urlquery.net - Report

Overview

URL	cqyunin.com/html/zsjy1..xsgz1jxhd1.html
IP	104.223.149.113
ASN	AS46573 Global Frag Networks
Location	United States
Report completed	2018-10-11 12:48:57 CEST
Status	Loading report..
urlquery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2018-10-11 12:48:26 CEST	1	104.223.149.113	Client IP	ET TROJAN PE EXE or DLL Windows file download Text
2018-10-11 12:48:26 CEST	1	104.223.149.113	Client IP	ET TROJAN RAMNIT.A M2
2018-10-11 12:48:26 CEST	1	104.223.149.113	Client IP	ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
2018-10-11 12:48:27 CEST	1	104.223.149.113	Client IP	ET TROJAN RAMNIT.A M1

Blacklists

MDL

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Added / Verified	Severity	Host	Comment
2018-10-11	2	cqyunin.com/yesads.js	Malware
2018-10-11	2	cqyunin.com/html/zsjy1..xsgz1jxhd1.html	Malware

DNS-BH

No alerts detected

mnemonic secure dns

No alerts detected

Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.223.149.113

Date	UQ / IDS / BL	URL	IP
2019-02-19 08:01:23 +0100	0 - 0 - 1	cqyunin.com/html/xbgk1..zsjy1jxhd1.html	104.223.149.113
2019-02-17 08:24:47 +0100	0 - 0 - 1	cqyunin.com/html/jxky1..info10231529.html	104.223.149.113
2019-01-19 05:23:15 +0100	0 - 0 - 1	cqyunin.com/html/xbgk1..zsjy1zyjs.html	104.223.149.113
2019-01-15 15:21:26 +0100	0 - 0 - 2	cqyunin.com/html/jxky1..xbgk1xbjs1.html	104.223.149.113
2019-01-12 03:53:11 +0100	0 - 4 - 2	cqyunin.com/html/jxky1..xbgk1xbjs2.html	104.223.149.113
2019-01-03 23:33:20 +0100	0 - 0 - 2	cqyunin.com/html/info1051....zsjy1szdw.html	104.223.149.113
2018-12-27 21:00:41 +0100	0 - 4 - 2	cqyunin.com/html/jxky1..zsjy1szdw.html	104.223.149.113
2018-12-27 12:55:16 +0100	0 - 0 - 2	cqyunin.com/html/info1036....shfw11.html	104.223.149.113
2018-12-16 12:20:31 +0100	0 - 4 - 2	cqyunin.com/html/jxky1..djgzjxhd.html	104.223.149.113
2018-12-15 23:26:30 +0100	0 - 0 - 2	cqyunin.com/html/jxky1..djgzjxhd.html	104.223.149.113

Last 10 reports on ASN: AS46573 Global Frag Networks

Date	UQ / IDS / BL	URL	IP
2019-05-18 10:10:10 +0200	0 - 0 - 1	mccevent.com/	107.179.94.13
2019-05-16 12:08:56 +0200	1 - 0 - 1	https://cisco.ciscofreak.com/	23.228.71.2
2019-05-16 06:59:03 +0200	0 - 0 - 3	nshth.com/html/lzupageB20160411042953.html	157.52.176.150
2019-05-16 06:58:25 +0200	0 - 0 - 3	nshth.com/html/lzupageB20160409113117.html	157.52.176.150
2019-05-16 06:28:10 +0200	0 - 0 - 0	www.0ysec.com/	157.52.163.155
2019-05-15 23:59:53 +0200	0 - 0 - 2	www.imdetect.com/download/MsnMonitorPro_trial (...)	104.148.62.172
2019-05-14 00:46:27 +0200	0 - 0 - 1	trymytools.com/TopckitInstaller.exe	23.247.82.183
2019-05-13 00:46:38 +0200	0 - 0 - 1	sdvmj.cn/html/info101387992.html	107.179.119.158
2019-05-13 00:46:10 +0200	0 - 0 - 1	qiaosheng3919.com.cn/html/info1019..10114561.html	107.179.119.100
2019-05-13 00:46:09 +0200	0 - 0 - 2	jianhuiys.cn/html/xzzq2014-11-04237.html	107.179.119.26

Last 10 reports on domain: cqyunin.com

Date	UQ / IDS / BL	URL	IP
2019-04-24 09:00:04 +0200	0 - 0 - 2	cqyunin.com/html/info1036....zsjy1zyjs.html	85.208.116.27
2019-04-11 08:28:08 +0200	0 - 0 - 1	cqyunin.com/html/info1042....zsjy1jxhd.html	85.208.116.27
2019-04-02 05:11:00 +0200	0 - 0 - 2	cqyunin.com/html/zsjy1..info10362027.html	85.208.116.27
2019-03-27 07:26:03 +0100	0 - 0 - 2	cqyunin.com/html/info1042....zsjy1szdw.html	85.208.116.27
2019-03-24 03:58:59 +0100	0 - 0 - 2	cqyunin.com/html/xsgz1..info10271617.html	85.208.116.27
2019-03-23 06:10:11 +0100	0 - 0 - 2	cqyunin.com/html/info1042....zsjy1zsjh.html	85.208.116.27
2019-02-19 08:01:23 +0100	0 - 0 - 1	cqyunin.com/html/xbgk1..zsjy1jxhd1.html	104.223.149.113
2019-02-17 08:24:47 +0100	0 - 0 - 1	cqyunin.com/html/jxky1..info10231529.html	104.223.149.113
2019-01-19 05:23:15 +0100	0 - 0 - 1	cqyunin.com/html/xbgk1..zsjy1zyjs.html	104.223.149.113
2019-01-15 15:21:26 +0100	0 - 0 - 2	cqyunin.com/html/jxky1..xbgk1xbjs1.html	104.223.149.113

JavaScript

Executed Scripts (1)

Executed Evals (0)

Executed Writes (1)

#1 JavaScript::Write (size: 87, repeated: 1) - SHA256: a72b285b9287c1181927cd290a6f6c08d519ebc6754bc9f04fce904ca106945e

                                        < script src = 'https://s95.b9823852351323h.com/by/dz.js'
type = 'text/javascript' > < /script>

HTTP Transactions (19)

Request	Response
GET /images/zsjy1xsgz1_sitegray_sitegray_dcss.css HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	104.223.149.113 HTTP/1.1 200 OK Content-Type: text/css Content-Length: 20 Last-Modified: Sat, 03 Dec 2016 02:31:49 GMT Accept-Ranges: bytes Etag: "acc48666d4dd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:27 GMT --- Additional Info --- Magic: ASCII text, with no line terminators Size: 20 Md5: 311749c1d5f9bcf240ca9c25eae61f47 Sha1: 29703f0938cab5945db52e553f3f22cbd7f0b478 Sha256: 183f83b69b6f7ced023f06bc9b98b2d00c9e08b5c627c1f6e9002f48f0bbfb5c
GET /images/zsjy1xsgz1imagesstylecss.css HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	104.223.149.113 HTTP/1.1 200 OK Content-Type: text/css Content-Length: 4620 Last-Modified: Sat, 03 Dec 2016 02:31:49 GMT Accept-Ranges: bytes Etag: "e2294b66d4dd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:27 GMT --- Additional Info --- Magic: UTF-8 Unicode text, with CRLF line terminators Size: 4620 Md5: e3e0a6a1ef956f37074b04163facc3eb Sha1: 5b7c3925375e7801c211e854ed7d0dbebacaf382 Sha256: 2867b69f7c8c0bb589f2162917509321d33a0e9bfafe8fde08ddab230f81c6a8
GET /images/zsjy1xsgz1listvsbcss.css HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	104.223.149.113 HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3379 Last-Modified: Sat, 03 Dec 2016 02:31:50 GMT Accept-Ranges: bytes Etag: "4672d566d4dd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:27 GMT --- Additional Info --- Magic: UTF-8 Unicode text, with CRLF line terminators Size: 3379 Md5: 6b8869ee712ea5d9b1eb778ca6728d9c Sha1: 11e30cbba04c2587601f53f96393e49999d39d90 Sha256: 6128ad878b7957162bbfe7d218a86e8f86e0cdb95f7e10ca65facfd8ba2a2fbe
GET /yesads.js HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	104.223.149.113 HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 106 Last-Modified: Thu, 13 Apr 2017 15:53:10 GMT Accept-Ranges: bytes Etag: "848ed0c6eb4d21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:27 GMT --- Additional Info --- Magic: ASCII text, with no line terminators Size: 106 Md5: 17a8754edf85068082f8b1ac1519d80e Sha1: 33a9c0cccfe3d299c1ebb6d77fc4e0097b35f5a9 Sha256: 85965e1cee169e6ea1129285cafdd3c90f4e7b046207290c9ad9bc51bc58afdf Alerts: Blacklists: - fortinet: Malware
GET /images/imagesline-nav.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	104.223.149.113 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1140 Last-Modified: Thu, 01 Dec 2016 02:35:00 GMT Accept-Ranges: bytes Etag: "bc5552837b4bd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:27 GMT --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 1140 Md5: 780590dc3f031e2ffc3c00dac3923fa0 Sha1: 20fafdc404c5422d1da3b1777886c7850a24b818 Sha256: 850ddf37603c3de1b5432dd40b00b1d440c11e3a1d7973589f915c9386dc5118
POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	91.135.34.24 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: Apache Last-Modified: Tue, 09 Oct 2018 02:28:28 GMT Etag: 3E5B6473C19C93A0AC0BF31E3E7A046E9548825D X-OCSP-Responder-ID: rmdccaocsp23 Content-Length: 471 Cache-Control: public, no-transform, must-revalidate, max-age=401354 Expires: Tue, 16 Oct 2018 02:17:40 GMT Date: Thu, 11 Oct 2018 10:48:26 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 471 Md5: 3069d7f7f12a188e36a9359e2cb06e7e Sha1: 3e5b6473c19c93a0ac0bf31e3e7a046e9548825d Sha256: 3ddd6b61c2b5d030f41a95127deb56d8e67077c27d4b723fa9f02d313722d0ce
POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	91.135.34.24 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: Apache Last-Modified: Mon, 08 Oct 2018 09:27:34 GMT Etag: 96CAB35BEB3E9D5CDA87713907CE20DD84A9A9D3 X-OCSP-Responder-ID: rmdccaocsp28 Content-Length: 727 Cache-Control: public, no-transform, must-revalidate, max-age=340141 Expires: Mon, 15 Oct 2018 09:17:27 GMT Date: Thu, 11 Oct 2018 10:48:26 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 727 Md5: 48ec56c49763fb783e2d3e8cb7020557 Sha1: 96cab35beb3e9d5cda87713907ce20dd84a9a9d3 Sha256: 80d008301ac25c61f529df8faf1657c03f5766f77d996e455b5983158fb3dec1
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	91.135.34.11 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: Apache Last-Modified: Mon, 08 Oct 2018 09:27:34 GMT Etag: 090C34B232998ED0CB442389A283D60A7212687C X-OCSP-Responder-ID: rmdccaocsp21 Content-Length: 471 Cache-Control: public, no-transform, must-revalidate, max-age=340177 Expires: Mon, 15 Oct 2018 09:18:03 GMT Date: Thu, 11 Oct 2018 10:48:26 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 471 Md5: 918e7ad6efba9cd193ede3de6438f9b1 Sha1: 090c34b232998ed0cb442389a283d60a7212687c Sha256: ff1641777dd048546458ac7b135f68cda235fd5d2e4dc8b9cb1c9bfa51ef30ec
GET /html/zsjy1..xsgz1jxhd1.html HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	$Magic: HTML document text\012 exported SGML document text Size: 156162 Md5: 6353be6681297d26d3f9279e3694bb88$ 104.223.149.113 HTTP/1.1 200 OK Content-Type: text/html Content-Length: 156162 Last-Modified: Fri, 03 Aug 2018 18:25:59 GMT Accept-Ranges: bytes Etag: "9033496d572bd41:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:27 GMT --- Additional Info --- Magic: HTML document text\012 exported SGML document text Size: 156162 Md5: 6353be6681297d26d3f9279e3694bb88 Sha1: 629f00c1423d17caca54aea1069a6c3862c55581 Sha256: 1369d253ed70eb0a67d5f189aae134a22f9d6ec4d19c25deb635c468dc452219 Alerts: Blacklists: - fortinet: Malware IDS: - ET TROJAN PE EXE or DLL Windows file download Text - ET TROJAN RAMNIT.A M2 - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1 - ET TROJAN RAMNIT.A M1
GET /by/dz.js HTTP/1.1 Host: s95.b9823852351323h.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	$Magic: HTML document text\012 exported SGML document text Size: 599 Md5: f5a87e6fd8ede3450be90d1d8d85f924$ 45.65.46.3 HTTP/1.1 404 Not Found Content-Type: text/html Server: Apache Date: Thu, 11 Oct 2018 12:43:58 GMT Content-Length: 599 Connection: keep-alive Keep-Alive: timeout=60 --- Additional Info --- Magic: HTML document text\012 exported SGML document text Size: 599 Md5: f5a87e6fd8ede3450be90d1d8d85f924 Sha1: b6f7cd0ac1f724635a2a7f4161ea09fd4bb55911 Sha256: 69ab782bb854d8ed372a144b032a0c71e73b85bdecdcf82925a61de0e0fb238b
GET /images/bg.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/images/zsjy1xsgz1imagesstylecss.css	104.223.149.113 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1541 Last-Modified: Thu, 01 Dec 2016 02:35:57 GMT Accept-Ranges: bytes Etag: "f2d3a8a57b4bd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:28 GMT --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 1541 Md5: 9b5ccc572e9c1e2260c64860bff510d3 Sha1: 1aad27c004497a5285302613c19160c48f4db682 Sha256: db1742be63c7d7c92cb8db8116e9e04e86e123a631d4412a5fd5566f2a370ef4
GET /images/xx.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	$Magic: HTML document text\012 exported SGML document text Size: 1308 Md5: 2923b250a3660c034aa7831d5e6d7f3c$ 104.223.149.113 HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 1308 Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:28 GMT --- Additional Info --- Magic: HTML document text\012 exported SGML document text Size: 1308 Md5: 2923b250a3660c034aa7831d5e6d7f3c Sha1: 646f109012bac000fe1bc58f40d112f77483f22a Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
GET /images/nav.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/images/zsjy1xsgz1imagesstylecss.css	104.223.149.113 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1225 Last-Modified: Thu, 01 Dec 2016 02:36:16 GMT Accept-Ranges: bytes Etag: "70c8a3b07b4bd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:28 GMT --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 1225 Md5: 2da22f2ef7e0b792387962ff60392697 Sha1: 33ae48d992f19e031879c7e63821a320547b218b Sha256: 02fcf705f26c54cba92e16698efdbc58c2feedd4d13b88ac7e79394478d41922
GET /images/bg-tit.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/images/zsjy1xsgz1imagesstylecss.css	104.223.149.113 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1208 Last-Modified: Thu, 01 Dec 2016 02:36:02 GMT Accept-Ranges: bytes Etag: "a82968a87b4bd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:28 GMT --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 1208 Md5: f14c4b982bcf20ff7c6ca1167498b4be Sha1: 218b772c3f52bc3c990d75056f97ba62cc763d3a Sha256: 8bfd71fc4bddfb71b43a909f52e392f39715087fc176f6679f669500f5ad4420
GET /images/imagesline-yq.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	104.223.149.113 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 5417 Last-Modified: Thu, 01 Dec 2016 02:36:23 GMT Accept-Ranges: bytes Etag: "50c0a9b47b4bd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:28 GMT --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 5417 Md5: 404e3f7e952eceab879f3536325ddc12 Sha1: fa921191f47ac5d6414d1a4e29dee80292115200 Sha256: 650870262521b6ee6793bd3007d6a0e2cd583740d60dd29dd10a1ffe867d9cbb
GET /images/imagesdot1.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/html/zsjy1..xsgz1jxhd1.html	104.223.149.113 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 7729 Last-Modified: Thu, 01 Dec 2016 02:35:21 GMT Accept-Ranges: bytes Etag: "2e87cf8f7b4bd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:28 GMT --- Additional Info --- Magic: JPEG image data, JFIF standard 1.02 Size: 7729 Md5: 12adddd46aeda8290a90d100491083e1 Sha1: c4b528bfdd7cd6e6738e9588d40cb0b603185463 Sha256: f5d2efdd21e4ca9fa85db1232fb606bbb66c193cfa96233da48f1bd89b79f04d
GET /images/header.jpg HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cqyunin.com/images/zsjy1xsgz1imagesstylecss.css	104.223.149.113 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 159152 Last-Modified: Thu, 01 Dec 2016 02:36:07 GMT Accept-Ranges: bytes Etag: "b8e129ab7b4bd21:106e0" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:28 GMT --- Additional Info --- Magic: JPEG image data, EXIF standard Size: 159152 Md5: 903fb4b56978d649c139b543a81c810d Sha1: c992f44ea519837c86f8d486ba370b51da2b8ff3 Sha256: 83f93b7acfb4ffa534b3ce7585d00fd51e3f874e39cccbbd07fce50b9311975a
GET /favicon.ico HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive	$Magic: HTML document text\012 exported SGML document text Size: 1308 Md5: 2923b250a3660c034aa7831d5e6d7f3c$ 104.223.149.113 HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 1308 Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:30 GMT --- Additional Info --- Magic: HTML document text\012 exported SGML document text Size: 1308 Md5: 2923b250a3660c034aa7831d5e6d7f3c Sha1: 646f109012bac000fe1bc58f40d112f77483f22a Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
GET /favicon.ico HTTP/1.1 Host: cqyunin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	$Magic: HTML document text\012 exported SGML document text Size: 1308 Md5: 2923b250a3660c034aa7831d5e6d7f3c$ 104.223.149.113 HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 1308 Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 11 Oct 2018 10:48:33 GMT --- Additional Info --- Magic: HTML document text\012 exported SGML document text Size: 1308 Md5: 2923b250a3660c034aa7831d5e6d7f3c Sha1: 646f109012bac000fe1bc58f40d112f77483f22a Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075