Report - 113.106.4.6/website/index.asp

Report Overview

Submitted URL
113.106.4.6/website/index.asp
IP
113.106.4.6
ASN
#4134 Chinanet
Submitted
2022-11-29 10:56:54
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
54

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
113.106.4.6	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	10 kB	1.3 MB	113.106.4.6
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	67 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	3.5 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.5 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.189.139.67

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed
2022-11-29	medium	113.106.4.6	Sinkholed

JavaScript (11)

	URL	Size	First Seen	Last Seen
	113.106.4.6/website/index.asp	335 B	2023-03-11	2023-03-11
Pretty URL 113.106.4.6/website/index.asp IP 113.106.4.6 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash 0117cd3139c6f14c29afb66a64b93765 455335cfd859a08eb5373e290246cff8c6c1d94e f5b82aa0d7a9ee691b902a1f8528ef3135f2a78687c768d78e028308d9303b84 Loading...

	113.106.4.6/website/index.asp	2.0 kB	2023-03-11	2023-03-11
Pretty URL 113.106.4.6/website/index.asp IP 113.106.4.6 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash 758d16943ef015a2ca4f3a3c3113ac28 6310d175b8add7677967157a45b4f109f5f8ea82 c1ac2009b9fe4ad55884c99ae9ea90714540bb3e1b1276a5a85db3be6941969c Loading...

	113.106.4.6/website/index.asp	1.6 kB	2023-03-11	2023-03-11
Pretty URL 113.106.4.6/website/index.asp IP 113.106.4.6 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash 559647c17d91983c89690563ee9d7247 adb69d9fbd9e1eed4c15de5da8632c6b45790279 7ef39faf1cb88b0267217d14a9029f3098427b21c1485bb4c10b4ff8b5100194 Loading...

	113.106.4.6/website/jquery.js	72 kB	2023-03-08	2023-11-18
Pretty URL 113.106.4.6/website/jquery.js IP 113.106.4.6 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:42:59 Last Seen2023-11-18 07:51:50 Times Seen20 Hash 7dbad17bcdffc6e87e8ac7769257434a 57bbda3540a3bdb0080358b511af51ad2310c401 22fd64cd60bed5cd18164de50a334a340497f80c0c50d164076f43c40838ed0f Loading...

	113.106.4.6/website/index.asp	29 B	2023-03-11	2023-03-11
Pretty URL 113.106.4.6/website/index.asp IP 113.106.4.6 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash 1f1fbaf32f51907d2d72dd97c8f6f59b f03846f09cea5d097eddfe095a39401ea845d975 d793a8ca4e0440543af9b90aa9435cc7f9f6d46ba6ac008ea8cbe24b09082928 Loading...

		Size	First Seen	Last Seen
	#1 Write - d4f3e2a5aa97b4a082e6ea4544e7913e	184 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash d4f3e2a5aa97b4a082e6ea4544e7913e d3b1e34b86bc387d7b3fd27fae5f405c0c537338 ebef2584ea92cd6bae53f266ef4c707a484f7ec61284cd67ea86428e2bd284bc Loading...

	#2 Write - f36c1e28ca5ce82356b64856ad6b13f5	74 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash f36c1e28ca5ce82356b64856ad6b13f5 ef242902f243ec5a54d803bd4db5376934420876 3ca04a0944c1332cc34d81f8a00d21d68e1cc177e0c0208ed5fa24af2c1bea71 Loading...

	#3 Write - 62a10903a615495c9fce345611470451	66 B	2023-03-07	2024-05-02
Pretty Observations First Seen2023-03-07 12:11:56 Last Seen2024-05-02 06:29:45 Times Seen115 Hash 62a10903a615495c9fce345611470451 c118a748c250aa382a94d2b00b329a0cc0d4eefa 5a2f7c8295471fc699e4d60ac96c0a660dc53d455c7c1c11d3c8ce4a04df25ab Loading...

	#4 Write - 118f45ba0367ba4e1831d8e73d263434	567 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash 118f45ba0367ba4e1831d8e73d263434 411daa978c8d87d771689568ea644c1ab4b7c3d4 20a04711808841759a6ded74d18f69c1d0928c9fee34ee47053a8c91974c897d Loading...

	#5 Write - 7da677b0581244f54b66803dcf075455	737 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 22:22:45 Last Seen2023-03-11 22:22:45 Times Seen1 Hash 7da677b0581244f54b66803dcf075455 195b9c4186af714800fab9aee0fea319aafffa31 95746e3bfe422134e66cca0b7b54ccecb9f24da96e126d14180edbe1c59e6cf2 Loading...

	#6 Write - a145d98a317fe961cc8c526ab65a4466	9 B	2023-03-07	2024-05-08
Pretty Observations First Seen2023-03-07 12:11:56 Last Seen2024-05-08 22:55:11 Times Seen168 Hash a145d98a317fe961cc8c526ab65a4466 bb6567de30c7d6965495e8d2929cfe348b292295 196c7c813d82c026b1111acb891087e8f52e9e7c936a6ea3edd38fcf0eea3a3e Loading...

HTTP Transactions (45)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4466
Expires: Tue, 29 Nov 2022 12:11:08 GMT
Date: Tue, 29 Nov 2022 10:56:42 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2306
Expires: Tue, 29 Nov 2022 11:35:08 GMT
Date: Tue, 29 Nov 2022 10:56:42 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: H3/CRAOJ0iFEoG6woyNaUtV+z9FhilFkKiI/pSQsq0xfMDHvih8Iox+dklWzAZCdUn80R/Sa4os=
x-amz-request-id: A1M7G67RYWSGR6YA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 10:45:25 GMT
age: 677
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1409
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:56:42 GMT
Last-Modified: Tue, 29 Nov 2022 10:33:13 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 10:19:36 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2226
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:56:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 10:08:56 GMT
cache-control: public,max-age=3600
age: 2867
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6089
Cache-Control: max-age=85901
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:56:43 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:48:24 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.189.139.67

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.189.139.67:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: i2ibpxLB0jcfWh42XLNzgw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3iS8l45kLyPFQpZ02iGay6r/Pwk=

113.106.4.6/website/index.asp

113.106.4.6

200 OK

17 kB

URL HTTP/1.1
113.106.4.6/website/index.asp
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (491), with CRLF line terminators
Size
17 kB (16570 bytes)
Hash
c7dfb50614c9ebe097856e0b227b06e8
bf64ebf4c935cc124ff8f136c0de4cd7964fc118
0c058506de7a78765f36d02111ea21280568dc03c412ca0c209f7518554a57dc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/index.asp HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 16570
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM; path=/
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:45 GMT

113.106.4.6/website/zzsc.css

113.106.4.6

200 OK

347 B

URL HTTP/1.1
113.106.4.6/website/zzsc.css
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
347 B (347 bytes)
Hash
b216f1c61a518ac93f2857bbe71668ec
c11c244eb864b38f76acffa0807fce225cb96b15
5897718e027d3066150da711b3cdc3b9d43819141f1658c970b3608320011968

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/zzsc.css HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Tue, 21 Jan 2014 12:44:16 GMT
Accept-Ranges: bytes
ETag: "010847ea616cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:45 GMT
Content-Length: 347

113.106.4.6/website/style.css

113.106.4.6

200 OK

9.3 kB

URL HTTP/1.1
113.106.4.6/website/style.css
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
9.3 kB (9294 bytes)
Hash
de9f6c761f7b39736bfc3ee88f72fba5
8457006ac488fb25e261f8d2671771fc66e507c8
18eea80359ebaf4df714a2be02b249c2e256ce494d6d7b44db667d73405949ae

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/style.css HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 02 Mar 2016 06:57:14 GMT
Accept-Ranges: bytes
ETag: "e9d450c05074d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:45 GMT
Content-Length: 9294

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3450
Expires: Tue, 29 Nov 2022 11:54:15 GMT
Date: Tue, 29 Nov 2022 10:56:45 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3450
Expires: Tue, 29 Nov 2022 11:54:15 GMT
Date: Tue, 29 Nov 2022 10:56:45 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9203 bytes)
Hash
5d574c4db20a68295dbd06cb08f5990b
433061bbb226048765a711deca3026ee3e52372f
8cc1a4d18e242f8bfc8ab94637f635b73554b903462c29b06d0ec67872542afb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9203
x-amzn-requestid: 8cba52d6-3c1c-495c-bb9d-3ba6f0adc7e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cHcHmGmQoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fa6fd-73abfa592ff223061401af9a;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 17:16:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UmhWm03jrsV8dFagrzIA0E-8eL8dykoO5kw3cYOBd172dCGqNdAX-Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:05:38 GMT
age: 24667
etag: "433061bbb226048765a711deca3026ee3e52372f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10176 bytes)
Hash
03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:52:21 GMT
age: 21864
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4916 bytes)
Hash
83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:01:17 GMT
age: 28528
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4871 bytes)
Hash
a4058fd62595d15c58b3d3266de9865a
d0dff35eb78f129b5da407043037bcf9c27e55c0
ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9BUuT9WFwAQMnl8JiTDKo-zHgDL0AdjAAAIh0Mx405zbGwhvRouebQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 12:30:42 GMT
age: 80763
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f728a04-45b0-4726-b646-628601e2ebbc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8578 bytes)
Hash
4b7d3821d0bd11c196724846a7b9fe22
5b1700fa9cd4f1aaafda28ac28a0e2086fa8499c
b4f820555c4daf6e112c1a395bc57e22f0ef8e2e4299a0ffbb54e0bf18c87f47

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f728a04-45b0-4726-b646-628601e2ebbc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8578
x-amzn-requestid: 4f948bb9-74db-4a5d-927d-a6b893735531
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFxnWHq-IAMF4LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637efc95-2f9e98ca2dad65a80e2195c2;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 05:09:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X2x9_hXC0JvEktFODEMuasu3QDg4ChtTLKJOmDVasT7IIsKlxkwXCQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:24:31 GMT
age: 23534
etag: "5b1700fa9cd4f1aaafda28ac28a0e2086fa8499c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10813 bytes)
Hash
005e5ba3c9588cf389a58195001b64e3
238a7439d887fb3aa7f1302eeb43fce62f08441a
d75dd5b6f57d9c9290725c5be76cc7d7a39682ca569bea18eceb9bdc13d444f9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10813
x-amzn-requestid: 5a3c9584-1389-45ac-968d-0a2301f82eda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KG00oAMFpig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-6ffc3ff67f7f7e75399834e8;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ir-Zzqt3ErueryuLgIxlgEtX-TQwpCC1brzCCzfURhjLnuUT8m03wQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 08:43:30 GMT
age: 7995
etag: "238a7439d887fb3aa7f1302eeb43fce62f08441a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

113.106.4.6/website/jquery.js

113.106.4.6

200 OK

72 kB

URL HTTP/1.1
113.106.4.6/website/jquery.js
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
ASCII text, with very long lines (820), with CRLF line terminators
Size
72 kB (71946 bytes)
Hash
7dbad17bcdffc6e87e8ac7769257434a
57bbda3540a3bdb0080358b511af51ad2310c401
22fd64cd60bed5cd18164de50a334a340497f80c0c50d164076f43c40838ed0f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/jquery.js HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 21 Jan 2014 12:26:14 GMT
Accept-Ranges: bytes
ETag: "0f797f9a316cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:45 GMT
Content-Length: 71946

113.106.4.6/website/img/menu.jpg

113.106.4.6

200 OK

54 kB

URL HTTP/1.1
113.106.4.6/website/img/menu.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:22 20:39:54], baseline, precision 8, 629x61, components 3\012- data
Size
54 kB (53678 bytes)
Hash
09670b3ae0191e1cc924b5cf3d3e98ab
7b465704d75064da0631281f40c58cc1566e3031
c902d8376486ea7022f0f758b1a455dc92dd4e5b884263d3588e2d7bed14bffe

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/menu.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:10 GMT
Accept-Ranges: bytes
ETag: "c7408f55174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 53678

113.106.4.6/website/img/index_product.jpg

113.106.4.6

200 OK

30 kB

URL HTTP/1.1
113.106.4.6/website/img/index_product.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 13:42:17], baseline, precision 8, 986x36, components 3\012- data
Size
30 kB (29904 bytes)
Hash
b9c0562bcfa972c95d0503c6aac33550
26a5e08b1f158f369c4e797fbfc9e0484ffef2ea
05c03ba4081f4f69ab6267bafc3dadf941d13f9b32e9655af40aae43295d2e69

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/index_product.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:09 GMT
Accept-Ranges: bytes
ETag: "73b23555174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 29904

113.106.4.6/website/img/top_bg.jpg

113.106.4.6

200 OK

22 kB

URL HTTP/1.1
113.106.4.6/website/img/top_bg.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:22 20:11:11], baseline, precision 8, 18x99, components 3\012- data
Size
22 kB (22505 bytes)
Hash
ab6e028ffab1329a4307a88c61586efe
5467231be3e7f78f26dddb3c6de5fbc20bb930c0
4aa99dfd2367671707f1c354b5ca77814f4e7838f1a16a13e05b66f23cb8eb7b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/top_bg.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:11 GMT
Accept-Ranges: bytes
ETag: "a451e755174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 22505

113.106.4.6/website/img/feeback.jpg

113.106.4.6

200 OK

43 kB

URL HTTP/1.1
113.106.4.6/website/img/feeback.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 13:34:16], baseline, precision 8, 271x60, components 3\012- data
Size
43 kB (42769 bytes)
Hash
f033a0ba8af0007ffcdee97c49bd777b
01603e25b546afa9627ad7e7436cb23e7d817f1b
d6ac309738637f51b01f726063a6152c1e1de134551141719c0daf33aa32ddc1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/feeback.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:08 GMT
Accept-Ranges: bytes
ETag: "5f9b5945174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 42769

113.106.4.6/upload/image/20130926/20130926085868826882.jpg.s.jpg

113.106.4.6

200 OK

28 kB

URL HTTP/1.1
113.106.4.6/upload/image/20130926/20130926085868826882.jpg.s.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3\012- data
Size
28 kB (27691 bytes)
Hash
bd6ddceb78d1203cf8986421fafcbc9b
b4ae002060dc15ca7b6c8deee387dc46fd06abc9
7289ca6f06775db1c8b371bfb2762d5d0543a443c87a1f9bc85f6a193722c9ba

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /upload/image/20130926/20130926085868826882.jpg.s.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:46:26 GMT
Accept-Ranges: bytes
ETag: "3489e53d4f74d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 27691

113.106.4.6/upload/image/20130926/20130926085764566456.jpg.s.jpg

113.106.4.6

200 OK

19 kB

URL HTTP/1.1
113.106.4.6/upload/image/20130926/20130926085764566456.jpg.s.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3\012- data
Size
19 kB (19168 bytes)
Hash
cc8d9f34642c604098af6ac03002c345
2bc8373424afa1ff9986f53e3d3c8d126364c960
69dd250ef18728375e25beac254b5569b719d793bfc97d272a9533f04a3ff536

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /upload/image/20130926/20130926085764566456.jpg.s.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:46:13 GMT
Accept-Ranges: bytes
ETag: "4f706a364f74d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 19168

113.106.4.6/website/img/brand.jpg

113.106.4.6

200 OK

44 kB

URL HTTP/1.1
113.106.4.6/website/img/brand.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 13:34:32], baseline, precision 8, 271x60, components 3\012- data
Size
44 kB (44135 bytes)
Hash
2a042be6393a2a3aa13702e24adc3c47
8a7dd8d6afe41d8f80514bb04b7356cf43896279
0760f83e89019140e48818c0056ca346e8c2f1a9985d7badc17bf0cfa8ac804c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/brand.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:06 GMT
Accept-Ranges: bytes
ETag: "78a47935174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 44135

113.106.4.6/website/123.jpg

113.106.4.6

200 OK

83 kB

URL HTTP/1.1
113.106.4.6/website/123.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:02:14 17:30:21], progressive, precision 8, 350x350, components 3\012- data
Size
83 kB (83182 bytes)
Hash
446bcb39fb2f6041508b7aae51a57769
f463fdca1953505d4f542857c7129f5c1db06c6c
2f43488f2d54b287a0893a5d00696340665b966965b28bae99e9642dfae2301d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/123.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Thu, 14 Feb 2019 09:35:08 GMT
Accept-Ranges: bytes
ETag: "f4a3b9348c4d41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 83182

113.106.4.6/upload/image/20130926/20130926085543774377.jpg.s.jpg

113.106.4.6

200 OK

20 kB

URL HTTP/1.1
113.106.4.6/upload/image/20130926/20130926085543774377.jpg.s.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3\012- data
Size
20 kB (19992 bytes)
Hash
5adcb42c67a5721149821c9f862ea992
8e7830110f69db94c7e5c5fc9c437456be9fa545
da5f39ab93e534e47d540c4c3a73a02eda85588bd24524c3d5733693042e130c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /upload/image/20130926/20130926085543774377.jpg.s.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:46:12 GMT
Accept-Ranges: bytes
ETag: "e2422364f74d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 19992

113.106.4.6/upload/image/20130926/20130926085478807880.jpg.s.jpg

113.106.4.6

200 OK

30 kB

URL HTTP/1.1
113.106.4.6/upload/image/20130926/20130926085478807880.jpg.s.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3\012- data
Size
30 kB (29957 bytes)
Hash
0dab02f0865e516d50719d8564142ff3
46b626a63cef8796965a594a708f44af0d4207a8
d1c035e0ad4af4e83aa060cce7bc85d9e8db9199caf4c33d2ee5584639699aa1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /upload/image/20130926/20130926085478807880.jpg.s.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:46:12 GMT
Accept-Ranges: bytes
ETag: "bb3af3354f74d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 29957

113.106.4.6/website/2022031011490541541.jpg

113.106.4.6

200 OK

63 kB

URL HTTP/1.1
113.106.4.6/website/2022031011490541541.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x50, components 3\012- data
Size
63 kB (63435 bytes)
Hash
05e6e4cd03aa3d2cc5ddfbdb131ef921
1a043ef480764d2d7fc8248734cb7c0ab1f14bea
b00846b0cd498aaffcc5eee67ce718249d08efb7f463805832366d840ee99638

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/2022031011490541541.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 09 Nov 2022 06:50:24 GMT
Accept-Ranges: bytes
ETag: "efb8788b7f4d81:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:48 GMT
Content-Length: 63435

113.106.4.6/website/img/right_menu.jpg

113.106.4.6

200 OK

30 kB

URL HTTP/1.1
113.106.4.6/website/img/right_menu.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 17:03:32], baseline, precision 8, 327x26, components 3\012- data
Size
30 kB (30019 bytes)
Hash
d84a8b58cc458ac7dd2835c15cd6e7b2
3b4fc44d0916f353a707169464e40b1d60cb02b6
7dd5bd126c5ca004f1186ba2848e164db0ed6441bce18ea995c90b69de299bb3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/right_menu.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:10 GMT
Accept-Ranges: bytes
ETag: "b2c3ba55174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 30019

113.106.4.6/website/img/gg_dot.jpg

113.106.4.6

200 OK

23 kB

URL HTTP/1.1
113.106.4.6/website/img/gg_dot.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:22 20:48:24], baseline, precision 8, 25x20, components 3\012- data
Size
23 kB (22750 bytes)
Hash
3171d2e154ed6eb2f9be267aef2aa448
1d12cf38828b35dfc6039b0ae06bfe32b21c680b
b8c099506d4aa19fe224604c24b15040b116b081db314ea0d3819e073e92bcb8

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/gg_dot.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:09 GMT
Accept-Ranges: bytes
ETag: "9d8b045174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 22750

113.106.4.6/website/img/search_doto.jpg

113.106.4.6

200 OK

25 kB

URL HTTP/1.1
113.106.4.6/website/img/search_doto.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:22 21:30:29], baseline, precision 8, 77x26, components 3\012- data
Size
25 kB (25155 bytes)
Hash
16ba4685ca0b305ddee7c9e7ef700d5b
056968f0b94bef853708d5da3b3ccec58a22ce09
f6b43f89b3fd77cd227e48d6ea7493928d464cdd8d1e6ce98675a4324429397e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/search_doto.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:10 GMT
Accept-Ranges: bytes
ETag: "a9dac355174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 25155

113.106.4.6/website/441776323.jpg

113.106.4.6

200 OK

416 kB

URL HTTP/1.1
113.106.4.6/website/441776323.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x500, components 3\012- data
Size
416 kB (416164 bytes)
Hash
9cf9bb072687966f6bf5af09d869ab34
62d97ff978fd44512caee474c8b7411f974374e1
e1cd868ef2439aad8140ad905d8e9657598f13988b685db2df150908115ac958

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/441776323.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 09 Nov 2022 06:50:36 GMT
Accept-Ranges: bytes
ETag: "3fc16927f4d81:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 416164

113.106.4.6/website/img/logo.jpg

113.106.4.6

200 OK

52 kB

URL HTTP/1.1
113.106.4.6/website/img/logo.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:22 20:13:20], baseline, precision 8, 266x97, components 3\012- data
Size
52 kB (51633 bytes)
Hash
cb89e93c751a9c5d4b8fa74092b5318a
b05f001c97378f40a919fb000feab52ebcb44357
afd10e3b0700b7490779ad2df8833fdd0824c28dcce50799831ccd040e444a7d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/logo.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:10 GMT
Accept-Ranges: bytes
ETag: "f4cd6155174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 51633

113.106.4.6/website/img/news_tit.jpg

113.106.4.6

200 OK

28 kB

URL HTTP/1.1
113.106.4.6/website/img/news_tit.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 11:01:47], baseline, precision 8, 438x51, components 3\012- data
Size
28 kB (28306 bytes)
Hash
54942f7e9f1cef7e8efbe7b254454b1e
b11a8780d2d50dc34722cf1754e187a677286688
ec752ba17a318ba3a8833b6775b8fc2d70f22b6d4354f0192b628e012ecc99ef

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/news_tit.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:10 GMT
Accept-Ranges: bytes
ETag: "5ed98f55174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 28306

113.106.4.6/website/img/hot.jpg

113.106.4.6

200 OK

24 kB

URL HTTP/1.1
113.106.4.6/website/img/hot.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 11:15:45], baseline, precision 8, 43x12, components 3\012- data
Size
24 kB (23861 bytes)
Hash
3511761cd3b27b84aada951010592bc2
0e59665fa133dfa1fd26ce534cfaf1b227f6b00f
8f817889571e8645bbb08f144fc7fd9782fd922ab35aee3f5dc431d8505d0455

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/hot.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:09 GMT
Accept-Ranges: bytes
ETag: "67a3eb45174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 23861

113.106.4.6/website/img/dottt.jpg

113.106.4.6

200 OK

22 kB

URL HTTP/1.1
113.106.4.6/website/img/dottt.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 11:15:24], baseline, precision 8, 3x3, components 3\012- data
Size
22 kB (21820 bytes)
Hash
0b1ed36568d22c7e282daaec42bdbd8f
568cfa580cda69e645b8f3250ac72485828e54fe
2f63ea61104cc0ee9e31f053c21efbdd9d54028ee5e4e53e6396002ca90d639f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/dottt.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:08 GMT
Accept-Ranges: bytes
ETag: "7572945174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 21820

113.106.4.6/website/img/company_index_left.jpg

113.106.4.6

200 OK

64 kB

URL HTTP/1.1
113.106.4.6/website/img/company_index_left.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 10:08:16], baseline, precision 8, 245x177, components 3\012- data
Size
64 kB (63590 bytes)
Hash
a5197b0ea221a50fb4a31fd5036f2306
5e803dbbbb0be0806dfce8117337a4b267846095
2e14529827c51e7ad5a51186fea42fe30a0cbf63e7a9b9c614f30c7f94a0b59f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/company_index_left.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:07 GMT
Accept-Ranges: bytes
ETag: "5cc0d235174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 63590

113.106.4.6/upload/image/20221109/20221109145037873787.jpg

113.106.4.6

200 OK

41 kB

URL HTTP/1.1
113.106.4.6/upload/image/20221109/20221109145037873787.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x131, components 3\012- data
Size
41 kB (41120 bytes)
Hash
b9960ec86bb35292773acb47bff4d151
07b295d90db985a177cf508bd0a384995941e0f0
3f85bf93c03cdbeef9a2ba51391efc17dcdbfd0b08ae9fcb017efdeb1a1ea3b0

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /upload/image/20221109/20221109145037873787.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 09 Nov 2022 06:50:47 GMT
Accept-Ranges: bytes
ETag: "e36c1a997f4d81:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 41120

113.106.4.6/website/img/hz.jpg

113.106.4.6

200 OK

40 kB

URL HTTP/1.1
113.106.4.6/website/img/hz.jpg
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:09:23 13:33:58], baseline, precision 8, 271x60, components 3\012- data
Size
40 kB (40326 bytes)
Hash
1909b278cc54569ba42ce3ae71521846
7290505f19b379dbdd148e9e12d833eace907dca
cfe51e259e0f03aec5bc1d61372e32e101c5832c8ce1f5cd2380f19f6316188c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /website/img/hz.jpg HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 02 Mar 2016 06:59:09 GMT
Accept-Ranges: bytes
ETag: "36d8855174d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:49 GMT
Content-Length: 40326

113.106.4.6/favicon.ico

113.106.4.6

404 Not Found

63 B

URL HTTP/1.1
113.106.4.6/favicon.ico
IP
113.106.4.6:0
ASN
#4134 Chinanet

File type
Unicode text, UTF-8 text, with no line terminators
Size
63 B (63 bytes)
Hash
a2b3ceb2591c94dbac7b35519de0e8cf
b5079b99c8e8d5d0f3d232345cfa30e2ea6a3730
cc8a65d84ecebb6325c954c778fd0add5e61cfb288c89226b31125b35e30528d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 113.106.4.6
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://113.106.4.6/website/index.asp
Cookie: ASPSESSIONIDCCCDTSCD=DDNFFMOCMFEOBNMODCJBDFEM

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 29 Nov 2022 10:56:50 GMT
Content-Length: 63

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4329da24-0de7-409f-87fa-68fd5668aa29.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11082 bytes)
Hash
30820a2f1a026d67a31e7598773f9a04
796020fb42c93fde996945b41173e5191d98fc90
5da3e0535e72165a1aee6a7ac4ab290ac1ee77878019e8123ed5567ba6768732

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4329da24-0de7-409f-87fa-68fd5668aa29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 11082
x-amzn-requestid: f7a38cfd-874a-47fd-97cd-234459ce7868
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR8IxEKzIAMFiYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383da37-10cbaa3f0be7f1112fd4192e;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:44:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kABujFR_j7Zqp_rHqylVBtl1bDxofMkesq6G6EcE7NBRh2Hz8TnLXg==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 08:07:35 GMT
age: 10157
etag: "796020fb42c93fde996945b41173e5191d98fc90"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (45)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers