gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
8.8 kB URL User Request GET gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1236)
Hash 3f4ffad79e608be677f8614e86adcac4
5a8398339ae5b2746d030b8174da940447afcb47
2450a374f5ef53ca011598a718d3db87594f4fe0fc13b74b1b3d5aa3805297d4
GET /cx/071287/109/setup_2175a46u.exe HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:21 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
200 OK 3.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash d29b3ea55b95667c92aa375c607f8999
b6742ff9251d4e9725c5e50b6a036bed56c07275
c2cf6cf78281376d470408027de1423a05e0901b5e690fde45060a13bfb21f2b
GET /template/news/kp/static/css/default.css HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:22 GMT
Content-Type: text/css
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-267f"
Expires: Wed, 27 Sep 2023 03:02:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/QRCode.js
200 OK 11 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/QRCode.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type HTML document, Unicode text, UTF-8 text, with very long lines (3129), with CRLF line terminators
Hash cc8eaa22182238be90db33f5854b9062
577596814ad86d792a9b8c1d802ce1c9d02ccd2e
10e416817a92bdaf4c6ef4c67eb2621d8e58cc3b305fbdfec558606d5e21a6cf
GET /template/news/kp/static/js/QRCode.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:22 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-83fb"
Expires: Wed, 27 Sep 2023 03:02:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/jweixin-1.6.0.js
200 OK 4.5 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/jweixin-1.6.0.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type ASCII text, with very long lines (13020), with no line terminators
Hash 775529c69d2d5632895cc05e924780bb
9a507f353b17643d827af88bf9b7ea58eaaa04b1
e55662dc8c011c02ffc492e7140a8651ef0a4de6b907b69c4bb5e2982961da28
GET /template/news/kp/static/js/jweixin-1.6.0.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:22 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-32dc"
Expires: Wed, 27 Sep 2023 03:02:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.js
200 OK 1.4 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash 01cad3ab35d7c07db68690dd16dd0686
270b82b37b507e2c752232f0ee00167d09c88536
dba0fe215ec0c11d66ba6d8383e1778e2403b08ad27e633abaa9fc6461d45101
GET /template/news/kp/static/js/share.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:22 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-105a"
Expires: Wed, 27 Sep 2023 03:02:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/h5Share1.4.0.js
200 OK 3.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/h5Share1.4.0.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 174f69c6fc2257a11b55f6e2c9a22517
093ad1166ffd1b0f31fadb87d3a4738a2b53f302
f26f2c63f1a881426ea49b44a11074fac2dec27cf403e0aeffa595aa976ea200
GET /template/news/kp/static/js/h5Share1.4.0.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:22 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-1e9a"
Expires: Wed, 27 Sep 2023 03:02:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.min.js
200 OK 9.7 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.min.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type Unicode text, UTF-8 text, with very long lines (3740), with CRLF line terminators
Hash 5fca22c1ed7eb9de58d2f569e328b139
1554e9690ac447877d52b6b5a223b6900210ddcd
f1093bf0d68827be09a6390debbc665161e52d0c8b9c6be0b6758784690d55b4
GET /template/news/kp/static/js/share.min.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:22 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-96e2"
Expires: Wed, 27 Sep 2023 03:02:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/jquery-1.8.3.min.js
200 OK 38 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/jquery-1.8.3.min.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type ASCII text, with very long lines (65483)
Hash 3576a6e73c9dccdbbc4a2cf8ff544ad7
06e872300088b9ba8a08427d28ed0efcdf9c6ff5
61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf
GET /template/news/kp/static/js/jquery-1.8.3.min.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:22 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-16dc4"
Expires: Wed, 27 Sep 2023 03:02:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/CA050000000608505660002.js
200 OK 2 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/CA050000000608505660002.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
GET /template/news/kp/static/js/CA050000000608505660002.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: application/javascript
Content-Length: 2
Last-Modified: Fri, 30 Dec 2022 06:39:32 GMT
Connection: keep-alive
ETag: "63ae87a4-2"
Expires: Wed, 27 Sep 2023 03:02:23 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/js/videofloat.js
200 OK 454 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/videofloat.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type ASCII text, with CRLF line terminators
Hash 14ad43d16b0881bb33a84a42b0beffcc
cc82c79e0c8216e842006eea84edff5215c2afe5
f8d5722c8c45205c5bc3158aa35559ac03c37ac02d211427751e82e2de2a63dd
GET /template/news/kp/static/js/videofloat.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: application/javascript
Content-Length: 454
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Connection: keep-alive
ETag: "63ae6e20-1c6"
Expires: Wed, 27 Sep 2023 03:02:23 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/js/WebClick.js
200 OK 626 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/WebClick.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 52067203cead2de2ba7458389fe896ba
1e35417496ad8676440833b5156f4ab0d4283f04
76656fa3760be451d42296c517b296b0f5e49e5a3be165e5c31537fb4e1120ee
GET /template/news/kp/static/js/WebClick.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-485"
Expires: Wed, 27 Sep 2023 03:02:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo1.png
200 OK 14 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo1.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type PNG image data, 318 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash d7de55093ff46af69fca98109fb13136
fa78696b1ba6424137daba878884fd26e333fc00
feb57fadc7c884844428740ee76f4599d1733bc8621e8518cae272e86c044fbe
GET /template/news/kp/static/picture/logo1.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/png
Content-Length: 13464
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3498"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/js/orsxg5a.script
200 OK 1.0 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/js/orsxg5a.script
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 37e3975ee5f1d69f4e7b32da36a4e1d3
93f088664e21865a434a4ed8e6da858099c33e27
5434bae1a51380804285c751b5c00d11d4b3b6963d54e9112b694997d0d35a2e
GET /js/orsxg5a.script HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/7b265b51-1ecb-4cf3-a67b-fa87de8b5b1f.jpg
404 Not Found 33 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/7b265b51-1ecb-4cf3-a67b-fa87de8b5b1f.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type ASCII text, with no line terminators
Hash 1e6cd917ed71a1241e4bedc29264bd98
5b65037351caeb0e5a48d963d7ffa88d0271d546
7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402
GET /template/news/kp/static/picture/7b265b51-1ecb-4cf3-a67b-fa87de8b5b1f.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/images/ops_icons_02.png
200 OK 4.5 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/images/ops_icons_02.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type PNG image data, 24 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash d4ec326c116ff92c0523618b41dbef86
d3c7e8c83675f90fd86172ddf31fade043b22c30
bf4becd004087043d199083f2a638c4602abe45319da50e2a28b0d3b7722ed40
GET /template/news/kp/static/images/ops_icons_02.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/png
Content-Length: 4480
Last-Modified: Fri, 30 Dec 2022 04:50:38 GMT
Connection: keep-alive
ETag: "63ae6e1e-1180"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/uploads/images/4024730.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/4024730.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/4024730.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/transform/w600h400/20180313/tafp-fysfnfx1711234.jpg?zdy
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo.png
200 OK 11 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type PNG image data, 218 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a2c3fc430b4e7bc1bf50d4cc7712111
0815c1c0826a1442eee7f5a996a5eb4031b2b4db
c94ba89359abdedf17f46062cd677f39962c3716d0e847ed37ff6bdfa2e07831
GET /template/news/kp/static/picture/logo.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/png
Content-Length: 10880
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-2a80"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
n.sinaimg.cn/news/transform/w600h400/20180313/tafp-fysfnfx1711234.jpg?zdy
200 OK 67 kB URL GET HTTP/1.1 n.sinaimg.cn/news/transform/w600h400/20180313/tafp-fysfnfx1711234.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash 03980d1d47d0fd1b17b9dea71c84c471
a7bec5ebd26dfc56ce52f6279f97bf9ec4369661
794ae9d52c3cb782a32214c774d8f5316f73e331dfe887223c67f9282c5c2795
GET /news/transform/w600h400/20180313/tafp-fysfnfx1711234.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 66850
Connection: keep-alive
Date: Tue, 23 May 2023 20:43:38 GMT
X-RequestId: 84a5bc86-2305-2404-4338-5ca7213e051a
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:01:14 GMT
X-Filesize: 66850
ETag: "03980d1d47d0fd1b17b9dea71c84c471"
x-amz-meta-crc32: B9CA322C
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1684874618649
Via: http/1.1 cnc.guangzhou.union.67 (ApacheTrafficServer/6.2.1 [cMsSfW]), cache43.l2st3-1[248,247,200-0,M], cache3.l2st3-1[249,0], cache33.l2hk2[0,0,200-0,H], cache16.l2hk2[1,0], cache23.l2de2[0,6,304-0,H], cache11.l2de2[8,0], cache5.se1[0,0,200-0,H], cache1.se1[1,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=sinaedge,s=ctc.guangzhou.union.184.nb.sinaedge.com,c=157.255.168.94;f=Edge,s=cnc.guangzhou.union.67,c=10.31.50.184
X-Via-Edge: 16848746184185ea8ff9db8321f0a65df5ede
Ali-Swift-Global-Savetime: 1684874618
Age: 10865925
X-Cache: HIT TCP_MEM_HIT dirn:1:294719512
X-Swift-SaveTime: Sat, 03 Jun 2023 11:08:38 GMT
X-Swift-CacheTime: 30620100
Timing-Allow-Origin: *
EagleId: 2ff62c9516957405436395070e
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/jia.png
200 OK 950 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/jia.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 201b27abe777a9ed5ad3868afa7742e1
1d87cde7016e48604fedd2e4ed285dee9155a429
61d1dbf66a8dd90f9e815a3bb702c2b37a9de24bf54875196e05037de437b4a2
GET /template/news/kp/static/picture/jia.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/png
Content-Length: 950
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3b6"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/xi.png
200 OK 933 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/xi.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type PNG image data, 1 x 38, 8-bit/color RGB, non-interlaced\012- data
Hash ba46669a1a9b78293186cb64b64fd517
bcb57cca927dc4d8dab21918661094a355665c29
cd76621f98d11ccd2af883eed812f1dd5d562bb65266ebcb0106131c8f123888
GET /template/news/kp/static/picture/xi.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/png
Content-Length: 933
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3a5"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/to.png
200 OK 1.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/to.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced\012- data
Hash aad441ab11527e3dbef3940f269bbcf7
bdd911bc50dfe7261c2016125eb8e7ed98b76cf6
e8bd9bab70c48ebb99bd2a1023cdfac85248d69ce8fb99b5745964cc251ec147
GET /template/news/kp/static/picture/to.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/png
Content-Length: 1160
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-488"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/20200720.jpg
200 OK 4.1 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/20200720.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 116x46, components 3\012- data
Hash 26404a7f8316cb83fed2947bb87120fa
ebeeeaca5fd4f8dde0f996bf9ab39261383f515c
2b164c6edb6ec15f02e4752cf10b412bcb920da0b25dac21039eead0d64ae1fe
GET /template/news/kp/static/picture/20200720.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/jpeg
Content-Length: 4124
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-101c"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/uploads/images/562787.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/562787.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/562787.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/transform/w600h400/20180313/tB81-fysfiiz5432046.jpg?zdy
n.sinaimg.cn/news/transform/w600h400/20180313/tB81-fysfiiz5432046.jpg?zdy
200 OK 29 kB URL GET HTTP/1.1 n.sinaimg.cn/news/transform/w600h400/20180313/tB81-fysfiiz5432046.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash 2ea12e414f3f7404553f865722ecd54a
ee725e3647fa0cc398ac7dddf18266d62fc579ff
9512371e2ec4f9c6cdde9ee6ded55bb6ebb239bfdb8f52128ef560e2e91a960e
GET /news/transform/w600h400/20180313/tB81-fysfiiz5432046.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 28727
Connection: keep-alive
Date: Mon, 29 May 2023 15:13:58 GMT
X-RequestId: 8630149f-2305-2913-2132-047bcb4b7614
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:01:15 GMT
X-Filesize: 28727
ETag: "2ea12e414f3f7404553f865722ecd54a"
x-amz-meta-crc32: E0BE2BA2
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1685337692568
Via: http/1.1 cmcc.guangzhou.union.79 (ApacheTrafficServer/6.2.1 [cHs f ]), cache25.l2st3-1[19,18,200-0,M], cache5.l2st3-1[19,0], cache38.l2hk2[0,0,200-0,H], cache23.l2hk2[1,0], cache17.l2de2[0,0,200-0,H], cache2.l2de2[1,0], cache3.se1[0,0,200-0,H], cache1.se1[1,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=sinaedge,s=cmcc.guangzhou.union.99.nb.sinaedge.com,c=113.96.59.37;f=Edge,s=cmcc.guangzhou.union.79,c=172.16.174.99
X-Via-Edge: 1685373238369253b607163ae10ac07b5a355
Ali-Swift-Global-Savetime: 1685373238
Age: 10367305
X-Cache: HIT TCP_HIT dirn:1:159485993
X-Swift-SaveTime: Thu, 01 Jun 2023 23:17:36 GMT
X-Swift-CacheTime: 31247782
Timing-Allow-Origin: *
EagleId: 2ff62c9516957405438475395e
gxx8295850.dwonxiazai.com/template/news/kp/static/common.js?_=1695740543851
404 Not Found 33 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/common.js?_=1695740543851
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type ASCII text, with no line terminators
Hash 1e6cd917ed71a1241e4bedc29264bd98
5b65037351caeb0e5a48d963d7ffa88d0271d546
7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402
GET /template/news/kp/static/common.js?_=1695740543851 HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/images/s_top.png
200 OK 21 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/images/s_top.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type PNG image data, 124 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash 41b1c76ccf09dc08379eb9dbaa818d5f
ce958d0ce67cb3bb781ca2dcc7cb83397bf55509
b95de7ea4a8675e1c56a529cb04d45da114ccff5488a9be3f920102d23db4f4c
GET /template/news/kp/static/images/s_top.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:23 GMT
Content-Type: image/png
Content-Length: 21126
Last-Modified: Fri, 30 Dec 2022 04:50:38 GMT
Connection: keep-alive
ETag: "63ae6e1e-5286"
Expires: Thu, 26 Oct 2023 15:02:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/
200 OK 2.2 kB IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash baba1d17293225225028471c64b1bc54
9d9bc8ae5f6be77aad99e35b8724918f23457e15
c325762c885f22c30bd0994b2d34f6ebfd593ffd53d25546b1d12104b69258df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: text/html
Last-Modified: Wed, 16 Aug 2023 06:34:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64dc6de6-22f2"
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/uploads/images/774390.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/774390.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/774390.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/transform/w600h400/20180312/X8Nf-fyscsmu6825175.jpg?zdy
gxx8295850.dwonxiazai.com/uploads/images/8437090.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/8437090.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/8437090.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/translate/w930h620/20180309/pknw-fxpwyhw3234112.jpg?zdy
n.sinaimg.cn/news/transform/w600h400/20180312/X8Nf-fyscsmu6825175.jpg?zdy
200 OK 37 kB URL GET HTTP/1.1 n.sinaimg.cn/news/transform/w600h400/20180312/X8Nf-fyscsmu6825175.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash 96ae32495feabc68c873b4e97b87c459
d14d04c8474a615b4d2c0ae9ef5b176c9c7acba7
b6dbc7e6db4126662b1ad7c7bb8d36c5cd656b8889a9b260d425480895b101bf
GET /news/transform/w600h400/20180312/X8Nf-fyscsmu6825175.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 36610
Connection: keep-alive
Date: Wed, 10 May 2023 09:46:45 GMT
X-RequestId: 2bdcfca1-2305-1017-4645-0894eff939cc
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:01:13 GMT
X-Filesize: 36610
ETag: "96ae32495feabc68c873b4e97b87c459"
x-amz-meta-crc32: 6348FCE8
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1683712005451
Via: http/1.1 ctc.yongfeng.union.102 (ApacheTrafficServer/6.2.1 [cMsSfW]), cache9.l2st3-1[0,0,200-0,H], cache33.l2st3-1[2,0], cache3.l2hk2[0,0,304-0,H], cache12.l2hk2[1,0], cache21.l2de2[0,0,304-0,H], cache23.l2de2[0,0], cache4.se1[0,0,200-0,H], cache1.se1[1,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=sinaedge,s=cnc.beixian.union.203.nb.sinaedge.com,c=120.241.4.155;f=Edge,s=ctc.yongfeng.union.102,c=172.16.157.203
X-Via-Edge: 16837120054169b04f178cb9d10ac400de201
Ali-Swift-Global-Savetime: 1683712005
Age: 12028539
X-Cache: HIT TCP_MEM_HIT dirn:11:152391888
X-Swift-SaveTime: Mon, 03 Jul 2023 20:26:13 GMT
X-Swift-CacheTime: 26832032
Timing-Allow-Origin: *
EagleId: 2ff62c9516957405441695880e
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd371f.gif
200 OK 943 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd371f.gif
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type GIF image data, version 87a, 118 x 48\012- data
Hash d9a435af2983888c8bd3a48e6b55ebdd
220114afe05d53eb7db10ced337948c764424a7e
a885a265b14dd9a9c87027dd382d550d48d467c3f4e6578a222ed788c371b843
GET /template/news/kp/static/picture/001aa0c3d91f119fcd371f.gif HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/gif
Content-Length: 943
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3af"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/uploads/images/780150.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/780150.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/780150.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/transform/w600h400/20180307/xbZe-fxipenp2871832.jpg?zdy
gxx8295850.dwonxiazai.com/uploads/images/9524170.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/9524170.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/9524170.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/translate/w900h616/20180310/3Gtg-fxpwyhw8230888.jpg?zdy
n.sinaimg.cn/translate/w930h620/20180309/pknw-fxpwyhw3234112.jpg?zdy
200 OK 202 kB URL GET HTTP/1.1 n.sinaimg.cn/translate/w930h620/20180309/pknw-fxpwyhw3234112.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 930x620, components 3\012- data
Size 202 kB (201996 bytes)
Hash 7e9062d7da877f46642fdcbf9c223ea7
f75d6c1f81d24e714ae3c76fa214493a2cf71146
ac7c79a8f8585147b58f9af0cacf6e6e93c980fd598e31e98b9d2225b622506b
GET /translate/w930h620/20180309/pknw-fxpwyhw3234112.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 201996
Connection: keep-alive
Date: Thu, 01 Jun 2023 11:53:56 GMT
X-RequestId: 3e3b088c-2306-0107-1139-5ca7213e02e6
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Fri, 09 Mar 2018 06:31:56 GMT
X-Filesize: 201996
ETag: "7e9062d7da877f46642fdcbf9c223ea7"
x-amz-meta-crc32: 7144C244
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1685574700136
Via: http/1.1 ctc.guangzhou.union.51 (ApacheTrafficServer/6.2.1 [cHs f ]), cache35.l2st3-1[34,34,200-0,M], cache27.l2st3-1[35,0], cache14.l2hk2[0,0,200-0,H], cache19.l2hk2[3,0], cache3.l2de2[0,13,304-0,H], cache21.l2de2[15,0], cache5.se1[0,0,200-0,H], cache1.se1[1,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=sinaedge,s=cmcc.guangzhou.union.80.nb.sinaedge.com,c=157.255.168.71;f=Edge,s=ctc.guangzhou.union.51,c=172.16.174.80
X-Via-Edge: 168562043639047a8ff9d50ae10ac300ba92e
Ali-Swift-Global-Savetime: 1685620436
Age: 10120108
X-Cache: HIT TCP_MEM_HIT dirn:7:832857188
X-Swift-SaveTime: Sat, 03 Jun 2023 07:10:22 GMT
X-Swift-CacheTime: 31380214
Timing-Allow-Origin: *
EagleId: 2ff62c9516957405442385985e
n.sinaimg.cn/news/transform/w600h400/20180307/xbZe-fxipenp2871832.jpg?zdy
200 OK 65 kB URL GET HTTP/1.1 n.sinaimg.cn/news/transform/w600h400/20180307/xbZe-fxipenp2871832.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash 0c5bad64b799f40da16b33eceba7ca8d
744c15a075dcefc1c94729dc937706d5000c47f5
7dee2afdd672f3f8032d1a7e9ccc7ce0ed1f8f097d4e89796452e599c6a298cc
GET /news/transform/w600h400/20180307/xbZe-fxipenp2871832.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 64882
Connection: keep-alive
Date: Mon, 01 May 2023 13:19:18 GMT
X-RequestId: 7a24e6dd-2305-0112-2635-58c7acc909bc
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:01:11 GMT
X-Filesize: 64882
ETag: "0c5bad64b799f40da16b33eceba7ca8d"
x-amz-meta-crc32: F32C1A35
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1682915195727
Via: http/1.1 cmcc.guangzhou.union.82 (ApacheTrafficServer/6.2.1 [cHs f ]), cache45.l2st3-1[0,0,200-0,H], cache15.l2st3-1[1,0], cache30.l2hk2[6,6,200-0,M], cache2.l2hk2[7,0], cache9.l2de2[0,0,304-0,H], cache3.l2de2[1,0], cache4.se1[0,0,200-0,H], cache1.se1[2,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=sinaedge,s=cnc.guangzhou.union.67.nb.sinaedge.com,c=113.96.59.14;f=Edge,s=cmcc.guangzhou.union.82,c=172.16.116.67
X-Via-Edge: 16829471581880e3b6071437410ac6921ba01
Ali-Swift-Global-Savetime: 1682947158
Age: 12793386
X-Cache: HIT TCP_MEM_HIT dirn:11:359296201
X-Swift-SaveTime: Sat, 03 Jun 2023 10:55:20 GMT
X-Swift-CacheTime: 28693438
Timing-Allow-Origin: *
EagleId: 2ff62c9516957405443436111e
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/wenhua.jpg
200 OK 2.7 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/wenhua.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 48x48, components 3\012- data
Hash 2981a06ef63d392be814ea291b73266c
855fbdb82a7ba511f0e08703159d078e37b90474
870a8e7e09f6d753231bd640d97f04c58b3d4f6733b852dbb6960732edb71c2b
GET /template/news/kp/static/picture/wenhua.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpeg
Content-Length: 2717
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-a9d"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/12377_2.jpg
200 OK 4.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/12377_2.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x48, components 3\012- data
Hash 65b4349aa4f1098f132646e11accdeec
ead984be590cd09040a2722d0f715165994879a7
8312675bed2950c848d7a5fbdb35cf882dcec44c2d42f9064b6dba0df3bfef10
GET /template/news/kp/static/picture/12377_2.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpeg
Content-Length: 4167
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-1047"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
n.sinaimg.cn/translate/w900h616/20180310/3Gtg-fxpwyhw8230888.jpg?zdy
200 OK 614 kB URL GET HTTP/1.1 n.sinaimg.cn/translate/w900h616/20180310/3Gtg-fxpwyhw8230888.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=13, manufacturer=NIKON CORPORATION, model=NIKON D750, orientation=upper-left, xresolution=200, yresolution=208, resolutionunit=2, software=Ver.1.10 , datetime=2018:03:10 09:35:24], baseline, precision 8, 900x616, components 3\012- data
Size 614 kB (614113 bytes)
Hash 06f25791d07c857129aa4b3f4264f541
1822d615db7ece5c596c54501e09e98ecf303c4a
465c53ede5974ca63463b4a2b7b2f0158d25c87a4905417ca8efba60580609c0
GET /translate/w900h616/20180310/3Gtg-fxpwyhw8230888.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 614113
Connection: keep-alive
Date: Tue, 09 May 2023 05:32:39 GMT
X-RequestId: 2b099704-2305-0913-3239-6c92bfce67e5
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sat, 10 Mar 2018 13:27:24 GMT
X-Filesize: 614113
ETag: "06f25791d07c857129aa4b3f4264f541"
x-amz-meta-crc32: 62FBAB3E
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1683610359334
Via: http/1.1 cnc.beixian.union.102 (ApacheTrafficServer/6.2.1 [cMsSfW]), cache16.l2st3-1[0,1,200-0,H], cache10.l2st3-1[3,0], cache19.l2hk2[0,25,200-0,H], cache1.l2hk2[27,0], cache6.l2de2[0,11,304-0,H], cache21.l2de2[14,0], cache7.se1[0,0,200-0,H], cache1.se1[0,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=sinaedge,s=ctc.yongfeng.union.104.nb.sinaedge.com,c=120.241.4.143;f=Edge,s=cnc.beixian.union.102,c=172.16.36.104
X-Via-Edge: 16836103592898f04f178682410ac7e4801b3
Ali-Swift-Global-Savetime: 1683610359
Age: 12130185
X-Cache: HIT TCP_MEM_HIT dirn:11:388288051
X-Swift-SaveTime: Thu, 06 Jul 2023 10:41:13 GMT
X-Swift-CacheTime: 26506286
Timing-Allow-Origin: *
EagleId: 2ff62c9516957405444106191e
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd3721.gif
200 OK 1.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd3721.gif
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type GIF image data, version 87a, 118 x 48\012- data
Hash f643e23ae115467c3cbf94d55d524680
1b503d5cfbaeb58303488fb46a5d88e6c5078f44
9dc874495c122bc7c63fcf2f1d23661e7b279ad02130d7077c054f9bb187349f
GET /template/news/kp/static/picture/001aa0c3d91f119fcd3721.gif HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/gif
Content-Length: 1238
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-4d6"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hbrb.jpg
200 OK 4.3 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hbrb.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 72x72, components 3\012- data
Hash 595b7c98de7da5dc3681da4ccf880f6e
f7988064cfcce067c57cdab4ca54eaa3f306db87
0985c85e6927d2b559cf41a50386e8ecfe6571bee3deeae641e0176e29849ef0
GET /template/news/kp/static/picture/weixin_hbrb.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpeg
Content-Length: 4342
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-10f6"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hebnews.jpg
200 OK 17 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hebnews.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=72, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=72], baseline, precision 8, 72x72, components 3\012- data
Hash 7fc13d1ec14af080956a41236134c059
7b51610e57511567efec51eb1234cbfdbea695b5
04788c54ba72c15ba605b65a2dbac7cdba0e07f4ab8903cd6dc121f9d4991afa
GET /template/news/kp/static/picture/weixin_hebnews.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpeg
Content-Length: 17091
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-42c3"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_yzdsb.jpg
200 OK 4.4 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_yzdsb.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 72x75, components 3\012- data
Hash cd04e73d8c5cc9f5821fc19dd2b8d5cd
118f5c19b2fc32ced4ed30b56e8e8983869145d2
0bee655776a550aba9f848b50eebf3e448e73d4977910912f6476f087c3dcac0
GET /template/news/kp/static/picture/weixin_yzdsb.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpeg
Content-Length: 4443
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-115b"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/css/swiper.min.css?v=2021web
200 OK 4.5 kB URL GET HTTP/1.1 155.159.252.52/static/css/swiper.min.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (13425), with CRLF line terminators
Hash 6604e7f8fbafb482f29e0dfa78e0e2e5
520ff7d839d3a94c855c9d75a76b5b166a5bf1b9
6d0a4af85bd32d089f36e072c98a15212d4468d562be75c0c3ef16c611c971cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/swiper.min.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Nov 2021 14:41:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6197b7a4-3579"
Expires: Wed, 27 Sep 2023 03:02:24 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/css/web.css?v=2021web
200 OK 3.9 kB URL GET HTTP/1.1 155.159.252.52/static/css/web.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (15835), with CRLF line terminators
Hash 7b2ba6b1693108bd2fd33ded77801fb0
26e4ce47051c560739f8dd3e26916e34554c2fa5
80a4949c8c56a68157cc94ba9a35c3df5f0ff031c1ef325362b8fc0229b57d07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/web.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Dec 2021 16:53:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ae4011-3def"
Expires: Wed, 27 Sep 2023 03:02:24 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/2022qr2.jpg
200 OK 5.7 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/2022qr2.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 72x72, components 3\012- data
Hash 2f0ef987eee35d189af59b1976f20cc7
1b020bfdb3a06069dcf7cdecede4f3116e44d407
f30c48c4b0daf39906a5c1cfc8f2ae669ee6cd4ebb4208ae7e9960c83968de7a
GET /template/news/kp/static/picture/2022qr2.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpeg
Content-Length: 5726
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-165e"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/config.js?v=2021web
200 OK 594 B URL GET HTTP/1.1 155.159.252.52/config.js?v=2021web
IP
ASN #137951 Clayer Limited
Hash 75563f1c596eb176ae2de67f5e4a2b78
4aeeccd0dd450179e4709e6ebf432c3e0a5791ef
c3c2d2a219a8b7fb0f22608174965eef9beaa155a3710a08331af1f24dc2a0cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /config.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: application/javascript
Last-Modified: Sun, 28 May 2023 08:03:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64730aec-49c"
Expires: Wed, 27 Sep 2023 03:02:24 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/favicon.ico
200 OK 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/favicon.ico
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Fri, 19 May 2023 11:18:09 GMT
Connection: keep-alive
ETag: "64675af1-0"
Accept-Ranges: bytes
155.159.252.52/static/img/pf_fc.png
200 OK 7.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_fc.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 136 x 132, 8-bit colormap, non-interlaced\012- data
Hash 996941a20bcd2d89398a38eeae1e0996
37655f7dbe5e890584dec5a8cbe0e994ccd1f9b1
c01cf130af4eb716b4d47f3306d41e63119e50e34ad52e80946f94fb038067ae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_fc.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/png
Content-Length: 7493
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-1d45"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/nav.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/nav.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1200 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 82e9401b9a6fc203f2aaf3b130447bda
a4eb8ad361ba56dc05865a2dad042f6c58d141f8
6e413eb72acc206783c902b193cec3fc98ef1c55032d55e12143c5af2c682a5f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/nav.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/png
Content-Length: 15486
Last-Modified: Sun, 20 Nov 2022 09:51:44 GMT
Connection: keep-alive
ETag: "6379f8b0-3c7e"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_zq.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_zq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 128 x 120, 8-bit colormap, non-interlaced\012- data
Hash 29c208d312b1b25c23f7cc75d9d722da
1b1243dd105b5bd5856a9ddfb1f5396135caf788
bcdce634fbf54b4a84812895146a2a6e70f1a51f1d03180de40d6780dedac1a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_zq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:25 GMT
Content-Type: image/png
Content-Length: 6954
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1b2a"
Expires: Thu, 26 Oct 2023 15:02:25 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_777.png
200 OK 10 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_777.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 172 x 164, 8-bit colormap, non-interlaced\012- data
Hash c338ca6f666f9a6389243e519679bafe
ce0e1fb215aaf52fb2711642cf954f7519f8ad5f
067ebd49fa7b3413fb912dd3801fbfab938371eeea09c7b269dbca6abcc79bfa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_777.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:25 GMT
Content-Type: image/png
Content-Length: 10339
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-2863"
Expires: Thu, 26 Oct 2023 15:02:25 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_2175a46u.exe
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?3f7487e9fa770fdc0dcffa98b6d51956 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Tue, 26 Sep 2023 15:02:25 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
155.159.252.52/static/img/pf_sb.png
200 OK 8.3 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sb.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 140 x 136, 8-bit colormap, non-interlaced\012- data
Hash 517f51d310a42f070d0b9769981ef801
38f4fe2ae3acbadc7aa1bbe2211f14c46747dd77
c447ea77e4015e533924fc6574236c04ff5cc569f9b1f7267d788010c6d9be36
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sb.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:25 GMT
Content-Type: image/png
Content-Length: 8339
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-2093"
Expires: Thu, 26 Oct 2023 15:02:25 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_bottom_btn_bg.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_bottom_btn_bg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 360 x 120, 8-bit colormap, non-interlaced\012- data
Hash 4b57c35593f2e9db6ba931a2ea31652b
c10b51fed294260abfdf169be0b7446b8e356e77
e808a3cd1bec176cb7b9808bf49f6b8acc23d8ddb0f6882275af4783d1e7549b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_bottom_btn_bg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:26 GMT
Content-Type: image/png
Content-Length: 6992
Last-Modified: Sat, 22 Oct 2022 03:08:25 GMT
Connection: keep-alive
ETag: "63535ea9-1b50"
Expires: Thu, 26 Oct 2023 15:02:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_right.png
200 OK 743 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_right.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash c932553300eae7cdcb99696b1920bda9
6e4b0905ea61d8a0f77d6ac32bbf5e163a5d988b
31d0b6073a2432fd03fd42bef7c91db11b8f4c01225d2af4f1ddfaf9d7ae406a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_right.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:26 GMT
Content-Type: image/png
Content-Length: 743
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2e7"
Expires: Thu, 26 Oct 2023 15:02:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_sz.png
200 OK 6.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 120 x 116, 8-bit colormap, non-interlaced\012- data
Hash ad91a2962b509f47929d99568cdde95a
624b3a593fb770e575d22407e3a59cfc8f5febea
4512d1cba75fab0d99ac353265a2450e839a63105c35182370752abdaa067d8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/png
Content-Length: 6450
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1932"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_left.png
200 OK 757 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_left.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash 3a547fa8debd16ad353a1071391b33b4
6b9fc14318ef032c8780ffea4316f71879587592
ec26d91bab019f3f6c2e6dfaa846470bdaa40b94d10e3b2dc1a48ed5507a8cd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_left.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:26 GMT
Content-Type: image/png
Content-Length: 757
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2f5"
Expires: Thu, 26 Oct 2023 15:02:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/js/swiper.min.js?v=2021web
200 OK 42 kB URL GET HTTP/1.1 155.159.252.52/static/js/swiper.min.js?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (65284)
Hash ad2b984fe68303c7fd990f49dd125f9e
a7970d44348a8709eb519f5b9daf870d0ba9426a
0d99312788aaac576be48996454890f9bfa4df8a6f94fdab5ad1366b8d846d2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/js/swiper.min.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: application/javascript
Last-Modified: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"639f2ea0-2265a"
Expires: Wed, 27 Sep 2023 03:02:24 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/hotgame_tabsbg.png
200 OK 4.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_tabsbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2080 x 128, 8-bit colormap, non-interlaced\012- data
Hash 721b5f94951c6f0afd4737c11f68578f
a01cc2ce8bef94af3da98370d4e7ab66846f20e8
f47165133efac8e12274e9911ca4b6c47cf8cab47d0c7fd1e201b77f903d1ec2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_tabsbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:26 GMT
Content-Type: image/png
Content-Length: 4722
Last-Modified: Fri, 19 Nov 2021 14:41:19 GMT
Connection: keep-alive
ETag: "6197b78f-1272"
Expires: Thu, 26 Oct 2023 15:02:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_tq.png
200 OK 7.1 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_tq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 124 x 120, 8-bit colormap, non-interlaced\012- data
Hash 43833604561af8ebc610e245a093df7a
5720981a98db3e1d8e790aeb2aaed8736b488636
faf237f95fe09f4fab31e741b4849e84bc497bddd8fc6653b9d5bda04237efd5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_tq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:25 GMT
Content-Type: image/png
Content-Length: 7085
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1bad"
Expires: Thu, 26 Oct 2023 15:02:25 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/qz.js?0.4814042157374727
200 OK 424 B URL GET HTTP/1.1 155.159.252.52/qz.js?0.4814042157374727
IP
ASN #137951 Clayer Limited
Hash fde1acd3828e338a56c1765f062a121b
1ec6bd9ad84885c3a79bb0dcad95e81c808e810d
21ab6a287aa43fe216c0ffbda1b88490f4a366f78b7dd40df17144ba9a9465b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /qz.js?0.4814042157374727 HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:27 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Sep 2023 13:47:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6512e0d4-478"
Expires: Wed, 27 Sep 2023 03:02:27 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/hotgame_itembg.png
200 OK 19 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_itembg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 694 x 920, 8-bit colormap, non-interlaced\012- data
Hash 24212179c159aa856ecaa975a7138ed4
26c23b212280736a857f480b43b95b2bed94f4d9
631c864daa8c608f3390b717d4099e1725cdf134bb213ae3754ff918b2c515cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_itembg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:26 GMT
Content-Type: image/png
Content-Length: 18954
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-4a0a"
Expires: Thu, 26 Oct 2023 15:02:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/downloadbg.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/downloadbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 490 x 668, 8-bit colormap, non-interlaced\012- data
Hash 54aea9069ebd594d06452f981ef0e082
7be69fe602b6a08a9d33b2818b7b2435cbfe1c51
be14f003ebb563bca19a5adedb51cce325609eb2c781de3bdbf36c725d4afdbd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/downloadbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:27 GMT
Content-Type: image/png
Content-Length: 16155
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-3f1b"
Expires: Thu, 26 Oct 2023 15:02:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_lbbg.png
200 OK 58 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_lbbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2380 x 488, 8-bit colormap, non-interlaced\012- data
Hash 3ae837307bc15ba6fcaf2832ce3d0402
c80a9e4ae384f2ae07e10308b72224a8352804f2
a71e6ed99105f1a2348c90777fa09b2a9b5b9278efc6759e6e768a168ec0a05a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_lbbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:26 GMT
Content-Type: image/png
Content-Length: 57488
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-e090"
Expires: Thu, 26 Oct 2023 15:02:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/fd_totop.png
200 OK 2.8 kB URL GET HTTP/1.1 155.159.252.52/static/img/fd_totop.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 76 x 76, 8-bit colormap, non-interlaced\012- data
Hash b1e36b9e83803b77e6ac09da9eead509
99e72f62ec65667e89a9b288b627b357be96701f
38b57c517260980e644dfb405ef08146d2111b714abec7255efbd4b354cd7583
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/fd_totop.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:28 GMT
Content-Type: image/png
Content-Length: 2797
Last-Modified: Fri, 19 Nov 2021 14:41:12 GMT
Connection: keep-alive
ETag: "6197b788-aed"
Expires: Thu, 26 Oct 2023 15:02:28 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_top_game.png
200 OK 5.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_top_game.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash 254b8b403316cc5754d821c3ac9620e6
dd75d61cd66f114f3ee66e880b9fea2495ade226
97dec4a15fd692863e0679d739c952d005e635c1fe02d499dbb165cca72ea618
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_top_game.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:28 GMT
Content-Type: image/png
Content-Length: 5680
Last-Modified: Fri, 19 Nov 2021 14:41:38 GMT
Connection: keep-alive
ETag: "6197b7a2-1630"
Expires: Thu, 26 Oct 2023 15:02:28 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/app_logo1.png
200 OK 31 kB URL GET HTTP/1.1 155.159.252.52/static/img/app_logo1.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f09a00bf070107b33d37c05441ee3ac
de368c24abff83e1ce0732780a7dcf62645532e0
86b5eb8183d8f7b2d4a00275d6f84981d00da62f78647447bf6a143ccc0199a9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/app_logo1.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:27 GMT
Content-Type: image/png
Content-Length: 31226
Last-Modified: Sun, 20 Nov 2022 09:56:26 GMT
Connection: keep-alive
ETag: "6379f9ca-79fa"
Expires: Thu, 26 Oct 2023 15:02:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/footerbg.png
200 OK 28 kB URL GET HTTP/1.1 155.159.252.52/static/img/footerbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1920 x 324, 8-bit colormap, non-interlaced\012- data
Hash 3b9ae1ce28bdf234e7e3245305371937
9c36e5d742a69c80ed0693cbcf3a00f2b0c82d73
17df7cb78bb02c8bda5b7ffb7febbf48f046b5b54e0fa137ba6d37878e4fa6e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/footerbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:27 GMT
Content-Type: image/png
Content-Length: 27856
Last-Modified: Fri, 19 Nov 2021 14:41:13 GMT
Connection: keep-alive
ETag: "6197b789-6cd0"
Expires: Thu, 26 Oct 2023 15:02:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_ty.png
200 OK 113 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_ty.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 113 kB (112821 bytes)
Hash 97bafd361b9b620c7678e552024225c3
cbdd8488090148f5f73a97a91d3a24a6c07453b3
a2340fa63f1b53aebb946f62730dd4f64c9f42585126eb1152057d71b56fadce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_ty.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:28 GMT
Content-Type: image/png
Content-Length: 112821
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1b8b5"
Expires: Thu, 26 Oct 2023 15:02:28 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_zr.png
200 OK 121 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_zr.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 121 kB (121229 bytes)
Hash a691f396c473aa877d66dcc169597c64
d9b5daf91bfa46233fcd701146691f11d30aba87
c8bdd010d21a319777891807be19d13173d5730c966ff6897d65ce8a0b2244b0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_zr.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:28 GMT
Content-Type: image/png
Content-Length: 121229
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1d98d"
Expires: Thu, 26 Oct 2023 15:02:28 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dj.png
200 OK 118 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dj.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 118 kB (118485 bytes)
Hash 38ffc4b03162e8dc89bdc33aaa16d18e
8b9cf42cd90a0e867b069911afd8f722ba1bd6bd
89d9caf40ad22305ba8e2531e92af0d5695202950af14c0074b68ed32cf701d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dj.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:28 GMT
Content-Type: image/png
Content-Length: 118485
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1ced5"
Expires: Thu, 26 Oct 2023 15:02:28 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/banner.jpg
200 OK 406 kB URL GET HTTP/1.1 155.159.252.52/static/img/banner.jpg
IP
ASN #137951 Clayer Limited
File type JPEG image data, baseline, precision 8, 3840x1400, components 3\012- data
Size 406 kB (405909 bytes)
Hash d12e3b2899046285cb587aebe46d5850
7cd25d88958e51dbc3184d039ea31985fb2271a7
83b0adf4e17b74b999e843b3f8514032784503c0b52efb74bab464233e53f36d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/banner.jpg HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/jpeg
Content-Length: 405909
Last-Modified: Mon, 21 Nov 2022 11:32:04 GMT
Connection: keep-alive
ETag: "637b61b4-63195"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_contact.png
200 OK 7.9 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_contact.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash bba44c514b5da0fa122db10bd5dd4a25
456d99769aa1b15714feb48d141a67f50f5d9c62
c1c6f0209d71d61adac42db73154e66ddebc258404fe6feb914f1b0ec3ba2bc4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_contact.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:31 GMT
Content-Type: image/png
Content-Length: 7875
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1ec3"
Expires: Thu, 26 Oct 2023 15:02:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_qp.png
200 OK 115 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_qp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 115 kB (115196 bytes)
Hash 0ea04fcfea1b06ea4f8d6b968b8b3a8f
453e2e125220a1eeb3f9d948d7f08833ef6aff6b
381944f290c0f63dbeb208634a3de02b821024e5d8d216369f192cee6d27f76c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_qp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:28 GMT
Content-Type: image/png
Content-Length: 115196
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-1c1fc"
Expires: Thu, 26 Oct 2023 15:02:28 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/download_bottom_img.png
200 OK 40 kB URL GET HTTP/1.1 155.159.252.52/static/img/download_bottom_img.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1264 x 320, 8-bit colormap, non-interlaced\012- data
Hash 2562815ac75731e40a21f53a93ddc94e
f614090083587a2c0118b0f8996e10060d82b04f
f42316c348280e18dbdf1174fc2e2759204b0109ae23c43a00ab2999abe84ed4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/download_bottom_img.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:31 GMT
Content-Type: image/png
Content-Length: 39832
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-9b98"
Expires: Thu, 26 Oct 2023 15:02:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_cp.png
200 OK 125 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_cp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 125 kB (124841 bytes)
Hash 6cea918d7d824577f3bab4d14a864125
0370a8ddf1a99294acd7b33c59bea06c3ee110d0
5fd3fa7f8b23b33bf6fababc924645de9685f166b351e7684c6f936a4452edb6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_cp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:30 GMT
Content-Type: image/png
Content-Length: 124841
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1e7a9"
Expires: Thu, 26 Oct 2023 15:02:30 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dz.png
200 OK 124 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 124 kB (124185 bytes)
Hash d57cfec1caaa46c2d0302708ca606ac3
9c68a596ad3b1b7de67ae6ae481d25de3a968f29
07aeb4f99135e35b0ca7f9e08e03575e697454c71482789caac9d6ff958225ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:30 GMT
Content-Type: image/png
Content-Length: 124185
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-1e519"
Expires: Thu, 26 Oct 2023 15:02:30 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hd.png
200 OK 347 kB URL GET HTTP/1.1 155.159.252.52/static/img/hd.png
IP
ASN #137951 Clayer Limited
File type JPEG image data, progressive, precision 8, 969x1088, components 3\012- data
Size 347 kB (346703 bytes)
Hash 221471375bf8702a176becdf4212cd24
ef80818c34189fa9dceefa1738bcd84886e45595
8b0a9db25f2b4675591b97eb59945d223f46650d1b05df9c21e01c61891bc5f3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hd.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:24 GMT
Content-Type: image/png
Content-Length: 346703
Last-Modified: Fri, 25 Nov 2022 12:17:55 GMT
Connection: keep-alive
ETag: "6380b273-54a4f"
Expires: Thu, 26 Oct 2023 15:02:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/6c7d9b78-4642-461c-9b2d-b802ccd7a1d5.bin
817 kB URL firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/6c7d9b78-4642-461c-9b2d-b802ccd7a1d5.bin
IP
Size 817 kB (817083 bytes)
Hash 6b5b15372ca108d4b33caf02ed016f3e
13df17583626a0987070dde4340f876d08c401c0
9c890391b90d43bf692755185bfa1780ee051467ae9a2775759d9866f4546664
GET /staging/addons-bloomfilters/6c7d9b78-4642-461c-9b2d-b802ccd7a1d5.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduudMXaam7-DgIQSF51hOhVv4i5TOq9uZVcgTT3e579cV6zd41LlCb1vqKvmz-TGcvQxKSTUqA6JuNGh_XqV4TYJc9gO1eU
x-goog-generation: 1690223885754624
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 817083
x-goog-hash: crc32c=NmyCHA==, md5=a1sVNyyhCNSzPK8C7QFvPg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 817083
server: UploadServer
date: Sat, 23 Sep 2023 15:48:57 GMT
cache-control: public,max-age=604800
age: 256422
last-modified: Mon, 24 Jul 2023 18:38:05 GMT
etag: "6b5b15372ca108d4b33caf02ed016f3e"
content-type: application/octet-stream
alt-svc: clear
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
ASN #20940 Akamai International B.V.
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Wed, 07 Jun 2023 18:17:03 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1686161822.36709
Content-Type: application/zip
X-Trans-Id: tx08d930128b1f4166bf4e3-0064844797dfw1
Cache-Control: public, max-age=119715
Expires: Thu, 28 Sep 2023 00:17:54 GMT
Date: Tue, 26 Sep 2023 15:02:39 GMT
Connection: keep-alive
155.159.177.233
103.235.46.191
88.221.134.155
47.246.44.224