urswebzj.nosdn.127.net/webzj_cdn101/message.js
200 OK 11 kB URL GET HTTP/1.1 urswebzj.nosdn.127.net/webzj_cdn101/message.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerDigiCert Inc
Subject*.nosdn.127.net
FingerprintF5:A9:28:46:96:A0:E5:4B:8B:7D:D9:B0:A7:4C:82:91:2E:0A:CC:FE
ValidityThu, 01 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10019)
Hash af8a0026d09a21e7eb4864980a25c928
01f50462db7f950dfa2ad4beddfa26b742c2efed
a5c9390295799489a7995897ce1c45e24798a5c0feeb66912a9ec3f09e86735b
GET /webzj_cdn101/message.js HTTP/1.1
Host: urswebzj.nosdn.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Date: Thu, 02 May 2024 08:45:16 GMT
x-nos-request-id: 0bb2382e-2750-4c75-a5e7-c6baa8e9f92b
x-nos-requesttype: GetObject
x-nos-object-name: webzj_cdn101%2Fmessage.js
x-nos-storage-class: STANDARD
Content-Disposition: inline; filename="webzj_cdn101%2Fmessage.js"
Ali-Swift-Global-Savetime: 1714639516
Via: cache4.l2fr1[1039,1039,304-0,M], cache9.l2fr1[1041,0], cache3.ru4[0,0,200-0,H], cache1.ru4[0,0]
Last-Modified: Wed, 03 Jan 2024 16:43:13 Asia/Shanghai
Age: 199458
X-Cache: HIT TCP_MEM_HIT dirn:11:78322768
X-Swift-SaveTime: Thu, 02 May 2024 08:45:16 GMT
X-Swift-CacheTime: 2592000
cdn-ip: 47.246.3.237
Access-Control-Allow-Origin: *
Cache-Control: max-age=61
Timing-Allow-Origin: *
EagleId: 2ff6039517148389741608459e
Content-Encoding: gzip
200 OK 5.5 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subject655755.xyz
FingerprintB0:F3:50:BB:B4:25:BB:0B:FE:74:B0:12:F8:1E:A7:89:66:15:1F:BC
ValidityTue, 16 Apr 2024 15:42:23 GMT - Mon, 15 Jul 2024 15:42:22 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (7304)
Hash b8f5a53164cbfa4b3016fab71fb443d8
96fbc4f1a65459247e5b14dc1f9e9913510e2fda
b9c1e3e38190f0e8564ff43918507f37b1952ab26d2f8a09650a68765aa37953
Analyzer Verdict Alert OpenPhish phishing NetEase
GET / HTTP/1.1
Host: h2.655755.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 16:09:32 GMT
content-type: text/html
cf-ray: 87e9c16dbe2b5695-OSL
cf-cache-status: DYNAMIC
cache-control: max-age=3600
expires: Sat, 04 May 2024 16:31:33 GMT
last-modified: Tue, 30 Apr 2024 09:25:43 GMT
vary: Accept-Encoding
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.mediav.com *.netstatic.net; connect-src 'self' wss: *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.163yun.com; report-uri https://countly.mail.163.com/stats/csp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2F3Ju6foCI6H1XL8zOfGgBYky78drFL7CBoS38mQfTeQqyIlfU2p3b7gE1avlglU8yUwFeQPKcweezI5j9rUVU0OW%2BVu6XgiQgE79R%2FF3qxB73ZVo2okHZjy0YfWBc3m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/index/lib/img/t.gif
200 OK 77 B URL GET HTTP/2 mimg.127.net/p/freemail/index/lib/img/t.gif
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 32 x 32
Hash 0e3f16e485782c9d637911921d217ee5
0a9ef053d0ad6f98389ac063766a0b66d6abf876
3f666934b806964af9be68a39f16151701e7a7b8009ac24e7acb9ac0a7c10aa5
GET /p/freemail/index/lib/img/t.gif HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: image/gif
content-length: 77
last-modified: Tue, 02 Apr 2019 06:02:11 GMT
etag: "5ca2fae3-4d"
expires: Sun, 30 Apr 2034 08:33:39 GMT
cache-control: max-age=315360000
vary: Origin
accept-ranges: bytes
X-Firefox-Spdy: h2
mimg.127.net/p/images/logo/gonganlogo.png
200 OK 1.4 kB URL GET HTTP/2 mimg.127.net/p/images/logo/gonganlogo.png
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Hash 425b048170e8dc0043d0b0c37751c53c
eb779692a0072a0300f59df1068f8fb541356ce0
48e7484ac4f925cce2688a289e73fd5e287dbda8f3f7b8ca0c2db6a807f12c4d
GET /p/images/logo/gonganlogo.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: image/png
content-length: 1396
last-modified: Mon, 11 May 2020 08:00:03 GMT
etag: "5eb90603-574"
expires: Sun, 30 Apr 2034 08:32:01 GMT
cache-control: max-age=315360000
vary: Origin
accept-ranges: bytes
X-Firefox-Spdy: h2
mimg.127.net/cross/static/webmail-js6/login_index.json
200 OK 281 B URL GET HTTP/2 mimg.127.net/cross/static/webmail-js6/login_index.json
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Hash 809bf95e44dc937451a07cc23ec73545
9e89cb78955b19eab91f17cd83fd026ec56d9128
5f1c2315460efd420eaf0376335216d92ad96451937e970c740465a197b7013e
GET /cross/static/webmail-js6/login_index.json HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://h2.655755.xyz
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:35 GMT
content-type: application/json
content-length: 281
last-modified: Thu, 18 Apr 2024 11:56:15 GMT
etag: "66210a5f-119"
expires: Sat, 04 May 2024 16:46:36 GMT
cache-control: max-age=3600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/index/lib/img/loading_s.gif
200 OK 578 B URL GET HTTP/2 mimg.127.net/p/freemail/index/lib/img/loading_s.gif
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 16 x 16
Hash cb5160a3251b39d60771c6d52f2c6318
ee511a4304661a46cfbe6fc522b35fe5c459e3e2
065f86db73775341c54048befea1dbd24e6013780ce06db950cee6e5908463be
GET /p/freemail/index/lib/img/loading_s.gif HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mimg.127.net/p/freemail/index/unified/static/2024/css/style.20c4fa9e52b0c313a6ad.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:35 GMT
content-type: image/gif
content-length: 578
last-modified: Tue, 02 Apr 2019 06:02:16 GMT
etag: "5ca2fae8-242"
expires: Sun, 30 Apr 2034 08:32:02 GMT
cache-control: max-age=315360000
vary: Origin
accept-ranges: bytes
X-Firefox-Spdy: h2
onegoods.nosdn.127.net/resupload/2020/6/8/39628e5a6146f059949210bebf88d697.png
200 OK 8.0 kB URL GET HTTP/2 onegoods.nosdn.127.net/resupload/2020/6/8/39628e5a6146f059949210bebf88d697.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerDigiCert Inc
Subject*.nosdn.127.net
FingerprintF5:A9:28:46:96:A0:E5:4B:8B:7D:D9:B0:A7:4C:82:91:2E:0A:CC:FE
ValidityThu, 01 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type PNG image data, 360 x 280, 8-bit colormap, non-interlaced
Hash 39628e5a6146f059949210bebf88d697
7594e589aa95d32c7997e5471f1173f4feba32ac
cee64c6ea4503e58c6702cc4e4ae9eacce784f2c054cf2c68f19a1e92b0a7489
GET /resupload/2020/6/8/39628e5a6146f059949210bebf88d697.png HTTP/1.1
Host: onegoods.nosdn.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/png;charset=UTF-8
content-length: 7965
date: Fri, 03 May 2024 13:43:09 GMT
x-nos-request-id: d58e0453-0de8-45c7-8373-078351f29468
x-nos-requesttype: GetObject
x-nos-object-name: resupload%2F2020%2F6%2F8%2F39628e5a6146f059949210bebf88d697.png
x-nos-storage-class: STANDARD
content-disposition: inline; filename="resupload%2F2020%2F6%2F8%2F39628e5a6146f059949210bebf88d697.png"
ali-swift-global-savetime: 1714743789
via: cache36.l2fr1[0,0,304-0,H], cache1.l2fr1[0,0], cache10.ru4[0,0,200-0,H], cache10.ru4[1,0]
etag: 39628e5a6146f059949210bebf88d697
last-modified: Mon, 08 Jun 2020 22:52:29 Asia/Shanghai
age: 95187
x-cache: HIT TCP_MEM_HIT dirn:10:141979653
x-swift-savetime: Fri, 03 May 2024 13:46:14 GMT
x-swift-cachetime: 2591815
timing-allow-origin: *
eagleid: 2ff6039e17148389769325211e
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/lib/polyfill/es5-polyfill.js
200 OK 728 B URL GET HTTP/2 mimg.127.net/p/freemail/lib/polyfill/es5-polyfill.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type gzip compressed data, max compression, from Unix
Hash c193209ba961dc2ee0d4acaed9889453
af32472c472cf10f170a57dc9e035f706814ce51
94441b34b41c6791a7381db3a10735b57c81ccc01ebdda86421b8e1ca467c49a
GET /p/freemail/lib/polyfill/es5-polyfill.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:34 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Mar 2019 01:42:20 GMT
etag: W/"5c919a7c-6e6"
expires: Sun, 30 Apr 2034 08:34:20 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
utility.mail.163.com/time-sync/form3?callback=sing_17148389757115974
200 OK 62 B URL GET HTTP/2 utility.mail.163.com/time-sync/form3?callback=sing_17148389757115974
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerDigiCert Inc
Subject*.mail.163.com
FingerprintB8:33:27:E2:B5:C9:DF:50:03:8C:82:D1:FE:83:27:53:AA:81:0F:3D
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 16ba47f90ffe6e5d15ff6ab99701cf7b
8a6eba032a70f3f40bc3c6ef3240cf8075fe3793
137e675079ebadf244320e9943382609cdf75274031c94e76e48d8d21b911f4a
GET /time-sync/form3?callback=sing_17148389757115974 HTTP/1.1
Host: utility.mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/octet-stream
content-length: 62
x-cache: from ngx-hd-33-95.163.com
X-Firefox-Spdy: h2
countly.mail.163.com/stats/i
200 OK 20 B URL POST HTTP/2 countly.mail.163.com/stats/i
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerDigiCert Inc
Subject*.mail.163.com
FingerprintB8:33:27:E2:B5:C9:DF:50:03:8C:82:D1:FE:83:27:53:AA:81:0F:3D
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash 9a14fe813903daf8566702dfd5ba2f4d
0f6ac0a433de78e11e8a7035146d704ad02b6658
83786d6ca95e7099b09dda2f11b25e7ac860caf70ec87fd35f520fbb58d8a296
POST /stats/i HTTP/1.1
Host: countly.mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 5311
Origin: https://h2.655755.xyz
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/octet-stream
content-length: 20
x-cache: from ngx-hd-33-105.163.com
X-Firefox-Spdy: h2
countly.mail.163.com/stats/csp
200 OK 20 B URL POST HTTP/2 countly.mail.163.com/stats/csp
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerDigiCert Inc
Subject*.mail.163.com
FingerprintB8:33:27:E2:B5:C9:DF:50:03:8C:82:D1:FE:83:27:53:AA:81:0F:3D
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash 9a14fe813903daf8566702dfd5ba2f4d
0f6ac0a433de78e11e8a7035146d704ad02b6658
83786d6ca95e7099b09dda2f11b25e7ac860caf70ec87fd35f520fbb58d8a296
POST /stats/csp HTTP/1.1
Host: countly.mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 716
Origin: https://h2.655755.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/octet-stream
content-length: 20
x-cache: from ngx-hd-33-105.163.com
X-Firefox-Spdy: h2
mail.163.com/fetrack/api/27/envelope/?sentry_key=d280472905c5286b79a1f3b8ad3282da&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.57.0
200 OK 2 B URL POST HTTP/2 mail.163.com/fetrack/api/27/envelope/?sentry_key=d280472905c5286b79a1f3b8ad3282da&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.57.0
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subject*.163.com
FingerprintE2:7C:6D:36:2B:67:C4:E0:20:B4:DD:D0:A2:FF:B4:CF:C4:69:05:08
ValidityThu, 28 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /fetrack/api/27/envelope/?sentry_key=d280472905c5286b79a1f3b8ad3282da&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.57.0 HTTP/1.1
Host: mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://h2.655755.xyz/
Content-Type: text/plain;charset=UTF-8
Content-Length: 424
Origin: https://h2.655755.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
vary: origin, access-control-request-method, access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
dl.reg.163.com/dl/getConf?callback=URSJSONP1714838975696&pkid=CvViHzl&pd=mail163&mode=1
200 OK 63 B URL GET HTTP/1.1 dl.reg.163.com/dl/getConf?callback=URSJSONP1714838975696&pkid=CvViHzl&pd=mail163&mode=1
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subject*.reg.163.com
Fingerprint27:7F:02:EC:D7:7F:BE:E5:E4:B9:69:20:3A:93:C9:70:74:1D:6C:C6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Sat, 21 Dec 2024 23:59:59 GMT
Hash c341ebff0def8b44380d0b0959d94eae
40f123aa427ab0f1a6db13bb4139cce97b065db2
54f1917c60907d51b75b930a6e46db2862f2043478d230e4a545e558a2f81d69
GET /dl/getConf?callback=URSJSONP1714838975696&pkid=CvViHzl&pd=mail163&mode=1 HTTP/1.1
Host: dl.reg.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:09:37 GMT
Content-Type: text/json;charset=utf-8
Content-Length: 63
Connection: keep-alive
Cache-Control: no-store
mimg.127.net/p/freemail/index/unified/static/2024/css/style.20c4fa9e52b0c313a6ad.css
200 OK 54 kB URL GET HTTP/2 mimg.127.net/p/freemail/index/unified/static/2024/css/style.20c4fa9e52b0c313a6ad.css
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8463db64dc3607253d768078368aee9a
c36333da595af8c1f6f28b0c3160ed218ca88161
872377542e81ac75304e5af0493c6dc50ff4a9b04a7e4a0906fb604304277891
GET /p/freemail/index/unified/static/2024/css/style.20c4fa9e52b0c313a6ad.css HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:35 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 12:42:06 GMT
etag: W/"6621151e-128fd"
expires: Mon, 01 May 2034 04:43:22 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
urswebzj.nosdn.127.net/webzj_cdn101/webzjconf.js
200 OK 131 B URL GET HTTP/2 urswebzj.nosdn.127.net/webzj_cdn101/webzjconf.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subject*.nosdn.127.net
FingerprintF5:A9:28:46:96:A0:E5:4B:8B:7D:D9:B0:A7:4C:82:91:2E:0A:CC:FE
ValidityThu, 01 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash c72e447905391c365372221672af0d89
a92564da9c77280a5376e0f3a816225b4b2f0816
2d053701a808e90bf686c55750385ec7a706c38af10fb97b56a2d7632ff11180
GET /webzj_cdn101/webzjconf.js HTTP/1.1
Host: urswebzj.nosdn.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: application/javascript;charset=UTF-8
content-length: 131
date: Sat, 27 Apr 2024 20:05:22 GMT
x-nos-request-id: 7efca766-4400-4092-87bc-32433043c304
x-nos-requesttype: GetObject
x-nos-object-name: webzj_cdn101%2Fwebzjconf.js
x-nos-storage-class: STANDARD
content-disposition: inline; filename="webzj_cdn101%2Fwebzjconf.js"
ali-swift-global-savetime: 1714248322
via: cache29.l2fr1[990,990,304-0,M], cache13.l2fr1[992,0], cache5.ru4[0,0,200-0,H], cache10.ru4[0,0]
etag: c72e447905391c365372221672af0d89
last-modified: Mon, 30 Mar 2020 15:37:44 Asia/Shanghai
age: 590656
x-cache: HIT TCP_MEM_HIT dirn:10:35840640
x-swift-savetime: Sat, 27 Apr 2024 20:05:22 GMT
x-swift-cachetime: 2592000
access-control-allow-origin: *
cache-control: max-age=61
timing-allow-origin: *
eagleid: 2ff6039e17148389783135406e
X-Firefox-Spdy: h2
mail.163.com/smflow/config.do?domain=163.com&callback=gAdCallback_1002
2.2 kB URL GET mail.163.com/smflow/config.do?domain=163.com&callback=gAdCallback_1002
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subject*.163.com
FingerprintE2:7C:6D:36:2B:67:C4:E0:20:B4:DD:D0:A2:FF:B4:CF:C4:69:05:08
ValidityThu, 28 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash 35c9b5262547496c5a101c31ae9f53f0
d481c94198c05830baa436190544bdd6a394d798
cae15248067504e370434bc0b57df1106c301ea6263fed86f73fde21872d21da
GET /smflow/config.do?domain=163.com&callback=gAdCallback_1002 HTTP/1.1
Host: mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=2B44050EB35E13DCED042991E503D6B3; Path=/smflow; HttpOnly
rememberMe=deleteMe; Path=/smflow; Max-Age=0; Expires=Fri, 03-May-2024 16:09:37 GMT
pragma: no-cache
cache-control: no-cache
expries: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
urswebzj.nosdn.127.net/webzj_cdn101/sprite_668dd9d8cbed2020ccb35961cb4f4bee.png
200 OK 24 kB URL GET HTTP/2 urswebzj.nosdn.127.net/webzj_cdn101/sprite_668dd9d8cbed2020ccb35961cb4f4bee.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subject*.nosdn.127.net
FingerprintF5:A9:28:46:96:A0:E5:4B:8B:7D:D9:B0:A7:4C:82:91:2E:0A:CC:FE
ValidityThu, 01 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type PNG image data, 400 x 500, 8-bit/color RGBA, non-interlaced
Hash 668dd9d8cbed2020ccb35961cb4f4bee
8311d025c0edf98dcee2f2dd9d7e0c74083c645e
435b67f9b84abd3e67706dc1e40592e38a415df348e798849aa0b64aa472aa2f
GET /webzj_cdn101/sprite_668dd9d8cbed2020ccb35961cb4f4bee.png HTTP/1.1
Host: urswebzj.nosdn.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/png;charset=UTF-8
content-length: 23750
date: Fri, 03 May 2024 07:34:58 GMT
x-nos-request-id: 3fd324c1-0664-49c5-8cb5-98ee626649db
x-nos-requesttype: GetObject
x-nos-object-name: webzj_cdn101%2Fsprite_668dd9d8cbed2020ccb35961cb4f4bee.png
x-nos-storage-class: STANDARD
content-disposition: inline; filename="webzj_cdn101%2Fsprite_668dd9d8cbed2020ccb35961cb4f4bee.png"
ali-swift-global-savetime: 1714721698
via: cache5.l2fr1[857,856,304-0,M], cache19.l2fr1[858,0], cache7.ru4[0,0,200-0,H], cache10.ru4[1,0]
etag: 668dd9d8cbed2020ccb35961cb4f4bee
last-modified: Fri, 04 Aug 2023 17:13:42 Asia/Shanghai
age: 117280
x-cache: HIT TCP_MEM_HIT dirn:10:279992337
x-swift-savetime: Fri, 03 May 2024 07:34:58 GMT
x-swift-cachetime: 2592000
timing-allow-origin: *
eagleid: 2ff6039e17148389787905476e
X-Firefox-Spdy: h2
mail.163.com/favicon.ico
200 OK 318 B IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subject*.163.com
FingerprintE2:7C:6D:36:2B:67:C4:E0:20:B4:DD:D0:A2:FF:B4:CF:C4:69:05:08
ValidityThu, 28 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 16 colors
Hash a14e5365cc2b27ec57e1ab7866c6a228
37fc3645c16a1cbd74d8a6b7ef8756bbf0a3e857
43c6594eb74940c6e0fb38d55c634425860093660f4eb0cb89334608dd9947eb
GET /favicon.ico HTTP/1.1
Host: mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:38 GMT
content-type: image/x-icon
content-length: 318
last-modified: Sun, 01 Jan 2006 12:37:08 GMT
etag: "43b7ccf4-13e"
expires: Sat, 04 May 2024 16:10:38 GMT
cache-control: max-age=60
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.mediav.com *.netstatic.net; connect-src 'self' wss: *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.163yun.com; report-uri https://countly.mail.163.com/stats/csp
accept-ranges: bytes
X-Firefox-Spdy: h2
mail-activity.nosdn.127.net/54d46d33-810a-4f3d-9e14-a8671608feeb
200 OK 167 kB URL GET HTTP/2 mail-activity.nosdn.127.net/54d46d33-810a-4f3d-9e14-a8671608feeb
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerDigiCert Inc
Subject*.nosdn.127.net
FingerprintF5:A9:28:46:96:A0:E5:4B:8B:7D:D9:B0:A7:4C:82:91:2E:0A:CC:FE
ValidityThu, 01 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1220x640, components 3
Size 167 kB (166603 bytes)
Hash bb113fc16e77c1861f78b9c32a102d45
1281df94697cba9849b2dd2dab1791d2082d3515
af13734d0fd4f2a1257f750e654f52090d832975a1f5c9b735bda6b11d03f04f
GET /54d46d33-810a-4f3d-9e14-a8671608feeb HTTP/1.1
Host: mail-activity.nosdn.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg;charset=UTF-8
content-length: 166603
date: Sat, 04 May 2024 09:51:41 GMT
x-nos-request-id: 434878e8-3f1e-4dc9-a29e-dc408dea86ea
x-nos-requesttype: GetObject
x-nos-object-name: 54d46d33-810a-4f3d-9e14-a8671608feeb
x-nos-storage-class: STANDARD
content-disposition: inline; filename="54d46d33-810a-4f3d-9e14-a8671608feeb"
ali-swift-global-savetime: 1714816301
via: cache30.l2fr1[0,0,304-0,H], cache8.l2fr1[1,0], cache8.ru4[0,0,200-0,H], cache10.ru4[0,0]
etag: "bb113fc16e77c1861f78b9c32a102d45"
last-modified: Thu, 21 Jul 2022 02:39:43 GMT
age: 22677
x-cache: HIT TCP_MEM_HIT dirn:10:366662914
x-swift-savetime: Sat, 04 May 2024 09:58:04 GMT
x-swift-cachetime: 42817
timing-allow-origin: *
eagleid: 2ff6039e17148389788715505e
X-Firefox-Spdy: h2
dl.reg.163.com/UA1435545636633/__utm.gif?configlog=1&from=https%3A%2F%2Fh2.655755.xyz%2F&config=%7B%22single%22%3A1%2C%22newCDN%22%3A1%2C%22version%22%3A4%2C%22notFastReg%22%3A1%2C%22page%22%3A%22login%22%2C%22prdomain%22%3A%22%40163.com%22%2C%22needUnLogin%22%3A1%2C%22unLoginTime%22%3A30%2C%22unLoginText%22%3A%2230%E5%A4%A9%E5%86%85%E5%85%8D%E7%99%BB%E5%BD%95%22%2C%22readErrHelper%22%3A1%2C%22focusHelper%22%3A1%2C%22autoFocus%22%3A1%2C%22forgetPwdText%22%3A%22%E5%BF%98%E8%AE%B0%E5%AF%86%E7%A0%81%22%2C%22gotoRegText%22%3A%22%E6%B3%A8%E5%86%8C%E6%96%B0%E8%B4%A6%E5%8F%B7%22%2C%22cssDomain%22%3A%22%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F%22%2C%22cssFiles%22%3A%22urs.163.918051fb.css%22%2C%22needEye%22%3A1%2C%22product%22%3A%22mail163%22%2C%22promark%22%3A%22CvViHzl%22%2C%22productKey%22%3A%221e48b2e565768181288e9a59d7b933a0%22%2C%22swidth%22%3A340%2C%22from3Cdn%22%3A1%2C%22needSendLog%22%3Afalse%2C%22needSendLogDt%22%3Afalse%2C%22crossDomainUrl%22%3A%22dl.reg.163.com%2Fwebzj%2Fv1.0.1%2Fpub%2F%22%2C%22ursDeviceId%22%3A%221714838974225-124416%22%2C%22bgpTime%22%3A10000%2C%22mv%22%3A%22new_cdn_101%22%2C%22getsmstxt%22%3A%22%E8%8E%B7%E5%8F%96%E9%AA%8C%E8%AF%81%E7%A0%81%22%2C%22needRegAgree%22%3A1%2C%22needRegAgreeMb%22%3A1%7D
200 OK 0 B URL GET HTTP/1.1 dl.reg.163.com/UA1435545636633/__utm.gif?configlog=1&from=https%3A%2F%2Fh2.655755.xyz%2F&config=%7B%22single%22%3A1%2C%22newCDN%22%3A1%2C%22version%22%3A4%2C%22notFastReg%22%3A1%2C%22page%22%3A%22login%22%2C%22prdomain%22%3A%22%40163.com%22%2C%22needUnLogin%22%3A1%2C%22unLoginTime%22%3A30%2C%22unLoginText%22%3A%2230%E5%A4%A9%E5%86%85%E5%85%8D%E7%99%BB%E5%BD%95%22%2C%22readErrHelper%22%3A1%2C%22focusHelper%22%3A1%2C%22autoFocus%22%3A1%2C%22forgetPwdText%22%3A%22%E5%BF%98%E8%AE%B0%E5%AF%86%E7%A0%81%22%2C%22gotoRegText%22%3A%22%E6%B3%A8%E5%86%8C%E6%96%B0%E8%B4%A6%E5%8F%B7%22%2C%22cssDomain%22%3A%22%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F%22%2C%22cssFiles%22%3A%22urs.163.918051fb.css%22%2C%22needEye%22%3A1%2C%22product%22%3A%22mail163%22%2C%22promark%22%3A%22CvViHzl%22%2C%22productKey%22%3A%221e48b2e565768181288e9a59d7b933a0%22%2C%22swidth%22%3A340%2C%22from3Cdn%22%3A1%2C%22needSendLog%22%3Afalse%2C%22needSendLogDt%22%3Afalse%2C%22crossDomainUrl%22%3A%22dl.reg.163.com%2Fwebzj%2Fv1.0.1%2Fpub%2F%22%2C%22ursDeviceId%22%3A%221714838974225-124416%22%2C%22bgpTime%22%3A10000%2C%22mv%22%3A%22new_cdn_101%22%2C%22getsmstxt%22%3A%22%E8%8E%B7%E5%8F%96%E9%AA%8C%E8%AF%81%E7%A0%81%22%2C%22needRegAgree%22%3A1%2C%22needRegAgreeMb%22%3A1%7D
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subject*.reg.163.com
Fingerprint27:7F:02:EC:D7:7F:BE:E5:E4:B9:69:20:3A:93:C9:70:74:1D:6C:C6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Sat, 21 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UA1435545636633/__utm.gif?configlog=1&from=https%3A%2F%2Fh2.655755.xyz%2F&config=%7B%22single%22%3A1%2C%22newCDN%22%3A1%2C%22version%22%3A4%2C%22notFastReg%22%3A1%2C%22page%22%3A%22login%22%2C%22prdomain%22%3A%22%40163.com%22%2C%22needUnLogin%22%3A1%2C%22unLoginTime%22%3A30%2C%22unLoginText%22%3A%2230%E5%A4%A9%E5%86%85%E5%85%8D%E7%99%BB%E5%BD%95%22%2C%22readErrHelper%22%3A1%2C%22focusHelper%22%3A1%2C%22autoFocus%22%3A1%2C%22forgetPwdText%22%3A%22%E5%BF%98%E8%AE%B0%E5%AF%86%E7%A0%81%22%2C%22gotoRegText%22%3A%22%E6%B3%A8%E5%86%8C%E6%96%B0%E8%B4%A6%E5%8F%B7%22%2C%22cssDomain%22%3A%22%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F%22%2C%22cssFiles%22%3A%22urs.163.918051fb.css%22%2C%22needEye%22%3A1%2C%22product%22%3A%22mail163%22%2C%22promark%22%3A%22CvViHzl%22%2C%22productKey%22%3A%221e48b2e565768181288e9a59d7b933a0%22%2C%22swidth%22%3A340%2C%22from3Cdn%22%3A1%2C%22needSendLog%22%3Afalse%2C%22needSendLogDt%22%3Afalse%2C%22crossDomainUrl%22%3A%22dl.reg.163.com%2Fwebzj%2Fv1.0.1%2Fpub%2F%22%2C%22ursDeviceId%22%3A%221714838974225-124416%22%2C%22bgpTime%22%3A10000%2C%22mv%22%3A%22new_cdn_101%22%2C%22getsmstxt%22%3A%22%E8%8E%B7%E5%8F%96%E9%AA%8C%E8%AF%81%E7%A0%81%22%2C%22needRegAgree%22%3A1%2C%22needRegAgreeMb%22%3A1%7D HTTP/1.1
Host: dl.reg.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:09:38 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
mimg.127.net/external/mail-index/index-promote.js
200 OK 2.0 kB URL GET HTTP/2 mimg.127.net/external/mail-index/index-promote.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 5210d88bc960cbba14e9b2beca1eefaa
b2f1a1d5422490074b88ae336c2db226bd807762
00b3547c824e82e7e0f93b248c027f1eca602f9c8e2cb657e2057f2ccfcd98ea
GET /external/mail-index/index-promote.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:34 GMT
content-type: application/x-javascript
last-modified: Wed, 02 Nov 2022 11:07:57 GMT
vary: Accept-Encoding
etag: W/"63624f8d-1a5a"
expires: Sat, 04 May 2024 16:10:47 GMT
cache-control: max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/tools/fingerprintjs/fingerprint-2.1.2.min.js
200 OK 25 kB URL GET HTTP/2 mimg.127.net/p/tools/fingerprintjs/fingerprint-2.1.2.min.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (62460), with CRLF, LF line terminators
Hash 4725038f6d8261e8e1fcdf236f22f6cb
f46599da5ae1f62899acb5bb9dd933974d79a232
b8a9a476d44407006f72a180cae0d6ea38644dd385451335f82414c10f881ce3
GET /p/tools/fingerprintjs/fingerprint-2.1.2.min.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/x-javascript
last-modified: Fri, 18 Dec 2020 09:23:28 GMT
etag: W/"5fdc7510-7784"
expires: Mon, 01 May 2034 04:42:59 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
mail.163.com/preload6.htm?t=1714838977706
200 OK 48 kB URL GET HTTP/2 mail.163.com/preload6.htm?t=1714838977706
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subject*.163.com
FingerprintE2:7C:6D:36:2B:67:C4:E0:20:B4:DD:D0:A2:FF:B4:CF:C4:69:05:08
ValidityThu, 28 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
File type gzip compressed data, max compression, from Unix
Hash 724ef9913e230eb92c4f2d6b87493fd5
b0d3fc307c70c3ee46ee3f9fca257a72131c5723
1669e91660d11d4ae6dfb02d1a3e16ff445aaad4c44c7945f2a1ec023fd16373
GET /preload6.htm?t=1714838977706 HTTP/1.1
Host: mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:38 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 10:37:40 GMT
vary: Accept-Encoding
etag: W/"66278f74-381d"
expires: Sat, 04 May 2024 16:11:46 GMT
cache-control: max-age=3600
content-encoding: gzip
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.mediav.com *.netstatic.net; connect-src 'self' wss: *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.163yun.com; report-uri https://countly.mail.163.com/stats/csp
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/index/unified/static/2024//css/urs.163.918051fb.css
200 OK 2.0 kB URL GET HTTP/2 mimg.127.net/p/freemail/index/unified/static/2024//css/urs.163.918051fb.css
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type gzip compressed data, max compression, from Unix
Hash 474280371b35290f10cfa8b13703e7cd
e2a2f0ff1397c6077d2a429dc3e8c3f81d708e49
77c2afbfa9fe685d11ea1fb196d45145f7c270bab42d2412396e4ebf2b1bea35
GET /p/freemail/index/unified/static/2024//css/urs.163.918051fb.css HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:38 GMT
content-type: text/css
last-modified: Thu, 07 Mar 2024 12:20:36 GMT
etag: W/"65e9b114-18de"
expires: Sun, 30 Apr 2034 08:34:38 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/js6/static/js/p1.865638c1.js
200 OK 329 kB URL GET HTTP/2 mimg.127.net/p/js6/static/js/p1.865638c1.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://mail.163.com/preload6.htm?t=1714838977706
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type gzip compressed data, max compression, from Unix
Size 329 kB (328934 bytes)
Hash 76ccd63405ee14eb9c5cb545f5d7df76
bd2f1a51664d049948858586b6d1a5d6a5e8e314
f0d02bd48776877213bda48bb8434acb36cbf8fa760ae38a63f796947adc4033
GET /p/js6/static/js/p1.865638c1.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.163.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:40 GMT
content-type: application/x-javascript
last-modified: Tue, 23 Apr 2024 10:23:39 GMT
etag: W/"66278c2b-1049ab"
expires: Mon, 01 May 2034 04:48:59 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/tools/mailscanlogin/mailscanlogin-1.2.3.js
200 OK 82 kB URL GET HTTP/2 mimg.127.net/p/tools/mailscanlogin/mailscanlogin-1.2.3.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/tools/mailscanlogin/mailscanlogin-1.2.3.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: application/x-javascript
last-modified: Tue, 19 Dec 2023 10:17:03 GMT
etag: W/"65816d9f-1415b"
expires: Mon, 01 May 2034 09:47:13 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
mail.163.com/smflow/get.do?ver=1&mailVer=6&uid=nt%40163.com®Time=0&lastTime=0&mobUser=0&gender=&birthday=0&font=&mod=common&source=server&moduleId=148&callback=gAdCallback_1004
0 B URL GET mail.163.com/smflow/get.do?ver=1&mailVer=6&uid=nt%40163.com®Time=0&lastTime=0&mobUser=0&gender=&birthday=0&font=&mod=common&source=server&moduleId=148&callback=gAdCallback_1004
IP
Certificate IssuerDigiCert Inc
Subject*.163.com
FingerprintE2:7C:6D:36:2B:67:C4:E0:20:B4:DD:D0:A2:FF:B4:CF:C4:69:05:08
ValidityThu, 28 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smflow/get.do?ver=1&mailVer=6&uid=nt%40163.com®Time=0&lastTime=0&mobUser=0&gender=&birthday=0&font=&mod=common&source=server&moduleId=148&callback=gAdCallback_1004 HTTP/1.1
Host: mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=E1DDD5B07CE0DFB6857FDE7D26425DFB; Path=/smflow; HttpOnly
rememberMe=deleteMe; Path=/smflow; Max-Age=0; Expires=Fri, 03-May-2024 16:09:37 GMT
pragma: no-cache
cache-control: no-cache
expries: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
200 OK 52 kB URL GET HTTP/1.1 dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subject*.reg.163.com
Fingerprint27:7F:02:EC:D7:7F:BE:E5:E4:B9:69:20:3A:93:C9:70:74:1D:6C:C6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Sat, 21 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163 HTTP/1.1
Host: dl.reg.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:09:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 25 Jan 2024 06:12:53 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Sat, 04 May 2024 16:09:36 GMT
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
mimg.127.net/p/tools/mailad-sdk/mailad-sdk-0.0.19.js
200 OK 108 kB URL GET HTTP/2 mimg.127.net/p/tools/mailad-sdk/mailad-sdk-0.0.19.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Size 108 kB (108014 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/tools/mailad-sdk/mailad-sdk-0.0.19.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: application/x-javascript
last-modified: Thu, 02 Feb 2023 09:37:27 GMT
etag: W/"63db8457-1a5ee"
expires: Mon, 01 May 2034 04:42:58 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/lib/login-error-popup/index-0.0.1.js
200 OK 4.7 kB URL GET HTTP/2 mimg.127.net/p/freemail/lib/login-error-popup/index-0.0.1.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (4719), with no line terminators
Hash aa1d5a0e219c628e5886360c959f4b5d
8f6d6dc60fc601df455ca32903dc3a97884be74d
fb0677d2f54c96e287633f8e8e77950c4b60b50cb9d5fb7e1da9b1fc5ce24369
GET /p/freemail/lib/login-error-popup/index-0.0.1.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: application/x-javascript
last-modified: Tue, 09 Jun 2020 09:36:39 GMT
etag: W/"5edf5827-1269"
expires: Sun, 30 Apr 2034 08:34:23 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/index/unified/static/2024/js/vendors~126~163~yeah.d682f31523baefee0c00.js
200 OK 249 kB URL GET HTTP/2 mimg.127.net/p/freemail/index/unified/static/2024/js/vendors~126~163~yeah.d682f31523baefee0c00.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Size 249 kB (249044 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/freemail/index/unified/static/2024/js/vendors~126~163~yeah.d682f31523baefee0c00.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: application/x-javascript
last-modified: Thu, 18 Apr 2024 12:42:06 GMT
etag: W/"6621151e-3ccd4"
expires: Sun, 30 Apr 2034 08:34:23 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
urswebzj.nosdn.127.net/webzj_cdn101/pp_index_dl_58ec44740cc5087b048f9492ec381136.js
200 OK 909 kB URL GET HTTP/2 urswebzj.nosdn.127.net/webzj_cdn101/pp_index_dl_58ec44740cc5087b048f9492ec381136.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subject*.nosdn.127.net
FingerprintF5:A9:28:46:96:A0:E5:4B:8B:7D:D9:B0:A7:4C:82:91:2E:0A:CC:FE
ValidityThu, 01 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Size 909 kB (909268 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /webzj_cdn101/pp_index_dl_58ec44740cc5087b048f9492ec381136.js HTTP/1.1
Host: urswebzj.nosdn.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dl.reg.163.com
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
date: Wed, 24 Apr 2024 06:06:39 GMT
x-nos-request-id: 5d296e68-9d27-4ed2-87bd-cd617fe1fdb2
x-nos-requesttype: GetObject
access-control-allow-origin: *
access-control-allow-methods: GET,POST
x-nos-object-name: webzj_cdn101%2Fpp_index_dl_58ec44740cc5087b048f9492ec381136.js
x-nos-storage-class: STANDARD
content-disposition: inline; filename="webzj_cdn101%2Fpp_index_dl_58ec44740cc5087b048f9492ec381136.js"
ali-swift-global-savetime: 1713938799
via: cache9.l2fr1[0,0,304-0,H], cache25.l2fr1[1,0], cache8.ru4[0,0,200-0,H], cache10.ru4[0,0]
last-modified: Tue, 23 Jan 2024 16:43:50 Asia/Shanghai
age: 900179
x-cache: HIT TCP_MEM_HIT dirn:10:163991111
x-swift-savetime: Wed, 24 Apr 2024 06:28:27 GMT
x-swift-cachetime: 2590692
cache-control: max-age=61
timing-allow-origin: *
eagleid: 2ff6039e17148389783545415e
content-encoding: gzip
X-Firefox-Spdy: h2
mail.163.com/smflow/get.do?ver=1&mailVer=6&uid=nt%40163.com®Time=0&lastTime=0&mobUser=0&gender=&birthday=0&font=&mod=common&source=server&moduleId=900&callback=gAdCallback_1003
0 B URL GET mail.163.com/smflow/get.do?ver=1&mailVer=6&uid=nt%40163.com®Time=0&lastTime=0&mobUser=0&gender=&birthday=0&font=&mod=common&source=server&moduleId=900&callback=gAdCallback_1003
IP
Certificate IssuerDigiCert Inc
Subject*.163.com
FingerprintE2:7C:6D:36:2B:67:C4:E0:20:B4:DD:D0:A2:FF:B4:CF:C4:69:05:08
ValidityThu, 28 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smflow/get.do?ver=1&mailVer=6&uid=nt%40163.com®Time=0&lastTime=0&mobUser=0&gender=&birthday=0&font=&mod=common&source=server&moduleId=900&callback=gAdCallback_1003 HTTP/1.1
Host: mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=3B1F81C4894AFD9BD0BA11C6EECA6A20; Path=/smflow; HttpOnly
rememberMe=deleteMe; Path=/smflow; Max-Age=0; Expires=Fri, 03-May-2024 16:09:37 GMT
pragma: no-cache
cache-control: no-cache
expries: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
urswebzj.nosdn.127.net/webzj/fingerprint2.min-1.6.1.js
200 OK 35 kB URL GET HTTP/2 urswebzj.nosdn.127.net/webzj/fingerprint2.min-1.6.1.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subject*.nosdn.127.net
FingerprintF5:A9:28:46:96:A0:E5:4B:8B:7D:D9:B0:A7:4C:82:91:2E:0A:CC:FE
ValidityThu, 01 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32050), with CRLF line terminators
Hash a4a7b6331ac488b93839eee76e4998a2
44fcc1bdad6adc00e59c550c38b1910092a7fb45
d950303bcbaea71f3173aef2c62574cfa9de52a395b35316e11fd841f820f151
GET /webzj/fingerprint2.min-1.6.1.js HTTP/1.1
Host: urswebzj.nosdn.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
date: Sat, 27 Apr 2024 10:40:17 GMT
x-nos-request-id: 2bdfad78-9e61-4760-a495-3b688a940e39
x-nos-requesttype: GetObject
x-nos-object-name: webzj%2Ffingerprint2.min-1.6.1.js
x-nos-storage-class: STANDARD
content-disposition: inline; filename="webzj%2Ffingerprint2.min-1.6.1.js"
ali-swift-global-savetime: 1714214417
via: cache23.l2fr1[807,807,304-0,M], cache18.l2fr1[808,0], cache7.ru4[0,0,200-0,H], cache10.ru4[1,0]
last-modified: Wed, 04 Jul 2018 16:07:18 Asia/Shanghai
age: 624561
x-cache: HIT TCP_MEM_HIT dirn:11:436942925
x-swift-savetime: Sat, 27 Apr 2024 10:40:17 GMT
x-swift-cachetime: 2592000
cache-control: max-age=61
timing-allow-origin: *
eagleid: 2ff6039e17148389783135407e
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/lib/track/7.57.0/bundle.tracing.min.js
200 OK 86 kB URL GET HTTP/2 mimg.127.net/p/freemail/lib/track/7.57.0/bundle.tracing.min.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65428), with CRLF line terminators
Hash 2f0cdde80602be95cee51d6e8f0cef9a
bf054ab61a4f163e7a828282ee3d3724a84924b9
d4455d72dcbb6008621d53a8c9fe408fb15040a76eb48a3407f9fe2f688427d5
GET /p/freemail/lib/track/7.57.0/bundle.tracing.min.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:34 GMT
content-type: application/x-javascript
last-modified: Thu, 20 Jul 2023 06:03:22 GMT
etag: W/"64b8ce2a-1511a"
expires: Sun, 30 Apr 2034 08:34:23 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
qrcode.mail.163.com/qrCode?productId=dsdl&width=256&height=256&marginPct=0&blackRgb=000000&showLogo=true&content=https%3A%2F%2Fu.163.com%2Fdashi_base_dl%3Ffrom%3Dmail378
200 OK 15 kB URL GET HTTP/2 qrcode.mail.163.com/qrCode?productId=dsdl&width=256&height=256&marginPct=0&blackRgb=000000&showLogo=true&content=https%3A%2F%2Fu.163.com%2Fdashi_base_dl%3Ffrom%3Dmail378
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerDigiCert Inc
Subject*.mail.163.com
FingerprintB8:33:27:E2:B5:C9:DF:50:03:8C:82:D1:FE:83:27:53:AA:81:0F:3D
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Hash 1eb8fe776768e2969042084eb6dea790
53baf89db8a90f5e5b899e4ab400375fb666bc89
d21917a4f0664c9e71fbe3004be8c09a989b829277596449c50ea7b3f95b52f2
GET /qrCode?productId=dsdl&width=256&height=256&marginPct=0&blackRgb=000000&showLogo=true&content=https%3A%2F%2Fu.163.com%2Fdashi_base_dl%3Ffrom%3Dmail378 HTTP/1.1
Host: qrcode.mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:37 GMT
x-cache: from ngx-hd-33-95.163.com
X-Firefox-Spdy: h2
mimg.127.net/p/bjs/release/bjs-1.1.6.js
200 OK 132 kB URL GET HTTP/2 mimg.127.net/p/bjs/release/bjs-1.1.6.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://mail.163.com/preload6.htm?t=1714838977706
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Size 132 kB (132125 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/bjs/release/bjs-1.1.6.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.163.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:38 GMT
content-type: application/x-javascript
last-modified: Mon, 06 Feb 2023 06:13:00 GMT
etag: W/"63e09a6c-2041d"
expires: Mon, 01 May 2034 10:27:20 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/index/lib/img/urs/ico-eye-disabled@2x.png
200 OK 931 B URL GET HTTP/2 mimg.127.net/p/freemail/index/lib/img/urs/ico-eye-disabled@2x.png
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash 9fe99717068f8fe782cbad0ad5f646bb
f01d1e38b57af58dca0ba2af7075b1f7683341fc
d7716df73fa7eb16a000c7338ce990979c1530e6ac6dce53f3a7d68d64f06336
GET /p/freemail/index/lib/img/urs/ico-eye-disabled@2x.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mimg.127.net/p/freemail/index/unified/static/2024//css/urs.163.918051fb.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:40 GMT
content-type: image/png
content-length: 931
last-modified: Tue, 19 Jul 2022 08:18:58 GMT
etag: "62d668f2-3a3"
expires: Sun, 30 Apr 2034 08:34:10 GMT
cache-control: max-age=315360000
vary: Origin
accept-ranges: bytes
X-Firefox-Spdy: h2
mimg.127.net/p/js6/static/js/p0.77b0e0aa.js
200 OK 1.3 MB URL GET HTTP/2 mimg.127.net/p/js6/static/js/p0.77b0e0aa.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://mail.163.com/preload6.htm?t=1714838977706
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Size 1.3 MB (1341657 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/js6/static/js/p0.77b0e0aa.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.163.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:38 GMT
content-type: application/x-javascript
last-modified: Mon, 22 Apr 2024 13:55:58 GMT
etag: W/"66266c6e-1478d9"
expires: Mon, 01 May 2034 10:27:20 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
cstaticdun.126.net/load.min.js
200 OK 35 kB URL GET HTTP/1.1 cstaticdun.126.net/load.min.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerTrustAsia Technologies, Inc.
Subject*.126.net
FingerprintEA:33:DC:8A:74:98:10:14:DB:A3:1D:D7:C7:F4:19:7A:83:CB:81:F9
ValidityWed, 15 Nov 2023 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32045)
Hash cce8adb73bfaa43a938f2c017c9050ab
01528138c820d27966ce14aca58b184b9cb5742a
83cfb65ba3338a03b9bfcee513be5b22c817002c51b0c91b7d9b9bce064ccf8b
GET /load.min.js HTTP/1.1
Host: cstaticdun.126.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 14072
Connection: keep-alive
Date: Sat, 04 May 2024 07:56:21 GMT
Timing-Allow-Origin: *, *
Cache-Control: max-age=43200
Expires: Mon, 29 Apr 2024 08:01:21 GMT
Ali-Swift-Global-Savetime: 1714809381
Via: cache12.l2nu20-8[45,45,304-0,H], cache48.l2nu20-8[47,0], cache28.l2hk2[0,-1,304-0,H], cache17.l2hk2[0,0], cache8.l2fr1[0,0,304-0,H], cache5.l2fr1[1,0], cache6.ru4[0,0,200-0,H], cache10.ru4[3,0]
Content-Encoding: gzip
Last-Modified: Wed, 10 Apr 2024 07:41:54 GMT
Vary: Accept-Encoding
Age: 29598
X-Cache: HIT TCP_MEM_HIT dirn:9:435853781
X-Swift-SaveTime: Sat, 04 May 2024 07:56:25 GMT
X-Swift-CacheTime: 43196
Access-Control-Allow-Methods: GET,POST,OPTIONS,HEAD
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: *
Access-Control-Allow-Origin: *
EagleId: 2ff6039e17148389796605785e
pr.nss.netease.com/sentry/passive?clusterName=urs-webzj-static-passive&modelName=webzj_response_time2&one=1&uapi=401error&pkid=CvViHzl&pd=mail163&dataTime=1714838978807&str=%E7%99%BB%E5%BD%95&host=dl.reg.163.com
200 OK 0 B URL GET HTTP/2 pr.nss.netease.com/sentry/passive?clusterName=urs-webzj-static-passive&modelName=webzj_response_time2&one=1&uapi=401error&pkid=CvViHzl&pd=mail163&dataTime=1714838978807&str=%E7%99%BB%E5%BD%95&host=dl.reg.163.com
IP
ASN #45062 NetEase Building No.16 Ke Yun Road
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subject*.nss.netease.com
Fingerprint75:68:9D:CB:D8:E8:4C:C3:41:E4:C6:E9:7B:3E:C5:4C:87:EE:BD:AF
ValidityFri, 18 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sentry/passive?clusterName=urs-webzj-static-passive&modelName=webzj_response_time2&one=1&uapi=401error&pkid=CvViHzl&pd=mail163&dataTime=1714838978807&str=%E7%99%BB%E5%BD%95&host=dl.reg.163.com HTTP/1.1
Host: pr.nss.netease.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:40 GMT
content-type: application/json;charset=utf-8
vary: Accept-Encoding
kubeinsight-dst-application: sentry_passive_receiver
kubeinsight-dst-product: %E5%93%A8%E5%85%B5%E7%B3%BB%E7%BB%9F
access-control-allow-origin: *
access-control-allow-methods: POST, PUT, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, client_id, uuid, Authorization
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/index/unified/static/2024/js/163.129da50c0f560ca7db67.js
200 OK 76 kB URL GET HTTP/2 mimg.127.net/p/freemail/index/unified/static/2024/js/163.129da50c0f560ca7db67.js
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/freemail/index/unified/static/2024/js/163.129da50c0f560ca7db67.js HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: application/x-javascript
last-modified: Tue, 30 Apr 2024 09:25:42 GMT
etag: W/"6630b916-1277a"
expires: Sun, 30 Apr 2034 08:34:23 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
dl.reg.163.com/UA1435545636633/__utm.gif?useDefaultRegMail=1&from=https://h2.655755.xyz/&promark=CvViHzl&product=mail163
200 OK 0 B URL GET HTTP/1.1 dl.reg.163.com/UA1435545636633/__utm.gif?useDefaultRegMail=1&from=https://h2.655755.xyz/&promark=CvViHzl&product=mail163
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subject*.reg.163.com
Fingerprint27:7F:02:EC:D7:7F:BE:E5:E4:B9:69:20:3A:93:C9:70:74:1D:6C:C6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Sat, 21 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UA1435545636633/__utm.gif?useDefaultRegMail=1&from=https://h2.655755.xyz/&promark=CvViHzl&product=mail163 HTTP/1.1
Host: dl.reg.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 16:09:39 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
mimg.127.net/copyright/year.js?rnd=1578362533107
200 OK 24 B URL GET HTTP/2 mimg.127.net/copyright/year.js?rnd=1578362533107
IP
ASN #137263 NETEASE HONG KONG LIMITED
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 484d17594df5800517b688e722f33a49
42fc9b70883a6caa728a6a60b6f50bfa4754fda1
0cf4021ecf20c2c2ea2527e1708a8c97e56373b996cfc50ddfd29996c46bba8a
GET /copyright/year.js?rnd=1578362533107 HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:33 GMT
content-type: application/x-javascript
content-length: 24
last-modified: Sun, 31 Dec 2023 15:59:50 GMT
etag: "65918ff6-18"
expires: Mon, 30 Dec 2024 15:59:50 GMT
cache-control: max-age=21351065
accept-ranges: bytes
X-Firefox-Spdy: h2
h2.655755.xyz/fgw/mailsrv-ipdetail/detail
200 OK 389 B URL GET HTTP/3 h2.655755.xyz/fgw/mailsrv-ipdetail/detail
IP
Certificate IssuerLet's Encrypt
Subject655755.xyz
FingerprintB0:F3:50:BB:B4:25:BB:0B:FE:74:B0:12:F8:1E:A7:89:66:15:1F:BC
ValidityTue, 16 Apr 2024 15:42:23 GMT - Mon, 15 Jul 2024 15:42:22 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (447), with no line terminators
Hash c2cfbaf8d75db0459c3be9bcc55056bd
e27265389c0043f099be1713f8f015285a034f73
97617e6c66a2666bc22be486884b5b258304c9de507b74e511230d87d568be69
Analyzer Verdict Alert OpenPhish phishing NetEase
GET /fgw/mailsrv-ipdetail/detail HTTP/1.1
Host: h2.655755.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Cookie: starttime=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:09:37 GMT
content-type: application/json;charset=UTF-8
cf-ray: 87e9c18e1d19712f-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache
set-cookie: stats_session_id=ed83b565-0917-4afe-8396-2974d98efe61; Path=/
expries: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
x-response-code: 200
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vgq6WjCQ9yfEnFUUvbtiJn17oz1CbCh1iXNCl5gZchhm9e3m7vvfbMoHXl0nNvmX5OTQnWE1Oe%2F5kgwNtk9NlawyvEvfSg%2F2bIbCl%2F0TpOJPiSgKDTtVMQ1%2FXynlEjs4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
mimg.127.net/p/js6/static/css/p0.764e28f9.css
200 OK 291 kB URL GET HTTP/2 mimg.127.net/p/js6/static/css/p0.764e28f9.css
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://mail.163.com/preload6.htm?t=1714838977706
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
Size 291 kB (290685 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/js6/static/css/p0.764e28f9.css HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.163.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:38 GMT
content-type: text/css
last-modified: Mon, 22 Apr 2024 10:23:04 GMT
etag: W/"66263a88-46f7d"
expires: Mon, 01 May 2034 04:48:48 GMT
cache-control: max-age=315360000
vary: Accept-Encoding, Origin
content-encoding: gzip
X-Firefox-Spdy: h2
b.mail.163.com/ir/stat.gif?ad_oper=show&ad_source=mailad&ad_position=900&uid=nt%40163.com&isIframe=0&sc=0&statId=1_900_165_472&position=0&rnd=1714838978010&product=fl0gsmhkff1ml6iid8ed5qm2i&appName=webmail&appVersion=&moduleId=900&pUrl=&pCUrl=http%3A%2F%2Fr.mail.163.com%2Fr.jsp%3Furl%3Dhttp%253A%252F%252Fqiye.163.com%252F%253Ffrom%253DM126_163_LOGIN_banner%26sign%3D1052924428%26_r_ignore_statId%3D1_900_165_472%26position%3D1%26_r_ignore_moduleId%3D900%26spm%3Dad.0.0.0.900.472%26_r_ignore_uid%3Dnt%2540163.com%26uid%3Dnt%2540163.com%26session_id%3D68A478C5-6887-4B82-A3BC-3F26DF7E1BA4&request_time=511&spm=ad.0.0.0.900.1_900_165_472&scene=165
200 OK 49 B URL GET HTTP/2 b.mail.163.com/ir/stat.gif?ad_oper=show&ad_source=mailad&ad_position=900&uid=nt%40163.com&isIframe=0&sc=0&statId=1_900_165_472&position=0&rnd=1714838978010&product=fl0gsmhkff1ml6iid8ed5qm2i&appName=webmail&appVersion=&moduleId=900&pUrl=&pCUrl=http%3A%2F%2Fr.mail.163.com%2Fr.jsp%3Furl%3Dhttp%253A%252F%252Fqiye.163.com%252F%253Ffrom%253DM126_163_LOGIN_banner%26sign%3D1052924428%26_r_ignore_statId%3D1_900_165_472%26position%3D1%26_r_ignore_moduleId%3D900%26spm%3Dad.0.0.0.900.472%26_r_ignore_uid%3Dnt%2540163.com%26uid%3Dnt%2540163.com%26session_id%3D68A478C5-6887-4B82-A3BC-3F26DF7E1BA4&request_time=511&spm=ad.0.0.0.900.1_900_165_472&scene=165
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerDigiCert Inc
Subject*.mail.163.com
FingerprintB8:33:27:E2:B5:C9:DF:50:03:8C:82:D1:FE:83:27:53:AA:81:0F:3D
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 3d045b93716ed28dc745e648b3428a26
36955b7e83ff9f5053cf23bd870d720a598c53aa
93db6ff0af01c1416a4cf5643fa970e6facf75aa2c38a66404085039c2314e33
GET /ir/stat.gif?ad_oper=show&ad_source=mailad&ad_position=900&uid=nt%40163.com&isIframe=0&sc=0&statId=1_900_165_472&position=0&rnd=1714838978010&product=fl0gsmhkff1ml6iid8ed5qm2i&appName=webmail&appVersion=&moduleId=900&pUrl=&pCUrl=http%3A%2F%2Fr.mail.163.com%2Fr.jsp%3Furl%3Dhttp%253A%252F%252Fqiye.163.com%252F%253Ffrom%253DM126_163_LOGIN_banner%26sign%3D1052924428%26_r_ignore_statId%3D1_900_165_472%26position%3D1%26_r_ignore_moduleId%3D900%26spm%3Dad.0.0.0.900.472%26_r_ignore_uid%3Dnt%2540163.com%26uid%3Dnt%2540163.com%26session_id%3D68A478C5-6887-4B82-A3BC-3F26DF7E1BA4&request_time=511&spm=ad.0.0.0.900.1_900_165_472&scene=165 HTTP/1.1
Host: b.mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:38 GMT
content-type: image/gif
content-length: 49
last-modified: Thu, 14 Nov 2019 06:49:07 GMT
etag: "5dccf8e3-31"
accept-ranges: bytes
x-cache: from ngx-hd-33-95.163.com
X-Firefox-Spdy: h2
mimg.127.net/p/freemail/index/lib/img/urs/icon_chk_checkbox@2x.png
200 OK 305 B URL GET HTTP/2 mimg.127.net/p/freemail/index/lib/img/urs/icon_chk_checkbox@2x.png
IP
ASN #137263 NETEASE HONG KONG LIMITED
Requested by https://dl.reg.163.com/webzj/v1.0.1/pub/index_dl2_new.html?cd=%2F%2Fmimg.127.net%2Fp%2Ffreemail%2Findex%2Funified%2Fstatic%2F2024%2F%2Fcss%2F&cf=urs.163.918051fb.css&MGID=1714838975897.632&wdaId=&pkid=CvViHzl&product=mail163
Certificate IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT
File type PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Hash e9fef562d6bcb0ae4c92097dfd544a62
71f6d28325bc48e83fa4c78b951c54d65e78bb30
7a942a3805da57802325a1b341172e254958723db4ce5d9e3b218922047345a9
GET /p/freemail/index/lib/img/urs/icon_chk_checkbox@2x.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mimg.127.net/p/freemail/index/unified/static/2024//css/urs.163.918051fb.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:09:40 GMT
content-type: image/png
content-length: 305
last-modified: Tue, 19 Jul 2022 08:19:00 GMT
etag: "62d668f4-131"
expires: Sun, 30 Apr 2034 08:34:10 GMT
cache-control: max-age=315360000
vary: Origin
accept-ranges: bytes
X-Firefox-Spdy: h2
h2.655755.xyz/fgw/mailsrv-device-idmapping/webapp/init
200 OK 83 B URL POST HTTP/3 h2.655755.xyz/fgw/mailsrv-device-idmapping/webapp/init
IP
Certificate IssuerLet's Encrypt
Subject655755.xyz
FingerprintB0:F3:50:BB:B4:25:BB:0B:FE:74:B0:12:F8:1E:A7:89:66:15:1F:BC
ValidityTue, 16 Apr 2024 15:42:23 GMT - Mon, 15 Jul 2024 15:42:22 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash d982cc4c6ab39cd9b792cdf4665f6f74
7938679ba05da7981aa3c8a463c54c0745b0b657
68e187c5148929225468fc63154e0b47bef0232763044c3fccb48686596701b2
Analyzer Verdict Alert OpenPhish phishing NetEase
POST /fgw/mailsrv-device-idmapping/webapp/init HTTP/1.1
Host: h2.655755.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 71
Origin: https://h2.655755.xyz
DNT: 1
Connection: keep-alive
Referer: https://h2.655755.xyz/
Cookie: starttime=; stats_session_id=ed83b565-0917-4afe-8396-2974d98efe61
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:09:39 GMT
content-type: application/json;charset=UTF-8
cf-ray: 87e9c19c1847712f-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache
expries: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
x-response-code: 200
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KexW9ID1NRWTyPyyWlHSuy%2BgBmbMmCprCiN%2BH8tMELhjUUFSswIE%2BlmjcVBcgP%2B84F4upxyYneSqufbByT4u6fts8hhnbHigt9B1ySB75beDPsuqTeqd8U4XPGCPLXQ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
104.21.11.84
47.246.3.233
220.197.30.205
103.129.252.59