9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
3.8 kB URL User Request GET 9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1178)
Hash bcbb5f845c43ef2bc136a715b58981fa
11f7762f44056b3f952ad754064f7187e2bb7996
3e5c55253595abe8c7fb891074aa8b749d8baa2970eb7bafa2d19b1de72b1c99
GET /cx/071287/36/setup_2188z1gp.exe HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:44 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
9.dwonxiazai.com/template/news/ygx/static/css/mdy.css
200 OK 4.1 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/css/mdy.css
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type ASCII text, with very long lines (431)
Hash aec103509c4a6c5e05230b8daf318291
5cb786120983bd856f44f118327ec96a3427924e
ed8d793a0b6e9751d6c97f540aca9a8aa2b9df3bde8ae30570ab78587a0f26b8
GET /template/news/ygx/static/css/mdy.css HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:44 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-3186"
Expires: Wed, 27 Sep 2023 05:01:44 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
9.dwonxiazai.com/template/news/ygx/static/js/zgjjw.min.4.js
200 OK 17 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/js/zgjjw.min.4.js
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type ASCII text, with very long lines (32019)
Hash ab8160556f4c2294f6a05bf21f2ae3e5
f090f22bcf536f4831f91bf8603cfc9d8ebff106
8da0058b8d4b9d2372b0030837c4c27d60623f77b51cbc24a4ad53e56c5313fa
GET /template/news/ygx/static/js/zgjjw.min.4.js HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:44 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-ca04"
Expires: Wed, 27 Sep 2023 05:01:44 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
9.dwonxiazai.com/template/news/ygx/static/js/mdy.js
200 OK 6.3 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/js/mdy.js
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a2dc3dae6bb6341bb498fbb6fc8190e1
6b242658f35afd23c641c68e13a75b58ac02284f
4e0f9c240ad1cc00feccd6a583d1fa651f2639107d82afd642e88f4c7ead7199
GET /template/news/ygx/static/js/mdy.js HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-4a28"
Expires: Wed, 27 Sep 2023 05:01:45 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
9.dwonxiazai.com/js/orsxg5a.script
200 OK 1.0 kB URL GET HTTP/1.1 9.dwonxiazai.com/js/orsxg5a.script
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 37e3975ee5f1d69f4e7b32da36a4e1d3
93f088664e21865a434a4ed8e6da858099c33e27
5434bae1a51380804285c751b5c00d11d4b3b6963d54e9112b694997d0d35a2e
GET /js/orsxg5a.script HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
9.dwonxiazai.com/template/news/ygx/static/images/banner.png
200 OK 12 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/images/banner.png
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type PNG image data, 640 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 87f4b623c56c7ea5b2737c5e22467f25
2e3d66954a3279ef946f360344778ea4ef69f1e9
2d95d446d369afee1b2edcfc1e7cc451cdcb3c71df103ddbf928141c84ec0311
GET /template/news/ygx/static/images/banner.png HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/template/news/ygx/static/css/mdy.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: image/png
Content-Length: 12130
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-2f62"
Expires: Thu, 26 Oct 2023 17:01:45 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
9.dwonxiazai.com/template/news/ygx/static/picture/item.png
200 OK 1.3 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/picture/item.png
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type PNG image data, 44 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f1148320c477f104800c248580e2ef4
bcf7737a74ec14a7f5fb693818ade80c23c3ef01
ecc219eb8a5e74a1a9c6c3c88eb5c50bf196ec55f6760ce4623b627e6cbf185e
GET /template/news/ygx/static/picture/item.png HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: image/png
Content-Length: 1308
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-51c"
Expires: Thu, 26 Oct 2023 17:01:45 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
9.dwonxiazai.com/template/news/ygx/static/js/jqmin11.js
200 OK 38 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/js/jqmin11.js
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type ASCII text, with very long lines (32341), with CRLF line terminators
Hash a1cd7fc161a5cb1d7102d1e72ee1e67f
295153b52a34427bcaecb4a55c0aabcca825d544
af2419dd15e09ea913cfe94d130f9870486732e57764e0f02ea3846f204146ee
GET /template/news/ygx/static/js/jqmin11.js HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-1787f"
Expires: Wed, 27 Sep 2023 05:01:45 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
9.dwonxiazai.com/template/news/ygx/static/images/share.jpg
200 OK 6.9 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/images/share.jpg
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 92x67, components 3\012- data
Hash 9b2749c43b9d8113871080ce7692bbfd
fd2898487118f34dc9fc84a8f3a4d556d6ba425b
e6ef622c7cdb9497f21e18dc526df3fe8147490cfddd043593fdadd35e789069
GET /template/news/ygx/static/images/share.jpg HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/template/news/ygx/static/css/mdy.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: image/jpeg
Content-Length: 6910
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-1afe"
Expires: Thu, 26 Oct 2023 17:01:45 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
9.dwonxiazai.com/template/news/ygx/static/images/backtop.png
200 OK 3.1 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/images/backtop.png
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type PNG image data, 124 x 146, 8-bit/color RGB, non-interlaced\012- data
Hash 97598ecbdb5b02a152a9c0b91c962661
2fa4cc723cda3667d8859a4d0d855ec354a8d603
ec7cf155c6c06827149367e88065eb6423179074f2c11648028194f389c6e9f7
GET /template/news/ygx/static/images/backtop.png HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/template/news/ygx/static/css/mdy.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: image/png
Content-Length: 3116
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-c2c"
Expires: Thu, 26 Oct 2023 17:01:45 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
9.dwonxiazai.com/cx/071287/36/%7B$theme_path%7D/static/js/analytics.js
400 Bad Request 13 B URL GET HTTP/1.1 9.dwonxiazai.com/cx/071287/36/%7B$theme_path%7D/static/js/analytics.js
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type ASCII text, with no line terminators
Hash 1e6cd917ed71a1241e4bedc29264bd98
5b65037351caeb0e5a48d963d7ffa88d0271d546
7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402
GET /cx/071287/36/%7B$theme_path%7D/static/js/analytics.js HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
9.dwonxiazai.com/template/news/ygx/static/picture/share_weixin1.png
200 OK 18 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/picture/share_weixin1.png
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type PNG image data, 419 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 1cb2feb4fd6938f48b34ae97a926766d
957e730e07889ac13e9100ff7b7358cec9bc3f36
8c7d5ee432641486d92d705de0c713d49ad3a26d1995235a2ffd1794dabbf6ef
GET /template/news/ygx/static/picture/share_weixin1.png HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: image/png
Content-Length: 17625
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-44d9"
Expires: Thu, 26 Oct 2023 17:01:45 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
9.dwonxiazai.com/uploads/images/9108660.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 9.dwonxiazai.com/uploads/images/9108660.jpg
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/9108660.jpg HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/translate/w899h599/20180310/kfcc-fxpwyhw8080652.jpg?zdy
9.dwonxiazai.com/template/news/ygx/static/picture/cecn-icon.jpg
200 OK 94 kB URL GET HTTP/1.1 9.dwonxiazai.com/template/news/ygx/static/picture/cecn-icon.jpg
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3\012- data
Hash dece860a26327ed93ef6525f3aadeaab
9b49c3edecd37a6bec6cc2d9f932938e249eebf9
f495b63b95cb083e3a4c0ba05dfb8942e79d6f46351e02b6b3ed442c68670f62
GET /template/news/ygx/static/picture/cecn-icon.jpg HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: image/jpeg
Content-Length: 94013
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-16f3d"
Expires: Thu, 26 Oct 2023 17:01:45 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
partner.toutiao.com/user_mark/?callback=__jsonp__ampm5tu4pj
404 Not Found 144 B URL GET HTTP/1.1 partner.toutiao.com/user_mark/?callback=__jsonp__ampm5tu4pj
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 23143cf7520b6cfed03dbd90ddca4a02
ad099c7199fe144c2bf30f7058e0a9df5764b015
b282ac8512c5e029959282e6fd450dc119f5db4a072869eabf45e31440596248
GET /user_mark/?callback=__jsonp__ampm5tu4pj HTTP/1.1
Host: partner.toutiao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: Tengine
Content-Type: text/html
Content-Length: 144
Connection: keep-alive
Date: Tue, 26 Sep 2023 17:01:45 GMT
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e1defbea8604dc5727adbf91b8d445bee6ee93dec873b41290a14aee5a6093dbf9e779f444a7527a2da550f5b8f591800
x-tt-trace-tag: id=03;cdn-cache=miss;type=dyn
X-TT-LOGID: 202309270101452A8107C043E2519029FD
x-alicdn-da-ups-status: endOs,0,404
Via: cache34.l2nm125-4[6,0], cache21.l2de2[182,0], cache2.se1[246,0]
server-timing: cdn-cache;desc=MISS,edge;dur=240,origin;dur=6
Timing-Allow-Origin: *
EagleId: 2ff62c9616957477055455962e
9.dwonxiazai.com/favicon.ico
200 OK 0 B URL GET HTTP/1.1 9.dwonxiazai.com/favicon.ico
IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 9.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:46 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Fri, 19 May 2023 11:18:09 GMT
Connection: keep-alive
ETag: "64675af1-0"
Accept-Ranges: bytes
155.159.252.52/
200 OK 2.2 kB IP
ASN #137951 Clayer Limited
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash baba1d17293225225028471c64b1bc54
9d9bc8ae5f6be77aad99e35b8724918f23457e15
c325762c885f22c30bd0994b2d34f6ebfd593ffd53d25546b1d12104b69258df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:45 GMT
Content-Type: text/html
Last-Modified: Wed, 16 Aug 2023 06:34:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64dc6de6-22f2"
Content-Encoding: gzip
hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?3f7487e9fa770fdc0dcffa98b6d51956 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://9.dwonxiazai.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Tue, 26 Sep 2023 17:01:46 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
155.159.252.52/static/css/swiper.min.css?v=2021web
200 OK 4.5 kB URL GET HTTP/1.1 155.159.252.52/static/css/swiper.min.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (13425), with CRLF line terminators
Hash 6604e7f8fbafb482f29e0dfa78e0e2e5
520ff7d839d3a94c855c9d75a76b5b166a5bf1b9
6d0a4af85bd32d089f36e072c98a15212d4468d562be75c0c3ef16c611c971cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/swiper.min.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:47 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Nov 2021 14:41:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6197b7a4-3579"
Expires: Wed, 27 Sep 2023 05:01:47 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
n.sinaimg.cn/translate/w899h599/20180310/kfcc-fxpwyhw8080652.jpg?zdy
200 OK 121 kB URL GET HTTP/1.1 n.sinaimg.cn/translate/w899h599/20180310/kfcc-fxpwyhw8080652.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://9.dwonxiazai.com/cx/071287/36/setup_2188z1gp.exe
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 899x599, components 3\012- data
Size 121 kB (121004 bytes)
Hash 115a58f17cb6415a5ae872ac1e692cf9
6a2699a58213b395b0ff7268be13b0d6a99675be
2105a0c26a454c83b208f4e2adc182f3b8f7f0b2929d78ff95c5f319f3197356
GET /translate/w899h599/20180310/kfcc-fxpwyhw8080652.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://9.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 121004
Connection: keep-alive
Date: Tue, 16 May 2023 09:06:26 GMT
X-RequestId: 72b01160-2305-1617-0626-b0087553a030
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sat, 10 Mar 2018 12:36:12 GMT
X-Filesize: 121004
ETag: "115a58f17cb6415a5ae872ac1e692cf9"
x-amz-meta-crc32: D841496B
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1684227986552
Via: http/1.1 ctc.guangzhou.union.187 (ApacheTrafficServer/6.2.1 [cMsSfW]), cache21.l2st3-1[0,11,200-0,H], cache23.l2st3-1[14,0], cache13.l2hk2[0,35,200-0,H], cache6.l2hk2[36,0], cache6.l2de2[0,0,304-0,H], cache12.l2de2[1,0], cache3.se1[0,0,200-0,H], cache1.se1[1,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=sinaedge,s=ctc.guangzhou.union.188.nb.sinaedge.com,c=113.96.59.11;f=Edge,s=ctc.guangzhou.union.187,c=10.31.50.188
X-Via-Edge: 16842279864490b3b6071bc321f0a67e7e58e
Ali-Swift-Global-Savetime: 1684227986
Age: 11519722
X-Cache: HIT TCP_MEM_HIT dirn:6:128440388
X-Swift-SaveTime: Sat, 03 Jun 2023 07:10:27 GMT
X-Swift-CacheTime: 29987759
Timing-Allow-Origin: *
EagleId: 2ff62c9516957477083145060e
155.159.252.52/config.js?v=2021web
200 OK 594 B URL GET HTTP/1.1 155.159.252.52/config.js?v=2021web
IP
ASN #137951 Clayer Limited
Hash 75563f1c596eb176ae2de67f5e4a2b78
4aeeccd0dd450179e4709e6ebf432c3e0a5791ef
c3c2d2a219a8b7fb0f22608174965eef9beaa155a3710a08331af1f24dc2a0cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /config.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:48 GMT
Content-Type: application/javascript
Last-Modified: Sun, 28 May 2023 08:03:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64730aec-49c"
Expires: Wed, 27 Sep 2023 05:01:48 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/css/web.css?v=2021web
200 OK 3.9 kB URL GET HTTP/1.1 155.159.252.52/static/css/web.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (15835), with CRLF line terminators
Hash 7b2ba6b1693108bd2fd33ded77801fb0
26e4ce47051c560739f8dd3e26916e34554c2fa5
80a4949c8c56a68157cc94ba9a35c3df5f0ff031c1ef325362b8fc0229b57d07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/web.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:47 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Dec 2021 16:53:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ae4011-3def"
Expires: Wed, 27 Sep 2023 05:01:47 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/top_game_titletext_left.png
200 OK 757 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_left.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash 3a547fa8debd16ad353a1071391b33b4
6b9fc14318ef032c8780ffea4316f71879587592
ec26d91bab019f3f6c2e6dfaa846470bdaa40b94d10e3b2dc1a48ed5507a8cd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_left.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:48 GMT
Content-Type: image/png
Content-Length: 757
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2f5"
Expires: Thu, 26 Oct 2023 17:01:48 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_sz.png
200 OK 6.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 120 x 116, 8-bit colormap, non-interlaced\012- data
Hash ad91a2962b509f47929d99568cdde95a
624b3a593fb770e575d22407e3a59cfc8f5febea
4512d1cba75fab0d99ac353265a2450e839a63105c35182370752abdaa067d8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:48 GMT
Content-Type: image/png
Content-Length: 6450
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1932"
Expires: Thu, 26 Oct 2023 17:01:48 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_contact.png
200 OK 7.9 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_contact.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash bba44c514b5da0fa122db10bd5dd4a25
456d99769aa1b15714feb48d141a67f50f5d9c62
c1c6f0209d71d61adac42db73154e66ddebc258404fe6feb914f1b0ec3ba2bc4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_contact.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:48 GMT
Content-Type: image/png
Content-Length: 7875
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1ec3"
Expires: Thu, 26 Oct 2023 17:01:48 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_zq.png
7.0 kB URL GET 155.159.252.52/static/img/pf_zq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 128 x 120, 8-bit colormap, non-interlaced\012- data
Hash 29c208d312b1b25c23f7cc75d9d722da
1b1243dd105b5bd5856a9ddfb1f5396135caf788
bcdce634fbf54b4a84812895146a2a6e70f1a51f1d03180de40d6780dedac1a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_zq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:55 GMT
Content-Type: image/png
Content-Length: 6954
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1b2a"
Expires: Thu, 26 Oct 2023 17:01:55 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hd.png
0 B URL GET 155.159.252.52/static/img/hd.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hd.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:48 GMT
Content-Type: image/png
Content-Length: 346703
Last-Modified: Fri, 25 Nov 2022 12:17:55 GMT
Connection: keep-alive
ETag: "6380b273-54a4f"
Expires: Thu, 26 Oct 2023 17:01:48 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_itembg.png
0 B URL GET 155.159.252.52/static/img/hotgame_itembg.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_itembg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/banner.jpg
0 B URL GET 155.159.252.52/static/img/banner.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/banner.jpg HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:49 GMT
Content-Type: image/jpeg
Content-Length: 405909
Last-Modified: Mon, 21 Nov 2022 11:32:04 GMT
Connection: keep-alive
ETag: "637b61b4-63195"
Expires: Thu, 26 Oct 2023 17:01:49 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_top_game.png
0 B URL GET 155.159.252.52/static/img/titleimg_top_game.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_top_game.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/pf_fc.png
0 B URL GET 155.159.252.52/static/img/pf_fc.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_fc.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:51 GMT
Content-Type: image/png
Content-Length: 7493
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-1d45"
Expires: Thu, 26 Oct 2023 17:01:51 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_bottom_btn_bg.png
0 B URL GET 155.159.252.52/static/img/hotgame_bottom_btn_bg.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_bottom_btn_bg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_zr.png
0 B URL GET 155.159.252.52/static/img/hotgame_zr.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_zr.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/nav.png
0 B URL GET 155.159.252.52/static/img/nav.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/nav.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_cp.png
0 B URL GET 155.159.252.52/static/img/hotgame_cp.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_cp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/footerbg.png
0 B URL GET 155.159.252.52/static/img/footerbg.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/footerbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/downloadbg.png
0 B URL GET 155.159.252.52/static/img/downloadbg.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/downloadbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/download_bottom_img.png
0 B URL GET 155.159.252.52/static/img/download_bottom_img.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/download_bottom_img.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:48 GMT
Content-Type: image/png
Content-Length: 39832
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-9b98"
Expires: Thu, 26 Oct 2023 17:01:48 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_sb.png
0 B URL GET 155.159.252.52/static/img/pf_sb.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sb.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/pf_tq.png
0 B URL GET 155.159.252.52/static/img/pf_tq.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_tq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/js/swiper.min.js?v=2021web
0 B URL GET 155.159.252.52/static/js/swiper.min.js?v=2021web
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/js/swiper.min.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 17:01:47 GMT
Content-Type: application/javascript
Last-Modified: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"639f2ea0-2265a"
Expires: Wed, 27 Sep 2023 05:01:47 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/top_game_titletext_right.png
0 B URL GET 155.159.252.52/static/img/top_game_titletext_right.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_right.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_lbbg.png
0 B URL GET 155.159.252.52/static/img/hotgame_lbbg.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_lbbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_ty.png
0 B URL GET 155.159.252.52/static/img/hotgame_ty.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_ty.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_dz.png
0 B URL GET 155.159.252.52/static/img/hotgame_dz.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/pf_777.png
0 B URL GET 155.159.252.52/static/img/pf_777.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_777.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_tabsbg.png
0 B URL GET 155.159.252.52/static/img/hotgame_tabsbg.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_tabsbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/app_logo1.png
0 B URL GET 155.159.252.52/static/img/app_logo1.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/app_logo1.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/fd_totop.png
0 B URL GET 155.159.252.52/static/img/fd_totop.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/fd_totop.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_qp.png
0 B URL GET 155.159.252.52/static/img/hotgame_qp.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_qp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.252.52/static/img/hotgame_dj.png
0 B URL GET 155.159.252.52/static/img/hotgame_dj.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dj.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
155.159.177.233
47.246.44.225
103.235.46.191
0.0.0.0