 OK

1.8 kB

URL GET HTTP/1.1
mmmbg.com/Image.aspx
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16
Size
1.8 kB (1804 bytes)
Hash
25943734a438f163fb40cb723c33f09c
c8e32bd7008c9cb45db136b9237aece4af1b48a0
01920312112fefb0bdcadf32842ed226ca2a28a90de59956cde46d8a28fb8846

HTTP Headers

GET /Image.aspx HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

mmmbg.com/skins/6419/images/logo.jpg

50.2.65.227

302 Moved Temporarily

0 B

URL GET HTTP/1.1
mmmbg.com/skins/6419/images/logo.jpg
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /skins/6419/images/logo.jpg HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.ahtk1718.com/skins/6419/images/logo.jpg

mmmbg.com/skins/6419/images/ba2.jpg

50.2.65.227

302 Moved Temporarily

0 B

URL GET HTTP/1.1
mmmbg.com/skins/6419/images/ba2.jpg
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /skins/6419/images/ba2.jpg HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.ahtk1718.com/skins/6419/images/ba2.jpg

mmmbg.com/Skins/6419/images/side_ewm.jpg

50.2.65.227

302 Moved Temporarily

0 B

URL GET HTTP/1.1
mmmbg.com/Skins/6419/images/side_ewm.jpg
IP
50.2.65.227:80
ASN
#62904 AS62904

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /Skins/6419/images/side_ewm.jpg HTTP/1.1
Host: mmmbg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/ahtklh-Products-5820997
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 12:39:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.ahtk1718.com/Skins/6419/images/side_ewm.jpg

img65.ybzhan.cn/9/20220816/637962699445413106480.jpg

120.52.95.234

166 B

URL GET
img65.ybzhan.cn/9/20220816/637962699445413106480.jpg
IP
120.52.95.234:0
ASN
#133119 China Unicom IP network

Requested by
http://mmmbg.com/ahtklh-Products-5820997
Certificate
IssuerDigiCert Inc
Subject*.ybzhan.cn
FingerprintD1:57:B9:D5:0D:30:BA:F6:B7:D4:0F:C5:C8:80:07:7C:33:E3:89:FA
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 30 Aug 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
166 B (166 bytes)
Hash
3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691

HTTP Headers

GET /9/20220816/637962699445413106480.jpg HTTP/1.1
Host: img65.ybzhan.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Thu, 18 Apr 2024 12:39:57 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://img65.ybzhan.cn/9/20220816/637962699445413106480.jpg
X-CCDN-REQ-ID-46B1: 9bb4c7fd7db6e20063eb662735c9800a
via: CHN-HElangfang-AREACUCC1-CACHE45[3]

www.ybzhan.cn/mystat.aspx?u=ahtklh

58.218.215.167

531 B

URL GET
www.ybzhan.cn/mystat.aspx?u=ahtklh
IP
58.218.215.167:0
ASN
#4134 Chinanet

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
531 B (531 bytes)
Hash
f7d474a9097367d2cb8e3da0736b3170
b30230a84533909fe77833849d7022dd22a63441
25d066a21b942c206897333ce05eab90e4958afef33d5ba4eb736bb3a16edf52

HTTP Headers

GET /mystat.aspx?u=ahtklh HTTP/1.1
Host: www.ybzhan.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: text/html; charset=utf-8
content-length: 531
date: Thu, 18 Apr 2024 12:39:58 GMT
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: -1
x-aspnet-version: 4.0.30319
set-cookie: ASP.NET_SessionId=mvgz1x2lrstj4ia4m2gxk5aq; path=/; HttpOnly; SameSite=Lax
mtcached_mtsession_mvgz1x2lrstj4ia4m2gxk5aq=10.115.3.131:9719; domain=.ybzhan.cn; path=/; HttpOnly
x-powered-by: ASP.NET-hg4.66
content-encoding: gzip
ali-swift-global-savetime: 1713443998
via: cache35.l2cn1827[41,40,200-0,M], cache26.l2cn1827[42,0], kunlun3.cn192[57,57,200-0,M], kunlun8.cn192[58,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 18 Apr 2024 12:39:58 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 3adad01c17134439984804851e
X-Firefox-Spdy: h2

img65.ybzhan.cn/9/20220816/637962699445413106480.jpg

120.52.95.234

374 kB

URL GET
img65.ybzhan.cn/9/20220816/637962699445413106480.jpg
IP
120.52.95.234:0
ASN
#133119 China Unicom IP network

Requested by
http://mmmbg.com/ahtklh-Products-5820997
Certificate
IssuerDigiCert Inc
Subject*.ybzhan.cn
FingerprintD1:57:B9:D5:0D:30:BA:F6:B7:D4:0F:C5:C8:80:07:7C:33:E3:89:FA
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 30 Aug 2024 23:59:59 GMT

File type
PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced
Size
374 kB (373505 bytes)
Hash
dd20caf8d011f2c5f8218c64d4512d64
1c51532cc62ec686db5fd2e0c49582679187b7cc
662b3d5cc2abbdae006e7d7a71c01163470366fd9385d4f21ee5614a84cdd0e0

HTTP Headers

GET /9/20220816/637962699445413106480.jpg HTTP/1.1
Host: img65.ybzhan.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 12:39:58 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty
Expires: Wed, 02 Apr 2025 05:17:24 GMT
Last-Modified: Tue, 02 Apr 2024 05:17:24 GMT
Content-Disposition: inline;filename=637962699445413106480.jpg
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET-img65
Access-Control-Allow-Origin: *
Cache-Control: public
X-CCDN-Expires: 1183047
via: CHN-HElangfang-AREACUCC1-CACHE34[67],CHN-HElangfang-AREACUCC1-CACHE27[54,TCP_MISS,63],CHN-TJ-GLOBAL1-CACHE70[8],CHN-TJ-GLOBAL1-CACHE118[0,TCP_HIT,7]
x-hcs-proxy-type: 1
X-CCDN-CacheTTL: 2592000
X-CCDN-REQ-ID-46B1: 5a46636174481c63579e244cd5ddd950
Age: 1
Content-Encoding: br

www.ahtk1718.com/skins/6419/images/ba2.jpg

110.185.108.35

301 Moved Permanently

168 B

URL GET HTTP/1.1
www.ahtk1718.com/skins/6419/images/ba2.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
c7a87d5da7d4f925cc6f61812e857615
9ea59481e6c132bee12be856488ef0680084325b
cf20e6eca01395eed2e1ee6558cd670d2fe72d51b37126a13aad484ad095885b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/ba2.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: JSP3/2.0.14
Date: Thu, 18 Apr 2024 12:40:00 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.ahtk1718.com/skins/6419/images/ba2.jpg
X-Cache-Status: MISS

www.ahtk1718.com/skins/6419/images/side_ewm.jpg

110.185.108.35

200 OK

168 B

URL GET HTTP/2
www.ahtk1718.com/skins/6419/images/side_ewm.jpg
IP
110.185.108.35:443
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectwww.ahtk1718.com
Fingerprint9A:CC:1E:8E:8E:DF:9A:BF:A5:68:8A:39:D2:C1:81:36:0B:4F:9A:77
ValidityThu, 09 Nov 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
c7a87d5da7d4f925cc6f61812e857615
9ea59481e6c132bee12be856488ef0680084325b
cf20e6eca01395eed2e1ee6558cd670d2fe72d51b37126a13aad484ad095885b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/side_ewm.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: JSP3/2.0.14
Date: Thu, 18 Apr 2024 12:40:00 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.ahtk1718.com/skins/6419/images/side_ewm.jpg
X-Cache-Status: MISS

www.ahtk1718.com/skins/6419/images/ba3.jpg

110.185.108.35

301 Moved Permanently

168 B

URL GET HTTP/1.1
www.ahtk1718.com/skins/6419/images/ba3.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
c7a87d5da7d4f925cc6f61812e857615
9ea59481e6c132bee12be856488ef0680084325b
cf20e6eca01395eed2e1ee6558cd670d2fe72d51b37126a13aad484ad095885b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/ba3.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: JSP3/2.0.14
Date: Thu, 18 Apr 2024 12:40:00 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.ahtk1718.com/skins/6419/images/ba3.jpg
X-Cache-Status: MISS

www.ahtk1718.com/skins/6419/images/logo.jpg

110.185.108.35

200 OK

168 B

URL GET HTTP/2
www.ahtk1718.com/skins/6419/images/logo.jpg
IP
110.185.108.35:443
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectwww.ahtk1718.com
Fingerprint9A:CC:1E:8E:8E:DF:9A:BF:A5:68:8A:39:D2:C1:81:36:0B:4F:9A:77
ValidityThu, 09 Nov 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
c7a87d5da7d4f925cc6f61812e857615
9ea59481e6c132bee12be856488ef0680084325b
cf20e6eca01395eed2e1ee6558cd670d2fe72d51b37126a13aad484ad095885b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/logo.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: JSP3/2.0.14
Date: Thu, 18 Apr 2024 12:40:00 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.ahtk1718.com/skins/6419/images/logo.jpg
X-Cache-Status: MISS

www.ahtk1718.com/skins/6419/images/ba1.jpg

110.185.108.35

301 Moved Permanently

168 B

URL GET HTTP/1.1
www.ahtk1718.com/skins/6419/images/ba1.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
c7a87d5da7d4f925cc6f61812e857615
9ea59481e6c132bee12be856488ef0680084325b
cf20e6eca01395eed2e1ee6558cd670d2fe72d51b37126a13aad484ad095885b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/ba1.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: JSP3/2.0.14
Date: Thu, 18 Apr 2024 12:40:00 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.ahtk1718.com/skins/6419/images/ba1.jpg
X-Cache-Status: MISS

www.ahtk1718.com/Skins/6419/images/footlogo.png

110.185.108.35

301 Moved Permanently

168 B

URL GET HTTP/1.1
www.ahtk1718.com/Skins/6419/images/footlogo.png
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
c7a87d5da7d4f925cc6f61812e857615
9ea59481e6c132bee12be856488ef0680084325b
cf20e6eca01395eed2e1ee6558cd670d2fe72d51b37126a13aad484ad095885b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Skins/6419/images/footlogo.png HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: JSP3/2.0.14
Date: Thu, 18 Apr 2024 12:40:00 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.ahtk1718.com/Skins/6419/images/footlogo.png
X-Cache-Status: MISS

www.ahtk1718.com/Skins/6419/images/side_ewm.jpg

110.185.108.35

301 Moved Permanently

168 B

URL GET HTTP/1.1
www.ahtk1718.com/Skins/6419/images/side_ewm.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
c7a87d5da7d4f925cc6f61812e857615
9ea59481e6c132bee12be856488ef0680084325b
cf20e6eca01395eed2e1ee6558cd670d2fe72d51b37126a13aad484ad095885b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Skins/6419/images/side_ewm.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: JSP3/2.0.14
Date: Thu, 18 Apr 2024 12:40:00 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.ahtk1718.com/Skins/6419/images/side_ewm.jpg
X-Cache-Status: MISS

www.ahtk1718.com/Skins/6419/images/side_ewm.jpg

110.185.108.35

301 Moved Permanently

26 kB

URL GET HTTP/1.1
www.ahtk1718.com/Skins/6419/images/side_ewm.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 120x120, components 3
Size
26 kB (25721 bytes)
Hash
4ecb06921db52d633a222608418281df
4bb448166eb26d5595658c0e28f4d3b13e139711
fd0cee5a9faaf7e92b28a95a2b5541fefc7b008b55bf6ceae0291c0897dbc727

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Skins/6419/images/side_ewm.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: JSP3/2.0.14
date: Thu, 18 Apr 2024 12:40:01 GMT
content-type: image/jpeg
content-length: 25721
last-modified: Mon, 28 Dec 2020 03:09:38 GMT
etag: "0855fe0c6dcd61:0"
accept-ranges: bytes
x-powered-by: ASP.NET-115.4.176
referrer-policy: unsafe-url
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
ohc-cache-hit: cd11ct80 [1], wzix80 [1]
ohc-file-size: 25721
x-cache-status: MISS
X-Firefox-Spdy: h2

www.ahtk1718.com/skins/6419/images/side_ewm.jpg

110.185.108.35

200 OK

26 kB

URL GET HTTP/2
www.ahtk1718.com/skins/6419/images/side_ewm.jpg
IP
110.185.108.35:443
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectwww.ahtk1718.com
Fingerprint9A:CC:1E:8E:8E:DF:9A:BF:A5:68:8A:39:D2:C1:81:36:0B:4F:9A:77
ValidityThu, 09 Nov 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 120x120, components 3
Size
26 kB (25721 bytes)
Hash
4ecb06921db52d633a222608418281df
4bb448166eb26d5595658c0e28f4d3b13e139711
fd0cee5a9faaf7e92b28a95a2b5541fefc7b008b55bf6ceae0291c0897dbc727

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/side_ewm.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: JSP3/2.0.14
date: Thu, 18 Apr 2024 12:40:01 GMT
content-type: image/jpeg
content-length: 25721
last-modified: Mon, 28 Dec 2020 03:09:38 GMT
etag: "0855fe0c6dcd61:0"
accept-ranges: bytes
x-powered-by: ASP.NET-115.4.172
referrer-policy: unsafe-url
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
ohc-cache-hit: cd11ct56 [1], bdix157 [1]
ohc-file-size: 25721
x-cache-status: MISS
X-Firefox-Spdy: h2

www.ahtk1718.com/skins/6419/images/ba3.jpg

110.185.108.35

301 Moved Permanently

218 kB

URL GET HTTP/1.1
www.ahtk1718.com/skins/6419/images/ba3.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x550, components 3
Size
218 kB (217883 bytes)
Hash
e18748b48a2f0f1acff5448baf0555f3
20113599a02b7e47c4616e5675d828e690d7e25a
681e53f5cab51ac9040407130216722710fbc202e5c142b13cee7c018c321b4a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/ba3.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: JSP3/2.0.14
date: Thu, 18 Apr 2024 12:40:01 GMT
content-type: image/jpeg
content-length: 217883
last-modified: Wed, 29 Mar 2023 02:15:05 GMT
etag: "801aa846e461d91:0"
accept-ranges: bytes
x-powered-by: ASP.NET-115.4.174
referrer-policy: unsafe-url
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
ohc-cache-hit: cd11ct63 [1], qdix183 [1]
ohc-file-size: 217883
x-cache-status: MISS
X-Firefox-Spdy: h2

www.ahtk1718.com/skins/6419/images/logo.jpg

110.185.108.35

200 OK

33 kB

URL GET HTTP/2
www.ahtk1718.com/skins/6419/images/logo.jpg
IP
110.185.108.35:443
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectwww.ahtk1718.com
Fingerprint9A:CC:1E:8E:8E:DF:9A:BF:A5:68:8A:39:D2:C1:81:36:0B:4F:9A:77
ValidityThu, 09 Nov 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 650x120, components 3
Size
33 kB (33150 bytes)
Hash
6c17bf46881ebdfcc05e31aa3f8788f4
9611e584eecfa637d6d74de3788aa94edf0d5e27
6cee7ca48f44ed65f47f7aef79d28d11b3f13f20abf1be5a6701da5f2d119b28

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/logo.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: JSP3/2.0.14
date: Thu, 18 Apr 2024 12:40:01 GMT
content-type: image/jpeg
content-length: 33150
last-modified: Mon, 28 Dec 2020 03:09:32 GMT
etag: "0fecbdcc6dcd61:0"
accept-ranges: bytes
x-powered-by: ASP.NET-115.4.172
referrer-policy: unsafe-url
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
ohc-cache-hit: cd11ct71 [1], czix97 [1]
ohc-file-size: 33150
x-cache-status: MISS
X-Firefox-Spdy: h2

www.ahtk1718.com/Skins/6419/images/footlogo.png

110.185.108.35

301 Moved Permanently

23 kB

URL GET HTTP/1.1
www.ahtk1718.com/Skins/6419/images/footlogo.png
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
PNG image data, 180 x 65, 8-bit/color RGBA, non-interlaced
Size
23 kB (23322 bytes)
Hash
5ccec34ee555841307b153181bddcdcc
c164a6210cb1d054abc69a419d629038df3fceb2
dce57c531034b1e0efa267a7ed5fbc15e96989959f348cee17122ba38b9d0db3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Skins/6419/images/footlogo.png HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: JSP3/2.0.14
date: Thu, 18 Apr 2024 12:40:01 GMT
content-type: image/png
content-length: 23322
last-modified: Mon, 28 Dec 2020 03:09:20 GMT
etag: "0f0a4d5c6dcd61:0"
accept-ranges: bytes
x-powered-by: ASP.NET-115.4.174
referrer-policy: unsafe-url
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
ohc-cache-hit: cd11ct72 [1], suzix242 [1]
ohc-file-size: 23322
x-cache-status: MISS
X-Firefox-Spdy: h2

www.ahtk1718.com/skins/6419/images/ba2.jpg

110.185.108.35

301 Moved Permanently

314 kB

URL GET HTTP/1.1
www.ahtk1718.com/skins/6419/images/ba2.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x550, components 3
Size
314 kB (314207 bytes)
Hash
cf3f5ab03c7df9c2c58d0ed95faa7305
22a094185b890e88e1bac1436e18edae62d16a92
d693a95ca23c14cfdf189c1be0a3b79f2929f38da413bd06d07f7a264271a60f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/ba2.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: JSP3/2.0.14
date: Thu, 18 Apr 2024 12:40:01 GMT
content-type: image/jpeg
content-length: 314207
last-modified: Wed, 29 Mar 2023 02:17:22 GMT
etag: "0a55098e461d91:0"
accept-ranges: bytes
x-powered-by: ASP.NET-115.4.176
referrer-policy: unsafe-url
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
ohc-cache-hit: cd11ct60 [1], xiangyix60 [1]
ohc-file-size: 314207
x-cache-status: MISS
X-Firefox-Spdy: h2

www.ahtk1718.com/skins/6419/images/ba1.jpg

110.185.108.35

301 Moved Permanently

311 kB

URL GET HTTP/1.1
www.ahtk1718.com/skins/6419/images/ba1.jpg
IP
110.185.108.35:80
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x550, components 3
Size
311 kB (311394 bytes)
Hash
4df0e0d0eae71f7005df21d25ff8f504
872f90fa23d108ff0eb111c6cb2c1aea4edca513
eb57b4c0c11db04aa267e20ecef19032c2a04e8e5b3cadb8b561d12704877827

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skins/6419/images/ba1.jpg HTTP/1.1
Host: www.ahtk1718.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mmmbg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: JSP3/2.0.14
date: Thu, 18 Apr 2024 12:40:01 GMT
content-type: image/jpeg
content-length: 311394
last-modified: Wed, 29 Mar 2023 02:16:27 GMT
etag: "804f8877e461d91:0"
accept-ranges: bytes
x-powered-by: ASP.NET-115.4.173
referrer-policy: unsafe-url
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
ohc-cache-hit: cd11ct63 [1], bdix242 [1]
ohc-file-size: 311394
x-cache-status: MISS
X-Firefox-Spdy: h2

fcl.xueyuxingfeng.com:6987/3366/api/sj.js

0.0.0.0

0 B

URL GET
fcl.xueyuxingfeng.com:6987/3366/api/sj.js
IP
0.0.0.0:0
ASN
#0

Requested by
http://mmmbg.com/ahtklh-Products-5820997

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /3366/api/sj.js HTTP/1.1
Host: fcl.xueyuxingfeng.com:6987
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mmmbg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (42)

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1