| www.3659001.net/ |  43.198.190.53 | | 101 B |
IP43.198.190.53:0
File typeHTML document, ASCII text Hash5a9582f745bb87e0a3fbc0345ff5e909 fe0d60c7c3b5ba426ae676238369f99d86be35cc cb9d449a3f93fcec81077961adc8619ed17958a9eeec3460fe0cb591e532f02f
GET / HTTP/1.1
Host: www.3659001.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:35:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Cache-Control: private, no-store, no-cache, must-revalidate, proxy-revalidate
Content-Encoding: gzip
|
|
| sdk.51.la/js-sdk-pro.min.js |  47.246.44.239 | 200 OK | 13 kB |
URL GET HTTP/2sdk.51.la/js-sdk-pro.min.js IP47.246.44.239:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttps://www.3659001.net:8989/ CertificateIssuerGlobalSign nv-sa Subject*.51.la Fingerprint9E:F3:EB:9A:59:E9:6D:6E:48:13:64:78:3C:33:1D:AA:79:52:5B:79 ValidityThu, 20 Apr 2023 01:12:57 GMT - Tue, 21 May 2024 01:12:56 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (34110) Hash24bb520e9517f2ed3ed987b46aeaf723 846723563d7dd2bff3954f93633b11af0103adc8 d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 12846
date: Sun, 28 Apr 2024 20:09:00 GMT
x-oss-request-id: 662EACDCE144DC3230A0C500
x-oss-cdn-auth: success
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-md5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
ali-swift-global-savetime: 1714334940
via: cache15.l2de2[0,0,304-0,H], cache8.l2de2[1,0], ens-cache18.se2[0,0,200-0,H], ens-cache15.se2[0,0]
accept-ranges: bytes
vary: Accept-Encoding
last-modified: Thu, 08 Jun 2023 02:24:34 GMT
x-oss-hash-crc64ecma: 5143829838470429443
content-encoding: gzip
age: 872822
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 07 May 2024 06:00:54 GMT
x-swift-cachetime: 569286
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62ca317152077621383014e
X-Firefox-Spdy: h2
|
|
| www.3659001.net:8989/commonPage/lan/i18n.js?t=1715207761.359 | 43.198.190.53 | 200 OK | 813 B |
URL GET HTTP/1.1www.3659001.net:8989/commonPage/lan/i18n.js?t=1715207761.359 IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typeASCII text, with very long lines (1217) Hash06f5a8dfd5804428e5a348cdb9c7d48b 11280e5a2cf8000959c57a3783d299729a9e06ab 2a3a89c4e9ef8825d337efe22a1d3f312a457d1a2c63f0a005a8f6cf5abdfca0
GET /commonPage/lan/i18n.js?t=1715207761.359 HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:02 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-171520776230bc
out-line: gb-site-133
Content-Encoding: gzip
|
|
| | 43.198.190.53 | 200 OK | 114 kB |
URL User Request GET HTTP/1.1IP43.198.190.53:8989
CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (470) Size114 kB (113590 bytes) Hashe691d01abb04e6c8a716588fb29520b4 a00484f8a8c847d80f7cb3565c65bc94308a79b6 f5d788aa706afd66fe6dfd85bf6582879228ef3895a2aab9b2bbd397a7995449
GET / HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-html-cache: HIT-3600
X-Frame-Options: SAMEORIGIN
uuid: -
out-line: gb-site-133
Content-Encoding: gzip
|
|
| www.3659001.net:8989/message_zh_CN.js?v=1715161548792 | 43.198.190.53 | 200 | 9.9 kB |
URL GET HTTP/1.1www.3659001.net:8989/message_zh_CN.js?v=1715161548792 IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typeUnicode text, UTF-8 text, with very long lines (18069) Hash8e3a3463437bc8b56e112f0b87b6a0d0 dfaac70f23b58a771856460bb00aebc5fcadb2ce 0aa3002021c50dd94fcd0eb615a6735db1b54723503264f1c24985e0bcdd868b
GET /message_zh_CN.js?v=1715161548792 HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:03 GMT
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:03 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: 00141-01-00000000-171520776309c6
out-line: gb-site-133
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-base.css | 103.198.200.1 | 200 OK | 17 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-base.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeUnicode text, UTF-8 text, with very long lines (12023) Hashd01c79296c69daae2357744b28ad3a08 6979c86432a04a8cc22818055bd599e10d13892e 03bae6f265bda27347f4697d37ddb03335678cf0a76d5a246ee1b02463294599
GET /ftl/commonPage/themes/gui-base.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 17118
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: W/"661623eb-14596"
Date: Tue, 16 Apr 2024 09:54:29 GMT
Last-Modified: Wed, 10 Apr 2024 05:30:19 GMT
Expires: Thu, 16 May 2024 09:54:29 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-06
X-Cdn-Request-ID: 3eb3767abb8dcaf28befd31040b3a340
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-skin-default.css | 103.198.200.1 | 200 OK | 6.3 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-skin-default.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (7014) Hash4f6eba52b6bdba2bd8154d39c61fcaab 11a91e977ab64175dc2ec233d45c6cf9d34798b0 b4ae8f84403e1e8ea7f75cac8491e461ac6e5524260a04d772d53dd912f8e53a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/themes/gui-skin-default.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 6253
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"64ad1569-7b6e"
Date: Tue, 16 Apr 2024 09:54:29 GMT
Last-Modified: Tue, 11 Jul 2023 08:40:09 GMT
Expires: Thu, 16 May 2024 09:54:29 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-01
X-Cdn-Request-ID: 309f1da6442fdf4bc79be9c1c6208894
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/style/bootstrap-dialog.min.css | 103.198.200.1 | 200 OK | 630 B |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/style/bootstrap-dialog.min.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Hash304eb84809c6637b7cdd0dc6225c5761 e724aff10b16dc82bf1086cd3b70d8396f630d64 cb1d0b332c0218bbb360fd25d693f88293b54389caf88c36ffcfd8adc948d0e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/style/bootstrap-dialog.min.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 630
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"6153e3b6-adc"
Date: Tue, 16 Apr 2024 09:54:30 GMT
Last-Modified: Wed, 29 Sep 2021 03:55:34 GMT
Expires: Thu, 16 May 2024 09:54:30 GMT
Age: 1946493
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-10
X-Cdn-Request-ID: 6bf17e2a9b8498679e50101cff68059e
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/style/common.css | 103.198.200.1 | 200 OK | 13 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/style/common.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeassembler source, Unicode text, UTF-8 (with BOM) text, with very long lines (532) Hashd85714aa13b8df3bbe47562a0a5b0a82 e1dd836dc82ce5c0e8586bf837a90b2efb55916a 02f1ef82366e3bb0fb19f6e5f967e5c63ea857d53803aedcf6cb8f79ee7d4ac2
GET /ftl/bet365-141-2/themes/style/common.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 12593
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: W/"65138f5d-d024"
Date: Tue, 16 Apr 2024 09:54:30 GMT
Last-Modified: Wed, 27 Sep 2023 02:11:41 GMT
Expires: Thu, 16 May 2024 09:54:30 GMT
Age: 1946493
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-12
X-Cdn-Request-ID: 31c6fecb2c558abc2ccca0b00b73b704
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/style/swiper-4.3.3.min.css | 103.198.200.1 | 200 OK | 3.1 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/style/swiper-4.3.3.min.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeASCII text, with very long lines (19512) Hashf29b1aec530d4ecb1255894948203345 ec15a3a265c1556fae8f9553d371423df9653c50 f476606c821fd23ba0fcae1845e3e45ae39f6040921de2d96698ad7d1e922f3e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/style/swiper-4.3.3.min.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 3094
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: W/"6153e3b6-4d3d"
Date: Tue, 16 Apr 2024 09:54:29 GMT
Last-Modified: Wed, 29 Sep 2021 03:55:34 GMT
Expires: Thu, 16 May 2024 09:54:29 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-07
X-Cdn-Request-ID: 2d760d1d684293f26fe3432e21a538b1
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-layer.css | 103.198.200.1 | 200 OK | 6.9 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-layer.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeUnicode text, UTF-8 text, with very long lines (489) Hash858eefc3fa70af7d0115c901908471f5 29c181bbbc09a424f7de7cb57629bd8a9e3c679a 9f6a77c93f998e065f1ed52eb9943a3c560a50366bba2c8a34a4a1223c793caf
GET /ftl/commonPage/themes/gui-layer.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 6923
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: W/"64ddd5e1-c760"
Date: Tue, 16 Apr 2024 09:54:29 GMT
Last-Modified: Thu, 17 Aug 2023 08:10:09 GMT
Expires: Thu, 16 May 2024 09:54:29 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-04
X-Cdn-Request-ID: 6525c101b14ca415374b6b10d68fc44a
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/themes/hongbao.css | 103.198.200.1 | 200 OK | 5.7 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/themes/hongbao.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeUnicode text, UTF-8 text, with very long lines (336) Hash499a3a64bcf22609681f5337a6360c80 fc05a8a391c8375ea4e47183eca56a18bed8fca7 5339bf22971b6400e64154decc06b84fd4be337c2758cc7ca565756c92c97894
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/themes/hongbao.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 5666
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-06
ETag: W/"64252e4f-d530"
Date: Tue, 16 Apr 2024 09:54:30 GMT
Last-Modified: Thu, 30 Mar 2023 06:38:07 GMT
Expires: Thu, 16 May 2024 09:54:30 GMT
Age: 1946493
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-06, HIT from KS-CLOUD-XG-FOREIGN-21-08
X-Cdn-Request-ID: a373553db41b65b83d7bff5906f433bc
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/float.js | 103.198.200.1 | 200 OK | 1.9 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/float.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash829af863b0cdc4a603919824ae046299 1d417b1553e4ecb7125ebf2005b74255291fbf73 1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/float.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 1929
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: W/"612747ba-1b2f"
Date: Tue, 16 Apr 2024 09:54:07 GMT
Last-Modified: Thu, 26 Aug 2021 07:50:18 GMT
Expires: Thu, 16 May 2024 09:54:07 GMT
Age: 1946516
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-09
X-Cdn-Request-ID: 5e418e7f14b2548c97d23bfc1e96e766
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/jquery/jquery-1.11.3.min.js | 103.198.200.1 | 200 OK | 34 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/jquery/jquery-1.11.3.min.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, ASCII text, with very long lines (32038) Hashb091a47f6b91e26c93a848092c6f3788 52918af2d431e73464060b35d364640c8db75606 329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 33545
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"5d848f4f-176d4"
Date: Tue, 16 Apr 2024 09:54:07 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 16 May 2024 09:54:07 GMT
Age: 1946516
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-11
X-Cdn-Request-ID: 7d5b2d73ab9144ce339e10787931166e
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/websocket/Comet.js | 103.198.200.1 | 200 OK | 4.0 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/websocket/Comet.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash4de3e8bcf2f02d60519ca0d3584d3b8e 6323c2bf18b1bbf968e164bdf2e58d7677f67f8a 6cf6e96f51f13834e233bee9a9040f6eff70601dc0b755e60885b20550b35a9f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/websocket/Comet.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 4031
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: W/"60f60fb5-43bc"
Date: Tue, 16 Apr 2024 09:54:08 GMT
Last-Modified: Mon, 19 Jul 2021 23:50:13 GMT
Expires: Thu, 16 May 2024 09:54:08 GMT
Age: 1946515
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-10
X-Cdn-Request-ID: 66da2729f8d65b37dd5853561e341a48
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/idangerous.swiper.min.js | 103.198.200.1 | 200 OK | 12 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/idangerous.swiper.min.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, ASCII text, with very long lines (32034) Hashf15409fb02c527ce1f66a2fd3c4aa0e9 1e1e1bcc0f49e99e14ba34991cffe0745178d302 1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27
GET /ftl/commonPage/js/idangerous.swiper.min.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 11957
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: W/"64d5b951-b083"
Date: Tue, 16 Apr 2024 09:54:07 GMT
Last-Modified: Fri, 11 Aug 2023 04:30:09 GMT
Expires: Thu, 16 May 2024 09:54:07 GMT
Age: 1946516
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-12
X-Cdn-Request-ID: 43c17d155365cde876cca3d02116c2a8
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/websocket/CometMarathon.js | 103.198.200.1 | 200 OK | 3.3 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/websocket/CometMarathon.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash3b4680db1e065116488f065419ca9f58 6c646601c5656ff6cb1fdf9d5b95823f41e9bcfa e2bfb9fc21f2a1a6e33c7c5ed20de13ef2ef4bcf266aa4b2e6f2fee06f8f4eaf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/websocket/CometMarathon.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 3316
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: W/"6260ddd4-2f13"
Date: Tue, 16 Apr 2024 09:54:29 GMT
Last-Modified: Thu, 21 Apr 2022 04:30:12 GMT
Expires: Thu, 16 May 2024 09:54:29 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding, Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
Content-Encoding: gzip
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-01
X-Cdn-Request-ID: cfc522c176d2b3e346812fe3ec104571
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/websocket/PopUp.js | 103.198.200.1 | 200 OK | 797 B |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/websocket/PopUp.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Hash07864ad2e2759d53f8f2f14dd4295bd9 95144219e2eb702c4c4a707c3622b086876cf41c 871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/websocket/PopUp.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 797
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"6260ddd4-828"
Date: Tue, 16 Apr 2024 09:54:08 GMT
Last-Modified: Thu, 21 Apr 2022 04:30:12 GMT
Expires: Thu, 16 May 2024 09:54:08 GMT
Age: 1946515
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-04
X-Cdn-Request-ID: 90c4e392f6e6c95c3e40192faeec04fa
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/lazyload.js | 103.198.200.1 | 200 OK | 2.7 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/lazyload.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash58f1a7fa1a19b0e5ad0a5bad974b98cf 6963ce7378e6c992de06e7e77d79432a0d38f54d fb513dceb383ebeda507b1e1cc89ab4d73de071d8aa4fc78bc22f66e7fc5a7e4
GET /ftl/commonPage/js/lazyload.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 2731
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-06
ETag: W/"64d05f66-2f79"
Date: Tue, 16 Apr 2024 09:54:07 GMT
Last-Modified: Mon, 07 Aug 2023 03:05:10 GMT
Expires: Thu, 16 May 2024 09:54:07 GMT
Age: 1946516
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-06, HIT from KS-CLOUD-XG-FOREIGN-21-10
X-Cdn-Request-ID: ca3f48340292777a84ddb84ed6d37bad
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/gui-base.js | 103.198.200.1 | 200 OK | 16 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/gui-base.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (11056) Hash4007cfe0a95df1d6a9f4252e636f995f b0f9a2ad5c49b9b50ac5d025c8e9ce803eb5d7a8 4370313fa317e44140f85bba141ec24c2c9ef674593779d3349d2a44001699d0
GET /ftl/commonPage/js/gui-base.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 15779
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-04
ETag: W/"64ddbaed-ee5c"
Date: Tue, 16 Apr 2024 09:54:08 GMT
Last-Modified: Thu, 17 Aug 2023 06:15:09 GMT
Expires: Thu, 16 May 2024 09:54:08 GMT
Age: 1946515
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10
X-Cdn-Request-ID: ea658e229ed43805d96d8eeafe299876
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/bootstrap-dialog.min.js | 103.198.200.1 | 200 OK | 5.0 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/bootstrap-dialog.min.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, ASCII text, with very long lines (20132), with no line terminators Hash5ce8851dc823429a42ab6147554403cc 28f381f0e0aa4f5d56690e65723bd97fb59a38e6 dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/bootstrap-dialog.min.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 5007
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: W/"5d848f4f-4ea4"
Date: Tue, 16 Apr 2024 09:54:07 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 16 May 2024 09:54:07 GMT
Age: 1946516
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding, Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-204
Content-Encoding: gzip
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-10
X-Cdn-Request-ID: 0336ad07c3b1a98ae95300bacc9233dd
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/layer.js | 103.198.200.1 | 200 OK | 7.6 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/layer.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21922) Hashc42797aecccd5494e2b747cedf1a890b b9e06a6d245b6a3c87f2753db0c9c9aa020640b2 56feab66e10b4718de666fc63941b4f36a5e553e8887d663e137e635add8beb3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/layer.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 7599
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-03
ETag: W/"5d848f4f-55f6"
Date: Tue, 16 Apr 2024 09:54:30 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 16 May 2024 09:54:30 GMT
Age: 1946493
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-15
X-Cdn-Request-ID: 7a35606de89a08e74c3265e9e9249f46
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/jquery/jquery.super-marquee.js | 103.198.200.1 | 200 OK | 1.4 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/jquery/jquery.super-marquee.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4433), with no line terminators Hashf77d83590bc0a69298f2fbcc5d9911cd 1d6aa25d7052f53ad0181385e5efe72f224bbdb9 1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/jquery/jquery.super-marquee.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 1421
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-36-05
ETag: W/"5d848f4f-1151"
Date: Tue, 07 May 2024 14:41:55 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 06 Jun 2024 14:41:55 GMT
Age: 114849
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg36:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-36-05, HIT from KS-CLOUD-XG-FOREIGN-21-09
X-Cdn-Request-ID: 2ffa50bfea30ee7ebe8ca3d001d9f5e6
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/jquery/jquery.nicescroll.min.js | 103.198.200.1 | 200 OK | 17 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/jquery/jquery.nicescroll.min.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, ASCII text, with very long lines (64577) Hashb5bc8cd626b389bde727a91e6ce79436 3df6c39300ac286cf596b3bda273cb39ff825429 a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/jquery/jquery.nicescroll.min.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 17446
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: W/"5d848f4f-fc8b"
Date: Tue, 16 Apr 2024 09:54:29 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 16 May 2024 09:54:29 GMT
Age: 1946495
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding, Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
Content-Encoding: gzip
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-12
X-Cdn-Request-ID: d304a727bc47b43d56e5fb83341f3628
|
|
| 3dsa62.gaokejd.xyz/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js | 103.198.200.1 | 200 OK | 7.7 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (27669) Hashf8c2b37c1dc626eede6a2e3e37aa4504 d4e8419497caa64c8a850ac4808dddb89b5eeb3f 728d63b799ab3d9bee5e987ad13f71aeb9d30ff78ed552c7edc425531c9c0f2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 7746
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"655579ca-6caf"
Date: Fri, 12 Apr 2024 07:00:07 GMT
Last-Modified: Thu, 16 Nov 2023 02:09:14 GMT
Expires: Sun, 12 May 2024 07:00:07 GMT
Age: 2302557
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-13
X-Cdn-Request-ID: d1ce7fc93216cec9a2535d76cacb1f51
|
|
| 3dsa62.gaokejd.xyz/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js | 103.198.200.1 | 200 OK | 4.1 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (14855), with no line terminators Hash4fe7dadf050dad2dcfd386d21b880281 07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 4126
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"655579ca-3a09"
Date: Fri, 12 Apr 2024 07:00:08 GMT
Last-Modified: Thu, 16 Nov 2023 02:09:14 GMT
Expires: Sun, 12 May 2024 07:00:08 GMT
Age: 2302556
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-08
X-Cdn-Request-ID: 981f88ca8ada7f7cf995f7833fdb7765
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/themes/hb/css/pc.css | 103.198.200.1 | 200 OK | 911 B |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/themes/hb/css/pc.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Hash1da71520b7a0a61526a8fa8d0feb40d1 ba1bf69dad8783563328054cae58ccabf1b00829 5eb4d895bcb33061cda238c8ff4985ede69a866819b980c732cf3802ec101e8d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/themes/hb/css/pc.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 911
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"5d848f4f-b5d"
Date: Tue, 16 Apr 2024 09:54:31 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 16 May 2024 09:54:31 GMT
Age: 1946493
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-04
X-Cdn-Request-ID: f947d5d8cd4daa548614acda0756dc3e
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/theme/default/layer.css?v=3.1.0 | 103.198.200.1 | 200 OK | 3.1 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/theme/default/layer.css?v=3.1.0 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Hash5cf9259b7dd27aacd46161ec23d261cf ba0c399616a5ae9cdd8aec5b76ba4aae4822367c 7f73a66b3a9a38576d124b6243a8984d795028e3493b8fa3f688d8dbe10cbccc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/js/theme/default/layer.css?v=3.1.0 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 3111
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: W/"6131d862-48e4"
Date: Tue, 16 Apr 2024 09:54:30 GMT
Last-Modified: Fri, 03 Sep 2021 08:10:10 GMT
Expires: Thu, 16 May 2024 09:54:30 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-03
X-Cdn-Request-ID: 65fe96534df25c55e728f35fa0abe296
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/js/moment.js | 103.198.200.1 | 200 OK | 27 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/js/moment.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash36c8f828395a9395549bd6e7307cb7e9 f30a4961558e2d3d4405e7d93aa28fdb63245e78 5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33
GET /ftl/commonPage/js/moment.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 26968
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: W/"64b633ca-1cab9"
Date: Tue, 16 Apr 2024 09:54:09 GMT
Last-Modified: Tue, 18 Jul 2023 06:40:10 GMT
Expires: Thu, 16 May 2024 09:54:09 GMT
Age: 1946515
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-06
X-Cdn-Request-ID: cfae095acf4cc4f8fad6b46725d38e62
|
|
| 3dsa62.gaokejd.xyz/061410/rcenter/common/static/js/gb.validation.min.js?v=1715161548792 | 103.198.200.1 | 200 OK | 5.2 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/061410/rcenter/common/static/js/gb.validation.min.js?v=1715161548792 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (801) Hash30be40425b37bee4158676082cef1f4d b41ed46721936872d5d7eadf303ce22938240d2a f5ca5f543161a6b37ca2bf26c4f3c630fe08323108c77dac1fba6ce755ce6f47
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1715161548792 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 5207
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: W/"633d510e-7fd7"
Date: Fri, 12 Apr 2024 07:00:08 GMT
Last-Modified: Wed, 05 Oct 2022 09:40:30 GMT
Expires: Sun, 12 May 2024 07:00:08 GMT
Age: 2302556
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-01
X-Cdn-Request-ID: 44a5f770b5f1c702585a8c636226702c
|
|
| 3dsa62.gaokejd.xyz/061410/rcenter/common/static/css/gb.validation.min.css | 103.198.200.1 | 200 OK | 3.8 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/061410/rcenter/common/static/css/gb.validation.min.css IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeUnicode text, UTF-8 text, with very long lines (2295) Hashf00ce0554efc5adea6a8e02d5e501cad 388840e376568b37ac0103aa5c87a268778db67a 3043f42fdd97ec607648da79c3abfa6f364404c7594143227c2541d1f0ac6069
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /061410/rcenter/common/static/css/gb.validation.min.css HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 3788
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: W/"633d510e-2d52"
Date: Fri, 12 Apr 2024 07:00:13 GMT
Last-Modified: Wed, 05 Oct 2022 09:40:30 GMT
Expires: Sun, 12 May 2024 07:00:13 GMT
Age: 2302551
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-07
X-Cdn-Request-ID: 2cb2592c7dadf35965affdaf8a1e73c5
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/plugin/js/swiper-4.3.3.min.js | 103.198.200.1 | 200 OK | 32 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/plugin/js/swiper-4.3.3.min.js IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65275) Hash317fd00903b68a157500b40495e8d74e 29ba73703d5c1d5390551e9fb230a3f1ace1437e efac6fec2ba437b6a906e249fad9de3c7d3c105a48136b0155376b5989c4d76a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/plugin/js/swiper-4.3.3.min.js HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 31739
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: W/"614d2b23-1df6f"
Date: Tue, 16 Apr 2024 09:54:30 GMT
Last-Modified: Fri, 24 Sep 2021 01:34:27 GMT
Expires: Thu, 16 May 2024 09:54:30 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-15
X-Cdn-Request-ID: ee0c82d8689cf904689a3d482201c7aa
|
|
| www.3659001.net:8989/mobile-api/v5/origin/getFloat.html | 43.198.190.53 | 200 | 3.1 kB |
URL POST HTTP/1.1www.3659001.net:8989/mobile-api/v5/origin/getFloat.html IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hashc19a9666cda8d87f141b005505cb35b6 9b20beed9f17b713a3a7c100ba64888f09e2c497 6b14df6ba8860eb4c4241ec00545c8cb125ca141421e89d7d849f63eff3b978c
POST /mobile-api/v5/origin/getFloat.html HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 68
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:05 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: route=f7c95a7b6b031c620a6304190a7ddf24; Path=/
Access-Control-Allow-Origin: https://www.3659001.net:8989
Access-Control-Allow-Methods: *
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: Content-Type,Access-Token,X-Requested-With
Content-Disposition: inline;filename=f.txt
sub-sys: mobile
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-17152077654f03
out-line: gb-site-133
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg | 103.198.200.1 | 200 OK | 6.9 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 168x168, components 3 Hash99be4bfe275809d4e436b77c991b1381 54eadee77394eb62ccf377ae68d9f49acb5b6785 4ca35131972acdf420b94f0d64a5a0f504eb5a7b0e6fb7b8b467916a12aae37d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 6871
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-04
ETag: "5d848f4f-1ad7"
Date: Tue, 16 Apr 2024 09:54:30 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 16 May 2024 09:54:30 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-13
X-Cdn-Request-ID: 939c6b81a8defb682fd390cc25b2fe8a
|
|
| www.3659001.net:8989/index/getAppsUrl.html?device=android&fPixelId=&accessToken=&apiVersion= | 43.198.190.53 | 200 | 890 B |
URL GET HTTP/1.1www.3659001.net:8989/index/getAppsUrl.html?device=android&fPixelId=&accessToken=&apiVersion= IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hash64e86ad23139e5312f908fcb3a30c758 c2d85f6a6ecc6382b38a4133b3130e2e6cd407bd 644ccda88f5e9e335d397ff85b0375b89c1c8f874676f432cb86df8d0e5cd826
GET /index/getAppsUrl.html?device=android&fPixelId=&accessToken=&apiVersion= HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: route=f99a9c30dbd1a887d1dbc0d8dc11c2e5; Path=/
Content-Disposition: inline;filename=f.txt
sub-sys: msite
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-171520776551e0
out-line: gb-site-133
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_11.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_11.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashd495fdd61d29ff61ff34fdccc5597d0f 95a2b5b377a239ccf2d5e5cc81534f79dbbbe033 08097b5ebe2de4f6d295aeb64fc72170c766ea81851e9baf96ff4de926fc678b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_11.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:05 GMT
Content-Type: image/png
Content-Length: 19964
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-4dfc"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:05 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7006.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7006.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash7facd57d474585a0c9e3b2b6d4762969 814362f72beba19c7dfb93b8d2bc760f87a2a00e 3bf01b8e569dbd7060d7dcb2222e7e3ebc9e42f715535df2315c877fed9046bd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7006.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:05 GMT
Content-Type: image/png
Content-Length: 20484
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-5004"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:05 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| vue.livehelp100service.com/visitorside/js/vendor.813e3b63.js |  143.204.55.93 | 200 OK | 36 kB |
URL GET HTTP/2vue.livehelp100service.com/visitorside/js/vendor.813e3b63.js IP143.204.55.93:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint63:B0:01:26:AE:72:99:B7:98:45:6B:15:1E:CE:05:7B:20:19:C3:2B ValidityThu, 30 Nov 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65419) Hashf227094207a6a4ba13cac7986b206bd5 23d9b18bcdfcd6135f2ca9d1c413a87b67f65899 90232fe6dbf057e331ca0accf1f6dcb90b983d64834a0548fc5e5461d7da259b
GET /visitorside/js/vendor.813e3b63.js HTTP/1.1
Host: vue.livehelp100service.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 08 May 2024 05:59:36 GMT
server: nginx/1.22.1
last-modified: Tue, 23 Apr 2024 10:29:26 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
etag: W/"66278d86-1bed1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Fx4Esvs0lQ61rGjKXH-goa3QaAdTKAhtmM5sCl52ZVohlD6JfaYNtg==
age: 59789
X-Firefox-Spdy: h2
|
|
| www.3659001.net:8989/headerInfo.html?t=lvyef2nm | 43.198.190.53 | 200 | 116 B |
URL GET HTTP/1.1www.3659001.net:8989/headerInfo.html?t=lvyef2nm IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hashf9c2820f326e1310afb493f7775434f5 68a357d0f26e3525817776d50af3534129fa1fdb 067e6711c299bd9487a5028ff8a0b66ab64640154213381b73f55a77a52f20c0
GET /headerInfo.html?t=lvyef2nm HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=f99a9c30dbd1a887d1dbc0d8dc11c2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Disposition: inline;filename=f.txt
sub-sys: msite
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-1715207766c4bc
out-line: gb-site-133
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5011.png | 43.198.190.53 | 200 OK | 23 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5011.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash2ae6a25328f92bbd4f06bf83f0d64a34 a182c94addc49f545829566f4f87e7cdf5a2b16a 92d81aa551c89d28170300c1d6ae6e5795e33ac101988de54570fae720fa15c9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5011.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: image/png
Content-Length: 23076
Connection: keep-alive
Last-Modified: Mon, 15 May 2023 01:55:35 GMT
ETag: "64619117-5a24"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:06 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/mobile-api/v5/chess/getActivityMsg.html?function=sign | 43.198.190.53 | 200 | 140 B |
URL GET HTTP/1.1www.3659001.net:8989/mobile-api/v5/chess/getActivityMsg.html?function=sign IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hash5d062bc93ef9d75b27e852ed745d170f 1ecf82a0589608b26ee6a29b2cc3229916596626 26e77aa8c61c230db13c8fd74d4ab3adf8be54c3192c4e16f94e633a71efc2e1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /mobile-api/v5/chess/getActivityMsg.html?function=sign HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=f99a9c30dbd1a887d1dbc0d8dc11c2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 140
Connection: keep-alive
Set-Cookie: route=66776b881a59021b52807ef9298664ac; Path=/
Access-Control-Allow-Methods: *
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: Content-Type,Access-Token,X-Requested-With
Content-Disposition: inline;filename=f.txt
sub-sys: mobile
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-171520776660e8
out-line: gb-site-133
|
|
| www.3659001.net:8989/mobile-api/v5/origin/loginSwitchCheck.html | 43.198.190.53 | 200 | 174 B |
URL GET HTTP/1.1www.3659001.net:8989/mobile-api/v5/origin/loginSwitchCheck.html IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hash1452cebf3e2bb129b06762f43f09e5c8 0ec65f1e79233e8c59f76c55fb89ac8637cfb070 99a31cd18b8ce37d3725d0a77d5e314452d2906ed2b54b8b19d4de849d1bf13d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /mobile-api/v5/origin/loginSwitchCheck.html HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=f99a9c30dbd1a887d1dbc0d8dc11c2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 174
Connection: keep-alive
Set-Cookie: route=66776b881a59021b52807ef9298664ac; Path=/
Access-Control-Allow-Methods: *
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: Content-Type,Access-Token,X-Requested-With
Content-Disposition: inline;filename=f.txt
sub-sys: mobile
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-17152077660f47
out-line: gb-site-133
|
|
| www.3659001.net:8989/index/getUserTimeZoneDate.html?t=lvyef2yu | 43.198.190.53 | 200 | 119 B |
URL GET HTTP/1.1www.3659001.net:8989/index/getUserTimeZoneDate.html?t=lvyef2yu IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hash083225a79e961ea94fe14d0e7250c991 c46685b5c76a1dbbd4ee3943aa1aa5b8a7b895f4 b6742f36a9d605807b90ebb478c016e9529f1432ef2e89eeff8b62547588a2fc
GET /index/getUserTimeZoneDate.html?t=lvyef2yu HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=f99a9c30dbd1a887d1dbc0d8dc11c2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 119
Connection: keep-alive
Content-Disposition: inline;filename=f.txt
sub-sys: msite
cachettl: 3
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-1715207766ec68
out-line: gb-site-133
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_31006.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_31006.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hasha678f783e25a467193ee4fa0252d5bf4 ffadbf4388ce2dc312c720e75f9b9d73c05e93cd 1421dad09cedb4c186e8b4ac1cc027955d52a9d268b29144d3d8f0d60d5ed075
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_31006.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: image/png
Content-Length: 19766
Connection: keep-alive
Last-Modified: Wed, 10 May 2023 06:20:23 GMT
ETag: "645b37a7-4d36"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:06 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_31008.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_31008.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash37070ea9397e4c9bfa4c6fa5e499de59 fd2237d48600d3a6acba5c8982c1d594962418d4 f3d50d3f597d6a23e42d069971e80a14851d7c996bbce674ed591c6e87b64bda
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_31008.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: image/png
Content-Length: 20172
Connection: keep-alive
Last-Modified: Wed, 10 May 2023 06:20:23 GMT
ETag: "645b37a7-4ecc"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:06 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5007.png | 43.198.190.53 | 200 OK | 22 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5007.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashfeaff8384a2780bf50a660b657928245 eb492cee9a7d13b8114aa1c75c6db75742d7ef4a ec33d957ba07daa21a098bc096b1c643ae64420e1924f0691b6b75fd4e8707f2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5007.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: image/png
Content-Length: 21877
Connection: keep-alive
Last-Modified: Fri, 09 Aug 2019 09:47:47 GMT
ETag: "5d4d4143-5575"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:06 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10453/1709884327913.png?wsSecret=862e8e1c42efb08218ef0dbc9b7964bb&wsTime=1715207765 | 103.198.200.1 | 200 OK | 446 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10453/1709884327913.png?wsSecret=862e8e1c42efb08218ef0dbc9b7964bb&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 850 x 214, 8-bit/color RGBA, non-interlaced Size446 kB (445653 bytes) Hashe7d4b3399a781fef78fc16347dd4b67c 5b614a8c1dd51f7fd090d5c5c40b9c1161a90415 cdbe3b34600272880c004ab8325e05fc717d0d2a3b0b81a2f297858d1c07f532
GET /fserver/files/gb/141/carousel/10453/1709884327913.png?wsSecret=862e8e1c42efb08218ef0dbc9b7964bb&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 445653
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: "65eac3a7-6ccd5"
Date: Tue, 07 May 2024 08:04:31 GMT
Last-Modified: Fri, 08 Mar 2024 07:52:07 GMT
Expires: Thu, 06 Jun 2024 08:04:31 GMT
Age: 138694
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-08
X-Cdn-Request-ID: f7e772d59bf78b16305e55f03e6ef1a2
|
|
| www.3659001.net:8989/mobile-api/v5/origin/getThirdParam.html | 43.198.190.53 | 200 | 103 B |
URL GET HTTP/1.1www.3659001.net:8989/mobile-api/v5/origin/getThirdParam.html IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hash9ac55fe189e4f53f37156e563e0f542e 18b13b1360ce9fbd973e046d2652be38d58a15e0 d7e02321006e1520d4c3e8d26428462419388e022cc89f3c974d0b87ad83af7b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /mobile-api/v5/origin/getThirdParam.html HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=66776b881a59021b52807ef9298664ac
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 103
Connection: keep-alive
Access-Control-Allow-Methods: *
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: Content-Type,Access-Token,X-Requested-With
Content-Disposition: inline;filename=f.txt
sub-sys: mobile
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-1715207767b0fd
out-line: gb-site-133
|
|
| www.3659001.net:8989/ftl/bet365-141-2/themes/images/hot.gif | 43.198.190.53 | 200 OK | 1.3 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/bet365-141-2/themes/images/hot.gif IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typeGIF image data, version 89a, 16 x 21 Hash98b6e28b9ec42fb2cfeeb767adf534b0 ec30e424f3b775ad1d9b80e8947a4646ee8c5af9 06011ce85e775ecfeda87eaca9ee6ac75cb9522cefe71448d8b04adc81bd9f67
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images/hot.gif HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=66776b881a59021b52807ef9298664ac
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/gif
Content-Length: 1265
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
ETag: "5d2c7603-4f1"
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png | 103.198.200.1 | 200 OK | 1.3 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced Hasha2e938202c0287b9c82461a6fd94dee9 b5e2adc7cb07c18a70a88af314e56b946ec1a1b6 df9ce20db277ad8302c704a73aff5024683a0d38aff0d3e7e884a67a24439936
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3dsa62.gaokejd.xyz/ftl/commonPage/themes/gui-layer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1321
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: "5d848f4f-529"
Date: Tue, 16 Apr 2024 09:54:31 GMT
Last-Modified: Fri, 20 Sep 2019 08:35:27 GMT
Expires: Thu, 16 May 2024 09:54:31 GMT
Age: 1946495
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-11
X-Cdn-Request-ID: 21caa04e418f689a767ce609bc5ea629
|
|
| www.3659001.net:8989/game-api/v5/content/sportRecommended.html?t=lvyef3a2 | 43.198.190.53 | 200 | 773 B |
URL GET HTTP/1.1www.3659001.net:8989/game-api/v5/content/sportRecommended.html?t=lvyef3a2 IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
Hashb8fefd9a034ca975fb1864334df589ff 1f2913ba78345adc856d67261bc66cdeb07052c3 9f6e365e66094c9a5f8b33b56274fa60dc9602f0b4c04ea50f8b4d577cf598b7
GET /game-api/v5/content/sportRecommended.html?t=lvyef3a2 HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=66776b881a59021b52807ef9298664ac
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: route=c818d4f4451b0c3592b2d6eebdcb59c0; Path=/
Content-Disposition: inline;filename=f.txt
sub-sys: mobile
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-17152077672357
out-line: gb-site-133
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7004.png | 43.198.190.53 | 200 OK | 102 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7004.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size102 kB (102160 bytes) Hash18b9c1ca12b579e3be9de7f0b3d765b7 cabb9ddce1222608668401769754241d2667ac59 81b7527eda1e9db86dc9704173b4e9aa50932eb8c80ea08b23d969899bca9656
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7004.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: image/png
Content-Length: 102160
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2019 12:48:11 GMT
ETag: "5d2c760b-18f10"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:06 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7003.png | 43.198.190.53 | 200 OK | 105 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7003.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size105 kB (105068 bytes) Hashc421c976cf701cd806a7ebeb8575e0a3 cb84123cde62bcad60f34b5a5703f7bfafca1906 e797e57325c453e7ca7e56e634ada214b51ab9298ba5aea4d183fea859857d60
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_60_7003.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: image/png
Content-Length: 105068
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2019 12:48:11 GMT
ETag: "5d2c760b-19a6c"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:06 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5006.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5006.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash7769f6a35df5811fbe7fa97b2aea9a1c 2875a7cfef0a8a296374aba27f95a8a8d79b8acf 855a9b3bb8c24ca1ed6cbf42331ff6a243e03b1452d8c2d371df11d861f8712b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5006.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/png
Content-Length: 20434
Connection: keep-alive
Last-Modified: Fri, 09 Aug 2019 09:47:47 GMT
ETag: "5d4d4143-4fd2"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10467/1713931196224.jpeg?wsSecret=13c5425fdae4bb682fdeec9b6dd3b4ce&wsTime=1715207765 | 103.198.200.1 | 200 OK | 46 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10467/1713931196224.jpeg?wsSecret=13c5425fdae4bb682fdeec9b6dd3b4ce&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Hash59bda0c5f1335d35ebc205b9e99333cd 9c21a44c20115bf8fd3a7a5032127077c617fd9d 4966ba8a1e4e35fac0e04ee49f6b0be10dd5218b268e53b89a792b12c8db18e9
GET /fserver/files/gb/141/carousel/10467/1713931196224.jpeg?wsSecret=13c5425fdae4bb682fdeec9b6dd3b4ce&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 45587
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-03
ETag: "662883bc-b213"
Date: Wed, 24 Apr 2024 04:03:53 GMT
Last-Modified: Wed, 24 Apr 2024 03:59:56 GMT
Expires: Fri, 24 May 2024 04:03:53 GMT
Age: 1276333
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-11
X-Cdn-Request-ID: 2caa97206a1490fe4bb5f16553c54280
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5002.png | 43.198.190.53 | 200 OK | 21 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5002.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashd73cf218f18362d0a89cb36a4a3303ff 57bf03bb562ca33343b19db1fe5e872335cc1cb2 691d5caeb173c0c0817111fea711d2685d1e0e4e7e19f6aa7282fc525193f40c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5002.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/png
Content-Length: 21363
Connection: keep-alive
Last-Modified: Fri, 11 Feb 2022 05:28:08 GMT
ETag: "6205f3e8-5373"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5005.png | 43.198.190.53 | 200 OK | 22 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5005.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash2acb631ee46633c2bb57645aa0062b24 7ebc60e9519805119574b600d0400278fb02ea7f c026010b4e9ba86b7dd1670e242e42a1e4fec0547b7fecc3b37feddd0c21d46b
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5005.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/png
Content-Length: 21850
Connection: keep-alive
Last-Modified: Fri, 09 Aug 2019 09:47:47 GMT
ETag: "5d4d4143-555a"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5004.png | 43.198.190.53 | 200 OK | 23 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5004.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash20cd47483388f1e46ed9c2304f2c60ea 1c09b695620a64ae94ba7807a41e95733c6211f9 8f091a2a4dd3a918c15d7692aeb343f3d8e8d673541411e74256a48865735448
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5004.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/png
Content-Length: 23021
Connection: keep-alive
Last-Modified: Fri, 09 Aug 2019 09:47:47 GMT
ETag: "5d4d4143-59ed"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/it03.png | 43.198.190.53 | 200 OK | 7.0 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/it03.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hasha853bec439a1590b0da6896f86f76feb 7f21d1dc5395fcc056ef4d91a3cf85782de121a5 f3a24872bb0011114620d987e4c9d49bcfe8716f1fff47abd35e89ce1ec56fe8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /fserver/files/sportTeam/football/it03.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/png
Content-Length: 7019
Connection: keep-alive
Last-Modified: Thu, 15 Nov 2018 08:56:30 GMT
Vary: Accept-Encoding
ETag: "5bed34be-1b6b"
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10459/1713758420551.jpeg?wsSecret=fd965383d32619c3d2d74a082c4d1372&wsTime=1715207765 | 103.198.200.1 | 200 OK | 127 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10459/1713758420551.jpeg?wsSecret=fd965383d32619c3d2d74a082c4d1372&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Size127 kB (127380 bytes) Hashb6a5a9ea7d87e4095a93d18090cbe4b3 71634dd20d2e4e7f44619c3b46ca0169151cfc0b 5815465374c746fed35ab994d586c7a319981fb53dda1fea958209af4b8c95bc
GET /fserver/files/gb/141/carousel/10459/1713758420551.jpeg?wsSecret=fd965383d32619c3d2d74a082c4d1372&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 127380
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: "6625e0d4-1f194"
Date: Mon, 22 Apr 2024 04:06:16 GMT
Last-Modified: Mon, 22 Apr 2024 04:00:20 GMT
Expires: Wed, 22 May 2024 04:06:16 GMT
Age: 1448990
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-12
X-Cdn-Request-ID: 9235b96c56869a73c75fe06634cefa36
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10427/1713758729683.jpeg?wsSecret=4641a4af363b86cf8144a0e648c7667f&wsTime=1715207765 | 103.198.200.1 | 200 OK | 105 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10427/1713758729683.jpeg?wsSecret=4641a4af363b86cf8144a0e648c7667f&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Size105 kB (104693 bytes) Hasha96c7a8bf4a59d943fd88fc22cb56093 8cb24b97f1291f792cf0fd488df7ff90284b5c3e ffa83640e1bca0b0997e7b2aeda7c18506d5513863458597399d97c2eee51b33
GET /fserver/files/gb/141/carousel/10427/1713758729683.jpeg?wsSecret=4641a4af363b86cf8144a0e648c7667f&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 104693
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: "6625e209-198f5"
Date: Mon, 22 Apr 2024 04:06:16 GMT
Last-Modified: Mon, 22 Apr 2024 04:05:29 GMT
Expires: Wed, 22 May 2024 04:06:16 GMT
Age: 1448990
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-11
X-Cdn-Request-ID: bb4ef37eb69e671eaab7d875d47bb753
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10456/1713266466963.jpeg?wsSecret=551c1c483d2b850ed45f6faee84cc665&wsTime=1715207765 | 103.198.200.1 | 200 OK | 166 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10456/1713266466963.jpeg?wsSecret=551c1c483d2b850ed45f6faee84cc665&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Size166 kB (166227 bytes) Hash077022ba856a086e8c2480635d1bac25 8abdc51495740a3ca78a02355e9f5ee274da7a76 3e7d255e5d36cae843eee39d85640c1bfe3eb74b4f3433cdc5877ee5d9ac8770
GET /fserver/files/gb/141/carousel/10456/1713266466963.jpeg?wsSecret=551c1c483d2b850ed45f6faee84cc665&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 166227
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-04
ETag: "661e5f22-28953"
Date: Tue, 16 Apr 2024 11:21:34 GMT
Last-Modified: Tue, 16 Apr 2024 11:21:06 GMT
Expires: Thu, 16 May 2024 11:21:34 GMT
Age: 1941272
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-15
X-Cdn-Request-ID: 881f35385b897e725ac75858b15b7dee
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5009.png | 43.198.190.53 | 200 OK | 24 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5009.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hasha838bd44f3219c2da8d802049a368871 56a1eacbfcc03256d8890dc8c24d616eaae6be10 ae6f7920d6589965170f6995ef03b30cf9148e5cf3c2706dc796af4b4740ed16
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5009.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/png
Content-Length: 23503
Connection: keep-alive
Last-Modified: Tue, 27 Feb 2024 03:00:13 GMT
ETag: "65dd503d-5bcf"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5001.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5001.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash45d0f5934f7f664e4fb397fbe69c0bec 72a5c4e823954ec0111709b6aec71c1f0b08fe43 3e9fedb5bbb6caac2dfc16278ba5d0c26483aa3efb5508374eeec9de7b9f9cd4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5001.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:07 GMT
Content-Type: image/png
Content-Length: 20254
Connection: keep-alive
Last-Modified: Fri, 09 Aug 2019 09:47:47 GMT
ETag: "5d4d4143-4f1e"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:07 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/fserver/files/gb/1272/sportTeam/42/1598088439143.png | 43.198.190.53 | 200 OK | 15 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/gb/1272/sportTeam/42/1598088439143.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced Hashc4ef74d9951cdea904807dccc3d9be22 5a5c1bb2718bb31c3ef34b9cdeb17e86dcd20fc3 66a61ff8bff344cc34fa9cdfd21a5cc3b4e6f4c0d5def68ea4e202bf4f634e9b
GET /fserver/files/gb/1272/sportTeam/42/1598088439143.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 14639
Connection: keep-alive
Last-Modified: Sat, 22 Aug 2020 08:14:45 GMT
Vary: Accept-Encoding
ETag: "5f40d3f5-392f"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/nba11.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/nba11.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced Hash21e459748abb1819a0d836631f516024 243f305f61c33fcb96f0eba4eacc9377d67374af 69503cc95ba1bbe3fb369e811d44af308843c2ad4a1358669d9ff930d5f45d29
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /fserver/files/sportTeam/football/nba11.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 20400
Connection: keep-alive
Last-Modified: Thu, 06 Dec 2018 10:53:24 GMT
Vary: Accept-Encoding
ETag: "5c08ffa4-4fb0"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/cba09.png | 43.198.190.53 | 200 OK | 30 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/cba09.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced Hash694cb11f285bf7b8e55accdd739b265a 90902e7deac304e06d69d173de28b2c3bb7da950 9a5fa99a23a1d8fada12fc1d626f53790ec409326fab4b8a62c172efc96bbef6
GET /fserver/files/sportTeam/football/cba09.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 29902
Connection: keep-alive
Last-Modified: Thu, 06 Dec 2018 10:52:18 GMT
Vary: Accept-Encoding
ETag: "5c08ff62-74ce"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10322/1713267365579.jpeg?wsSecret=b56730134542262b6723d9b9043f2b81&wsTime=1715207765 | 103.198.200.1 | 200 OK | 182 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10322/1713267365579.jpeg?wsSecret=b56730134542262b6723d9b9043f2b81&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Size182 kB (181506 bytes) Hash6339d8fb21bdf1c9c8c5d931e4cd53dd 5b771cdf7553d7ad29141ffa77f1e411f1afd844 bad2dc6593eeff383812d28f31a5732829ae4414fb751f97cf1da04a215c088e
GET /fserver/files/gb/141/carousel/10322/1713267365579.jpeg?wsSecret=b56730134542262b6723d9b9043f2b81&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 181506
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "661e62a5-2c502"
Date: Tue, 16 Apr 2024 11:36:15 GMT
Last-Modified: Tue, 16 Apr 2024 11:36:05 GMT
Expires: Thu, 16 May 2024 11:36:15 GMT
Age: 1940391
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-13
X-Cdn-Request-ID: d377e3d3eafde9b16266354d0e358829
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10381/1713759163183.jpeg?wsSecret=f30c6438c97a6806b35943848cb015ff&wsTime=1715207765 | 103.198.200.1 | 200 OK | 161 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10381/1713759163183.jpeg?wsSecret=f30c6438c97a6806b35943848cb015ff&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Size161 kB (161156 bytes) Hasha3efa3aa4ebda6c824cbb55d2c4f045c bc802fde70b7a3518a568d1a19c107a0b7348e10 d577cfafb687d4990251020b85f59c77186233d3545a235fe4f3e61c69a79434
GET /fserver/files/gb/141/carousel/10381/1713759163183.jpeg?wsSecret=f30c6438c97a6806b35943848cb015ff&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 161156
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-04
ETag: "6625e3bb-27584"
Date: Mon, 22 Apr 2024 04:29:37 GMT
Last-Modified: Mon, 22 Apr 2024 04:12:43 GMT
Expires: Wed, 22 May 2024 04:29:37 GMT
Age: 1447589
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11
X-Cdn-Request-ID: 584dbc83f2ef19be586518666065ce84
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/it07.png | 43.198.190.53 | 200 OK | 5.4 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/it07.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash1740ee48fece32b1925846fa55bcf1b3 9eb9950a834aaa79ae357ae38e9c21a061d73e0f 8f4694dcb55912f2f8653252b52da28415b706bbcda2bf0f39290a38d8034b64
GET /fserver/files/sportTeam/football/it07.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 5412
Connection: keep-alive
Last-Modified: Thu, 15 Nov 2018 08:56:32 GMT
Vary: Accept-Encoding
ETag: "5bed34c0-1524"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10311/1713759352902.jpeg?wsSecret=5d6acfd5fdff12bd19014dd14bb90a04&wsTime=1715207765 | 103.198.200.1 | 200 OK | 260 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10311/1713759352902.jpeg?wsSecret=5d6acfd5fdff12bd19014dd14bb90a04&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Size260 kB (259518 bytes) Hashbb4c6b768c51ab6b18f4a1bb0e882f30 6c56a0ac79b4313412a31298f55eca3d5de3409e c35f5c9f791c8becf94adb03031a2a5581c9bc203859a0cd41d2cddf462c5513
GET /fserver/files/gb/141/carousel/10311/1713759352902.jpeg?wsSecret=5d6acfd5fdff12bd19014dd14bb90a04&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 259518
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: "6625e478-3f5be"
Date: Mon, 22 Apr 2024 04:29:36 GMT
Last-Modified: Mon, 22 Apr 2024 04:15:52 GMT
Expires: Wed, 22 May 2024 04:29:36 GMT
Age: 1447590
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-08
X-Cdn-Request-ID: fb683284f6f112d502967a2ad46b72f7
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/cba06.png | 43.198.190.53 | 200 OK | 26 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/cba06.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced Hash4fd80b73f84e40e8ec265e21f965c4f5 2909373a8cb0d94e309956a0c75ddc72f1e52af3 166b0d5a5c392eb6b0453b44d3d9230abc5460e7953e48552011059e3e84c06b
GET /fserver/files/sportTeam/football/cba06.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 26373
Connection: keep-alive
Last-Modified: Thu, 06 Dec 2018 10:52:22 GMT
Vary: Accept-Encoding
ETag: "5c08ff66-6705"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/de05.png | 43.198.190.53 | 200 OK | 8.5 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/de05.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash77c55729308d9bc766c36c4277e86feb 43c8c30791a4b4654586c8d9a7d1a08ebb32f25e 6daa3568d8fa2b343221f8ba9c2ef3d6975bcad38e08ddce4b878979985fb805
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /fserver/files/sportTeam/football/de05.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 8502
Connection: keep-alive
Last-Modified: Fri, 16 Nov 2018 09:01:36 GMT
Vary: Accept-Encoding
ETag: "5bee8770-2136"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/fr04.png | 43.198.190.53 | 200 OK | 3.4 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/fr04.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash68de34559bd4d2316f1417795065cc29 e53a1f950035adec6b31327b471ee2923d2f2c8d 42a44490a9e7fa782c106a53cb824cc23ce4008c26e7db85936142d92cb68c59
GET /fserver/files/sportTeam/football/fr04.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 3406
Connection: keep-alive
Last-Modified: Thu, 15 Nov 2018 09:06:42 GMT
Vary: Accept-Encoding
ETag: "5bed3722-d4e"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10289/1706612387565.jpg?wsSecret=dd3483b80049165cc0deccfad4bac1f5&wsTime=1715207765 | 103.198.200.1 | 200 OK | 288 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10289/1706612387565.jpg?wsSecret=dd3483b80049165cc0deccfad4bac1f5&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJPEG image data, progressive, precision 8, 694x520, components 3 Size288 kB (288279 bytes) Hash55b47792c01b194b47fdcf67361a6c72 2c0eaa79db6d5c1fa043b6eb21eb96866eaee2e3 9716cf5bba76c06fb35891ca7642c8620ed819053743125b87d01255f0a38fb4
GET /fserver/files/gb/141/carousel/10289/1706612387565.jpg?wsSecret=dd3483b80049165cc0deccfad4bac1f5&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 288279
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: "65b8d6a3-46617"
Date: Mon, 29 Apr 2024 11:12:35 GMT
Last-Modified: Tue, 30 Jan 2024 10:59:47 GMT
Expires: Wed, 29 May 2024 11:12:35 GMT
Age: 818611
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-07
X-Cdn-Request-ID: 7dc000bc6b399f21d27390ec53bcb15b
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/en24.png | 43.198.190.53 | 200 OK | 4.2 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/en24.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hashbb640d7a008128f4cb1b84f6f80df9b5 080b45ebad7fc3190388fe227e4719bdf71ff76d 62b59a1fcb4b06930ac667565e8efa50ee107063d2450386130e9645b6ba2d9a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /fserver/files/sportTeam/football/en24.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 4170
Connection: keep-alive
Last-Modified: Wed, 14 Nov 2018 03:29:32 GMT
Vary: Accept-Encoding
ETag: "5beb969c-104a"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/fserver/files/sportTeam/football/gr02.png | 43.198.190.53 | 200 OK | 9.3 kB |
URL GET HTTP/1.1www.3659001.net:8989/fserver/files/sportTeam/football/gr02.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash0c735612ece986d7a738df43f59e76de 35dd55159cf2e9f56cd1af44c3a3537e32f7fb54 9b0994851ef748201131186534dfc1c28e1ab949fa620036550e82d279a3e2ad
GET /fserver/files/sportTeam/football/gr02.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=c818d4f4451b0c3592b2d6eebdcb59c0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 9276
Connection: keep-alive
Last-Modified: Sat, 17 Nov 2018 07:24:58 GMT
Vary: Accept-Encoding
ETag: "5befc24a-243c"
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/body-bg.gif?wsSecret=d98020a0ffd3d2097ab5e77a1dbf578c&wsTime=1715207765 | 103.198.200.1 | 200 OK | 758 B |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/body-bg.gif?wsSecret=d98020a0ffd3d2097ab5e77a1dbf578c&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeGIF image data, version 89a, 1 x 500 Hash41a9eebb99ba7c3b2a905aaa45726923 abf17115c33bdea05313ce6bcebe3fe4d7da935a f9b50670a93fcef81c4f838f7da60d397994bea07f83af0f51ae89d670f1189c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images/body-bg.gif?wsSecret=d98020a0ffd3d2097ab5e77a1dbf578c&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 758
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-04
ETag: "5d2c7603-2f6"
Date: Tue, 16 Apr 2024 09:54:32 GMT
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
Expires: Thu, 16 May 2024 09:54:32 GMT
Age: 1946495
Cache-Control: max-age=86400
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-04
X-Cdn-Request-ID: f8c15bba494193517f9e6a299997483c
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10307/1713759139998.jpeg?wsSecret=d2bf5d33aea335c5a49cc8a5a84a5dd0&wsTime=1715207765 | 103.198.200.1 | 200 OK | 380 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10307/1713759139998.jpeg?wsSecret=d2bf5d33aea335c5a49cc8a5a84a5dd0&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
Size380 kB (380075 bytes) Hash0a9031384cf59566a190a55d6dae333c a82815c4f2e91b8f0734bf5a5625d56c19c1fa65 57884a7490a2b27aae695e35ba64cb40a43961637e238a5b751740381d9eda1e
GET /fserver/files/gb/141/carousel/10307/1713759139998.jpeg?wsSecret=d2bf5d33aea335c5a49cc8a5a84a5dd0&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 380075
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "6625e3a4-5ccab"
Date: Mon, 22 Apr 2024 04:44:04 GMT
Last-Modified: Mon, 22 Apr 2024 04:12:20 GMT
Expires: Wed, 22 May 2024 04:44:04 GMT
Age: 1446722
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-07
X-Cdn-Request-ID: 4a10316826d6e8cbef9bbc4357d58377
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/head1.jpg?wsSecret=a21bb8ee8a5bd653506e911cfac219b4&wsTime=1715207765 | 103.198.200.1 | 200 OK | 7.7 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/head1.jpg?wsSecret=a21bb8ee8a5bd653506e911cfac219b4&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x72, components 3 Hash4e7da730a5cbfe4a7ce573ddcea0e60a ac31a27a6d71a7a297905c195a6434f043f7f0a7 fe5506589506db3c8dad8b544636c2794a764f28a9ab79215714d5cfe2d866c0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images/head1.jpg?wsSecret=a21bb8ee8a5bd653506e911cfac219b4&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 7727
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "613c72a8-1e2f"
Date: Tue, 16 Apr 2024 09:54:32 GMT
Last-Modified: Sat, 11 Sep 2021 09:11:04 GMT
Expires: Thu, 16 May 2024 09:54:32 GMT
Age: 1946496
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-09
X-Cdn-Request-ID: 176b0ee07d190763d40fc71022165274
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5003.png | 43.198.190.53 | 200 OK | 21 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5003.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hasha03861df13ee208fcb22c604bc412484 9d5925012e3eb16bb86bbe0b0febd3941847172d a9a4c50c7e2f04fcfdf467f4b3a6697a2a359c84000b8e38c1b5e3ab3115ab8d
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5003.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 21009
Connection: keep-alive
Last-Modified: Fri, 09 Aug 2019 09:47:47 GMT
ETag: "5d4d4143-5211"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10473/1714535026194.jpg?wsSecret=27e80c2ba414d28321c5e5f84afd6e2a&wsTime=1715207765 | 103.198.200.1 | 200 OK | 432 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10473/1714535026194.jpg?wsSecret=27e80c2ba414d28321c5e5f84afd6e2a&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 694x520, components 3 Size432 kB (431687 bytes) Hash8b3b5076ef1ddfad83cdafaad35b4751 9082f0a5cc542778dc3817a50cf93c0b37fda4e1 0669f745c1052a0a999d2710aeea2987bf9439b89777507318d8be3753b5f846
GET /fserver/files/gb/141/carousel/10473/1714535026194.jpg?wsSecret=27e80c2ba414d28321c5e5f84afd6e2a&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 431687
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-06
ETag: "6631ba72-69647"
Date: Wed, 01 May 2024 04:08:53 GMT
Last-Modified: Wed, 01 May 2024 03:43:46 GMT
Expires: Fri, 31 May 2024 04:08:53 GMT
Age: 671233
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-06, HIT from KS-CLOUD-XG-FOREIGN-21-11
X-Cdn-Request-ID: 92c48fb5834f351351d176bc61fa2801
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images//sec-nav-bg-grad.gif?wsSecret=ab84b29961e129845362ae06b53f4332&wsTime=1715207765 | 103.198.200.1 | 200 OK | 376 B |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images//sec-nav-bg-grad.gif?wsSecret=ab84b29961e129845362ae06b53f4332&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeGIF image data, version 89a, 1 x 594 Hash355b2cb853d78ae262c093065eaa6e70 3e8d2a456204e635cfe5bd959cff47faf63023fc cd58d657e3d79583a5722257d8770e3b5f620f1d58e392f1d9460cc89ac485fa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images//sec-nav-bg-grad.gif?wsSecret=ab84b29961e129845362ae06b53f4332&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 376
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-03
ETag: "5d2c7603-178"
Date: Tue, 16 Apr 2024 09:54:33 GMT
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
Expires: Thu, 16 May 2024 09:54:33 GMT
Age: 1946495
Cache-Control: max-age=86400
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-04
X-Cdn-Request-ID: 890f2988e45ada4c5269c306340cf799
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_88_b8rzo7uzqt4sw.png | 43.198.190.53 | 200 OK | 24 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_88_b8rzo7uzqt4sw.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashd7c26fb9503ab2caf040730495a59f32 06f8414b2709fac132dd2b3071843a86ab745b51 8d437af3cea1d4efc2bf19c763c17c3487f9a76db3a287a975a18f90dffea630
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_88_b8rzo7uzqt4sw.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 23806
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-5cfe"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_88_1jeqx59c7ztqg.png | 43.198.190.53 | 200 OK | 24 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_88_1jeqx59c7ztqg.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash19e16d0cf5c005f3fd798e8f0131db7d ebb9c520f4047172662991c689a2e07015680dcd 57c3d3bf827de223898f46813f9bd0fd2296cc21a61f3f77d03ba6cee265c78d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_88_1jeqx59c7ztqg.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 23771
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-5cdb"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10316/1659084716430.png?wsSecret=2b5d9f2a462819d5e5a026b858b48875&wsTime=1715207765 | 103.198.200.1 | 200 OK | 70 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/carousel/10316/1659084716430.png?wsSecret=2b5d9f2a462819d5e5a026b858b48875&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 750 x 190, 8-bit colormap, non-interlaced Hash3cec45bced128357804406f23fdb94d1 2e300c18f2c721f4d8580098b46829ef2be4ce1e 36d46701f11f890e85341c03a1381dd46dce7c1be4c2582ebfa67b0e39101d15
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /fserver/files/gb/141/carousel/10316/1659084716430.png?wsSecret=2b5d9f2a462819d5e5a026b858b48875&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 70362
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "62e39fac-112da"
Date: Fri, 12 Apr 2024 07:31:51 GMT
Last-Modified: Fri, 29 Jul 2022 08:51:56 GMT
Expires: Sun, 12 May 2024 07:31:51 GMT
Age: 2300656
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-15
X-Cdn-Request-ID: 1fad194f155610615c1b18547e365c7b
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_73_105.png | 43.198.190.53 | 200 OK | 102 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_73_105.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size102 kB (102258 bytes) Hash8d9aba5a434311f951ac04421c7dc771 9e269ef70b1c650a4177aa6ca8f9b5c8d400be42 282aee25e5c5e665f12f0593297c59ef00dfcbb88b210b4bc9466ab4d0e14bea
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_73_105.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 102258
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-18f72"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5008.png | 43.198.190.53 | 200 OK | 25 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5008.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashfe68bd976f14eae2ff73e6a8bd15cf21 87d088019e1519543a97ed7a4434811af556fc99 252e31e22c89ef440f39bcc016264c6917b141c78f82152a678038365b50752e
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_65_5008.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 25306
Connection: keep-alive
Last-Modified: Tue, 27 Feb 2024 03:00:13 GMT
ETag: "65dd503d-62da"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/sports-infos-bg.png?wsSecret=3ecced0d04d11b2a5073870f5f488e1b&wsTime=1715207765 | 103.198.200.1 | 200 OK | 4.3 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/sports-infos-bg.png?wsSecret=3ecced0d04d11b2a5073870f5f488e1b&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 414 x 204, 8-bit/color RGB, non-interlaced Hash69957649d4c70d7b7cc0c1aa434c462f 9070128b8ee6a699818e5deb33c926581d5b0b6f 6cff75537c35a2a855cafaf1d2d45767867dbc28774da40ed8c4fd4f4f74a813
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images/sports-infos-bg.png?wsSecret=3ecced0d04d11b2a5073870f5f488e1b&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4311
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-04
ETag: "5d2c7603-10d7"
Date: Tue, 16 Apr 2024 09:54:33 GMT
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
Expires: Thu, 16 May 2024 09:54:33 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-05
X-Cdn-Request-ID: 1791b1175e72fb9895d3fc1f9bac889a
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/btn.png?wsSecret=d7a1afebe917eb06588f1ab3f4b4d2d8&wsTime=1715207765 | 103.198.200.1 | 200 OK | 484 B |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/btn.png?wsSecret=d7a1afebe917eb06588f1ab3f4b4d2d8&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 170 x 28, 8-bit colormap, non-interlaced Hashb1ab87f2aa1045cf56bd192752fb20ba e8b07455934b82eb6c9d1a5d657c582822eb32cc 527228714a2a640b71788550f8dcd2c0964ee13fdfddc1c57ff377134f8fcecb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images/btn.png?wsSecret=d7a1afebe917eb06588f1ab3f4b4d2d8&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 484
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: "613c72a8-1e4"
Date: Tue, 16 Apr 2024 09:54:34 GMT
Last-Modified: Sat, 11 Sep 2021 09:11:04 GMT
Expires: Thu, 16 May 2024 09:54:34 GMT
Age: 1946493
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-15
X-Cdn-Request-ID: d8c84729eb25b8ae29f9cda499164358
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/bg-products.gif?wsSecret=ab3d29beea47bf5294deeeb1ef102d68&wsTime=1715207765 | 103.198.200.1 | 200 OK | 21 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/bg-products.gif?wsSecret=ab3d29beea47bf5294deeeb1ef102d68&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeGIF image data, version 89a, 271 x 302 Hashe6c33fd46eacf329da3565adb295287a 79b107df875842fd4e22809f21b60c322d128cce 1694db51d04b5d207f7bc4ca11a7fcd2ca171b2f4c2c2b12d1c75e5cb3dbe20f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images/bg-products.gif?wsSecret=ab3d29beea47bf5294deeeb1ef102d68&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 21028
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-04
ETag: "5d2c7603-5224"
Date: Tue, 16 Apr 2024 09:54:32 GMT
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
Expires: Thu, 16 May 2024 09:54:32 GMT
Age: 1946496
Cache-Control: max-age=86400
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-09
X-Cdn-Request-ID: 24be21dbc3fa89bd6bea1cbebaddd10e
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/images/index-casino.jpg?wsSecret=cc4c58eccb259a27e07b41fdd7c516ac&wsTime=1715207765 | 103.198.200.1 | 200 OK | 12 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/images/index-casino.jpg?wsSecret=cc4c58eccb259a27e07b41fdd7c516ac&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 271x81, components 3 Hash62f912bb32aecad4ab710243a04a4ba9 f8a22eaaf6dc17329932db9c19484907332ea800 ecc11913678af89246c957fae2eaf6cbb07316f7ad24bdcc3e2b115293e46f60
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/images/index-casino.jpg?wsSecret=cc4c58eccb259a27e07b41fdd7c516ac&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 11660
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-05
ETag: "5d2c7603-2d8c"
Date: Tue, 16 Apr 2024 09:54:34 GMT
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
Expires: Thu, 16 May 2024 09:54:34 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-21-08
X-Cdn-Request-ID: a6b49f217fc50c9dadd0d283cce78ec5
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/arrow.png?wsSecret=b94cb0c8c7bca2abd04b38c510e6e5d5&wsTime=1715207765 | 103.198.200.1 | 200 OK | 260 B |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/themes/images/arrow.png?wsSecret=b94cb0c8c7bca2abd04b38c510e6e5d5&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 10 x 14, 8-bit colormap, non-interlaced Hashe602938a99acc154421381f39d5652d8 e12cb203b3e61b0cae31ad5cb3241555caba6c10 73500ead881aa273814d982b0a0e78dc29ebf04f37b5932667785f6f7c45a664
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/themes/images/arrow.png?wsSecret=b94cb0c8c7bca2abd04b38c510e6e5d5&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 260
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "614d2b23-104"
Date: Tue, 16 Apr 2024 09:54:33 GMT
Last-Modified: Fri, 24 Sep 2021 01:34:27 GMT
Expires: Thu, 16 May 2024 09:54:33 GMT
Age: 1946495
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-07
X-Cdn-Request-ID: ca3fc88cf8d99a60aec7626a13e331ae
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_73_411.png | 43.198.190.53 | 200 OK | 107 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_73_411.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size107 kB (107367 bytes) Hashf391a00c7ca4a801c7c46431f6949f3e 392e698fcd6b15c2397eb576de33134e7abae702 1ffd1f9416cc641e5c5659de5a2f1530bbe7ddeeb71c91af2db8129c6624f64f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_73_411.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 107367
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-1a367"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/images/index-lottery.jpg?wsSecret=61252634e9cb047fbdbc8f0c1fc76264&wsTime=1715207765 | 103.198.200.1 | 200 OK | 7.9 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/images/index-lottery.jpg?wsSecret=61252634e9cb047fbdbc8f0c1fc76264&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 270x81, components 3 Hash90dfcd159d726929aa2e8140ac0a43cd dae58fb59b64ca2922198f64c87762d10dbd161a cd548d38e7e22e8597da17809e9dd1ee020cfe72288ac55fdb14c9b4130d9e92
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/images/index-lottery.jpg?wsSecret=61252634e9cb047fbdbc8f0c1fc76264&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 7926
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-06
ETag: "5d2c7603-1ef6"
Date: Tue, 16 Apr 2024 09:54:32 GMT
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
Expires: Thu, 16 May 2024 09:54:32 GMT
Age: 1946496
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-06, HIT from KS-CLOUD-XG-FOREIGN-21-02
X-Cdn-Request-ID: 53805d233fd7d7a355dbd3c53a59527e
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1010.png | 43.198.190.53 | 200 OK | 104 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1010.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size104 kB (103628 bytes) Hash8d666e925b25cb11e51e73f93c070f4d c6ff29c0819e955832f80eb564569cadd6a2b6e9 58377e7130027c1bc0b0d1640be5c18574464c78253ee14a8957586e32f55e0a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1010.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 103628
Connection: keep-alive
Last-Modified: Tue, 10 May 2022 03:35:17 GMT
ETag: "6279dd75-194cc"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_060.png | 43.198.190.53 | 200 OK | 26 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_060.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash51de7c3b3b21d10f38a0c30ac5e4fd24 106f9a993385ff522dad2b37dbdb3c58f035ac20 9240329d37bd41d53a4f2864a255b9f9aef025474f2965130ed5668f10ee311e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_060.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 25785
Connection: keep-alive
Last-Modified: Fri, 07 Apr 2023 02:35:05 GMT
ETag: "642f8159-64b9"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/ftl/bet365-141-2/images/index-game.jpg?wsSecret=05b4b41510d8da6908da7c0c4d6a9637&wsTime=1715207765 | 103.198.200.1 | 200 OK | 12 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/bet365-141-2/images/index-game.jpg?wsSecret=05b4b41510d8da6908da7c0c4d6a9637&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 271x81, components 3 Hash6274335f5e37fb7e3aa19dba05a07ef3 d54c0b0cccf2158aee56d7f1f465d5bb907edf06 39d9bd9e19956bb52c4c880dc6987383c34dc0873aadaa6b3763e3421e06def7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/bet365-141-2/images/index-game.jpg?wsSecret=05b4b41510d8da6908da7c0c4d6a9637&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 11478
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "5d2c7603-2cd6"
Date: Tue, 16 Apr 2024 09:54:34 GMT
Last-Modified: Mon, 15 Jul 2019 12:48:03 GMT
Expires: Thu, 16 May 2024 09:54:34 GMT
Age: 1946494
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-03
X-Cdn-Request-ID: 7c915fa938660e248ef8cfa285e7f15f
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_020.png | 43.198.190.53 | 200 OK | 106 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_020.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size106 kB (105577 bytes) Hash88a047662775c71a5483b0643e4cc75d 1403cc8add3e60970a95f9dd1b23084b850266be ba2434bbbac29b41f9fc1f429f7311ca994e3888dbbd5b115a9829438ab130f7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_020.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 105577
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-19c69"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/285/1711711033519.png?wsSecret=6fb5696916d861c1068b85bf5742447a&wsTime=1715207765 | 103.198.200.1 | 200 OK | 131 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/285/1711711033519.png?wsSecret=6fb5696916d861c1068b85bf5742447a&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 250 x 290, 8-bit/color RGBA, non-interlaced Size131 kB (130696 bytes) Hasha5c79c633e591bbf8c5e2f849d41f444 b4e55d262a0b542ffbd482c6385038bb673955e0 87652d9c210acd6dd2c541f2e0315813e30fedb4f1f956079992de0e1f645abe
GET /fserver/files/gb/141/floatImage/285/1711711033519.png?wsSecret=6fb5696916d861c1068b85bf5742447a&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 130696
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-03
ETag: "6606a339-1fe88"
Date: Tue, 09 Apr 2024 04:01:40 GMT
Last-Modified: Fri, 29 Mar 2024 11:17:13 GMT
Expires: Thu, 09 May 2024 04:01:40 GMT
Age: 2572468
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-07
X-Cdn-Request-ID: 0235613bf26ba11dd57f537c3d38f5ec
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1009.png | 43.198.190.53 | 200 OK | 123 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1009.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size123 kB (122960 bytes) Hashb69175dfa95eb604296c5851d0c3e475 4261111823816abc196390d2e8d44b4fbb4131ab 2bde2c2b2e0d167704830962300fd6528f914b1688a08b9cacc344af415fa1a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1009.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 122960
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-1e050"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/285/1711711034070.png?wsSecret=ea0d8f05dd3bcdb2c56d733778a3eb61&wsTime=1715207765 | 103.198.200.1 | 200 OK | 132 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/285/1711711034070.png?wsSecret=ea0d8f05dd3bcdb2c56d733778a3eb61&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 250 x 290, 8-bit/color RGBA, non-interlaced Size132 kB (132269 bytes) Hashcc221abf91e03badabbb800bd556b293 5648f61ee8466146b899b9de0ce71a24bf826682 f5574d24ec46fddd9eb03a87b2b625905465d8ce03a2950dd880028f6d467c9e
GET /fserver/files/gb/141/floatImage/285/1711711034070.png?wsSecret=ea0d8f05dd3bcdb2c56d733778a3eb61&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 132269
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: "6606a33a-204ad"
Date: Tue, 09 Apr 2024 04:01:40 GMT
Last-Modified: Fri, 29 Mar 2024 11:17:14 GMT
Expires: Thu, 09 May 2024 04:01:40 GMT
Age: 2572468
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-08
X-Cdn-Request-ID: 157510fe774e065d4fb9c54862b70aa1
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/273/1706974573234.png?wsSecret=422ac2b9eec67c365801f8f2ec74fe63&wsTime=1715207765 | 103.198.200.1 | 200 OK | 76 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/273/1706974573234.png?wsSecret=422ac2b9eec67c365801f8f2ec74fe63&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 140 x 476, 8-bit/color RGBA, non-interlaced Hashf3de9bb51b6039d289cb4fdcc934512a a90eb2778d87500e7b919b03d077db5a400b5a36 ab40ca27e8fdcdcf45e7e75a910f14c450b9496e731c1b1f316236b9456bdfd2
GET /fserver/files/gb/141/floatImage/273/1706974573234.png?wsSecret=422ac2b9eec67c365801f8f2ec74fe63&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 75917
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "65be5d6d-1288d"
Date: Tue, 07 May 2024 11:59:17 GMT
Last-Modified: Sat, 03 Feb 2024 15:36:13 GMT
Expires: Thu, 06 Jun 2024 11:59:17 GMT
Age: 124611
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-204
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-15
X-Cdn-Request-ID: b4349979770ff24922be3364a99ba219
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/289/1714017190238.gif?wsSecret=7b6f69645ef6968213cd2d6e69d3ae2e&wsTime=1715207765 | 103.198.200.1 | 200 OK | 98 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/289/1714017190238.gif?wsSecret=7b6f69645ef6968213cd2d6e69d3ae2e&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typeGIF image data, version 89a, 140 x 370 Hash9dbf1c23d785b7ea1e69b6a65b000bae 18b5c7ff8531415f10d4fb92f9ae512a542a30f1 07787ddbdf804a1fa237f8eb5f5a5f601a0204d1ac3419bd1488a81a9345e9ed
GET /fserver/files/gb/141/floatImage/289/1714017190238.gif?wsSecret=7b6f69645ef6968213cd2d6e69d3ae2e&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 98253
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-01
ETag: "6629d3a6-17fcd"
Date: Thu, 25 Apr 2024 03:54:23 GMT
Last-Modified: Thu, 25 Apr 2024 03:53:10 GMT
Expires: Sat, 25 May 2024 03:54:23 GMT
Age: 1190505
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-206
x-link-via: xg21:443;xg12:80;
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-04
X-Cdn-Request-ID: 9c124212cdecee02b15a9554a57e601c
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_030.png | 43.198.190.53 | 200 OK | 92 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_030.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Hash9f3fb2c25fe5ed8707017bd1c48b7dad 0431fc4b55351854aa7a1b519549df5d71f18ace d86817d248b0c22c26c6c3a95c307094345fb2b3e51245164599a7c3969d4e6c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_030.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:08 GMT
Content-Type: image/png
Content-Length: 91545
Connection: keep-alive
Last-Modified: Mon, 25 Oct 2021 06:59:30 GMT
ETag: "617655d2-16599"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:08 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1001.png | 43.198.190.53 | 200 OK | 98 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1001.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Hash877c38be4323f2c147032108ccef2199 add9d18c6be428cb95544a73b0f6e00f11fc2b5b a0424505fba5728d840e3f3c9dfc0b3a5c7838813eb4eb37e9babe498c79e16b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1001.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 97628
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-17d5c"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/273/1666693826530.png?wsSecret=682a258f928978f492e1773fade649c1&wsTime=1715207765 | 103.198.200.1 | 200 OK | 8.6 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/fserver/files/gb/141/floatImage/273/1666693826530.png?wsSecret=682a258f928978f492e1773fade649c1&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 140 x 35, 8-bit/color RGBA, non-interlaced Hashe9b65c8ad826f51a6e0d8b30801ebe97 a6b5f8cf0772e12117fe5db956482ed8f15140d5 2a2c01d75b9b60e977fb5a8e535fc8ea4e9146bb499e2af25ccf1bd5ebaaf840
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /fserver/files/gb/141/floatImage/273/1666693826530.png?wsSecret=682a258f928978f492e1773fade649c1&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 8612
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-02
ETag: "6357bac2-21a4"
Date: Fri, 12 Apr 2024 07:18:04 GMT
Last-Modified: Tue, 25 Oct 2022 10:30:26 GMT
Expires: Sun, 12 May 2024 07:18:04 GMT
Age: 2301484
Cache-Control: max-age=86400
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: MISS
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-02, HIT from KS-CLOUD-XG-FOREIGN-21-02
X-Cdn-Request-ID: 3ff3de88c2b25ef8484352ac9b3f8c81
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1004.png | 43.198.190.53 | 200 OK | 107 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1004.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size107 kB (107087 bytes) Hash97e7e1d62e6ab7d3fb963eeaa7eaf82c 0b8b4dfbecc67f6c2108f1518363b04df485c23c ba14d4ca242898af3cc3283eae416223f025413067480df7b0dd1ec6904d1b38
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1004.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 107087
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-1a24f"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_018.png | 43.198.190.53 | 200 OK | 104 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_018.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size104 kB (103789 bytes) Hash47f5aa60abc34c45a6676edb8fdf0479 26c8e877af1411d84fa894f304795cc48e7ccb3e 35097b6af20809e9e749d5744ba558e6abb5d8f1cc0a48d351d7b6266eb1353b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_018.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 103789
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-1956d"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_cutfish_1.png | 43.198.190.53 | 200 OK | 107 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_cutfish_1.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size107 kB (107343 bytes) Hashcd532ab1788f1366939b5d7dc3060f98 a02e5eb5963d5af3919dc39f13cb306bb72cd843 958be35d3134e8e973b263ab96ede273091f441ad6435e0a9178c68daafdd506
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_cutfish_1.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 107343
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-1a34f"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1002.png | 43.198.190.53 | 200 OK | 120 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1002.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size120 kB (119603 bytes) Hash47f82f045a474d9481728a14eef31212 e0440f66748805d9bd9fd46164094f9848054da4 3f6b4bf17a52f4989b5ebe3ee767a5e12554b0ac387668e8da6bb6ed67224431
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1002.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 119603
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-1d333"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1003.png | 43.198.190.53 | 200 OK | 127 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1003.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Size127 kB (126630 bytes) Hashb5927edf22b7afcaa8623bb2bf7a023c 27991e900ef52dc1848a4d010abaee15b9764ad7 9bd02bff9e834cfb9d1e51a452cffa22aeecb4564729009c4e76d9d92ff6a73b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_ds_1003.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 126630
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-1eea6"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_fish3d_1.png | 43.198.190.53 | 200 OK | 95 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_fish3d_1.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Hash6ef924ca51b45c0c8b2292cf0531f7de df123702eb28a9af0b9d49ed1281e3503df079bb 30e68be2e4475a104b7dfc231dce0f2833244d21b28702ce33ff411976449516
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_fish3d_1.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 94694
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-171e6"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_012.png | 43.198.190.53 | 200 OK | 99 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_012.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Hash8d9b708f3313917c09eb78bbe19876a5 4b254e52083cf6f29daf23393f398f9c542638f1 29c83142b9e396bb4645c5b797b46ea424e84ec7c46baab65f5223ddb85519cf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_012.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 98689
Connection: keep-alive
Last-Modified: Thu, 07 Oct 2021 04:39:15 GMT
ETag: "615e79f3-18181"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_017.png | 43.198.190.53 | 200 OK | 96 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_017.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Hash0ea541fd7014332c36b6d147e4e97dac ec19906ce3c4f9bf8b0811437b4e6daefb64073c f92a42092bfb2d534b675509c54ce485f2d38f5c6e3ae25e013859f868f49ae7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_at2_017.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 95696
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-175d0"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_fishking_1.png | 43.198.190.53 | 200 OK | 100 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_fishking_1.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit/color RGBA, non-interlaced Hash238d4aea15d8dc35dfd87135602b3095 4f6a291f4f625c7fa517f74c2631eb00df29db77 5eef3bf50fa69fc029cd8290a7da27b760aec9bb3b138102dbfefdf97df848c5
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_90_dp_fishking_1.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 99561
Connection: keep-alive
Last-Modified: Mon, 27 Sep 2021 03:42:41 GMT
ETag: "61513db1-184e9"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_35_1050.png | 43.198.190.53 | 200 OK | 22 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_35_1050.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash0445397f922bcef3252bedd6877d8668 f4d265e0774ed0dbda4d4548863cd852c48c570f 3069757649a24fe38937eebf84c12b959ec4e58edf10cf2c661cc2ae433a40c0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_35_1050.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 21792
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-5520"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_25_F-SF01.png | 43.198.190.53 | 200 OK | 23 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_25_F-SF01.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash2fbcb4a692fc6b41699f7e60ecf26a63 da35d134b38413040316f5cf1e5f76d75fd941c7 ccdecdf7de01b3b3513596f7c4555266473805551702685e14299770ae8bed26
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_25_F-SF01.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:09 GMT
Content-Type: image/png
Content-Length: 22679
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2019 12:48:11 GMT
ETag: "5d2c760b-5897"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:09 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_10_38001.png | 43.198.190.53 | 200 OK | 23 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_10_38001.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash14f7dbafc1472fa05db8eb17ae826f30 991915b5ae07c7a47e93dce0c6c82d0d0b690993 7287fcb933e5bf3eba0d13e7312cf5ba90f94c0593310090fdc521f866b0b134
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_10_38001.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 23355
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2019 12:48:11 GMT
ETag: "5d2c760b-5b3b"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_9_HMSH.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_9_HMSH.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash82c905f14c36be0d2fa670516edded31 437546d720284de3982ff79df6a946b81e923371 f3cdfd33e75d6f3877e1e0da0491c2b2a65c66f95d434c6b08950b0b5d5b9cc6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_9_HMSH.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 19597
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:26 GMT
ETag: "613c72be-4c8d"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_GO02.png | 43.198.190.53 | 200 OK | 22 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_GO02.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash12f4870c1a8e51e39a6c8bfdd11ed804 47eb5ed8af8ae69595b8743e7a61d3fe825cc048 1f6c135cc810d561e52ad5ba9ca5cfda82897c82db0863ab366e62d5970b3883
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_GO02.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 21953
Connection: keep-alive
Last-Modified: Thu, 23 Dec 2021 07:42:29 GMT
ETag: "61c42865-55c1"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_9_6.png | 43.198.190.53 | 200 OK | 22 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_9_6.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash18fc529cc0b071eee9ab764c7b3cebf2 e79958322824752ee3be995515d242f3a65dbd15 7dc7c033a2391b021f70e5576b15806c1e3e73b2bf5a0beda751bbdff7513b7b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_9_6.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 21622
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2019 12:48:11 GMT
ETag: "5d2c760b-5476"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AT01.png | 43.198.190.53 | 200 OK | 26 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AT01.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashf7637fd9fb8b0dd130560efe9dfcc5ac c6a6b30f73923175a88fb0c5685c7943ef934c2e a647abf9fc56228cf6ab783115c113b35479dce89ff1dc4db61efb0bf3234cb4
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AT01.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 25819
Connection: keep-alive
Last-Modified: Mon, 14 Aug 2023 10:05:04 GMT
ETag: "64d9fc50-64db"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AB3.png | 43.198.190.53 | 200 OK | 77 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AB3.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 249 x 215, 8-bit/color RGBA, non-interlaced Hash4efe93bd780474540b29c662acef4d68 2d588f15315c28feef52d101bff05d5a2071929d e52983bbd04e43f83dccc17ccff1064098ae925ae651f753e59b1530a0e4d733
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AB3.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 76813
Connection: keep-alive
Last-Modified: Mon, 14 Aug 2023 10:05:04 GMT
ETag: "64d9fc50-12c0d"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_35_1051.png | 43.198.190.53 | 200 OK | 23 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_35_1051.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashc2bad36f7d90b3d9d5077df183c0a80b 7890000fd16f911c2aa5223af3cddf3ed6c5f702 90b7d091ece32c042a2866eb7d6943d7e88148d3bb474eaff988a78942d6d3aa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_35_1051.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 23172
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2019 12:48:11 GMT
ETag: "5d2c760b-5a84"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AT05.png | 43.198.190.53 | 200 OK | 23 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AT05.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash993bbfdbad1c48f514367407a17d2a77 7d3db06be9d7912432c768fa5b23335264db002c df044589914265a7b02cca67f876c01d20e5eb0d9e50bdb2e8af8e0994daeab7
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_AT05.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 23286
Connection: keep-alive
Last-Modified: Mon, 14 Aug 2023 10:05:04 GMT
ETag: "64d9fc50-5af6"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_12.png | 43.198.190.53 | 200 OK | 26 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_12.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hashdc21406f53974241a6ea9d1ba342a0a3 d98181158619aa5993f35dc4821c26ea657c9c35 656f550c68b469776ebe40713d8556d43af391da6cc881918da5f6c983ba823f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_12.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 26500
Connection: keep-alive
Last-Modified: Tue, 30 Nov 2021 08:28:44 GMT
ETag: "61a5e0bc-6784"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_13.png | 43.198.190.53 | 200 OK | 26 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_13.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash1ac91d4dfd52f26f9c5682cf67ac3f49 6ca58050b81ce1be80d3b0c749b60a79d8413b98 021c28d7d369afa39f3aeac128f91dd3f377fc910a35d76a2e9d2463093e3b44
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_13.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 26179
Connection: keep-alive
Last-Modified: Mon, 25 Apr 2022 07:55:46 GMT
ETag: "62665402-6643"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_CC1001.png | 43.198.190.53 | 200 OK | 21 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_CC1001.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash07db342d71e455736e0e8b5656ed7174 2d9bb7427a73a28f4bfec2a70dc227af4555968c c1a35508763b061947ad0ea9eb9972b92b079c9510a2a746979dbffd84efde0f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_48_CC1001.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 20993
Connection: keep-alive
Last-Modified: Wed, 30 Mar 2022 02:50:04 GMT
ETag: "6243c55c-5201"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_10.png | 43.198.190.53 | 200 OK | 22 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_10.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash548f74b6fbacfdafac2d13982ea01f5b 62056e33bd99fdb7a26ed1eb6e0d34baae75ab4b 8d23af5f64406af80c5f00bbe2806c0a696eee1b9fa144135a679cf7d15c27a9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_10.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 21502
Connection: keep-alive
Last-Modified: Sat, 11 Sep 2021 09:11:25 GMT
ETag: "613c72bd-53fe"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_14.png | 43.198.190.53 | 200 OK | 20 kB |
URL GET HTTP/1.1www.3659001.net:8989/ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_14.png IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typePNG image data, 250 x 215, 8-bit colormap, non-interlaced Hash86f136869bc81df2a646e873bd23b46d c40c25bbe820c39731d1c679653b28e119cbbadc bfebb7307f1858837e6b61be64e46352b1ccd29bf982e9975886c9feda9f637f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/resource/chess/public/game/game01/2x/zh_CN/game_fish_49_14.png HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:36:10 GMT
Content-Type: image/png
Content-Length: 20462
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 02:46:55 GMT
ETag: "63dc759f-4fee"
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Expires: Thu, 09 May 2024 22:36:10 GMT
Cache-Control: max-age=86400
X-Cache: HIT
uuid: -
out-line: gb-site-133
Accept-Ranges: bytes
|
|
| 3dsa62.gaokejd.xyz/ftl/commonPage/images/favicon/favicon_141.png?wsSecret=2c3c0ccd57e397c9fcbf853c0ee15cc0&wsTime=1715207765 | 103.198.200.1 | 200 OK | 4.7 kB |
URL GET HTTP/1.13dsa62.gaokejd.xyz/ftl/commonPage/images/favicon/favicon_141.png?wsSecret=2c3c0ccd57e397c9fcbf853c0ee15cc0&wsTime=1715207765 IP103.198.200.1:443 ASN#138915 Kaopu Cloud HK Limited
Requested byhttps://www.3659001.net:8989/ CertificateIssuerUnizeto Technologies S.A. Subject*.gaokejd.xyz Fingerprint0C:64:1D:5D:7A:1C:81:05:EF:CD:74:CC:64:84:BF:1B:CB:80:25:BA ValidityThu, 30 Nov 2023 01:16:02 GMT - Fri, 29 Nov 2024 01:16:01 GMT
File typePNG image data, 64 x 64, 8-bit/color RGB, non-interlaced Hash834417d344a1bd995c78df66fe45edbd 79a5cd12dc1bf06043f38349e6dd492e58144a01 736b8041b08f7ec7a5f5a8e8d4d857dc58f1f03d4e2b6f738a2f1c9ae3892bbb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Bet365 |
GET /ftl/commonPage/images/favicon/favicon_141.png?wsSecret=2c3c0ccd57e397c9fcbf853c0ee15cc0&wsTime=1715207765 HTTP/1.1
Host: 3dsa62.gaokejd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4704
Connection: keep-alive
Server: Default-server-KS-CLOUD-XG-FOREIGN-12-06
ETag: "6311d300-1260"
Date: Tue, 16 Apr 2024 09:59:57 GMT
Last-Modified: Fri, 02 Sep 2022 09:55:12 GMT
Expires: Thu, 16 May 2024 09:59:57 GMT
Age: 1946173
Cache-Control: max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
X-Cache: HIT
uuid: -
out-line: gb-cdn-205
x-link-via: xg21:443;xg12:80;
X-Cache-Status: HIT from KS-CLOUD-XG-FOREIGN-12-06, HIT from KS-CLOUD-XG-FOREIGN-21-01
X-Cdn-Request-ID: 78c3fb70b3406186f5611442e6edf718
|
|
| vue.livehelp100service.com/visitorside/js/Button.3893f66e.js | 143.204.55.93 | 200 OK | 10 kB |
URL GET HTTP/2vue.livehelp100service.com/visitorside/js/Button.3893f66e.js IP143.204.55.93:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint63:B0:01:26:AE:72:99:B7:98:45:6B:15:1E:CE:05:7B:20:19:C3:2B ValidityThu, 30 Nov 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9695) Hashc7734a53f191a978ac0f7aee7cf473e1 f31aea9a967f6cc82b87c436f0a93a77372065d0 db3d335c79d22cdfbdb742c9c9318c3e2caf4b5b1ac5d9d00664f811779d28ee
GET /visitorside/js/Button.3893f66e.js HTTP/1.1
Host: vue.livehelp100service.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://vue.livehelp100service.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 08 May 2024 06:00:26 GMT
server: nginx/1.22.1
last-modified: Tue, 23 Apr 2024 10:29:26 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
etag: W/"66278d86-2652"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5LGIwQC3fCMb2mCGpQ67IT1IO0FNai7xwe-hS_QLJGRwClTvPLTXfg==
age: 59741
X-Firefox-Spdy: h2
|
|
| services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US | 54.230.111.21 | | 82 B |
URL services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US IP54.230.111.21:0
Hash4f822d39c269d2c47e3174b6c6bad3b7 d56bd07959c766e9c18faa9cf1070548f9236b65 cda00e555c758b1c13b6cbd17049ca8471057d16c60f08f551dbc331308eecf3
GET /api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US HTTP/1.1
Host: services.addons.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 82
server: openresty
date: Wed, 08 May 2024 22:27:03 GMT
allow: GET, HEAD, OPTIONS
x-amo-request-id: d20e53efc6364cc89cb1d5455603811b
content-security-policy: style-src 'unsafe-inline' https://addons.mozilla.org/static-server/; form-action 'self'; font-src 'self' https://addons.mozilla.org/static-server/; media-src https://videos.cdn.mozilla.net; child-src https://www.recaptcha.net/recaptcha/; default-src 'none'; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/; frame-src https://www.recaptcha.net/recaptcha/; connect-src 'self' https://*.google-analytics.com; script-src https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://addons.mozilla.org/static-server/; object-src 'none'; report-uri /__cspreport__
x-frame-options: DENY
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
cache-control: max-age=3600
public-key-pins: max-age=5184000; includeSubDomains; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="
via: 1.1 google, 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
etag: "4f822d39c269d2c47e3174b6c6bad3b7"
vary: origin,X-Country-Code,Accept-Language
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zeaOP05uIwW485VxInjzeJb9FSk5MvmdhxZp652kx2to1Ij_BVYbtw==
age: 564
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 42 B |
URL aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text Hashf8f24fa0c857d8f2ee493e131b85ab62 cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6 e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f
GET /update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 22:36:27 GMT
content-type: text/xml; charset=utf-8
content-length: 42
rule-id: unknown
rule-data-version: unknown
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| uuierqg.23trgaaddg.com/campaign.ashx?siteId=65000584&campaignId=10b42444-f030-4724-9472-c5b49997c716&lastUpdateTime=00000000109399D3 | 99.83.207.187 | 200 OK | 16 kB |
URL GET HTTP/2uuierqg.23trgaaddg.com/campaign.ashx?siteId=65000584&campaignId=10b42444-f030-4724-9472-c5b49997c716&lastUpdateTime=00000000109399D3 IP99.83.207.187:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint30:5B:92:F8:D3:3F:D6:BC:AB:CB:92:F8:DB:62:DE:57:A3:32:FC:AC ValidityFri, 11 Aug 2023 00:00:00 GMT - Sun, 08 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /campaign.ashx?siteId=65000584&campaignId=10b42444-f030-4724-9472-c5b49997c716&lastUpdateTime=00000000109399D3 HTTP/1.1
Host: uuierqg.23trgaaddg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 22:36:08 GMT
content-type: text/json
access-control-allow-origin: *
cache-control: max-age=31536000
arrserver: chatserver2
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| uuierqg.23trgaaddg.com/visitor.ashx?siteId=65000584 | 99.83.207.187 | 200 OK | 1.3 kB |
URL POST HTTP/2uuierqg.23trgaaddg.com/visitor.ashx?siteId=65000584 IP99.83.207.187:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint30:5B:92:F8:D3:3F:D6:BC:AB:CB:92:F8:DB:62:DE:57:A3:32:FC:AC ValidityFri, 11 Aug 2023 00:00:00 GMT - Sun, 08 Sep 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1459), with no line terminators Hash52077ade81a53d1f3236ac929e05c588 4d897c6da0822c2925aeed36152bf34d2b611907 1c27384a2b55c6c21eeabb1ba3502f2dd06585aa6532beb0d290db14a5f96999
POST /visitor.ashx?siteId=65000584 HTTP/1.1
Host: uuierqg.23trgaaddg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 69
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 22:36:08 GMT
content-type: text/json
access-control-allow-credentials: true
access-control-allow-origin: https://www.3659001.net:8989
arrserver: chatserver2
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| vue.livehelp100service.com/livechat.ashx?siteId=65000584 | 143.204.55.93 | 200 OK | 1.9 kB |
URL GET HTTP/2vue.livehelp100service.com/livechat.ashx?siteId=65000584 IP143.204.55.93:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint63:B0:01:26:AE:72:99:B7:98:45:6B:15:1E:CE:05:7B:20:19:C3:2B ValidityThu, 30 Nov 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2052), with no line terminators Hash4bf5a984567883bcf67e94eea6fd3c55 5f8e44b94af86cd6fca601396705d7a97b287356 e0eb771a3cd6eddec74c9b6ba7b9cbd5332a75f05270673ef5b91c5843815c85
GET /livechat.ashx?siteId=65000584 HTTP/1.1
Host: vue.livehelp100service.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
date: Wed, 08 May 2024 07:36:11 GMT
server: Kestrel
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bWyso_7bE9jfPx0f3RRYWQAf7x0EVTrPw_UWkrPLS7UqjZ3wyJX3qA==
age: 53994
X-Firefox-Spdy: h2
|
|
| uuierqg.23trgaaddg.com/visitor.ashx?siteId=65000584 | 99.83.207.187 | 200 OK | 1.3 kB |
URL POST HTTP/2uuierqg.23trgaaddg.com/visitor.ashx?siteId=65000584 IP99.83.207.187:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint30:5B:92:F8:D3:3F:D6:BC:AB:CB:92:F8:DB:62:DE:57:A3:32:FC:AC ValidityFri, 11 Aug 2023 00:00:00 GMT - Sun, 08 Sep 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (1432), with no line terminators Hash597e1677fa614750a25773c96935c36b 43c7cd0571532307938d3f846a82eeefe0b782e4 aaa39c129c3ac748ba02ee135428ce55faec10948fd3ed4ac0e432281238b01a
POST /visitor.ashx?siteId=65000584 HTTP/1.1
Host: uuierqg.23trgaaddg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1175
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 22:36:08 GMT
content-type: text/json
access-control-allow-credentials: true
access-control-allow-origin: https://www.3659001.net:8989
set-cookie: visitorGuid_65000584=8ef81ae0-b5dc-4e4e-9adf-6e6510d29678; expires=Tue, 09 Sep 3023 22:36:08 GMT; path=/; secure; samesite=none
arrserver: chatserver2
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| www.3659001.net:8989/index/getUserTimeZoneDate.html?t=lvyef2dn | 43.198.190.53 | 200 | 119 B |
URL GET HTTP/1.1www.3659001.net:8989/index/getUserTimeZoneDate.html?t=lvyef2dn IP43.198.190.53:8989
Requested byhttps://www.3659001.net:8989/ CertificateIssuerLet's Encrypt Subject3659001.net Fingerprint95:F6:00:77:AB:98:33:6A:8C:BF:28:7B:8D:E5:69:2A:86:AC:67:80 ValiditySat, 24 Feb 2024 15:20:27 GMT - Fri, 24 May 2024 15:20:26 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash715e78ce95e76f1de16cc3340a3e6ccf 355408c91f8944277d86d984ef16ab8580e6d18b cf1b8fa45b8347553a088c11a221747abc0e71f97c426feb493355bd4c6c5e6b
GET /index/getUserTimeZoneDate.html?t=lvyef2dn HTTP/1.1
Host: www.3659001.net:8989
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Cookie: sticket=XVXlaV1l0TkRnMlpp; route=f99a9c30dbd1a887d1dbc0d8dc11c2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 08 May 2024 22:36:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 119
Connection: keep-alive
Content-Disposition: inline;filename=f.txt
sub-sys: msite
cachettl: 3
X-Frame-Options: SAMEORIGIN
uuid: 00141-01-00000000-1715207766fa5b
out-line: gb-site-133
|
|
| vue.livehelp100service.com/visitorside/js/bundle.a0ab06dc.js | 143.204.55.93 | 200 OK | 574 kB |
URL GET HTTP/2vue.livehelp100service.com/visitorside/js/bundle.a0ab06dc.js IP143.204.55.93:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint63:B0:01:26:AE:72:99:B7:98:45:6B:15:1E:CE:05:7B:20:19:C3:2B ValidityThu, 30 Nov 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
Size574 kB (573771 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /visitorside/js/bundle.a0ab06dc.js HTTP/1.1
Host: vue.livehelp100service.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 08 May 2024 01:53:25 GMT
server: nginx/1.22.1
last-modified: Tue, 23 Apr 2024 10:29:26 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
etag: W/"66278d86-8c14b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: d0ySyN2cZAlwCWnyp5uv32ky3lO3JJHoST0koXbcKDqE7Zn4aykoWg==
age: 74560
X-Firefox-Spdy: h2
|
|
| vue.livehelp100service.com/visitorside/js/common.de664335.js | 143.204.55.93 | 200 OK | 81 kB |
URL GET HTTP/2vue.livehelp100service.com/visitorside/js/common.de664335.js IP143.204.55.93:443
Requested byhttps://www.3659001.net:8989/ CertificateIssuerAmazon Subject*.livehelp100service.com Fingerprint63:B0:01:26:AE:72:99:B7:98:45:6B:15:1E:CE:05:7B:20:19:C3:2B ValidityThu, 30 Nov 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /visitorside/js/common.de664335.js HTTP/1.1
Host: vue.livehelp100service.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.3659001.net:8989
DNT: 1
Connection: keep-alive
Referer: https://www.3659001.net:8989/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 08 May 2024 05:59:37 GMT
server: nginx/1.22.1
last-modified: Tue, 23 Apr 2024 10:29:26 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
etag: W/"66278d86-13c35"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4KOTUN568wh5VzFVkgYpbN2CeVpsK-S5gKJxRvbtAx9ENPlCU8yhNA==
age: 59788
X-Firefox-Spdy: h2
|
|