Overview

URL bflfx-china.com/html/jingdianyulu20160326130605.html
IP104.223.149.3
ASNAS46573 Global Frag Networks
Location United States
Report completed2018-11-22 16:04:34 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-11-22 16:04:03 CET 1  104.223.149.3 Client IP ET TROJAN PE EXE or DLL Windows file download Text
2018-11-22 16:04:03 CET 1  104.223.149.3 Client IP ET TROJAN RAMNIT.A M2
2018-11-22 16:04:03 CET 1  104.223.149.3 Client IP ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
2018-11-22 16:04:05 CET 1  104.223.149.3 Client IP ET TROJAN RAMNIT.A M1


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-22 2 bflfx-china.com/yesads.js Malware
2018-11-22 2 bflfx-china.com/html/jingdianyulu20160326130605.html Malware
2018-11-22 2 bflfx-china.com/include/vdimgck.php Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.223.149.3

Date UQ / IDS / BL URL IP
2019-01-12 07:55:12 +0100
0 - 0 - 3 minananfang.com/html/autonode_63.html 104.223.149.3
2018-12-18 15:14:18 +0100
0 - 0 - 3 minananfang.com/html/newsnode_23.html 104.223.149.3
2018-12-13 23:52:26 +0100
0 - 4 - 3 minananfang.com/html/shenghuohxgz....newsnode (...) 104.223.149.3
2018-12-12 16:33:34 +0100
0 - 0 - 3 minananfang.com/html/shenghuohxgz....newsnode (...) 104.223.149.3
2018-12-10 17:26:45 +0100
0 - 0 - 3 minananfang.com/html/news2015-0513....node_7.html 104.223.149.3
2018-11-29 04:05:28 +0100
0 - 0 - 3 bflfx-china.com/html/youmoxiaohua201509119328 (...) 104.223.149.3
2018-11-28 18:59:43 +0100
0 - 0 - 3 bflfx-china.com/html/youmoxiaohua201509119328 (...) 104.223.149.3
2018-11-27 03:59:14 +0100
0 - 0 - 2 bflfx-china.com/html/qingshulianaijiqiao20160 (...) 104.223.149.3
2018-11-26 06:17:05 +0100
0 - 0 - 4 minananfang.com/html/kongjianvedionode_14.html 104.223.149.3
2018-11-24 15:40:09 +0100
0 - 4 - 2 bflfx-china.com/amingzidaquan.html 104.223.149.3

Last 10 reports on ASN: AS46573 Global Frag Networks

Date UQ / IDS / BL URL IP
2019-06-10 18:25:41 +0200
0 - 0 - 1 lcxunjie.cn/html/hdxzxstd86190.html 107.179.119.78
2019-06-10 18:25:19 +0200
0 - 0 - 1 sdvmj.cn/html/info345....xbjjxbjj.html 107.179.119.158
2019-06-10 18:25:02 +0200
0 - 0 - 1 jxylmuye.cn/html/bmgkjgsz.html 107.179.119.198
2019-06-10 18:24:57 +0200
0 - 0 - 1 phyxgs.com.cn/html/zsjz14252847496.html 107.179.119.182
2019-06-10 17:50:47 +0200
0 - 0 - 1 lylhf.com.cn/html/jiuyebaozhanghezuodanwei201 (...) 107.179.119.197
2019-06-10 17:50:45 +0200
0 - 0 - 1 jensmay.cn/html/.tztg201611....hysqk.html 107.179.119.216
2019-06-10 17:50:11 +0200
0 - 0 - 1 lyjiuhua136.cn/html/hyzx7641.html 107.179.119.198
2019-06-10 17:49:34 +0200
0 - 0 - 1 jinaotanye.com.cn/htmlzt2016bkhpc_hashaymnR1.html 107.179.119.16
2019-06-10 17:49:17 +0200
0 - 0 - 2 lczhggwz.com.cn/xzzxxwbgzl.html 107.179.119.77
2019-06-10 17:48:36 +0200
0 - 0 - 2 lczhggwz.com.cn/html/jxsw234404.html 107.179.119.77

Last 10 reports on domain: bflfx-china.com

Date UQ / IDS / BL URL IP
2018-12-09 19:05:15 +0100
0 - 0 - 2 bflfx-china.com/html/shuoshuodaquanlist_63458 (...) 50.63.202.69
2018-12-02 06:38:50 +0100
0 - 0 - 3 bflfx-china.com/html/plusfeedback.phpaid93296.html 50.63.202.70
2018-11-29 04:05:28 +0100
0 - 0 - 3 bflfx-china.com/html/youmoxiaohua201509119328 (...) 104.223.149.3
2018-11-28 18:59:43 +0100
0 - 0 - 3 bflfx-china.com/html/youmoxiaohua201509119328 (...) 104.223.149.3
2018-11-27 03:59:14 +0100
0 - 0 - 2 bflfx-china.com/html/qingshulianaijiqiao20160 (...) 104.223.149.3
2018-11-24 15:40:09 +0100
0 - 4 - 2 bflfx-china.com/amingzidaquan.html 104.223.149.3
2018-11-24 11:27:33 +0100
0 - 4 - 3 bflfx-china.com/html/lizhigushi20161009147113.html 104.223.149.3
2018-11-22 16:03:35 +0100
0 - 4 - 2 bflfx-china.com/html/guanggaoruanwenlist_12_6.html 104.223.149.3
2018-11-22 06:23:53 +0100
0 - 0 - 2 bflfx-china.com/html/plusfeedback.phpaid13747 (...) 104.223.149.3
2018-11-20 10:49:04 +0100
0 - 4 - 3 bflfx-china.com/html/arenwentiandi20150818919 (...) 104.223.149.3


JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 87, repeated: 1) - SHA256: a72b285b9287c1181927cd290a6f6c08d519ebc6754bc9f04fce904ca106945e

                                        < script src = 'https://s95.b9823852351323h.com/by/dz.js'
type = 'text/javascript' > < /script>
                                    


HTTP Transactions (18)


Request Response
                                        
                                            GET /yesads.js HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/html/jingdianyulu20160326130605.html

                                         
                                         104.223.149.3
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 106
Last-Modified: Thu, 13 Apr 2017 15:53:09 GMT
Accept-Ranges: bytes
Etag: "3ecbacc6eb4d21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:05 GMT


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   106
Md5:    17a8754edf85068082f8b1ac1519d80e
Sha1:   33a9c0cccfe3d299c1ebb6d77fc4e0097b35f5a9
Sha256: 85965e1cee169e6ea1129285cafdd3c90f4e7b046207290c9ad9bc51bc58afdf

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /images/imglogo.gif HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/html/jingdianyulu20160326130605.html

                                         
                                         104.223.149.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 5909
Last-Modified: Thu, 01 Dec 2016 00:59:43 GMT
Accept-Ranges: bytes
Etag: "50fc97336e4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:05 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 234 x 60
Size:   5909
Md5:    c681ab5aead284e96558e44aa2d9c4db
Sha1:   cf3b693bd671ba7aebabadf565ca49ddfb1dc0b9
Sha256: 17a6a9945353726aa33f2543ade59f88ec5a6ec53b726d194ead44b0e5da295c
                                        
                                            GET /images/imgduanwenxuecss.css HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/html/jingdianyulu20160326130605.html

                                         
                                         104.223.149.3
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 18885
Last-Modified: Wed, 30 Nov 2016 19:48:01 GMT
Accept-Ranges: bytes
Etag: "dcc79ca8424bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:05 GMT


--- Additional Info ---
Magic:  ISO-8859 C program text, with CRLF line terminators
Size:   18885
Md5:    00b16f7d7172f4d16f09ae5d001adc38
Sha1:   c2b114df20b68fa1fae2717f8333ae0ea20da94b
Sha256: 0a2ddb782cce1b04f93a71b6c5436f6d7aeb8a754521a13d40dbf4122b5dd474
                                        
                                            GET /html/jingdianyulu20160326130605.html HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.3
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 127897
Last-Modified: Fri, 03 Aug 2018 15:30:19 GMT
Accept-Ranges: bytes
Etag: "44fade23e2bd41:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:05 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   127897
Md5:    036b573089f977dd65ce01e72bd9b752
Sha1:   ada0702502252d8cb61bc3273a12d3c94c4da889
Sha256: 4333d91291f6528faba1e3a5e4f57b28e7ca6bce1168ddc3cd28adf4302c1fa0

Alerts:
  Blacklists:
    - fortinet: Malware
  IDS:
    - ET TROJAN PE EXE or DLL Windows file download Text
    - ET TROJAN RAMNIT.A M2
    - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
    - ET TROJAN RAMNIT.A M1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 20 Nov 2018 02:28:35 GMT
Etag: 281546448D18A27354CF5533548333D40BA6A0B2
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=386070
Expires: Tue, 27 Nov 2018 02:18:34 GMT
Date: Thu, 22 Nov 2018 15:04:04 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    67756d53ceabec4d464837b912a6f956
Sha1:   281546448d18a27354cf5533548333d40ba6a0b2
Sha256: 0743e6fcef69111a94b082f2a3257048157004869f2d30097dedc5e1c55b1f8b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sat, 17 Nov 2018 02:14:26 GMT
Etag: 1B9CD31C1E059B1544C6445D9E74E330147018FD
X-OCSP-Responder-ID: (null)
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=126043
Expires: Sat, 24 Nov 2018 02:04:47 GMT
Date: Thu, 22 Nov 2018 15:04:04 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    9ddac668231f6e67ea3a64be7b4bf7c4
Sha1:   1b9cd31c1e059b1544c6445d9e74e330147018fd
Sha256: 1fd367e33b4004679c985ab5b2e8a837c3ffe7f638f5ebe2fa50cf03571ee449
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sat, 17 Nov 2018 02:14:26 GMT
Etag: DC76D31E1DF5A2A6AC6B2A7742DCB5BE62E073FE
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=126030
Expires: Sat, 24 Nov 2018 02:04:34 GMT
Date: Thu, 22 Nov 2018 15:04:04 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a137c4cb8e98f3522e30cab015e1adee
Sha1:   dc76d31e1df5a2a6ac6b2a7742dcb5be62e073fe
Sha256: d16e5423666ddd3211a8f51b546b629dfae2573a0720357e9ad711c07e2dd350
                                        
                                            GET /images/guide-btn.gif HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/images/imgduanwenxuecss.css

                                         
                                         104.223.149.3
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/li.png HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/images/imgduanwenxuecss.css

                                         
                                         104.223.149.3
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 132
Last-Modified: Wed, 30 Nov 2016 19:47:28 GMT
Accept-Ranges: bytes
Etag: "56e91995424bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  PNG image, 3 x 3, 8-bit/color RGB, non-interlaced
Size:   132
Md5:    f480ec17f69d4d02e0ab8673138c548f
Sha1:   d0382de0c11b4b8a72ad55d042053fb3b6f6fd6a
Sha256: 06c2ce5dbce446d3d51b3dd42c2a6a9283fbf379b272ddc901088293180545a5
                                        
                                            GET /images/back_1.gif HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/images/imgduanwenxuecss.css

                                         
                                         104.223.149.3
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /include/vdimgck.php HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/html/jingdianyulu20160326130605.html

                                         
                                         104.223.149.3
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /images/nav-list.gif HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/images/imgduanwenxuecss.css

                                         
                                         104.223.149.3
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/guide.gif HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/images/imgduanwenxuecss.css

                                         
                                         104.223.149.3
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/comment-btn.gif HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/images/imgduanwenxuecss.css

                                         
                                         104.223.149.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 864
Last-Modified: Wed, 30 Nov 2016 19:47:40 GMT
Accept-Ranges: bytes
Etag: "a8aa139c424bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 60 x 22
Size:   864
Md5:    63904fdb716ce28ba140fe3d331fc8bf
Sha1:   f9363d3a1e22d96f202682aaeb124f61542e3dd3
Sha256: ced746a0b5383113ec43daba5e2f50f516d51a0b1acb4c773803e1b57a5b1ff5
                                        
                                            GET /images/nav.gif HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/images/imgduanwenxuecss.css

                                         
                                         104.223.149.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 3241
Last-Modified: Wed, 30 Nov 2016 19:46:03 GMT
Accept-Ranges: bytes
Etag: "8264562424bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:07 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 35
Size:   3241
Md5:    f77a7655db86b93640541e191b899660
Sha1:   218da76b524d3ecedb03400ab154a87d7c462249
Sha256: 5092e9336b8acf9d9564511d524e7bea77db347f8ccf18915c8a8d1a69941ce5
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.3
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:08 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bflfx-china.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.3
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:04:11 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /by/dz.js HTTP/1.1 
Host: s95.b9823852351323h.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bflfx-china.com/html/jingdianyulu20160326130605.html

                                         
                                         0.0.0.0
                                        


--- Additional Info ---