POST amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/h/b/jsd/r/0.8687164271636534:1749795227:ocGM4PoxnDFs_soOfYaCnMaqMFApLIZjSj7kXTmmmL4/94efcca8785d568d
104.21.48.1302 Moved Temporarily 0 B URL POST amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/h/b/jsd/r/0.8687164271636534:1749795227:ocGM4PoxnDFs_soOfYaCnMaqMFApLIZjSj7kXTmmmL4/94efcca8785d568d
IP 104.21.48.1:80
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.8687164271636534:1749795227:ocGM4PoxnDFs_soOfYaCnMaqMFApLIZjSj7kXTmmmL4/94efcca8785d568d HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 11554
Origin: http://amezon-egoaceous.fiaoreng.cn
DNT: 1
Connection: keep-alive
Referer: http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Fri, 13 Jun 2025 07:15:54 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/h/b/jsd/r/0.8687164271636534:1749795227:ocGM4PoxnDFs_soOfYaCnMaqMFApLIZjSj7kXTmmmL4/94efcca8785d568d
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5Zeogw7oakSUTpnpDqi3qryThTbrRe8PvRTklTgSdS9vOo%2F5nbbLhnD%2Bq0k3r0lqmrtWPvHwBC9EMPN%2BBc1Ez%2BZlElGqwnKTPQulo8ljgxZFLy57QTGOOF3VhI4FVd4ezOz9WHz4goaPl23jXGa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 94efccac4acb0b31-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=5696&min_rtt=415&rtt_var=10489&sent=10&recv=22&lost=0&retrans=0&sent_bytes=6816&recv_bytes=14537&delivery_rate=7350253&cwnd=256&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/h/b/jsd/r/0.8687164271636534:1749795227:ocGM4PoxnDFs_soOfYaCnMaqMFApLIZjSj7kXTmmmL4/94efcca8785d568d
104.21.112.1405 Method Not Allowed 0 B URL GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/h/b/jsd/r/0.8687164271636534:1749795227:ocGM4PoxnDFs_soOfYaCnMaqMFApLIZjSj7kXTmmmL4/94efcca8785d568d
IP 104.21.112.1:443
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Certificate IssuerGoogle Trust Services
Subjectfiaoreng.cn
FingerprintF4:AF:F2:BB:8D:12:6C:A5:25:99:9C:FB:5B:EA:03:A9:D0:81:11:B1
ValidityThu, 12 Jun 2025 16:07:34 GMT - Wed, 10 Sep 2025 17:06:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.8687164271636534:1749795227:ocGM4PoxnDFs_soOfYaCnMaqMFApLIZjSj7kXTmmmL4/94efcca8785d568d HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://amezon-egoaceous.fiaoreng.cn
Referer: http://amezon-egoaceous.fiaoreng.cn/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 405 Method Not Allowed
date: Fri, 13 Jun 2025 07:15:54 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JN%2FUT0QMpvUpcjiaU%2FNHS9Gqv%2Be302DGXmCC6SN8iSbnlatyQ39jGuRe%2F%2BUsTZWF7qSWe8iO8A3ISRfFCaVpwUx0lHVUlkuVCgRtEASEn1Pq9zhDhos%2FcWKcKixsC1%2BjhO%2BPBD8U3GD79GYWwRh2"}],"group":"cf-nel","max_age":604800}
allow: POST
cf-ray: 94efccac9b5f1c0e-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4428&min_rtt=4413&rtt_var=1684&sent=12&recv=8&lost=0&retrans=0&sent_bytes=3773&recv_bytes=1303&delivery_rate=611367&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=d9afd6c891bf673b&ts=44&inflight_dur=7&x=80"
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
104.16.80.73200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP 104.16.80.73:443
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A
ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://amezon-egoaceous.fiaoreng.cn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 07:15:54 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 94efcca99eab5693-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/images/browser-bar.png?1376755637
104.21.112.1200 OK 715 B URL GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/images/browser-bar.png?1376755637
IP 104.21.112.1:80
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
File type PNG image data, 960 x 53, 8-bit colormap, non-interlaced
Hash 226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://amezon-egoaceous.fiaoreng.cn/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jun 2025 07:15:54 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Tue, 10 Jun 2025 15:47:54 GMT
ETag: "684853aa-2cb"
Server: cloudflare
CF-RAY: 94efcca99a06568d-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Fri, 13 Jun 2025 09:15:54 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
POST amezon-egoaceous.fiaoreng.cn/cdn-cgi/rum?
104.21.48.1204 No Content 0 B URL POST amezon-egoaceous.fiaoreng.cn/cdn-cgi/rum?
IP 104.21.48.1:80
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
content-type: application/json
Content-Length: 1083
Origin: http://amezon-egoaceous.fiaoreng.cn
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Fri, 13 Jun 2025 07:15:54 GMT
Connection: keep-alive
access-control-allow-origin: http://amezon-egoaceous.fiaoreng.cn
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
Server: cloudflare
CF-RAY: 94efccaa797d0b31-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
104.21.112.1302 Found 10 kB URL GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 104.21.112.1:443
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Certificate IssuerGoogle Trust Services
Subjectfiaoreng.cn
FingerprintF4:AF:F2:BB:8D:12:6C:A5:25:99:9C:FB:5B:EA:03:A9:D0:81:11:B1
ValidityThu, 12 Jun 2025 16:07:34 GMT - Wed, 10 Sep 2025 17:06:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 13 Jun 2025 07:15:54 GMT
content-length: 0
cf-ray: 94efccaabd5b0b51-OSL
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/f9574c83b4d7/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SQBkweEbAJcLbr8doKImd93U8CugE2J3yPEW8ePWnlrfZlx43g7m4HoDXdnrq9V9lISbLRL1RdXko22LSByb%2BgGsZLOJhx4WvIKJ8V%2FO3fUbRuHGA4SpMkeetXoUz5I%2BwG8soR%2FmNMsvnR4CtclD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=522&min_rtt=469&rtt_var=158&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3200&recv_bytes=1081&delivery_rate=7757142&cwnd=253&unsent_bytes=0&cid=2dfdad82c9447b70&ts=36&x=0"
X-Firefox-Spdy: h2
GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/h/b/scripts/jsd/f9574c83b4d7/main.js?
104.21.112.1200 OK 10 kB URL GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/h/b/scripts/jsd/f9574c83b4d7/main.js?
IP 104.21.112.1:443
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Certificate IssuerGoogle Trust Services
Subjectfiaoreng.cn
FingerprintF4:AF:F2:BB:8D:12:6C:A5:25:99:9C:FB:5B:EA:03:A9:D0:81:11:B1
ValidityThu, 12 Jun 2025 16:07:34 GMT - Wed, 10 Sep 2025 17:06:04 GMT
File type JavaScript source, ASCII text, with very long lines (10062), with no line terminators
Hash d41e2a7d4ca2319bee187981ba2ade32
5a46d98b99e91f0ed02f7e380f5ec83320407fae
0b214ecb5425dd8c05e380cd93099a159fff45f067bc8001c025dac8f23e0e13
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/f9574c83b4d7/main.js? HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 07:15:54 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nnQ%2BrgJwPvnwebcbSvMxeY4mXr61VBGHfxBNRyfo090idmLFzNBgGWkUnODY1WcSphcal1zKbnEqvSls2pW4aC7QPHztZMwV7lZbok58zaISwIdZp4gsc4QIRf%2F830DM170zoiDjGw0%2BPlCTw%2BLV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 94efccaaed7b0b51-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2499&min_rtt=469&rtt_var=4073&sent=8&recv=12&lost=0&retrans=0&sent_bytes=3883&recv_bytes=1193&delivery_rate=7757142&cwnd=255&unsent_bytes=0&cid=2dfdad82c9447b70&ts=53&x=0"
X-Firefox-Spdy: h2
GET amezon-egoaceous.fiaoreng.cn/favicon.ico
104.21.48.1403 Forbidden 4.5 kB URL GET amezon-egoaceous.fiaoreng.cn/favicon.ico
IP 104.21.48.1:80
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
File type HTML document, ASCII text, with very long lines (394)
Hash 0d21caa051e66a20d711af9edc5c72fe
a2c3128636aa51206d8a6ffe64796fc1260da81f
e37876803c27bf438518cd38212e040713023c283d3a522ae16e71a4c6b80fdb
GET /favicon.ico HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Fri, 13 Jun 2025 07:15:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gmaPdASBnQc2bQi5SFlO9hE28XjHdsT6cr0gqAZbzbHmdoauC8q6zbnFUV6xaOPseRBd7pajPehKSIz0rY%2Fi2GqHk5nRHD%2BhTHPXEOl6kb%2BkjzCbJSEE6lNjsZyGtPALvYWM%2BBFyAMm%2BVoN94kXc"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 94efccaa29510b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=468&min_rtt=415&rtt_var=172&sent=4&recv=7&lost=0&retrans=0&sent_bytes=3651&recv_bytes=832&delivery_rate=7109656&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
104.21.112.1403 Forbidden 6.0 kB URL User Request GET amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
IP 104.21.112.1:443
Certificate IssuerGoogle Trust Services
Subjectfiaoreng.cn
FingerprintF4:AF:F2:BB:8D:12:6C:A5:25:99:9C:FB:5B:EA:03:A9:D0:81:11:B1
ValidityThu, 12 Jun 2025 16:07:34 GMT - Wed, 10 Sep 2025 17:06:04 GMT
File type HTML document, ASCII text, with very long lines (1439)
Hash 990f3e8df4aebe7e237d3e2f074971bb
aa8e85c0278742748d989f3da1002385ef73069d
1eb8566a0bf4afdef858af6c2e864bbf0e3590874c3458afa86ff9876d1b75e1
GET /apgp/5k8Zgc/ HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 13 Jun 2025 07:15:54 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=or2KJI6C93xpMH2docBPU5GHrApfnRujXKWH1avYf2MbWRzhfpKyMvKXmkBOmKurr8%2BnCwmUCcW8PGWvptlDfg1ys7pmQImK%2FQ25MDTW13q9NqW0oOPFMsJzyPFUDYAJvHYxKn2cSVkBW69JvY%2FF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 94efcca7bf2856c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfOrigin;dur=0,cfEdge;dur=18, cfL4;desc="?proto=TCP&rtt=646&min_rtt=473&rtt_var=381&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3200&recv_bytes=1143&delivery_rate=7956043&cwnd=254&unsent_bytes=0&cid=866677525b2b6d62&ts=38&x=0"
X-Firefox-Spdy: h2
GET amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
104.21.112.1403 Forbidden 6.0 kB URL User Request GET amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
IP 104.21.112.1:80
File type HTML document, ASCII text, with very long lines (1439)
Hash 5bccb334252eb3ab4775caaf56b8d85c
7f72f67579d97c6ec2f8602da4805b911038f568
cfa389b78476d992ee78b06a46f4b2e307054a1c2a2c57dad92343b44b2541b3
GET /apgp/5k8Zgc/ HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Fri, 13 Jun 2025 07:15:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DRsQIG17g6mkCWyL%2BFLy%2FHVIJ%2F%2B%2F5hEQXVI5Ml65lrqXgBGjGpww%2FjUtaV%2FTiSofqv0xhkpGZMpou8mCK9mfUnJMlyGbSalSt0kki71wCPywe0eyPqnM86F8H4eFotORBukUaYta7TTQZVNYNXN8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 94efcca8785d568d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
Server-Timing: cfOrigin;dur=0,cfEdge;dur=14, cfL4;desc="?proto=TCP&rtt=438&min_rtt=438&rtt_var=219&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=425&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/styles/cf.errors.css
104.21.112.1200 OK 24 kB URL GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/styles/cf.errors.css
IP 104.21.112.1:80
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
File type ASCII text, with very long lines (24050)
Hash 5e8c69a459a691b5d1b9be442332c87d
f24dd1ad7c9080575d92a9a9a2c42620725ef836
84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jun 2025 07:15:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 10 Jun 2025 15:47:54 GMT
ETag: W/"684853aa-5df3"
Server: cloudflare
CF-RAY: 94efcca92950568d-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Fri, 13 Jun 2025 09:15:54 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/images/cf-no-screenshot-error.png
104.21.48.1200 OK 3.2 kB URL GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/images/cf-no-screenshot-error.png
IP 104.21.48.1:80
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
File type PNG image data, 178 x 175, 8-bit colormap, non-interlaced
Hash 0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://amezon-egoaceous.fiaoreng.cn/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jun 2025 07:15:54 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Tue, 10 Jun 2025 15:47:54 GMT
ETag: "684853aa-c8d"
Server: cloudflare
CF-RAY: 94efcca9a8f60b31-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Fri, 13 Jun 2025 09:15:54 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
104.21.112.1302 Moved Temporarily 10 kB URL GET amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 104.21.112.1:80
Requested by http://amezon-egoaceous.fiaoreng.cn/apgp/5k8Zgc/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: amezon-egoaceous.fiaoreng.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Fri, 13 Jun 2025 07:15:54 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://amezon-egoaceous.fiaoreng.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6CUz3%2FgeaXsOKgVKCYlNCqTCgN9f59naL8SMGuki1yIVhw6pCdBGF4uExB3hWLAUDfAMbW0M5mTY0JZDPCeqwSgsHAZhO%2BFbQeXPLFPtzqYMeEZQzFrqZVc2Ohwhx0PsvrENo%2FRbW8tZIUXcxGoZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 94efccaa3afa568d-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=565&min_rtt=438&rtt_var=129&sent=11&recv=16&lost=0&retrans=0&sent_bytes=9630&recv_bytes=1614&delivery_rate=10298719&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"