200 OK 6.0 kB URL User Request GET HTTP/1.1 IP
ASN #133201 ABCDE GROUP COMPANY LIMITED
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (28637), with CRLF, LF line terminators
Hash 2dc90b279f85d3196f83aabb2eea722a
e48e593c8efb7101288d5c54c9c1dff788b4eb42
4791afe48d34ee13983646ab9ffbe3b51fce3e6afa07631f420733bd774c2aca
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
GET / HTTP/1.1
Host: vareniki.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 17:51:33 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
vareniki.net/favicon.ico
200 OK 17 kB IP
ASN #133201 ABCDE GROUP COMPANY LIMITED
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash 2f3fa2838adf9ddc1465073028bc5495
2b6f1783df02f49bc788341ac6de2b25579731e4
44291d950841c3aabc3803e489843cd1af3fea5aa5910f5969e5e31c1f3d2ea2
GET /favicon.ico HTTP/1.1
Host: vareniki.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://vareniki.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 17:51:33 GMT
Content-Type: image/x-icon
Content-Length: 16958
Last-Modified: Sat, 19 Feb 2022 13:41:04 GMT
Connection: keep-alive
ETag: "6210f370-423e"
Accept-Ranges: bytes
hm.baidu.com/hm.js?21619d2fd1f6a4a3221785f53992f55b
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?21619d2fd1f6a4a3221785f53992f55b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?21619d2fd1f6a4a3221785f53992f55b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://vareniki.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Sat, 23 Sep 2023 17:51:34 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
gczx666.oss-cn-shenzhen.aliyuncs.com/gczx.js
200 OK 130 B URL GET HTTP/1.1 gczx666.oss-cn-shenzhen.aliyuncs.com/gczx.js
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.oss-cn-shenzhen.aliyuncs.com
Fingerprint65:64:DE:0D:35:59:08:B7:41:4E:4D:25:C4:BA:8C:61:0B:55:5B:C0
ValidityFri, 07 Jul 2023 10:24:20 GMT - Sat, 02 Mar 2024 02:31:10 GMT
File type Unicode text, UTF-8 (with BOM) text, with no line terminators
Hash 6ea304b4fcbb808828658697b2c3d22d
f4ad86cedc3a4df6c37c35c99f9f7efc702362a2
05ca6dc41184f05750270a1433957ba0f1fb62e3b86ea53fe5a233e960cbf2fc
GET /gczx.js HTTP/1.1
Host: gczx666.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://vareniki.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 23 Sep 2023 17:51:34 GMT
Content-Type: application/javascript
Content-Length: 130
Connection: keep-alive
x-oss-request-id: 650F25A6E0DCB933300481FA
Accept-Ranges: bytes
ETag: "6EA304B4FCBB808828658697B2C3D22D"
Last-Modified: Wed, 20 Sep 2023 14:32:59 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3716538047002437935
x-oss-storage-class: Standard
Content-MD5: bqMEtPy7gIgoZYaXssPSLQ==
x-oss-server-time: 1
9675302.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=2043694083
200 OK 20 kB URL GET HTTP/2 9675302.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=2043694083
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash b4aad4b22d3818a66ec3cc72e711d602
687bddee4cac7029ed1f67b8be59112e7621761a
5dba3cac73e1f359ae0caccdc6ce18da2612a3894a78517a9e1fa4b2a60d904d
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=2043694083 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/javascript
content-encoding: gzip
x-robots-tag: noindex
content-length: 19648
X-Firefox-Spdy: h2
9675302.com/_Incapsula_Resource?SWKMTFSR=1&e=0.981149335911282
200 OK 1 B URL GET HTTP/2 9675302.com/_Incapsula_Resource?SWKMTFSR=1&e=0.981149335911282
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.981149335911282 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: text/plain
x-robots-tag: noindex
content-length: 1
X-Firefox-Spdy: h2
9675302.com/favicon.ico
200 OK 17 kB IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash 98e23520c6f2619d263bdfd3e60cbd95
9e440c5ef56e6e90ee2201d88a780a897260c1a1
1f9de30760c6b3b8b74c5c978e9b27f8947fa473935bbab79dba03f544ae416b
GET /favicon.ico HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 23 Sep 2023 17:51:40 GMT
content-type: image/x-icon
content-length: 16958
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Sat, 16 Sep 2023 23:06:18 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22970656 PNNN RT(1695491497579 2963) q(0 0 0 -1) r(2 4) U19
X-Firefox-Spdy: h2
9675302.com/static/js/initws.js
200 OK 2.6 kB URL GET HTTP/2 9675302.com/static/js/initws.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type C source, Unicode text, UTF-8 text
Hash b75862d5945ee76372a13c6dd89cca98
dc672637184650e0120b5cd079f2dcff574d0343
17863126fed9c414b64b4fa31983f2c7118624d8beaaae8c4c70832ae0fbb4b4
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /static/js/initws.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-234a"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 2558
content-encoding: gzip
cache-control: max-age=39457, public
expires: Sun, 24 Sep 2023 04:49:18 GMT
date: Sat, 23 Sep 2023 17:51:41 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966390 3CNN RT(1695491497579 1467) q(0 0 0 -1) r(24 24)
X-Firefox-Spdy: h2
9675302.com/src/img/favicon.267ace1.png
200 OK 2.9 kB URL GET HTTP/2 9675302.com/src/img/favicon.267ace1.png
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1135)
Hash 2c23cd313b38567ff6e2fb2f927022a4
2423c4df920d8a86011712220a3e1dc1883a792f
82e973e5418c2de2bd4f4ad435ef5fbd356eb3a93082a38d6858047a5680afda
GET /src/img/favicon.267ace1.png HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 23 Sep 2023 17:51:41 GMT
content-type: text/html
last-modified: Tue, 12 Sep 2023 02:56:16 GMT
etag: W/"64ffd350-fbd"
content-encoding: gzip
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Sat, 16 Sep 2023 23:06:18 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966013 3NNN RT(1695491497579 2955) q(0 0 0 -1) r(11 11) U12
X-Firefox-Spdy: h2
9675302.com/v1/management/tenant/getSpeedDomain
200 OK 75 kB URL GET HTTP/2 9675302.com/v1/management/tenant/getSpeedDomain
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text
Hash 2cbe1284b7b8c2227ac1889f0059d550
2888b691794c83d663cd12568a98b1beece7fddb
b6445463b1444790d7c74c5d6476cce17cc38303d05bb1dcc7f66a98bc8c66f5
GET /v1/management/tenant/getSpeedDomain HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Token:
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
x-cdn: Imperva
x-iinfo: 14-22970640-22970656 PNNN RT(1695491497579 3873) q(0 0 0 -1) r(3 3) U12
X-Firefox-Spdy: h2
9675302.com/static/css/vendor.d10eb3a8053b.css
200 OK 18 kB URL GET HTTP/2 9675302.com/static/css/vendor.d10eb3a8053b.css
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6bd2ed446f926f2ef97cae5a754c56d1
dc99e3f3181bdc952492fcffcd8a23a5f88d34a1
75c7dc047c648cd52edf273b0520bcc21767e769b268e72608be23cdfeaace8b
GET /static/css/vendor.d10eb3a8053b.css HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-15a03"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: text/css
content-length: 17963
content-encoding: gzip
cache-control: max-age=39461, public
expires: Sun, 24 Sep 2023 04:49:23 GMT
date: Sat, 23 Sep 2023 17:51:42 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966013 3CNN RT(1695491497579 4182) q(0 0 0 -1) r(9 9)
X-Firefox-Spdy: h2
9675302.com/static/js/0.f87dfc2d58d174199812.js
200 OK 229 kB URL GET HTTP/2 9675302.com/static/js/0.f87dfc2d58d174199812.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Size 229 kB (228854 bytes)
Hash 32d3a6236c38dd80af78427d88ee126d
0cc0d3cc61e34350de97225810d5a90eadda6c95
e390aff6da09d669984558e55fde89827b5f0302715aadfdd9bf1d2791793b7a
GET /static/js/0.f87dfc2d58d174199812.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-a67f2"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 228854
content-encoding: gzip
cache-control: max-age=39458, public
expires: Sun, 24 Sep 2023 04:49:20 GMT
date: Sat, 23 Sep 2023 17:51:42 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22970745 3CNN RT(1695491497579 4185) q(0 9 9 -1) r(12 12)
X-Firefox-Spdy: h2
9675302.com/static/js/aliyun.min.js
200 OK 59 kB URL GET HTTP/2 9675302.com/static/js/aliyun.min.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (32085)
Hash 85e7d42d7ec09184b9bbde78b641ca00
0bc92965c772b460ea1a65468fb2e8baabc7b5d0
5c919aeed13a145644e93be09a3ce46b4e2f241133ac316d61f8c5d2dc59758c
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /static/js/aliyun.min.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-3595f"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 59273
content-encoding: gzip
cache-control: max-age=39458, public
expires: Sun, 24 Sep 2023 04:49:21 GMT
date: Sat, 23 Sep 2023 17:51:43 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22963907 3CNN RT(1695491497579 4180) q(0 0 0 -1) r(13 13)
X-Firefox-Spdy: h2
9675302.com/static/js/6.a7194bc4c332cd092740.js
200 OK 92 kB URL GET HTTP/2 9675302.com/static/js/6.a7194bc4c332cd092740.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64348), with no line terminators
Hash ced8c66fe862cf6123e4d1a8c65dea3b
e07a698460568e65ccab54f8e7616d8c6097619d
9bdf553c89b22e0fae707b5ec649a592a66b88ab6255a64d9bb0113d053af3ad
GET /static/js/6.a7194bc4c332cd092740.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-4aa13"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 91540
content-encoding: gzip
cache-control: max-age=39507, public
expires: Sun, 24 Sep 2023 04:50:10 GMT
date: Sat, 23 Sep 2023 17:51:43 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22970745 3CNN RT(1695491497579 4186) q(0 12 12 -1) r(14 14)
X-Firefox-Spdy: h2
9675302.com/static/css/app.e6a121e5d3d4.css
200 OK 37 kB URL GET HTTP/2 9675302.com/static/css/app.e6a121e5d3d4.css
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (57297)
Hash 8df506466cd0ccadaecb57c867bce6c1
0caad5c4ae6775d87fc12dfa20fd1075578a6fa1
ab8406a1e60a97472350281161725915834b8d7803b149f5b65d40904346f3b0
GET /static/css/app.e6a121e5d3d4.css HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-27d85"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: text/css
content-length: 36644
content-encoding: gzip
cache-control: max-age=39493, public
expires: Sun, 24 Sep 2023 04:49:56 GMT
date: Sat, 23 Sep 2023 17:51:43 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22963944 3CNN RT(1695491497579 4184) q(0 2 2 -1) r(16 16)
X-Firefox-Spdy: h2
9675302.com/static/js/manifest.80368db51f6150dc5430.js
200 OK 3.8 kB URL GET HTTP/2 9675302.com/static/js/manifest.80368db51f6150dc5430.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (7023), with no line terminators
Hash cac66d2da23b4f648fe99ef76e058a5c
f037a12a00d41b89bebaf1689dc46c360df09e64
ed179843fdf86434fa586d5ac95d7550e4b0bbde1834c1f387b3ace222d249c9
GET /static/js/manifest.80368db51f6150dc5430.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-1b6f"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 3775
content-encoding: gzip
cache-control: max-age=553, public
expires: Sat, 23 Sep 2023 18:00:57 GMT
date: Sat, 23 Sep 2023 17:51:44 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966279 3CNN RT(1695491497579 4185) q(0 7 7 -1) r(26 26)
X-Firefox-Spdy: h2
9675302.com/static/js/yidun/index.js
200 OK 4.0 kB URL GET HTTP/2 9675302.com/static/js/yidun/index.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (549)
Hash 38be314db9ffad6f1ffd6f13d4d3079e
6593016f286030e92fe2b4b6c2ff98b72c8ab09f
9c6c3a32ef007d4ef425137ad126ce8ed56505b9a40b3da964190d01bc14ead7
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /static/js/yidun/index.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-2a81"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 4025
content-encoding: gzip
cache-control: max-age=39456, public
expires: Sun, 24 Sep 2023 04:49:20 GMT
date: Sat, 23 Sep 2023 17:51:44 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22964802 3CNN RT(1695491497579 4179) q(0 0 0 -1) r(31 31)
X-Firefox-Spdy: h2
9675302.com/static/public/layer.m.js
200 OK 1.5 kB URL GET HTTP/2 9675302.com/static/public/layer.m.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (2994)
Hash dda7a6368de9444d877be068fab49b44
a03085133806ceaac8a3e64711616582d000e45f
8cb834cdc0c8fc17c42aefb5e79fd0ec76a3b856531b801ddd1698cf7a9c7864
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /static/public/layer.m.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-c18"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 1465
content-encoding: gzip
cache-control: max-age=307, public
expires: Sat, 23 Sep 2023 17:56:52 GMT
date: Sat, 23 Sep 2023 17:51:45 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966377 3CNN RT(1695491497579 4177) q(0 0 0 -1) r(37 37)
X-Firefox-Spdy: h2
9675302.com/register?id=87825361
200 OK 18 kB URL User Request GET HTTP/2 9675302.com/register?id=87825361
IP
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55997)
Hash 805b1034b3b8915b14ea94f9f3e772fb
a1bd37b47c3e87b8999bfc5c53dd1a5d8d061e0b
04f06a512f16fedb4a1a65f63a78b4c42bef74813ed0e830a591c3e9f461399e
GET /register?id=87825361 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://vareniki.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 23 Sep 2023 17:51:38 GMT
content-type: text/html
last-modified: Tue, 12 Sep 2023 02:56:16 GMT
etag: W/"64ffd350-fbd"
content-encoding: gzip
set-cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; expires=Sat, 21 Sep 2024 23:15:09 GMT; HttpOnly; path=/; Domain=.9675302.com
nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; path=/; Domain=.9675302.com
incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; path=/; Domain=.9675302.com
x-incap-sess-cookie-hdr: nj0bRN1b2ExdY+0tQvX9CaolD2UAAAAAHQBjV3/cMaiL1PdM2eo97Q==
x-cdn: Imperva
x-iinfo: 1014-22970640-22970656 NNNN CT(202 412 0) RT(1695491497579 372) q(0 0 6 1) r(8 8) U12
X-Firefox-Spdy: h2
9675302.com/static/css/20.a0036b50b751.css
200 OK 18 kB URL GET HTTP/2 9675302.com/static/css/20.a0036b50b751.css
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65400), with no line terminators
Hash 4478455fbbfd7e7ffc0263120aba6d9b
377b1a321083ec45eae400cef47a7cd45b2b73a4
052595228cdca0ea0e9a28f626e671fad443729949eede53b222697aaa1eea5b
GET /static/css/20.a0036b50b751.css HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-123f6"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: text/css
content-length: 18240
content-encoding: gzip
cache-control: max-age=586, public
expires: Sat, 23 Sep 2023 18:01:31 GMT
date: Sat, 23 Sep 2023 17:51:45 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966377 3CNN RT(1695491497579 8097) q(0 0 0 -1) r(3 3)
X-Firefox-Spdy: h2
9675302.com/static/js/9.c6fc2746e330cb044430.js
7.3 kB URL GET 9675302.com/static/js/9.c6fc2746e330cb044430.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (19355), with no line terminators
Hash 4517dca4c9feec44036f03adfc5fa228
ecfd26be7171f7c0fbd93cf8db47694d39d73742
826287d0cd45eeca52195f07ab9cf8bcae9dbb3c05d65514b2ce98564b21c65f
GET /static/js/9.c6fc2746e330cb044430.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-5082"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 7277
content-encoding: gzip
cache-control: max-age=546, public
expires: Sat, 23 Sep 2023 18:00:52 GMT
date: Sat, 23 Sep 2023 17:51:46 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966003 3CNN RT(1695491497579 8104) q(0 0 0 -1) r(7 7)
X-Firefox-Spdy: h2
9675302.com/static/css/9.c87a9408a8dc.css
455 B URL GET 9675302.com/static/css/9.c87a9408a8dc.css
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1093), with no line terminators
Hash 07256e30b5ec014b371a28a06cfc1643
a8d066714124c6a6a2ef63abd1ee552953d743ee
458d8bbe231cd034f33cd77790c05d1ded3ce76c4acf73f7776e053888038879
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /static/css/9.c87a9408a8dc.css HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"64ffd351-445"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: text/css
content-length: 455
content-encoding: gzip
cache-control: max-age=585, public
expires: Sat, 23 Sep 2023 18:01:31 GMT
date: Sat, 23 Sep 2023 17:51:46 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966013 3CNN RT(1695491497579 8101) q(0 0 0 -1) r(9 9)
X-Firefox-Spdy: h2
9675302.com/v1/management/tenant/getTenantConfig?t=1695491506107
4.5 kB URL GET 9675302.com/v1/management/tenant/getTenantConfig?t=1695491506107
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (11285), with no line terminators
Hash e61f6e412919c88090b99f52f27c1d79
4db9029d232a14e049f09af9151dd616098eff16
de1df7542ce9e2b121ffb4093f04ef344127f9f60003cdb9f05f373a43d3b301
GET /v1/management/tenant/getTenantConfig?t=1695491506107 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/09/12_10:55:36 pc-v1.196.2
X-Token:
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
x-cdn: Imperva
x-iinfo: 14-22970640-22970962 NNNN CT(205 204 0) RT(1695491497579 8129) q(0 2 6 -1) r(9 9) U12
X-Firefox-Spdy: h2
9675302.com/df-data/system/pc/login/loginBg.png
20 kB URL 9675302.com/df-data/system/pc/login/loginBg.png
IP
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type PNG image data, 312 x 234, 8-bit/color RGBA, non-interlaced\012- data
Hash f14a9c8be2d83922e4ae691801825839
7198fc446609a5aea6e916a81c0895f1fc6c6f85
1a020a93ee5dbf562e6ad700e33935e156d1705d1cc42b6574dca17b1ec36e43
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /df-data/system/pc/login/loginBg.png HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/static/css/20.a0036b50b751.css
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"0477fbd6029d21:0"
last-modified: Tue, 18 Oct 2016 16:57:42 GMT
content-type: image/png
content-length: 19808
content-encoding: gzip
cache-control: max-age=80571, public
expires: Sun, 24 Sep 2023 16:14:38 GMT
date: Sat, 23 Sep 2023 17:51:47 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966390 3CNN RT(1695491497579 9014) q(0 3 3 -1) r(5 5)
X-Firefox-Spdy: h2
9675302.com/df-data/game/1578637842482.png
371 kB URL GET 9675302.com/df-data/game/1578637842482.png
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type PNG image data, 2990 x 566, 8-bit colormap, non-interlaced\012- data
Size 371 kB (370952 bytes)
Hash a366792ce69457744b882318850cefe2
5b078849d41e40f9d2c6dba6b821a04a9c0c35b9
faa00bbd3a46b12e4205da06089f1f4d489f01ab874caee4cd5d6c9c37203842
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /df-data/game/1578637842482.png HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: W/"0819879e3d4d51:0"
last-modified: Mon, 27 Jan 2020 07:29:14 GMT
content-type: image/png
content-length: 370952
content-encoding: gzip
cache-control: max-age=79250, public
expires: Sun, 24 Sep 2023 15:52:37 GMT
date: Sat, 23 Sep 2023 17:51:47 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22965988 3CNN RT(1695491497579 8119) q(0 0 0 -1) r(15 15)
X-Firefox-Spdy: h2
9675302.com/static/fonts/iconfont.12797db.woff
35 kB URL 9675302.com/static/fonts/iconfont.12797db.woff
IP
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 35056, version 1.0\012- data
Hash 12797dbaa7ef21b6cbd5431f04fbce4b
e9f1efa505a406736ec00635a73c585e4f36cdd1
e093972359fe727ec07e5ca90351dd2b1aab538741795a7ecabe8b1f6ca4e53f
GET /static/fonts/iconfont.12797db.woff HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/static/css/app.e6a121e5d3d4.css
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "64ffd351-88f0"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: font/woff
content-length: 35056
cache-control: max-age=614, public
expires: Sat, 23 Sep 2023 18:02:01 GMT
date: Sat, 23 Sep 2023 17:51:47 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22970745 3CNN RT(1695491497579 9354) q(0 0 0 -1) r(2 2)
X-Firefox-Spdy: h2
aeis.alicdn.com/AWSC/uab/1.140.0/collina.js
119 kB URL aeis.alicdn.com/AWSC/uab/1.140.0/collina.js
IP
Size 119 kB (119438 bytes)
Hash 75fb6b94dcb3a9c89abb59a3ffd7546f
96101820857ef511ba83017e928aeeb88353b162
04975704505b42dc124568d9d4be26aee2d4592826a0487920cb1d016d1a8e58
GET /AWSC/uab/1.140.0/collina.js HTTP/1.1
Host: aeis.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
x-oss-request-id: 64EBD421BE15FC3435DE60E2
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17940526130122019226
x-oss-storage-class: Standard
content-md5: dftrlNyzqciau1mj/9dUbw==
x-oss-server-time: 7
x-source-scheme: https
content-encoding: gzip
ali-swift-global-savetime: 1693176865
x-swift-savetime: Sun, 27 Aug 2023 22:54:25 GMT
x-swift-cachetime: 86400
eagleid: 2ff62c9716931768651043255e
content-length: 119438
cache-control: max-age=277392, s-maxage=86400
expires: Tue, 26 Sep 2023 22:54:59 GMT
date: Sat, 23 Sep 2023 17:51:47 GMT
vary: Accept-Encoding
served-from: 23.36.77.199
network_info: NO_OSLO_50304
timing-allow-origin: *, *
access-control-allow-origin: *
access-control-expose-headers: FW_IP
fw_ip: 104.110.21.4
X-Firefox-Spdy: h2
9675302.com/v1/betting/getServerTimeMillisecond?t=1695491506134
200 OK 77 kB URL GET HTTP/2 9675302.com/v1/betting/getServerTimeMillisecond?t=1695491506134
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Hash ac5d988a53a6c52b8117fda838b072f0
b48fd3a60d6b522153de0eaa73bd5394ca86c962
904ce47ac843b4ff66c15d70223042343b67851b0931799fdb26040a96771853
GET /v1/betting/getServerTimeMillisecond?t=1695491506134 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/09/12_10:55:36 pc-v1.196.2
X-Token:
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
x-cdn: Imperva
x-iinfo: 14-22970640-22970656 PNNN RT(1695491497579 8131) q(0 2 2 -1) r(5 5) U12
X-Firefox-Spdy: h2
9675302.com/df-data/pro-management/dzyule/2a04ccf7-bb1b-4a55-a168-0cbfad390390/1694250084358.png?561939
5.3 kB URL 9675302.com/df-data/pro-management/dzyule/2a04ccf7-bb1b-4a55-a168-0cbfad390390/1694250084358.png?561939
IP
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash ee14c245132304fddf0cd77339e48718
07a9e00d7a8b1506a4b6655e78c39daeb37dbf0e
8562c6d17d3875ac0898c3c619052e9f39bd0ee3147f2a099aecf2dff7ec5a06
GET /df-data/pro-management/dzyule/2a04ccf7-bb1b-4a55-a168-0cbfad390390/1694250084358.png?561939 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "ee14c245132304fddf0cd77339e48718"
last-modified: Sat, 09 Sep 2023 09:01:24 GMT
content-type: application/octet-stream
content-length: 5252
cache-control: max-age=80968, public
expires: Sun, 24 Sep 2023 16:21:15 GMT
date: Sat, 23 Sep 2023 17:51:47 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966013 3CNN RT(1695491497579 9295) q(0 1 1 -1) r(9 9)
X-Firefox-Spdy: h2
9675302.com/v1/management/tenant/getTenantConfig?t=1695491506971
21 kB URL 9675302.com/v1/management/tenant/getTenantConfig?t=1695491506971
IP
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
Hash 1f53a11d3961b971fd6e6899b14972fc
12d1ee6f518129d4426061323f26df08535b148d
8b9617782e5ff4188ce2fe2c319ad06bc076263d9a49fae3ea6bc8e44aac87c8
GET /v1/management/tenant/getTenantConfig?t=1695491506971 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/09/12_10:55:36 pc-v1.196.2
X-Token:
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
x-cdn: Imperva
x-iinfo: 14-22970640-22970656 PNNN RT(1695491497579 8998) q(0 0 0 -1) r(3 3) U12
X-Firefox-Spdy: h2
9675302.com/static/js/20.cafa761a306aff362061.js
200 OK 57 kB URL GET HTTP/2 9675302.com/static/js/20.cafa761a306aff362061.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/20.cafa761a306aff362061.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: W/"64ffd351-e00e"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 16219
content-encoding: gzip
cache-control: max-age=586, public
expires: Sat, 23 Sep 2023 18:01:31 GMT
date: Sat, 23 Sep 2023 17:51:45 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22963944 3CNN RT(1695491497579 8099) q(0 0 0 -1) r(3 3)
X-Firefox-Spdy: h2
9675302.com/v1/statistics/push
0 B URL POST 9675302.com/v1/statistics/push
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/statistics/push HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/09/12_10:55:36 pc-v1.196.2
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
X-Token:
Content-Length: 181
Origin: https://9675302.com
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
9675302.com/static/public/need/layer.css
200 OK 3.7 kB URL GET HTTP/2 9675302.com/static/public/need/layer.css
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (3701), with no line terminators
Hash 42f69c087e51045a8a3c7cd673035bac
e8f0e6c08d06438f21a4293f4824615adf1b739d
56f78048287d433001c7733ad944f0a4ef94f3a06e8f8958a7ddf86644c8ec44
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /static/public/need/layer.css HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: W/"64ffd351-e53"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: text/css
content-length: 1205
content-encoding: gzip
cache-control: max-age=39553, public
expires: Sun, 24 Sep 2023 04:50:54 GMT
date: Sat, 23 Sep 2023 17:51:41 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22966390 3CNN RT(1695491497579 4172) q(0 0 0 -1) r(2 2)
X-Firefox-Spdy: h2
9675302.com/v1/management/tenant/getTenantConfig?t=1695491506118
0 B URL GET 9675302.com/v1/management/tenant/getTenantConfig?t=1695491506118
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/management/tenant/getTenantConfig?t=1695491506118 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/09/12_10:55:36 pc-v1.196.2
X-Token:
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
9675302.com/static/spine-webgl.js
200 OK 369 kB URL GET HTTP/2 9675302.com/static/spine-webgl.js
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
Size 369 kB (368805 bytes)
Hash 5200130e3b8970af6c19b8587f46663b
56f9307ce28cb0a1c0150d92b095760936e83618
ffafc28590239f5f3f134c8bc83753f6c2e5d4ff2d3c775c2ff50afc2a608c13
Analyzer Verdict Alert urlquery scam Scam - Fake Lottery
GET /static/spine-webgl.js HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: W/"64ffd351-5a0a5"
last-modified: Tue, 12 Sep 2023 02:56:17 GMT
content-type: application/javascript
content-length: 74703
content-encoding: gzip
cache-control: max-age=39518, public
expires: Sun, 24 Sep 2023 04:50:20 GMT
date: Sat, 23 Sep 2023 17:51:42 GMT
x-cdn: Imperva
x-iinfo: 14-22970640-22970745 3CNN RT(1695491497579 4175) q(0 0 0 -1) r(7 7)
X-Firefox-Spdy: h2
9675302.com/v1/users/getAliyunAppKey?t=1695491507007
0 B URL GET 9675302.com/v1/users/getAliyunAppKey?t=1695491507007
IP
Requested by https://9675302.com/register?id=87825361
Certificate IssuerSectigo Limited
Subject1363931.com
Fingerprint99:4F:4A:6D:CA:CD:FB:BF:7B:BF:A4:54:F5:D4:9B:02:C8:8B:C7:FD
ValidityTue, 19 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/users/getAliyunAppKey?t=1695491507007 HTTP/1.1
Host: 9675302.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/09/12_10:55:36 pc-v1.196.2
X-Token:
DNT: 1
Connection: keep-alive
Referer: https://9675302.com/register?id=87825361
Cookie: visid_incap_2992552=pdkKvlm1RDqGhLsdDtUsY6klD2UAAAAAQUIPAAAAAAC2Fj3BJm36Y2K/nElaGrdf; nlbi_2992552=yO1YUuXJJUaniIQgqovAvwAAAABHHbxuufS/tDh/ZUHZJCBU; incap_ses_720_2992552=ptpONdqhZXNdY+0tQvX9CaolD2UAAAAAx20I17xRGNdF91Ep9hZKpg==; _uab_collina=169549150589338254082696
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
120.77.166.88
107.154.116.146
104.110.21.4
156.241.103.134
0.0.0.0