GET westcorkuke.com/js/jquery.panelslider.min.js
200 OK 1.3 kB URL GET westcorkuke.com/js/jquery.panelslider.min.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with very long lines (1317)
Hash 1c13e17a0fb5d01599b5d6e55e0ae0ea
88f7755c3b6bd548498720341ce9423139aec305
f09f55b8f01e0851ed0972c48a6a23e8811da8297bb5b97262f4923d52604404
GET /js/jquery.panelslider.min.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 26 May 2023 10:37:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708be8-526"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET cpw17788.com/webapp/js/lib/drawLines.js
200 OK 25 kB URL GET cpw17788.com/webapp/js/lib/drawLines.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, ASCII text, with very long lines (24891), with no line terminators
Hash 7db0502baf867aa0663475b899ffb19e
a69f4ef6ab52c62d9885dc55b733c8c37687383e
8a3eec9c6525ce4aad8b37e0a188f4716a8fcdec24ee894d2f8ffec447872fbb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/drawLines.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:16 GMT
vary: Accept-Encoding
etag: W/"68318f14-613b"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/js/lib/config.js
200 OK 11 kB URL GET cpw17788.com/webapp/js/lib/config.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (489), with CRLF line terminators
Hash 2b70087e3bfd957e6d83cfe9808f24fd
ebb9a9ac43f09e3f4dd9ad41856de4c7b1e4cddd
2243ac27c50647088df0cea2114e7f38be13ca0eca85ec63421ba38585e7e52d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/config.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:16 GMT
vary: Accept-Encoding
etag: W/"68318f14-2ad4"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET westcorkuke.com/css/style.css
200 OK 40 kB URL GET westcorkuke.com/css/style.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type assembler source, ASCII text, with very long lines (337), with CRLF line terminators
Hash 123e26c71f774022aec4a8e4222a0018
d38973654c95ece7029c9eb59be651e96109c319
2f8df0a8d533fe417317f5c7467f76258ffcab2208e78b35ba0db82c4f02e93a
GET /css/style.css HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: text/css
Last-Modified: Tue, 15 Feb 2022 06:16:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"620b4529-9c19"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/png/1_small_.png
200 OK 2.4 kB URL GET westcorkuke.com/png/1_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 120, 8-bit/color RGBA, non-interlaced
Hash 609d818fc7c8ac6f22abacea5caf8dc7
9e8a0a593655cbadb5a8566061e232506769509b
ed181493eca9e1f212bbdcd7818e5f59667921321467897bde5b0854b7facdbf
GET /png/1_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035f-930"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET fonts.gstatic.com/s/kanit/v16/nKKU-Go6G5tXcr5KPxWnVaE.woff2
200 OK 20 kB URL GET fonts.gstatic.com/s/kanit/v16/nKKU-Go6G5tXcr5KPxWnVaE.woff2
IP
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A
ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 19496, version 1.0
Hash 201d1d24b464e41d18e57dc58687f055
d35fdb2a75da697dc080ced73400fc394f6cf4b8
c3c4f89f25c7c8343a8b8ce0a120fe2c419809a1e92cc9313cbb5a36fb10a411
GET /s/kanit/v16/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19496
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jun 2025 02:56:38 GMT
expires: Wed, 17 Jun 2026 02:56:38 GMT
cache-control: public, max-age=31536000
age: 33885
last-modified: Wed, 23 Apr 2025 15:40:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/8.jpg
200 OK 5.9 kB URL GET westcorkuke.com/jpg/8.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash f8319eb363982241ddc25092ae3c19e6
325b3c66d3f17afa82af1d97fea51161561efbcd
309159d246dbb5ddbce101efb08c22d1143328af6384fe57530ff926f28c1640
GET /jpg/8.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-16e5"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/png/5725.pngb2f6.png?zoom=.6
404 Not Found 58 kB URL GET westcorkuke.com/png/5725.pngb2f6.png?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document, ASCII text, with very long lines (56756)
Hash b6305f53b4d3432d561eb748f4af25fd
e01e5117f6fa0d6b1a82ae3c45839d8097d119b5
dc676cc52046a252ee86c463e49bce5b517c932ab100f21cb62e231cb3d7ed7a
GET /png/5725.pngb2f6.png?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66e7adc1-e3b0"
Content-Encoding: gzip
GET westcorkuke.com/png/19_small_.png
200 OK 6.8 kB URL GET westcorkuke.com/png/19_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash 6b41748b43888f1853bf4fb4ecfdb6d0
aa00a1f37dec85880a2770a76f776fc103802557
b982be745def54b53118420cebcf3aa701104a81f40e3be85830dff9e848a0eb
GET /png/19_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035f-1a7d"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A
ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jun 2025 02:38:52 GMT
expires: Wed, 17 Jun 2026 02:38:52 GMT
cache-control: public, max-age=31536000
age: 34951
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/js/lib/jquery.async.js
200 OK 902 B URL GET cpw17788.com/webapp/js/lib/jquery.async.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, ASCII text, with very long lines (902), with no line terminators
Hash 2e3cd10cd7579756c32b479d018996ce
f802c0231c81b061352b3c7bb4c64c143ce353f2
9b52ff42b1430595e38ae165b5a8ac6719c0bfddf9407ef9bc720dc30f2d3e5f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/jquery.async.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
content-length: 902
last-modified: Sat, 24 May 2025 09:19:18 GMT
etag: "68318f16-386"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
POST collect-v6.51.la/v6/collect?dt=4
210 0 B URL POST collect-v6.51.la/v6/collect?dt=4
IP
ASN #138915 Kaopu Cloud HK Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 417
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 210
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://westcorkuke.com
Access-Control-Allow-Credentials: true
via: EU-FRA-marseille-EDGE3-CACHE4[210],EU-FRA-marseille-EDGE3-CACHE4[ovl,209],EA-HKG-EDGE1-CACHE3[ovl,35],EA-HKG-EDGE2-CACHE3[ovl,34],EA-HKG-GLOBAL1-CACHE11[ovl,32]
X-CCDN-REQ-ID-46B1: 49310f01554fa2ed460a878f6320da35
GET bd51static.com/7ry.js
200 OK 1.4 kB IP
File type JavaScript source, ASCII text, with very long lines (554)
Hash b49cd1dc0129f18f8ab76d9249e0f1d4
83de531cb19e73636a45aef6c47de3317a61fdd3
96cd0cf7391454455addfd9b6a7c18139072db87453b022adf2cabbf4beb119d
GET /7ry.js HTTP/1.1
Host: bd51static.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: application/javascript
Last-Modified: Wed, 07 May 2025 07:20:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"681b09cf-555"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
GET westcorkuke.com/png/17_small_.png
200 OK 3.1 kB URL GET westcorkuke.com/png/17_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash 536ba08cc6c19fd11bf173869cb583c6
5727ba5c4099b3cec2e030523494c128dfe2ffca
0d3b93666417af658edb127a9a9a4760ec8f669259bfd6775f5849a506ce54c5
GET /png/17_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035f-c22"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/js/lib/Sortable.min.js
200 OK 0 B URL GET cpw17788.com/webapp/js/lib/Sortable.min.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/Sortable.min.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
content-length: 0
last-modified: Sat, 24 May 2025 09:19:18 GMT
etag: "68318f16-0"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET westcorkuke.com/woff2/fontawesome-webfont3e6e.woff2?v=4.7.0
200 OK 77 kB URL GET westcorkuke.com/woff2/fontawesome-webfont3e6e.woff2?v=4.7.0
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /woff2/fontawesome-webfont3e6e.woff2?v=4.7.0 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/css/font-awesome.min.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: font/woff2
Content-Length: 77160
Last-Modified: Sat, 22 Jan 2022 13:14:55 GMT
Connection: keep-alive
ETag: "61ec034f-12d68"
Accept-Ranges: bytes
GET cpw17788.com/webapp/js/local/pk10/index.js
200 OK 89 kB URL GET cpw17788.com/webapp/js/local/pk10/index.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (1920), with CRLF line terminators
Hash 15a3b151854fecbdec6d06a2a8cbf615
90c01185ec0dafa6225fed673abffd2476a10a33
0acb184791a34dac8ffd8d7c592d8797b10eba55d64e8501ddf932601ac7da59
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/local/pk10/index.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:22 GMT
vary: Accept-Encoding
etag: W/"68318f1a-15b83"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/img/bg_icon.png
200 OK 15 kB URL GET cpw17788.com/webapp/img/bg_icon.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type PNG image data, 948 x 404, 8-bit colormap, non-interlaced
Hash 821582b0c313e76c4f0d979664edf668
dda5e9d9e4cee99daf3af76f83ffab6b712e7697
a5c7914a21f1db358506caaf95ff6d1838769e4c303e6cfa5ebbacdb0b97643b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/img/bg_icon.png HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/css/public.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:25 GMT
content-type: image/png
content-length: 15402
last-modified: Sat, 15 Feb 2025 15:37:52 GMT
etag: "67b0b4d0-3c2a"
expires: Thu, 17 Jul 2025 12:21:25 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/6.jpg
200 OK 13 kB URL GET westcorkuke.com/jpg/6.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash ad349da7fa4e87770500c43621b946f9
6bca983f425696f251397c82a2df6a35d67685bb
3a279db8ba71add47ff65e9cc3419a12865ff532161a7b64212a3226572d2756
GET /jpg/6.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-3279"
Expires: Thu, 17 Jul 2025 12:21:23 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/css/listHtml.css
200 OK 34 kB URL GET cpw17788.com/webapp/css/listHtml.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type Unicode text, UTF-8 text, with very long lines (34316), with no line terminators
Hash 9c6038ae0d2f46997ea6171df77f598f
07db9052233146d321a89a6fae189c60265e82ee
9e7e09c2601073ef8ded916184724483aed355e1bcaafa3bdc2454d812504b2e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/css/listHtml.css HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: text/css
last-modified: Sat, 15 Feb 2025 15:37:40 GMT
vary: Accept-Encoding
etag: W/"67b0b4c4-8624"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/img/haomaimg.png
200 OK 182 kB URL GET cpw17788.com/webapp/img/haomaimg.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type PNG image data, 1204 x 600, 8-bit/color RGBA, non-interlaced
Size 182 kB (182417 bytes)
Hash e2e251464ed0269900791e37a8557086
f26741ef593f9fa19c145d34a1d90b70ee90fe26
2cd69edba71483d88d9663a598f00d975a52b3a8a8422e7c9d50fd1ac3f0464b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/img/haomaimg.png HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/css/public.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:25 GMT
content-type: image/png
content-length: 182417
last-modified: Sat, 15 Feb 2025 15:37:52 GMT
etag: "67b0b4d0-2c891"
expires: Thu, 17 Jul 2025 12:21:25 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/2.jpg
200 OK 6.9 kB URL GET westcorkuke.com/jpg/2.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash db396a7625a171ae284e679d059e65e2
4765d09834dcedf71bf40aa6c2a12aef8c2ad622
4ddda551b6631c08a3704f1590ebe00b1b74583bdb05d40e49c7c5a5259df67c
GET /jpg/2.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-1ac9"
Expires: Thu, 17 Jul 2025 12:21:23 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/css/pk10.css
200 OK 22 kB URL GET cpw17788.com/webapp/css/pk10.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type ASCII text, with CRLF line terminators
Hash 4ad2a39088656d3fbc9a8695463fb540
c736fced00b9a629bb98d61e8e662394ff2afe53
ce537293741ba0dbc920bd27a9bcfb575ce7382ea545f812071851932bf5a8f9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/css/pk10.css HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: text/css
last-modified: Sat, 15 Feb 2025 15:37:40 GMT
vary: Accept-Encoding
etag: W/"67b0b4c4-53fc"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/5401.jpgb2f6.jpg?zoom=.6
404 Not Found 22 kB URL GET westcorkuke.com/jpg/5401.jpgb2f6.jpg?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document, ASCII text, with very long lines (20917)
Hash 112695685dc9f86c6c1aa5007ac67bfb
b0183fd4eab8957fe71195a0b0f5e629e29388f1
885aae17a06009cc1491b3ff4edbc6c0cc5f988a22e545dc35bf0777a7588d17
GET /jpg/5401.jpgb2f6.jpg?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66e7adc1-e3b0"
Content-Encoding: gzip
GET sdk.51.la/js-sdk-pro.min.js
200 OK 36 kB URL GET sdk.51.la/js-sdk-pro.min.js
IP
ASN #138915 Kaopu Cloud HK Limited
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (35899)
Hash b8a41c9449b73e8ba0224c6be1f0b7e8
33d79319d4110bcf5c44c36f7dd4a291972ac546
52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty
Cache-Control: no-store
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
via: EU-FRA-marseille-EDGE3-CACHE6[230],EU-FRA-marseille-EDGE3-CACHE6[ovl,225],EU-FRA-marseille-EDGE1-CACHE4[ovl,225],EA-HKG-EDGE1-CACHE4[ovl,45],EA-HKG-EDGE2-CACHE4[ovl,43],EA-HKG-GLOBAL1-CACHE41[ovl,40],CHN-GDdongguan-GLOBAL1-CACHE64[ovl,34]
X-CCDN-REQ-ID-46B1: 64bf7dd12050d2ae0fc0d4d344fa843e
GET sdk.51.la/js-sdk-pro.min.js
200 OK 36 kB URL GET sdk.51.la/js-sdk-pro.min.js
IP
ASN #138915 Kaopu Cloud HK Limited
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (35899)
Hash b8a41c9449b73e8ba0224c6be1f0b7e8
33d79319d4110bcf5c44c36f7dd4a291972ac546
52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty
Cache-Control: no-store
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
via: EU-FRA-marseille-EDGE3-CACHE17[567],EU-FRA-marseille-EDGE3-CACHE17[ovl,562],EA-HKG-EDGE1-CACHE4[ovl,38],EA-HKG-EDGE2-CACHE4[ovl,38],EA-HKG-GLOBAL1-CACHE12[ovl,33],CHN-GDdongguan-GLOBAL1-CACHE35[ovl,27]
X-CCDN-REQ-ID-46B1: 0318be081fa14023272e70672820a0f9
GET api.api168168.com/pks/getPksHistoryList.do?date=&lotCode=10037
200 OK 226 kB URL GET api.api168168.com/pks/getPksHistoryList.do?date=&lotCode=10037
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectapi.api168168.com
FingerprintBA:61:3B:49:A2:0B:42:45:3D:01:8E:91:5B:71:F7:B5:21:7A:54:B5
ValidityMon, 28 Apr 2025 18:53:11 GMT - Sun, 27 Jul 2025 18:53:10 GMT
Size 226 kB (225474 bytes)
Hash 9dede37e638de13c91cafbc65d1a1d47
7013eb275b92bc008b1fb803d90177ef4acaf1f0
daf698cd600b42a4748237ed0fce5488fa307f2b154ab9de49f0908568eea478
GET /pks/getPksHistoryList.do?date=&lotCode=10037 HTTP/1.1
Host: api.api168168.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cpw17788.com
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:26 GMT
content-type: text/html;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: https://cpw17788.com
vary: Origin
access-control-expose-headers: Set-Cookie
content-disposition: inline;filename=f.txt
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET westcorkuke.com/css/magnific-popup.css
200 OK 7.0 kB URL GET westcorkuke.com/css/magnific-popup.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash 30b593b71d7672658f89bfea0ab360c9
d6963db6faa9294387bb3175813a61bc3f859437
45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e
GET /css/magnific-popup.css HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: text/css
Last-Modified: Fri, 26 May 2023 10:36:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708b91-1b27"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/png/3_small_.png
200 OK 7.4 kB URL GET westcorkuke.com/png/3_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 120, 8-bit/color RGBA, non-interlaced
Hash db21aa806300d5942016a1d1a103d227
6dbb1ef2cccaddcb03e4fa1435098f6a035377d9
5caf38c389b3e7585bedd952d50a97fb089122b48cd1b078563e27a258df5c8e
GET /png/3_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035b-1ce9"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/js/jquery.min.js
200 OK 87 kB URL GET westcorkuke.com/js/jquery.min.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with very long lines (32058)
Hash c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
GET /js/jquery.min.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 26 May 2023 10:37:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708be8-15283"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/js/popper.min.js
200 OK 19 kB URL GET westcorkuke.com/js/popper.min.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with very long lines (19015)
Hash 70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /js/popper.min.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 26 May 2023 10:37:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708be8-4af4"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/js/bootstrap.min.js
200 OK 49 kB URL GET westcorkuke.com/js/bootstrap.min.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with very long lines (48664)
Hash 14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /js/bootstrap.min.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 26 May 2023 10:37:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708be8-bf30"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET cpw17788.com/webapp/img/cltj_img/px10obj.png
200 OK 2.9 kB URL GET cpw17788.com/webapp/img/cltj_img/px10obj.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type PNG image data, 111 x 101, 8-bit/color RGBA, non-interlaced
Hash 5025c85c1772aadbb3e53f953913d3bc
fb7fb9939693929455b21cabd3f99b7b4761d39a
124aeafaabb57da5126971cd6c763b317cde9003ff1690e447a494952f156139
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/img/cltj_img/px10obj.png HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/css/pk10.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:25 GMT
content-type: image/png
content-length: 2874
last-modified: Sat, 15 Feb 2025 15:37:54 GMT
etag: "67b0b4d2-b3a"
expires: Thu, 17 Jul 2025 12:21:25 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/js/lib/iscroll.js
200 OK 20 kB URL GET cpw17788.com/webapp/js/lib/iscroll.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, ASCII text, with very long lines (19891), with no line terminators
Hash 3249e269b6bf59a9596ff4dd4908bd74
16f804a74f66585bf01bb2217997a2a4ff0c4a23
3b294972fe3c686a14d4195e17abc43199da904d959c9ffa128b3649b6bd925c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/iscroll.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:16 GMT
vary: Accept-Encoding
etag: W/"68318f14-4db3"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET westcorkuke.com/main.js
200 OK 1.2 kB IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with very long lines (477), with CRLF line terminators
Hash 4459b8eb47273aae2fd44ec4a518afe3
ad38c3af5b434e2441a2e9f11d84ae0a7ad363d1
416933b1694771a8c062fa7b154cd6375b908b24b1d7b285de10ae106f18fcf7
GET /main.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: application/javascript
Last-Modified: Sat, 24 May 2025 01:29:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6831210f-4d0"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/css/simple-line-icons.css
200 OK 12 kB URL GET westcorkuke.com/css/simple-line-icons.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (2600), with CRLF line terminators
Hash b7eb56e80a491cde5f494b2aa6e31aba
3168c5f2f48b24d4dce822a5e7b7a50f5223cd20
663cabebe588dab0e8f883336eed74efa1a4b35588cd8b161bdfef73f0832570
GET /css/simple-line-icons.css HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: text/css
Last-Modified: Sat, 22 Jan 2022 13:14:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec034c-2d2f"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET rushhourcdn.azureedge.net/jbmusic/images/logo.svg
200 OK 5.6 kB URL GET rushhourcdn.azureedge.net/jbmusic/images/logo.svg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.azureedge.net
Fingerprint8C:E7:26:2E:73:E2:3E:ED:B8:82:9A:2C:29:AD:FE:2F:E8:0F:AC:ED
ValidityThu, 24 Apr 2025 08:31:41 GMT - Sun, 19 Apr 2026 08:31:41 GMT
File type SVG Scalable Vector Graphics image
Hash 60614603ac4629cb1b74d2a84d0755ff
b146f77338554866d0b6e4ddc37d4b2e35beee62
d0d01173362512823a810370f6122044e499cc7b6d611fce1f656b67389e5d91
GET /jbmusic/images/logo.svg HTTP/1.1
Host: rushhourcdn.azureedge.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 12:21:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 26 May 2023 10:33:31 GMT
x-ms-request-id: b3e75b14-001e-0058-5a6a-df3b0d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20250617T122123Z-17cd6bcf675rm8m9hC1SVGd0ac00000003a0000000005p2w
cache-control: public, max-age=691200
x-fd-int-roxy-purgeid: 76247569
x-cache: TCP_HIT
content-encoding: br
x-cache-info: L1_T2
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/3.jpg
200 OK 16 kB URL GET westcorkuke.com/jpg/3.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash 0216dcf669a178100fe0a69bc5deb8e6
fe028d36227652c3ab99bd4942bc495c4596c5c1
268e9586cb7a2828e89415fd902796458c7c87ea2ff73cb7c8c9553a747b3804
GET /jpg/3.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-40a3"
Expires: Thu, 17 Jul 2025 12:21:23 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/js/cookit.js
200 OK 2.4 kB URL GET westcorkuke.com/js/cookit.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, Unicode text, UTF-8 text
Hash a62305baf80d414252d6fee4874f46ae
b489e84f56c0cc7dc31e4234d8fe0884eb821e70
d46e7575a057755b6b0a6b0039dff379e8dddd92fb125dc25583ea44c373235c
GET /js/cookit.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 26 May 2023 10:37:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708be8-967"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/png/icon-search.png
200 OK 1.4 kB URL GET westcorkuke.com/png/icon-search.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Hash 978701d447e7a1db484c8e4e667624b9
4aac2f634dd41baeb97bf636ea7c5f3ee3a68d28
459aefcd19141b8ff58f793dab8ffec13cd305a1d45b6075a1b1d39483256646
GET /png/icon-search.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:14:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0350-546"
Expires: Thu, 17 Jul 2025 12:21:23 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET api.api168168.com/parameters/getNoAdvertisingDomain.do
200 OK 1.9 kB URL GET api.api168168.com/parameters/getNoAdvertisingDomain.do
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectapi.api168168.com
FingerprintBA:61:3B:49:A2:0B:42:45:3D:01:8E:91:5B:71:F7:B5:21:7A:54:B5
ValidityMon, 28 Apr 2025 18:53:11 GMT - Sun, 27 Jul 2025 18:53:10 GMT
Hash 023a43436299cd4cdec19b9b4be1e2c0
4d6525e3651bd4968d9bc9f71d4609009dd9174f
24cd42bc2aee094532d32a5d8ac1d20e1adea62cb6eb5a8b084a55ade7d9bf7a
GET /parameters/getNoAdvertisingDomain.do HTTP/1.1
Host: api.api168168.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cpw17788.com
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:26 GMT
content-type: text/html;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: https://cpw17788.com
vary: Origin
access-control-expose-headers: Set-Cookie
content-disposition: inline;filename=f.txt
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET westcorkuke.com/woff/simple-line-icons.woff
200 OK 59 kB URL GET westcorkuke.com/woff/simple-line-icons.woff
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type Web Open Font Format, CFF, length 59324, version 1.0
Hash ff94ad94c3a9d04bd2f80cb3c87dcccb
c5b25a1cf3a44813208a744d2d9aa83e464a3a33
357af00e9f4081d40ba58b92be04ca240a1ce6dee7f8b83461f0922a56e8c4b7
GET /woff/simple-line-icons.woff HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/css/simple-line-icons.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: font/woff
Content-Length: 59324
Last-Modified: Sat, 22 Jan 2022 13:14:54 GMT
Connection: keep-alive
ETag: "61ec034e-e7bc"
Accept-Ranges: bytes
GET westcorkuke.com/svg/logo.svg
200 OK 5.6 kB URL GET westcorkuke.com/svg/logo.svg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type SVG Scalable Vector Graphics image
Hash 60614603ac4629cb1b74d2a84d0755ff
b146f77338554866d0b6e4ddc37d4b2e35beee62
d0d01173362512823a810370f6122044e499cc7b6d611fce1f656b67389e5d91
GET /svg/logo.svg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/svg+xml
Last-Modified: Sat, 22 Jan 2022 13:14:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0350-1605"
Content-Encoding: gzip
GET westcorkuke.com/js/jquery.magnific-popup.js
200 OK 20 kB URL GET westcorkuke.com/js/jquery.magnific-popup.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with very long lines (19711), with CRLF line terminators
Hash 03089d3dd7f554afa5c8ae92cf3e0754
0478f55c41e08d1e3c103d968690f33f57083608
62e5bb98c0c26ab85fe94f816bc8221c62d43be3e000b82aab1fe832401b901c
GET /js/jquery.magnific-popup.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 26 May 2023 10:37:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708be8-4d7d"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/js/scripts.js
200 OK 1.2 kB URL GET westcorkuke.com/js/scripts.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 902df884edd606428145f39296a77a21
f94bfb1d7f5566e966429ddd2d24071c33f3e4c3
316c2f9b62af7b0430a59b821a5383650e8f020e62010aa4e8b91183bafbe370
GET /js/scripts.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Sat, 22 Jan 2022 13:14:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0351-4a4"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET cpw17788.com/webapp/css/common.css
200 OK 4.0 kB URL GET cpw17788.com/webapp/css/common.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
Hash e5b033e1840c9ced6b1373bd703f48c4
39b3c23ca20086705ef134eb88b287704aad1931
c2485a8fcb032d8921a78c0c0956e8842f4b6cdbcd2a0266cb1197ef96726f47
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/css/common.css HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: text/css
last-modified: Sat, 15 Feb 2025 15:37:40 GMT
vary: Accept-Encoding
etag: W/"67b0b4c4-f71"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/5.jpg
200 OK 12 kB URL GET westcorkuke.com/jpg/5.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash 964945883aee5b00f3461e6f7ad5393d
2674d9475f7a210cfa5f4c490538cb3c74b6e66f
4fc7de3e8be14665e1ee1a386e31d6b2e031e89bc7922ef0594dfacf13f951fc
GET /jpg/5.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-2dfb"
Expires: Thu, 17 Jul 2025 12:21:23 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET fonts.gstatic.com/s/kanit/v16/nKKZ-Go6G5tXcraVGwA.woff2
200 OK 19 kB URL GET fonts.gstatic.com/s/kanit/v16/nKKZ-Go6G5tXcraVGwA.woff2
IP
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A
ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 19300, version 1.0
Hash b149de90fec0235ecc74597251628035
a59ae1d58d86daa8759832a3475be3c1c26960e1
1e856b3a04f93a23ec758ad37750f4dcfbde02334fd30358d02d5d4db3052bf2
GET /s/kanit/v16/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jun 2025 02:55:11 GMT
expires: Wed, 17 Jun 2026 02:55:11 GMT
cache-control: public, max-age=31536000
age: 33972
last-modified: Wed, 23 Apr 2025 15:40:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/9.jpg
200 OK 9.5 kB URL GET westcorkuke.com/jpg/9.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash fe4a9063debd1c63a25e050c6b7d3291
122444117c0318d013ac551a28eb6d02ac0bef9f
2f4eb234dcf1465ffe00676fb199a13b13495abc3d5d991bb109415fdf64bbd9
GET /jpg/9.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-2512"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/jpg/5506.jpgb2f6.jpg?zoom=.6
200 OK 51 kB URL GET westcorkuke.com/jpg/5506.jpgb2f6.jpg?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x600, components 3
Hash d7d71199723012c9bd534d5a8664c790
795cfbfc109ebc2d59a36e0582b7ce4ebb720e6f
7b44cfca5f251adf431651524d9d12beb30fec33632e059d2a746c17142f58da
GET /jpg/5506.jpgb2f6.jpg?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 03 Apr 2023 06:07:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"642a6d07-c75a"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/png/2_small_.png
200 OK 9.3 kB URL GET westcorkuke.com/png/2_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash 9a31f387960e1fdeb09b9457953f3d1a
ef03ce05bc64a889307f1ff80fa9ab15ab245249
553c112b1a32fcda953d50629c6118081e94cfb41f02c359fa6684e5ae775b50
GET /png/2_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035d-2472"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/jpg/10_largeimage_.jpg
200 OK 196 kB URL GET westcorkuke.com/jpg/10_largeimage_.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 500x500, components 3
Size 196 kB (196465 bytes)
Hash 14c176136e175ee293acc22dcff8e1bc
51551a4221979065676ce7758fbadcd4176f0d1e
b2ba2bba6d55981635384fcdcf9ca443d5f75302390e1af025a355786a7bba95
GET /jpg/10_largeimage_.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 28 Jan 2023 14:08:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63d52c5f-2ff71"
Expires: Thu, 17 Jul 2025 12:21:25 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/html/jisusaiche/index.html
200 OK 43 kB URL GET cpw17788.com/webapp/html/jisusaiche/index.html
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 06e2c6fc65ca122f63f9325bc2b390cc
634132f56cf468ef0facb646c779a94db3cbe11b
a533ea5ed166e5c42b3f59aec9fe562d0a32f4c2590bb54fc9864b389c143b9d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/html/jisusaiche/index.html HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:23 GMT
content-type: text/html
last-modified: Sat, 24 May 2025 09:19:14 GMT
vary: Accept-Encoding
etag: W/"68318f12-a977"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/kanit/v16/nKKU-Go6G5tXcr5mOBWnVaE.woff2
200 OK 19 kB URL GET fonts.gstatic.com/s/kanit/v16/nKKU-Go6G5tXcr5mOBWnVaE.woff2
IP
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A
ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 19236, version 1.0
Hash 12c6e4c44681180d8bcfd68b7b7b1258
7f16e28ecf3a9e4d8454fb1010b60af5ba835582
c6c4695e70f2b11892dfaec4d4ab44065ed3a847f4d531cfc1340d2e65a738c9
GET /s/kanit/v16/nKKU-Go6G5tXcr5mOBWnVaE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jun 2025 13:20:01 GMT
expires: Fri, 12 Jun 2026 13:20:01 GMT
cache-control: public, max-age=31536000
age: 428482
last-modified: Wed, 23 Apr 2025 15:39:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/html/public/head.html
200 OK 1.3 kB URL GET cpw17788.com/webapp/html/public/head.html
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Hash 626eb9ecd82619ad149f5b4aeb530720
c69c26a74ba1c15ab35cb3b48242603bbbb83cb7
dd472572f54f664106cd0ffc2a5e3266bbfe14067b202b26d29315a1479ed062
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/html/public/head.html HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:25 GMT
content-type: text/html
last-modified: Sat, 24 May 2025 09:19:16 GMT
vary: Accept-Encoding
etag: W/"68318f14-532"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET api.api168168.com/pks/getPksDoubleCount.do?date=&lotCode=10037
200 OK 1.5 kB URL GET api.api168168.com/pks/getPksDoubleCount.do?date=&lotCode=10037
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectapi.api168168.com
FingerprintBA:61:3B:49:A2:0B:42:45:3D:01:8E:91:5B:71:F7:B5:21:7A:54:B5
ValidityMon, 28 Apr 2025 18:53:11 GMT - Sun, 27 Jul 2025 18:53:10 GMT
Hash 51570f8f85ba89069221a38f11121366
961c737704e5eb80ea66bcadc655ae57db82550b
56b66b18371de665bd923dbda927e8e06a1b9f395a4cdc501124cd13c409c164
GET /pks/getPksDoubleCount.do?date=&lotCode=10037 HTTP/1.1
Host: api.api168168.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cpw17788.com
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:26 GMT
content-type: text/html;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: https://cpw17788.com
vary: Origin
access-control-expose-headers: Set-Cookie
content-disposition: inline;filename=f.txt
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A
ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jun 2025 02:38:52 GMT
expires: Wed, 17 Jun 2026 02:38:52 GMT
cache-control: public, max-age=31536000
age: 34951
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A
ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jun 2025 02:38:52 GMT
expires: Wed, 17 Jun 2026 02:38:52 GMT
cache-control: public, max-age=31536000
age: 34951
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/css/pk10_Gary.css
200 OK 17 kB URL GET cpw17788.com/webapp/css/pk10_Gary.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type Unicode text, UTF-8 text, with very long lines (17227), with no line terminators
Hash de33a622685218df8a9df40eab336b97
b43b2c47a2cfae500530df74e81f70598e526d15
cf16f026f5d571890a8487159bfd866aa86385cd9a40a984c96abc5024121ccc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/css/pk10_Gary.css HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: text/css
last-modified: Sat, 15 Feb 2025 15:37:40 GMT
vary: Accept-Encoding
etag: W/"67b0b4c4-4353"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/10.jpg
200 OK 8.0 kB URL GET westcorkuke.com/jpg/10.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash d749bfac9148795f8f4d3f8f1c867d79
b210437cbf654f73619e6d660eff0b62572ef9a9
4463fd89d1d184ace38655fabc6e922a1170fb2fd424e8185dbe366d2b9a0c58
GET /jpg/10.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-1f61"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/jpg/255.jpgb2f6.jpg?zoom=.6
404 Not Found 37 kB URL GET westcorkuke.com/jpg/255.jpgb2f6.jpg?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document, ASCII text, with very long lines (35523)
Hash bd7e93d1dcec5875e21d5bc09cf4d9b0
a2da3c8896c72e5d4ac85bd24336709972cd1361
ac3dd3228d0134f32a6930228bf5b9b220462cd5a7d19489be0e5b79a9ac2999
GET /jpg/255.jpgb2f6.jpg?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66e7adc1-e3b0"
Content-Encoding: gzip
POST collect-v6.51.la/v6/collect?dt=4
210 0 B URL POST collect-v6.51.la/v6/collect?dt=4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 416
Origin: http://westcorkuke.com
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 210
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://westcorkuke.com
Access-Control-Allow-Credentials: true
via: EU-GER-frankfurt-EDGE5-CACHE1[195],EU-GER-frankfurt-EDGE5-CACHE1[ovl,194],CA-MNG-ulaanbaatar-EDGE1-CACHE1[ovl,89],EA-HKG-EDGE1-CACHE1[ovl,35],EA-HKG-EDGE2-CACHE1[ovl,34],EA-HKG-GLOBAL1-CACHE27[ovl,32]
X-CCDN-REQ-ID-46B1: 3d53c5d20d9273e1721d103a51920c10
GET westcorkuke.com/png/121_small_.png
200 OK 4.1 kB URL GET westcorkuke.com/png/121_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash e789fe796e6d76e37855fdbbd6ae504b
31ab386f67d309abb5483599ba1f107eb810454d
d893341802f21bc9bafa9155093ad8a1f143f8bda3d260090c7e1c0417b39b82
GET /png/121_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/png
Last-Modified: Wed, 04 Oct 2023 09:28:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"651d3026-fd6"
Expires: Thu, 17 Jul 2025 12:21:25 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/js/local/pk10/head_jisusaiche.js
200 OK 303 B URL GET cpw17788.com/webapp/js/local/pk10/head_jisusaiche.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type ASCII text, with very long lines (303), with no line terminators
Hash 7d17eeb07e12644cc27e6d8f63353d70
1074682081821f439af386aa7fba49778623e7fb
9fa1916fb1f0ec143e93280bf4daea5e31aeaab49714b4a973b70c6e9edc50fc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/local/pk10/head_jisusaiche.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
content-length: 303
last-modified: Sat, 24 May 2025 09:19:22 GMT
etag: "68318f1a-12f"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
200 OK 42 kB IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (713)
Hash 96503d811bc38e760e61f402054d417d
b7e81387b3f46f863de1a1d67c39cb0307d97f19
b51ba51a1aa8fd9451343882b984b26efa896eb056eddfd575972886edf64a4a
GET / HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: text/html
Last-Modified: Sat, 24 May 2025 01:29:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6831210f-a463"
Content-Encoding: gzip
GET westcorkuke.com/css/cookit.css
200 OK 592 B URL GET westcorkuke.com/css/cookit.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash 2873371b6001fc4f9294b9002f34bfc1
bb99c57b7661b0c392acd33de3cf9d12a6871ee5
91f50238323c5b7c72ef11064249a261c6bb33c8851dea9c5dee04dbc30e9a42
GET /css/cookit.css HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: text/css
Content-Length: 592
Last-Modified: Fri, 26 May 2023 10:36:01 GMT
Connection: keep-alive
ETag: "64708b91-250"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
GET westcorkuke.com/jpg/5760.jpgb2f6.jpg?zoom=.6
200 OK 22 kB URL GET westcorkuke.com/jpg/5760.jpgb2f6.jpg?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x600, components 3
Hash 30440bb146744511eac7895e6383e151
3b05f61626259736d3f1b8f4c62b5c4e58fee90a
33a0d206a69f348b56f3f0128766f7899b20643418d2f047a167339e8a76be4e
GET /jpg/5760.jpgb2f6.jpg?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Fri, 30 Jun 2023 07:09:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"649e7fc3-55c8"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/js/lib/jquery-1.9.1.js
200 OK 93 kB URL GET cpw17788.com/webapp/js/lib/jquery-1.9.1.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 0ced1955d04ad67f93c642501960172d
e346705c96ed71fef43144a893dc26f0d1ff2a81
7196db5ce1154dda0f62614999dfd169a0e5fa9db634c12c308f9f9b22cb6f90
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/jquery-1.9.1.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:16 GMT
vary: Accept-Encoding
etag: W/"68318f14-16b57"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET api.api168168.com/pks/getPksLongDragonCount.do?date=&lotCode=10037
200 OK 695 B URL GET api.api168168.com/pks/getPksLongDragonCount.do?date=&lotCode=10037
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectapi.api168168.com
FingerprintBA:61:3B:49:A2:0B:42:45:3D:01:8E:91:5B:71:F7:B5:21:7A:54:B5
ValidityMon, 28 Apr 2025 18:53:11 GMT - Sun, 27 Jul 2025 18:53:10 GMT
Hash f7c0a9dc27bb7745de0c0b9016c69470
d598b97e4a0fa8ac7cddca63d3154ff69d6e3e1a
e66a5a44cbd0559a269fd76777a5a1c219ef2e910278e15422e23b3dc609a962
GET /pks/getPksLongDragonCount.do?date=&lotCode=10037 HTTP/1.1
Host: api.api168168.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cpw17788.com
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:27 GMT
content-type: text/html;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: https://cpw17788.com
vary: Origin
access-control-expose-headers: Set-Cookie
content-disposition: inline;filename=f.txt
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/4.jpg
200 OK 13 kB URL GET westcorkuke.com/jpg/4.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash fed6f9ed846a215fa36092b2486b45d3
ec939921082ed06787c734fb0c1559b65591a7dc
3e8c55aa27e31f7d5849e032829dbd41c73e73b18f3752bd44412d58fb231c76
GET /jpg/4.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-313a"
Expires: Thu, 17 Jul 2025 12:21:23 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/jpg/5196.jpgb2f6.jpg?zoom=.6
200 OK 37 kB URL GET westcorkuke.com/jpg/5196.jpgb2f6.jpg?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x600, components 3
Hash 10ed6a48af1bfe0f0e460eb05335ab0e
054788ec6a898921bc7b8d97262c3a808e1a7e67
4ee6582af67d38e20c2d38dc63b08717d587de9aeee742c264394a56d6bd4758
GET /jpg/5196.jpgb2f6.jpg?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 29 Nov 2022 05:14:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63859531-921b"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/png/4_small_.png
200 OK 7.7 kB URL GET westcorkuke.com/png/4_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash 4934f55a7961de03fefa99e963999f15
2be36a77aa57d9c7771d9805bc87908dff91e913
c5a34759ef950cc5eb82d929a3033217dd8a8aa849380e1f3a252ac592b68bdf
GET /png/4_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0359-1deb"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/png/18_small_.png
200 OK 2.5 kB URL GET westcorkuke.com/png/18_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash 7b958b917ca2cea988fc462ef1469367
9d08439fc5da0ff7893eaed416f746481b70b260
99e854a53b0caabe4fc3bb1cfba016b4ceecb2761effb7135863ef033673b2ae
GET /png/18_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035f-9ab"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/html/public/footer.html
200 OK 192 B URL GET cpw17788.com/webapp/html/public/footer.html
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e20d315511e22302d37998f7dce52b97
2e82fe8524a2bc8a4ef7551e27d534ccbad5f0c0
c4957e418635c9bb328fa0c5206a9590fe8e5e5d09649340981cea654b8bd036
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/html/public/footer.html HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:25 GMT
content-type: text/html
content-length: 192
last-modified: Sat, 24 May 2025 09:19:16 GMT
etag: "68318f14-c0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET westcorkuke.com/js/xfbml.customerchat.js
200 OK 327 kB URL GET westcorkuke.com/js/xfbml.customerchat.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JavaScript source, ASCII text, with very long lines (21350)
Size 327 kB (327164 bytes)
Hash 3d13b5761be1d1fe24fc8b81ea8811bc
9fce1205442c2c0e3543359702deb9c6b54402eb
a739624f8e84578d585184214fd141c27fd9e75375136229e82e8feeb6324492
GET /js/xfbml.customerchat.js HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 13 Sep 2024 12:00:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66e42979-4fdfc"
Expires: Wed, 18 Jun 2025 00:21:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET api.api168168.com/pks/getLotteryPksInfo.do?issue=&lotCode=10037
200 OK 749 B URL GET api.api168168.com/pks/getLotteryPksInfo.do?issue=&lotCode=10037
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectapi.api168168.com
FingerprintBA:61:3B:49:A2:0B:42:45:3D:01:8E:91:5B:71:F7:B5:21:7A:54:B5
ValidityMon, 28 Apr 2025 18:53:11 GMT - Sun, 27 Jul 2025 18:53:10 GMT
Hash 9e638710cf7a094959543a02dd4876be
f0fd609c04f0fb98af96661108a5f11b1f7c3a85
fb45e02d39075ee4559d0678553dc4ad4f9ac5c5047f74e213198f53d6d1a0a9
GET /pks/getLotteryPksInfo.do?issue=&lotCode=10037 HTTP/1.1
Host: api.api168168.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cpw17788.com
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:26 GMT
content-type: text/html;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: https://cpw17788.com
vary: Origin
access-control-expose-headers: Set-Cookie
content-disposition: inline;filename=f.txt
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
200 OK 45 kB URL GET fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
IP
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31
ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
File type ASCII text, with very long lines (1572)
Hash 3f751d37f9000f743dc1e84d6612045b
63e48389cb1f924a5b3522f706f89d76fa465bb3
d80236e619c4c3bf18057288182f47e58c36095317faa2adc2bb82dfb08350eb
GET /css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 17 Jun 2025 12:21:22 GMT
date: Tue, 17 Jun 2025 12:21:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/5787.jpgb2f6.jpg?zoom=.6
200 OK 21 kB URL GET westcorkuke.com/jpg/5787.jpgb2f6.jpg?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x600, components 3
Hash ee701c51392b293d4b2ad8e5484fcef9
00882e58b957f807d7d6992bae83ed17a8a44ce7
2f3b8d08e8d463ee3c58a552133cbef12e7b4fe4dd1134079d8e29e84c7d112e
GET /jpg/5787.jpgb2f6.jpg?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Fri, 07 Jul 2023 23:58:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64a8a6b5-50d6"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/jpg/5_largeimage_.jpg
200 OK 173 kB URL GET westcorkuke.com/jpg/5_largeimage_.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 500x500, components 3
Size 173 kB (173050 bytes)
Hash b240abdeaef365e48afdca62c4b3d80b
2804a6a64ddbc3721a028de3d16d54747f85c33b
e69ba3041b5daf70cf1d50c8af0794167d5561fceac7ad480ba2247fb4063007
GET /jpg/5_largeimage_.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 07 Nov 2022 01:04:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63685997-2a3fa"
Expires: Thu, 17 Jul 2025 12:21:25 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/js/lib/pk10BaseTrend.js
200 OK 6.7 kB URL GET cpw17788.com/webapp/js/lib/pk10BaseTrend.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, ASCII text, with very long lines (6701), with no line terminators
Hash 6f6fadebe51378762442a2211edfef60
abb6dd63e315112728f3540ef124480e4b1e9048
441c3db4288867eb549306e2797b1075d745408c6674660096a9ed695435391e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/pk10BaseTrend.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:18 GMT
vary: Accept-Encoding
etag: W/"68318f16-1a2d"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET westcorkuke.com/css/bootstrap.min.css
200 OK 145 kB URL GET westcorkuke.com/css/bootstrap.min.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (65325)
Size 145 kB (144877 bytes)
Hash 450fc463b8b1a349df717056fbb3e078
895125a4522a3b10ee7ada06ee6503587cbf95c5
2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d
GET /css/bootstrap.min.css HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: text/css
Last-Modified: Fri, 26 May 2023 10:36:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708b91-235ed"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET fonts.googleapis.com/css2?family=Kanit:ital,wght@0,300;0,400;0,500;0,600;1,300;1,400;1,500;1,600&display=swap
200 OK 12 kB URL GET fonts.googleapis.com/css2?family=Kanit:ital,wght@0,300;0,400;0,500;0,600;1,300;1,400;1,500;1,600&display=swap
IP
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31
ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
Hash 0b4e092e33ceffa4b5e4328cd172a604
ba40190d1dac53965edca6d8041ce9f6e9d58d8b
db7612cf67d478d82a91962ef28c78dea908dcd7d01925105770d553a7825aa1
GET /css2?family=Kanit:ital,wght@0,300;0,400;0,500;0,600;1,300;1,400;1,500;1,600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 17 Jun 2025 12:21:22 GMT
date: Tue, 17 Jun 2025 12:21:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/1.jpg
200 OK 13 kB URL GET westcorkuke.com/jpg/1.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash fbf56071450324ffc5401975c2e36fec
42b1939c56275e4b7d7ea71d5225b5697d464de0
411a7ae455f029ac5176415cf9a89689b6e0fd7ee43b1407b3755f5831c8006e
GET /jpg/1.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:23 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-33f4"
Expires: Thu, 17 Jul 2025 12:21:23 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/js/lib/zepto.js
200 OK 26 kB URL GET cpw17788.com/webapp/js/lib/zepto.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, ASCII text, with very long lines (26273), with no line terminators
Hash 6bea8158383f3034319b45571f5ca7e8
c546d9454a2e62ed987b0ff459a13bc41a51b250
bdcd35a7fc89302612325490543bab6f0f74e46830e1a646c0d434c22bd6d476
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/zepto.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:18 GMT
vary: Accept-Encoding
etag: W/"68318f16-66a1"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET westcorkuke.com/png/apple-touch-icon-152x152.png
200 OK 14 kB URL GET westcorkuke.com/png/apple-touch-icon-152x152.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced
Hash 063e06287428617f689a6280bc8d65ae
61fd1c8e266f631686c09dd2668a9f4d42f81f8c
331329eefb0d425d8a989e9465073d40937b14fa4b8085a5205ebd1bbde0be5f
GET /png/apple-touch-icon-152x152.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Cookie: Hm_lvt_9449080f1fd9d69519fb3ef29e931160=1750162884; Hm_lpvt_9449080f1fd9d69519fb3ef29e931160=1750162884; HMACCOUNT=CFC54999C3D8A50B; __vtins__Kbu0ae6HwHakHTZk=%7B%22sid%22%3A%20%2271dd07ff-e005-5a22-9811-2ac99f665355%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201750164684316%2C%20%22ct%22%3A%201750162884316%7D; __51uvsct__Kbu0ae6HwHakHTZk=1; __51vcke__Kbu0ae6HwHakHTZk=fe867c13-95a3-5669-a63a-fce5fe834c70; __51vuft__Kbu0ae6HwHakHTZk=1750162884321; __vtins__Kbu1wnvNuIEPKNgT=%7B%22sid%22%3A%20%2265183a7b-37b3-5d23-ab0a-02f0ee064804%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201750164684399%2C%20%22ct%22%3A%201750162884399%7D; __51uvsct__Kbu1wnvNuIEPKNgT=1; __51vcke__Kbu1wnvNuIEPKNgT=de8cb58f-ad95-52b5-b787-d016944f8807; __51vuft__Kbu1wnvNuIEPKNgT=1750162884403
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:26 GMT
Content-Type: image/png
Last-Modified: Fri, 26 May 2023 10:35:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708b56-3791"
Expires: Thu, 17 Jul 2025 12:21:26 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/jpg/5722.jpgb2f6.jpg?zoom=.6
404 Not Found 48 kB URL GET westcorkuke.com/jpg/5722.jpgb2f6.jpg?zoom=.6
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document, ASCII text, with very long lines (46400)
Hash 4e0a818851d902499db6e83dfd51dd62
644bcadf7fe7e212e95c6557ef4bee9e6776ec46
798ce944dc9fc72a0ea3c3108290d6a221cc4d00781f02df3c0e1d7ed2b69b06
GET /jpg/5722.jpgb2f6.jpg?zoom=.6 HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66e7adc1-e3b0"
Content-Encoding: gzip
GET westcorkuke.com/png/14_small_.png
200 OK 9.9 kB URL GET westcorkuke.com/png/14_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash c51837950be803799fe90a6888973ef9
070a4528a0349774bd5f9a88bc1e75c96d1bb302
ab240e113bfa5ddbdae2b10640c53e576541f74efcf376f43dfd5cb17dcd5f02
GET /png/14_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0360-26c2"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/png/27_small_.png
200 OK 8.6 kB URL GET westcorkuke.com/png/27_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash 8b00ecef92a66e40b6f5994df3660893
9bbe45b4961a3fb5bf19ee6e7c9e2094d946eba2
0d1869e0a281ce6d9193b1bf0a3c903fa53158b155124f4a899fffee4c72eecb
GET /png/27_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035d-2176"
Expires: Thu, 17 Jul 2025 12:21:25 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/jpg/11_largeimage_.jpg
200 OK 378 kB URL GET westcorkuke.com/jpg/11_largeimage_.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3
Size 378 kB (377792 bytes)
Hash 25d9bf205f103398dfce8b41419a2fd6
8ca93ad564aa26035e4e275fae3ded26f049691d
1a49c110a0751a217a0ea9de7c16f6700df2ea4cf11fa608462dccac45259a03
GET /jpg/11_largeimage_.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 15 May 2023 06:16:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6461ce22-5c3c0"
Expires: Thu, 17 Jul 2025 12:21:25 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET cpw17788.com/webapp/css/public.css
200 OK 23 kB URL GET cpw17788.com/webapp/css/public.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
Hash 7c54605cb3f71748fb879ee8e6b705ee
f8c8be00cc570ee35564f543357034e6addd2500
5256fc07502ba8b4af3949b231c9bece358850eb090c6c547e187ef423527f78
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/css/public.css HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: text/css
last-modified: Sat, 15 Feb 2025 15:37:40 GMT
vary: Accept-Encoding
etag: W/"67b0b4c4-59ac"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/js/local/tools/tools.js
200 OK 104 kB URL GET cpw17788.com/webapp/js/local/tools/tools.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (924), with CRLF line terminators
Size 104 kB (103480 bytes)
Hash fe79228482d2445567714fb086f95dc6
0de2724a642997251be3651bc4420dd590f8d998
834dcb25b4e3c5aeefc41a85a40ebc7bd194b74d3b2e18b3c551ee283f31cfa4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/local/tools/tools.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:24 GMT
vary: Accept-Encoding
etag: W/"68318f1c-19438"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET westcorkuke.com/png/favicon-16x16.png
200 OK 1.5 kB URL GET westcorkuke.com/png/favicon-16x16.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash f72fa691452e9afa3884344f547b67a5
6db97cf1bf5ab57fb45ac0b53e72f7d3d1bb6eba
d62741fdeb7f4d4d6e790cd14eb2cb216cf2304a1e59092cc545fcdf005f0c42
GET /png/favicon-16x16.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Cookie: Hm_lvt_9449080f1fd9d69519fb3ef29e931160=1750162884; Hm_lpvt_9449080f1fd9d69519fb3ef29e931160=1750162884; HMACCOUNT=CFC54999C3D8A50B; __vtins__Kbu0ae6HwHakHTZk=%7B%22sid%22%3A%20%2271dd07ff-e005-5a22-9811-2ac99f665355%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201750164684316%2C%20%22ct%22%3A%201750162884316%7D; __51uvsct__Kbu0ae6HwHakHTZk=1; __51vcke__Kbu0ae6HwHakHTZk=fe867c13-95a3-5669-a63a-fce5fe834c70; __51vuft__Kbu0ae6HwHakHTZk=1750162884321; __vtins__Kbu1wnvNuIEPKNgT=%7B%22sid%22%3A%20%2265183a7b-37b3-5d23-ab0a-02f0ee064804%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201750164684399%2C%20%22ct%22%3A%201750162884399%7D; __51uvsct__Kbu1wnvNuIEPKNgT=1; __51vcke__Kbu1wnvNuIEPKNgT=de8cb58f-ad95-52b5-b787-d016944f8807; __51vuft__Kbu1wnvNuIEPKNgT=1750162884403
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:26 GMT
Content-Type: image/png
Last-Modified: Fri, 26 May 2023 10:35:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64708b56-5ca"
Expires: Thu, 17 Jul 2025 12:21:26 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/css/font-awesome.min.css
200 OK 31 kB URL GET westcorkuke.com/css/font-awesome.min.css
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (30852), with CRLF line terminators
Hash e4349242e6f8909f03610cae512f8800
6a7cd4d7d9b64967a13b43b17f84cab7d16f82da
01c225b8b88c5991ffc4c930ea2489430c8703d965de04e9c64d2920d0bafce4
GET /css/font-awesome.min.css HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:22 GMT
Content-Type: text/css
Last-Modified: Sat, 22 Jan 2022 13:14:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec034d-792b"
Expires: Wed, 18 Jun 2025 00:21:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
GET westcorkuke.com/png/25_small_.png
200 OK 6.4 kB URL GET westcorkuke.com/png/25_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash abdf222f7e3c5e4d43989456fb287615
052b1275dda771bed5efb23b826b190df8f1f8b6
11c6cd4b9f597adf8d0bf94f581ffc5be161a11208751083ff9efa213a9cc114
GET /png/25_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035e-18da"
Expires: Thu, 17 Jul 2025 12:21:25 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET westcorkuke.com/png/26_small_.png
200 OK 14 kB URL GET westcorkuke.com/png/26_small_.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash 14ddae5d20776471ce5fde8ef57e2f8c
1caf55717793a5c265a188e9b2a4978dea26692d
4379d086fbec296bcf54cdc30fc402eff70a125d7facdc26b7521a5616fc138f
GET /png/26_small_.png HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:25 GMT
Content-Type: image/png
Last-Modified: Sat, 22 Jan 2022 13:15:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec035e-3850"
Expires: Thu, 17 Jul 2025 12:21:25 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET hm.baidu.com/hm.gif?hca=CFC54999C3D8A50B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1398167831&si=9449080f1fd9d69519fb3ef29e931160&v=1.3.2&lv=1&sn=50709&r=0&ww=1280&u=http%3A%2F%2Fwestcorkuke.com%2F&tt=%E6%9E%81%E9%80%9F%E8%B5%9B%E8%BD%A6168%E5%BC%80%E5%A5%96%E5%AE%98%E7%BD%91%E5%BC%80%E5%A5%96%E8%AE%B0%E5%BD%95-%E5%BC%80%E5%A5%96%E8%AE%B0%E5%BD%95%E4%BD%93%E5%BD%A9-%E8%B5%9B%E8%BD%A6%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95%E6%9F%A5%E8%AF%A2%E7%BB%93%E6%9E%9C1%E5%88%86%E9%92%9F%E5%8F%B7%E7%A0%81%E6%9F%A5%E8%AF%A2%20Musical%20Instruments
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=CFC54999C3D8A50B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1398167831&si=9449080f1fd9d69519fb3ef29e931160&v=1.3.2&lv=1&sn=50709&r=0&ww=1280&u=http%3A%2F%2Fwestcorkuke.com%2F&tt=%E6%9E%81%E9%80%9F%E8%B5%9B%E8%BD%A6168%E5%BC%80%E5%A5%96%E5%AE%98%E7%BD%91%E5%BC%80%E5%A5%96%E8%AE%B0%E5%BD%95-%E5%BC%80%E5%A5%96%E8%AE%B0%E5%BD%95%E4%BD%93%E5%BD%A9-%E8%B5%9B%E8%BD%A6%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95%E6%9F%A5%E8%AF%A2%E7%BB%93%E6%9E%9C1%E5%88%86%E9%92%9F%E5%8F%B7%E7%A0%81%E6%9F%A5%E8%AF%A2%20Musical%20Instruments
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=CFC54999C3D8A50B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1398167831&si=9449080f1fd9d69519fb3ef29e931160&v=1.3.2&lv=1&sn=50709&r=0&ww=1280&u=http%3A%2F%2Fwestcorkuke.com%2F&tt=%E6%9E%81%E9%80%9F%E8%B5%9B%E8%BD%A6168%E5%BC%80%E5%A5%96%E5%AE%98%E7%BD%91%E5%BC%80%E5%A5%96%E8%AE%B0%E5%BD%95-%E5%BC%80%E5%A5%96%E8%AE%B0%E5%BD%95%E4%BD%93%E5%BD%A9-%E8%B5%9B%E8%BD%A6%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95%E6%9F%A5%E8%AF%A2%E7%BB%93%E6%9E%9C1%E5%88%86%E9%92%9F%E5%8F%B7%E7%A0%81%E6%9F%A5%E8%AF%A2%20Musical%20Instruments HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 17 Jun 2025 12:21:24 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=7F41AC1E326DB2FA; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
GET cpw17788.com/webapp/js/lib/date.js
200 OK 7.9 kB URL GET cpw17788.com/webapp/js/lib/date.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (7873), with no line terminators
Hash d372d65bf3cac7dd5c8e01e537c1f3f5
20d5f82e581928efd22c6422bc0fb6d30f30a4b0
e9768904049bc1ebda895c104e828ca51fdfd0ba507c6af453738bd359580b12
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/js/lib/date.js HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/html/jisusaiche/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:24 GMT
content-type: application/javascript
last-modified: Sat, 24 May 2025 09:19:16 GMT
vary: Accept-Encoding
etag: W/"68318f14-1edd"
expires: Wed, 18 Jun 2025 00:21:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET cpw17788.com/webapp/img/cltj_img/icon-168index.png
200 OK 29 kB URL GET cpw17788.com/webapp/img/cltj_img/icon-168index.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://cpw17788.com/webapp/html/jisusaiche/index.html
Certificate IssuerLet's Encrypt
Subjectwww.cpw17788.com
Fingerprint1D:3C:72:EB:39:C0:4D:7B:26:3E:AB:C9:FA:3A:41:A9:49:8A:CE:C3
ValidityMon, 16 Jun 2025 07:46:21 GMT - Sun, 14 Sep 2025 07:46:20 GMT
File type PNG image data, 1000 x 213, 8-bit/color RGBA, non-interlaced
Hash 9cadfe91f4676d8abaefd706fd002c70
3c1f5c663282388d8fa739baf8dd77edcb5a82d0
cba1227e78513169698e2b0cf72cd24505429292ecdcb849a8f8f33b9ae5e1d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /webapp/img/cltj_img/icon-168index.png HTTP/1.1
Host: cpw17788.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpw17788.com/webapp/css/pk10_Gary.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jun 2025 12:21:25 GMT
content-type: image/png
content-length: 28721
last-modified: Sat, 15 Feb 2025 15:37:54 GMT
etag: "67b0b4d2-7031"
expires: Thu, 17 Jul 2025 12:21:25 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET westcorkuke.com/jpg/7.jpg
200 OK 14 kB URL GET westcorkuke.com/jpg/7.jpg
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3
Hash 377819920bdbac82dc95a4540878456f
347474aa1d946878514c2c952370e9c3485469be
076ddca0c0bd1d7e61d4f43c5c97fbae7323066a644242ee3c113b47e755fe80
GET /jpg/7.jpg HTTP/1.1
Host: westcorkuke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jun 2025 12:21:24 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 22 Jan 2022 13:15:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ec0361-37c4"
Expires: Thu, 17 Jul 2025 12:21:24 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET hm.baidu.com/hm.js?9449080f1fd9d69519fb3ef29e931160
200 OK 30 kB URL GET hm.baidu.com/hm.js?9449080f1fd9d69519fb3ef29e931160
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (622)
Hash f2101cc5dc8f085099562470d5095d9e
0ca7a6a9a1ae76c7f78319e32b675bf5fe2ed067
30d8be5a879ceca5eeb07792f7baf826c8ad6e7f83edbc7a110ba9e89f832f65
GET /hm.js?9449080f1fd9d69519fb3ef29e931160 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://westcorkuke.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11292
Content-Type: application/javascript
Date: Tue, 17 Jun 2025 12:21:23 GMT
Etag: 6e42af2262d4dd648f2c7cf73419fdf0
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=CFC54999C3D8A50B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
34.150.122.96
183.240.98.228
13.107.246.53
34.80.245.47
38.54.123.53
0.0.0.0