Overview

URL hlf.qlytf.cn/
IP35.200.4.237
ASN
Location United States
Report completed2019-03-20 04:51:08 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-03-20 2 hlf.qlytf.cn/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 35.200.4.237

Date UQ / IDS / BL URL IP
2019-04-11 11:23:14 +0200
0 - 0 - 1 beya8.cn/ 35.200.4.237
2019-03-20 05:30:39 +0100
0 - 0 - 1 cao.qlytf.cn/ 35.200.4.237
2018-12-12 07:36:34 +0100
0 - 0 - 1 bela8.cn/ 35.200.4.237

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-07-02 09:48:15 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049696316/ 143.204.52.228
2019-07-02 09:48:17 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049696333/ 143.204.52.228
2019-07-02 09:48:03 +0200
0 - 0 - 0 https://www.spreaker.com/show/ver-peru-x-urug (...) 52.51.101.146
2019-07-01 11:37:34 +0200
0 - 0 - 0 https://www.tig-uk.com/tts/nbn4298k3o7tvns8vp (...) 144.217.235.30
2019-07-01 11:37:22 +0200
0 - 0 - 0 https://www.tig-uk.com/tts/nbn4298k3o7tvns8vp (...) 144.217.235.30
2019-07-01 11:36:59 +0200
0 - 0 - 0 https://healthadviserpro.com/power-efficiency (...) 108.179.246.37
2019-07-01 11:35:37 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049291106/ 143.204.52.228
2019-07-01 11:31:59 +0200
0 - 0 - 1 https://fp.bwjf.cn/downInvoice/98d3884f381b46 (...) 39.107.217.15
2019-07-01 11:28:01 +0200
0 - 0 - 0 https://d9.flashtalking.com/d9core 52.211.104.166
2019-07-01 11:27:51 +0200
0 - 0 - 0 https://www.launchora.com/story/123movies-wat (...) 52.38.238.5

No other reports on domain: qlytf.cn



JavaScript

Executed Scripts (4)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (19)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: hlf.qlytf.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         35.200.4.237
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: jpServer/1.4.4
Date: Wed, 20 Mar 2019 03:50:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   236
Md5:    93b02b7c13873c6b297c8cfdeef5ea3f
Sha1:   c6d31af37d743a0fc851d813211232278aa99711
Sha256: 43addcda35fcc30a07c037c5e7e1e92d95f5308f7ce513dfcea8ecdc030f118f

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 20 Mar 2019 03:50:37 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=dbd4d175e3c9f159b36d7dc6beaef7ea31553053837; expires=Thu, 19-Mar-20 03:50:37 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Wed, 20 Mar 2019 01:56:49 GMT
Expires: Sun, 24 Mar 2019 01:56:49 GMT
Etag: "4e338b28203f3845f2d24d2cac542755c1430250"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4ba4b9130def4267-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    c441f781a7299db1a2087dd6a283b2b8
Sha1:   4e338b28203f3845f2d24d2cac542755c1430250
Sha256: 5fe20f1c03d3ac989670baf2e4e1110485e5a527cad3e27f9ba1174debe4b58b
                                        
                                            GET /hm.js?9faabfe547aecffea2d7f95def28266b HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 10378
Date: Wed, 20 Mar 2019 03:50:37 GMT
Etag: 687a07989cd22aca66010fafe139463d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A3EFC60C37EE676C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   10378
Md5:    2e8430d4b2fd65f7dd0c6c89747ce3d9
Sha1:   9c37bc1dd93c7cf7a16f2cf65257ecbe90e28ad3
Sha256: fa4e1ab6c649a602acb29faf010bc719a41788d376ff7fcca68cfa9ef3e6d1c9
                                        
                                            GET /qzone/hybrid/app/404/search_children.js HTTP/1.1 
Host: qzonestyle.gtimg.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.158.38
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:38 GMT
Cache-Control: max-age=600
Expires: Wed, 20 Mar 2019 04:00:38 GMT
Last-Modified: Fri, 11 Jan 2019 13:02:59 GMT
Content-Length: 6738
Content-Encoding: gzip
X-NWS-LOG-UUID: 11670984943223760408 5b2e8d0495ca804187869220b0411c55
Access-Control-Expose-Headers: x-client-proto-ver, X-Server-Ip, X-Upstream-IP
server_ip: 203.205.158.38
Keep-Alive: timeout=60
alt-svc: quic=":443"; ma=86400; v="39,38,37,36,35"
Vary: Origin, Accept
X-Client-Ip: 77.40.129.123
X-Server-IP: 203.205.158.38
X-Cache-Lookup: Hit From Disktank3 Gz
X-DataSrc: 2
X-ReqGue: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6738
Md5:    771c83972ae1ba45c451bad9b31e5837
Sha1:   98caca69c01b4d90182ba62cb8a1d4b1f1663d15
Sha256: 4b868060b77e7286afbb5ced9396bacb57251a90bb877c72a5f3bdf993f2cc28
                                        
                                            GET /qzone/hybrid/app/404/style/404style_min.css HTTP/1.1 
Host: qzonestyle.gtimg.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.158.38
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:39 GMT
Cache-Control: max-age=3600
Expires: Wed, 20 Mar 2019 04:50:39 GMT
Last-Modified: Mon, 08 Oct 2018 10:41:56 GMT
Content-Length: 4822
Content-Encoding: gzip
X-NWS-LOG-UUID: 2376593760608013189 5b2e8d0495ca804187869220b0411c55
Access-Control-Expose-Headers: x-client-proto-ver, X-Server-Ip, X-Upstream-IP
server_ip: 203.205.158.38
Keep-Alive: timeout=60
alt-svc: quic=":443"; ma=86400; v="39,38,37,36,35"
Vary: Origin, Accept
X-Client-Ip: 77.40.129.123
X-Server-IP: 203.205.158.38
X-Cache-Lookup: Hit From Disktank3 Gz
X-DataSrc: 2
X-ReqGue: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4822
Md5:    5f690ffab34946c66f231b39dc381ceb
Sha1:   b8172c87eae62369bace3c3a65b28ee730b248d4
Sha256: e4bac3dd2a7a9b793c755b29478dbc8bece13720693d70e56b0c20a15b7ecee7
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1176x885&vl=754&et=0&fl=10.0&ja=1&ln=en-us&lo=0&rnd=2028138388&si=9faabfe547aecffea2d7f95def28266b&v=1.2.43&lv=1&ct=!!&sn=5409 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/
Cookie: HMACCOUNT=A3EFC60C37EE676C

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Wed, 20 Mar 2019 03:50:39 GMT
Pragma: no-cache
Server: apache
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /proxy/domain/boss.qzone.qq.com/fcg-bin/fcg_zone_info HTTP/1.1 
Host: h5.qzone.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.151.50
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Date: Wed, 20 Mar 2019 03:50:38 GMT
Content-Length: 140
Connection: keep-alive
X-Powered-By: TSW/Node.js
Server: QZHTTP-2.38.33
Cache-Control: no-cache
Vary: Origin, Accept
Mod-Map: proxy_domain:photo.v7/module/proxy/sync.js
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   140
Md5:    e2ece93149614279edcdec1551791f2a
Sha1:   db554092ab0285847048cd7d4d89c48aab1ac79a
Sha256: 817a483a6cd9c56d0bafddb84d498d60f805a8a3ce11e384c196f96ffda74262
                                        
                                            GET /qzone/v6/portal/gy/404/data.js HTTP/1.1 
Host: qzonestyle.gtimg.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.158.38
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:39 GMT
Cache-Control: max-age=600
Expires: Wed, 20 Mar 2019 04:00:39 GMT
Last-Modified: Wed, 02 Jan 2019 12:37:06 GMT
Content-Length: 2420
Content-Encoding: gzip
X-NWS-LOG-UUID: 17711190037128003681 5b2e8d0495ca804187869220b0411c55
Access-Control-Expose-Headers: x-client-proto-ver, X-Server-Ip, X-Upstream-IP
server_ip: 203.205.158.38
Keep-Alive: timeout=60
alt-svc: quic=":443"; ma=86400; v="39,38,37,36,35"
Vary: Origin, Accept
X-Client-Ip: 77.40.129.123
X-Server-IP: 203.205.158.38
X-Cache-Lookup: Hit From Disktank3 Gz
X-DataSrc: 2
X-ReqGue: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2420
Md5:    8048fc3d434ad2b3a3d05c3d6dc5549e
Sha1:   7fdb56a7a2cb626086489f78b6a6150a6b776f4a
Sha256: eb846933ada0a68f756dc9054c8163e9770423b6157e5159b00325e94e22fff4
                                        
                                            GET /qzone/hybrid/app/404/style/image/bg_page.png HTTP/1.1 
Host: qzonestyle.gtimg.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qzonestyle.gtimg.cn/qzone/hybrid/app/404/style/404style_min.css

                                         
                                         203.205.158.38
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:40 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:40 GMT
Last-Modified: Mon, 22 May 2017 10:30:09 GMT
Content-Length: 14998
X-NWS-LOG-UUID: 6604077307493111513 5b2e8d0495ca804187869220b0411c55
Access-Control-Expose-Headers: x-client-proto-ver, X-Server-Ip, X-Upstream-IP
server_ip: 203.205.158.38
Keep-Alive: timeout=60
alt-svc: quic=":443"; ma=86400; v="39,38,37,36,35"
Vary: Accept
X-Client-Ip: 77.40.129.123
X-Server-IP: 203.205.158.38
Timing-Allow-Origin: http://qzonestyle.gtimg.cn
X-Cache-Lookup: Hit From Disktank3
X-DataSrc: 2
X-ReqGue: 0


--- Additional Info ---
Magic:  PNG image, 1600 x 400, 8-bit colormap, non-interlaced
Size:   14998
Md5:    acccab8aac0bb0abc98b6eff25f2ee76
Sha1:   de72c241e4c56667f4af36c67d0536c3d38a66f7
Sha256: 18e051f1c4adb5496ff57d31ceb70e462aee32f4be77db8259c11640426e78f7
                                        
                                            GET /qzone/hybrid/app/404/style/image/txt_title.png HTTP/1.1 
Host: qzonestyle.gtimg.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qzonestyle.gtimg.cn/qzone/hybrid/app/404/style/404style_min.css

                                         
                                         203.205.158.38
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:40 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:40 GMT
Last-Modified: Mon, 22 May 2017 10:30:09 GMT
Content-Length: 10650
X-NWS-LOG-UUID: 3124522863950445311 5b2e8d0495ca804187869220b0411c55
Access-Control-Expose-Headers: x-client-proto-ver, X-Server-Ip, X-Upstream-IP
server_ip: 203.205.158.38
Keep-Alive: timeout=60
alt-svc: quic=":443"; ma=86400; v="39,38,37,36,35"
Vary: Accept
X-Client-Ip: 77.40.129.123
X-Server-IP: 203.205.158.38
Timing-Allow-Origin: http://qzonestyle.gtimg.cn
X-Cache-Lookup: Hit From Disktank3
X-DataSrc: 2
X-ReqGue: 0


--- Additional Info ---
Magic:  PNG image, 700 x 70, 8-bit/color RGBA, non-interlaced
Size:   10650
Md5:    049be35970cb4a75ec468f832970096d
Sha1:   16790a3158ccbfaffff29796e57d7f09df0655dd
Sha256: e1bc99f4ba824ebcb59edbf3ed4870525b47267a94fcc8e9921d2a68668b2dec
                                        
                                            GET /qzone/hybrid/app/404/style/image/logo_tencentvolunteers.png HTTP/1.1 
Host: qzonestyle.gtimg.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.158.38
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:40 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:40 GMT
Last-Modified: Mon, 22 May 2017 10:30:09 GMT
Content-Length: 7543
X-NWS-LOG-UUID: 14969647552873119397 5b2e8d0495ca804187869220b0411c55
Access-Control-Expose-Headers: x-client-proto-ver, X-Server-Ip, X-Upstream-IP
server_ip: 203.205.158.38
Keep-Alive: timeout=60
alt-svc: quic=":443"; ma=86400; v="39,38,37,36,35"
Vary: Accept
X-Client-Ip: 77.40.129.123
X-Server-IP: 203.205.158.38
X-Cache-Lookup: Hit From Disktank3
X-DataSrc: 2
X-ReqGue: 0


--- Additional Info ---
Magic:  PNG image, 125 x 34, 8-bit/color RGBA, non-interlaced
Size:   7543
Md5:    b04e215caf4789664fceae8331b7f27a
Sha1:   ef95e7624ddab1bc5adbd72cb1e8277dcef9c846
Sha256: 9cd88c678293b9d5d82a6214e99639b8551ad4f6336ad08bf887a1d77739277a
                                        
                                            GET /qzone/hybrid/app/404/style/image/logo_baobeihuijia.png HTTP/1.1 
Host: qzonestyle.gtimg.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.158.38
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:40 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:40 GMT
Last-Modified: Mon, 22 May 2017 10:30:09 GMT
Content-Length: 8391
X-NWS-LOG-UUID: 2643608689258814754 5b2e8d0495ca804187869220b0411c55
Access-Control-Expose-Headers: x-client-proto-ver, X-Server-Ip, X-Upstream-IP
server_ip: 203.205.158.38
Keep-Alive: timeout=60
alt-svc: quic=":443"; ma=86400; v="39,38,37,36,35"
Vary: Accept
X-Client-Ip: 77.40.129.123
X-Server-IP: 203.205.158.38
X-Cache-Lookup: Hit From Disktank3
X-DataSrc: 2
X-ReqGue: 0


--- Additional Info ---
Magic:  PNG image, 92 x 34, 8-bit/color RGBA, non-interlaced
Size:   8391
Md5:    a695fcbf8226d3a7406a15a6d6e72216
Sha1:   e64eb044105740ac1eaac68d9159d9d0f5ef8f1f
Sha256: b2c33ccea5f6a7c68125fe0569ac2809757fd1bbd60422227af9f399d07c37a4
                                        
                                            GET /qzone/v6/portal/gy/upload/upfile_9413196_1491530820.jpg HTTP/1.1 
Host: imgcache.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.138.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:43 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:43 GMT
Last-Modified: Sat, 06 Jan 2018 20:57:52 GMT
Content-Length: 43457
X-NWS-LOG-UUID: 9768454489579164923 5b2e8d0495ca8041b53ad6b008b16737
server_ip: 203.205.138.46
Keep-Alive: timeout=60
Vary: Accept
X-Cache-Lookup: Hit From MemCache
X-DataSrc: 100
X-ReqGue: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   43457
Md5:    63ddaa79201fc9e9a981d3ac47daf78e
Sha1:   882a6a3f682b289a63bf9c3c8dc200b172b82e81
Sha256: 5068bfca2e7926d425195bb4af9253a009690398d13f2a0f114ce5ffca5ad0db
                                        
                                            GET /qzone/v6/portal/gy/upload/upfile_1125429_1485048575.jpg HTTP/1.1 
Host: imgcache.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.138.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:43 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:43 GMT
Last-Modified: Thu, 14 Jun 2018 22:57:15 GMT
Content-Length: 13020
X-NWS-LOG-UUID: 10502875520324509797 5b2e8d0495ca8041b53ad6b008b16737
server_ip: 203.205.138.46
Keep-Alive: timeout=60
Vary: Accept
X-Cache-Lookup: Hit From MemCache
X-DataSrc: 100
X-ReqGue: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   13020
Md5:    acf2c43f5e0b7a2e26808d384c41dc9a
Sha1:   1b30a31fcb25fa4be902c3169485aaf4fd6d97d8
Sha256: c2f9b261d5fe19b2360b0da49c8cf8241992fc26de1557e21d5f320d3efa8c2d
                                        
                                            GET /qzone/v6/portal/gy/upload/upfile_1034445_1495513359.jpg HTTP/1.1 
Host: imgcache.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.138.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:43 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:43 GMT
Last-Modified: Mon, 04 Feb 2019 23:19:35 GMT
Content-Length: 5364
X-NWS-LOG-UUID: 14558758138606600250 5b2e8d0495ca8041b53ad6b008b16737
server_ip: 203.205.138.46
Keep-Alive: timeout=60
Vary: Accept
X-Cache-Lookup: Hit From Disktank3
X-DataSrc: 100
X-ReqGue: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5364
Md5:    4a2253b9036bd0f3ad45c426188a2bd3
Sha1:   8322e886f9a73a85a3c11385c696bcc763cf192e
Sha256: 122079bc566dad626f78a731d907568a768231ce3ae415b95be9c4797995c577
                                        
                                            GET /qzone/v6/portal/gy/upload/upfile_7388031_1496230058.jpg HTTP/1.1 
Host: imgcache.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.138.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:43 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:43 GMT
Last-Modified: Wed, 07 Mar 2018 10:34:22 GMT
Content-Length: 23028
X-NWS-LOG-UUID: 18101041227753648047 5b2e8d0495ca8041b53ad6b008b16737
server_ip: 203.205.138.46
Keep-Alive: timeout=60
Vary: Accept
X-Cache-Lookup: Hit From Disktank3
X-DataSrc: 100
X-ReqGue: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   23028
Md5:    fa8cb4cdcee2310e4aee0b6f9bceefe7
Sha1:   b3bb364a866b2bc0f86bf8ccf09c9aee881b934d
Sha256: ba7255954a1019ffbcbc94342558fb150264012348a85b2a936132035292e6d5
                                        
                                            GET /qzone/v6/portal/gy/upload/upfile_2602985_1490580832.jpg HTTP/1.1 
Host: imgcache.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.138.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:43 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:43 GMT
Last-Modified: Sun, 13 May 2018 09:15:25 GMT
Content-Length: 70265
X-NWS-LOG-UUID: 3928623578451052420 5b2e8d0495ca8041b53ad6b008b16737
server_ip: 203.205.138.46
Keep-Alive: timeout=60
Vary: Accept
X-Cache-Lookup: Hit From MemCache
X-DataSrc: 100
X-ReqGue: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   70265
Md5:    54330e4834e6433a9709b7db8e763327
Sha1:   3ea8e8d5a6d8ee7c0c557e0ee2c082a84a0114a6
Sha256: 495eb4240d4ba0845ed43b96966c9241e764a4d674731915e156566e72ffe4bd
                                        
                                            GET /qzone/v6/portal/gy/upload/upfile_2188376_1491889764.jpg HTTP/1.1 
Host: imgcache.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hlf.qlytf.cn/

                                         
                                         203.205.138.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: X2S_Platform
Connection: keep-alive
Date: Wed, 20 Mar 2019 03:50:43 GMT
Cache-Control: max-age=259200
Expires: Sat, 23 Mar 2019 03:50:43 GMT
Last-Modified: Fri, 01 Mar 2019 20:37:47 GMT
Content-Length: 80969
X-NWS-LOG-UUID: 11203197778020143287 5b2e8d0495ca8041b53ad6b008b16737
server_ip: 203.205.138.46
Keep-Alive: timeout=60
Vary: Accept
X-Cache-Lookup: Hit From MemCache
X-DataSrc: 100
X-ReqGue: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   80969
Md5:    540af9180167dd5bc45635d1848d1a04
Sha1:   90fd6711d55d18a2698fb64a19c2fec49b834fed
Sha256: a15f2193d9e21ebb9fa141b12e497ec8c83254f4d5a59b2d07c8fd13e0b1618b
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: hlf.qlytf.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_9faabfe547aecffea2d7f95def28266b=1553053839; Hm_lpvt_9faabfe547aecffea2d7f95def28266b=1553053839

                                         
                                         35.200.4.237
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: jpServer/1.4.4
Date: Wed, 20 Mar 2019 03:50:44 GMT
Content-Length: 32988
Last-Modified: Mon, 11 Mar 2019 07:51:18 GMT
Connection: keep-alive
Etag: "5c861376-80dc"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 4 icons, 64x64, 256-colors
Size:   32988
Md5:    be90eb6d250a5ca43f3482c84db8ff41
Sha1:   93b814ef439abc98daa8f2091f731a99dc559a12
Sha256: 0dff5e5433eff7c62b24a96f66186f4aee32f2549540fc834830a7c879b01fc7