gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
200 OK 9.3 kB URL User Request GET HTTP/1.1 gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1901)
Hash bb3d86056d5579d4930b72cc33b2307e
00d898c6ec43b867ae74cbee60f1bde2d80f7f1d
5681d1f22c4f737168bb1a3a72fa2adda9ebbe73a348bc613df05085f6b3fb2d
GET /cx/071287/109/setup_1848woac.exe HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
200 OK 3.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash d29b3ea55b95667c92aa375c607f8999
b6742ff9251d4e9725c5e50b6a036bed56c07275
c2cf6cf78281376d470408027de1423a05e0901b5e690fde45060a13bfb21f2b
GET /template/news/kp/static/css/default.css HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: text/css
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-267f"
Expires: Wed, 27 Sep 2023 03:02:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/jquery-1.8.3.min.js
200 OK 38 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/jquery-1.8.3.min.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type ASCII text, with very long lines (65483)
Hash 3576a6e73c9dccdbbc4a2cf8ff544ad7
06e872300088b9ba8a08427d28ed0efcdf9c6ff5
61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf
GET /template/news/kp/static/js/jquery-1.8.3.min.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-16dc4"
Expires: Wed, 27 Sep 2023 03:02:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/jweixin-1.6.0.js
200 OK 4.5 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/jweixin-1.6.0.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type ASCII text, with very long lines (13020), with no line terminators
Hash 775529c69d2d5632895cc05e924780bb
9a507f353b17643d827af88bf9b7ea58eaaa04b1
e55662dc8c011c02ffc492e7140a8651ef0a4de6b907b69c4bb5e2982961da28
GET /template/news/kp/static/js/jweixin-1.6.0.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-32dc"
Expires: Wed, 27 Sep 2023 03:02:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/QRCode.js
200 OK 11 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/QRCode.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type HTML document, Unicode text, UTF-8 text, with very long lines (3129), with CRLF line terminators
Hash cc8eaa22182238be90db33f5854b9062
577596814ad86d792a9b8c1d802ce1c9d02ccd2e
10e416817a92bdaf4c6ef4c67eb2621d8e58cc3b305fbdfec558606d5e21a6cf
GET /template/news/kp/static/js/QRCode.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-83fb"
Expires: Wed, 27 Sep 2023 03:02:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/h5Share1.4.0.js
200 OK 3.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/h5Share1.4.0.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 174f69c6fc2257a11b55f6e2c9a22517
093ad1166ffd1b0f31fadb87d3a4738a2b53f302
f26f2c63f1a881426ea49b44a11074fac2dec27cf403e0aeffa595aa976ea200
GET /template/news/kp/static/js/h5Share1.4.0.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-1e9a"
Expires: Wed, 27 Sep 2023 03:02:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.js
200 OK 1.4 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash 01cad3ab35d7c07db68690dd16dd0686
270b82b37b507e2c752232f0ee00167d09c88536
dba0fe215ec0c11d66ba6d8383e1778e2403b08ad27e633abaa9fc6461d45101
GET /template/news/kp/static/js/share.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-105a"
Expires: Wed, 27 Sep 2023 03:02:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.min.js
200 OK 9.7 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/share.min.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type Unicode text, UTF-8 text, with very long lines (3740), with CRLF line terminators
Hash 5fca22c1ed7eb9de58d2f569e328b139
1554e9690ac447877d52b6b5a223b6900210ddcd
f1093bf0d68827be09a6390debbc665161e52d0c8b9c6be0b6758784690d55b4
GET /template/news/kp/static/js/share.min.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-96e2"
Expires: Wed, 27 Sep 2023 03:02:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/js/CA050000000608505660002.js
200 OK 2 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/CA050000000608505660002.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
GET /template/news/kp/static/js/CA050000000608505660002.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: application/javascript
Content-Length: 2
Last-Modified: Fri, 30 Dec 2022 06:39:32 GMT
Connection: keep-alive
ETag: "63ae87a4-2"
Expires: Wed, 27 Sep 2023 03:02:38 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/js/videofloat.js
200 OK 454 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/videofloat.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type ASCII text, with CRLF line terminators
Hash 14ad43d16b0881bb33a84a42b0beffcc
cc82c79e0c8216e842006eea84edff5215c2afe5
f8d5722c8c45205c5bc3158aa35559ac03c37ac02d211427751e82e2de2a63dd
GET /template/news/kp/static/js/videofloat.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: application/javascript
Content-Length: 454
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Connection: keep-alive
ETag: "63ae6e20-1c6"
Expires: Wed, 27 Sep 2023 03:02:38 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/js/WebClick.js
200 OK 626 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/js/WebClick.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 52067203cead2de2ba7458389fe896ba
1e35417496ad8676440833b5156f4ab0d4283f04
76656fa3760be451d42296c517b296b0f5e49e5a3be165e5c31537fb4e1120ee
GET /template/news/kp/static/js/WebClick.js HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: application/javascript
Last-Modified: Fri, 30 Dec 2022 04:50:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63ae6e20-485"
Expires: Wed, 27 Sep 2023 03:02:38 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo.png
200 OK 11 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type PNG image data, 218 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a2c3fc430b4e7bc1bf50d4cc7712111
0815c1c0826a1442eee7f5a996a5eb4031b2b4db
c94ba89359abdedf17f46062cd677f39962c3716d0e847ed37ff6bdfa2e07831
GET /template/news/kp/static/picture/logo.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/png
Content-Length: 10880
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-2a80"
Expires: Thu, 26 Oct 2023 15:02:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/js/orsxg5a.script
200 OK 1.0 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/js/orsxg5a.script
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 37e3975ee5f1d69f4e7b32da36a4e1d3
93f088664e21865a434a4ed8e6da858099c33e27
5434bae1a51380804285c751b5c00d11d4b3b6963d54e9112b694997d0d35a2e
GET /js/orsxg5a.script HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/jia.png
200 OK 950 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/jia.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 201b27abe777a9ed5ad3868afa7742e1
1d87cde7016e48604fedd2e4ed285dee9155a429
61d1dbf66a8dd90f9e815a3bb702c2b37a9de24bf54875196e05037de437b4a2
GET /template/news/kp/static/picture/jia.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/png
Content-Length: 950
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3b6"
Expires: Thu, 26 Oct 2023 15:02:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/images/ops_icons_02.png
200 OK 4.5 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/images/ops_icons_02.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type PNG image data, 24 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash d4ec326c116ff92c0523618b41dbef86
d3c7e8c83675f90fd86172ddf31fade043b22c30
bf4becd004087043d199083f2a638c4602abe45319da50e2a28b0d3b7722ed40
GET /template/news/kp/static/images/ops_icons_02.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/png
Content-Length: 4480
Last-Modified: Fri, 30 Dec 2022 04:50:38 GMT
Connection: keep-alive
ETag: "63ae6e1e-1180"
Expires: Thu, 26 Oct 2023 15:02:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo1.png
200 OK 14 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/logo1.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type PNG image data, 318 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash d7de55093ff46af69fca98109fb13136
fa78696b1ba6424137daba878884fd26e333fc00
feb57fadc7c884844428740ee76f4599d1733bc8621e8518cae272e86c044fbe
GET /template/news/kp/static/picture/logo1.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/png
Content-Length: 13464
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3498"
Expires: Thu, 26 Oct 2023 15:02:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/7b265b51-1ecb-4cf3-a67b-fa87de8b5b1f.jpg
404 Not Found 33 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/7b265b51-1ecb-4cf3-a67b-fa87de8b5b1f.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type ASCII text, with no line terminators
Hash 1e6cd917ed71a1241e4bedc29264bd98
5b65037351caeb0e5a48d963d7ffa88d0271d546
7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402
GET /template/news/kp/static/picture/7b265b51-1ecb-4cf3-a67b-fa87de8b5b1f.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/xi.png
200 OK 933 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/xi.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type PNG image data, 1 x 38, 8-bit/color RGB, non-interlaced\012- data
Hash ba46669a1a9b78293186cb64b64fd517
bcb57cca927dc4d8dab21918661094a355665c29
cd76621f98d11ccd2af883eed812f1dd5d562bb65266ebcb0106131c8f123888
GET /template/news/kp/static/picture/xi.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/png
Content-Length: 933
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3a5"
Expires: Thu, 26 Oct 2023 15:02:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/uploads/images/2848100.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/2848100.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/2848100.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/transform/w600h400/20180314/OB3C-fyscsmv3953556.jpg?zdy
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/to.png
200 OK 1.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/to.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced\012- data
Hash aad441ab11527e3dbef3940f269bbcf7
bdd911bc50dfe7261c2016125eb8e7ed98b76cf6
e8bd9bab70c48ebb99bd2a1023cdfac85248d69ce8fb99b5745964cc251ec147
GET /template/news/kp/static/picture/to.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/png
Content-Length: 1160
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-488"
Expires: Thu, 26 Oct 2023 15:02:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
n.sinaimg.cn/news/transform/w600h400/20180314/OB3C-fyscsmv3953556.jpg?zdy
200 OK 93 kB URL GET HTTP/1.1 n.sinaimg.cn/news/transform/w600h400/20180314/OB3C-fyscsmv3953556.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash a069c8fe129def0f9d6c80e5684ecd1b
bf49f2aabb4578f76b2089969542b694c2fb132f
9f8208abb7aeef98f46b0b632e118c71289a1dc724ac1d0fb4d6818bde02988a
GET /news/transform/w600h400/20180314/OB3C-fyscsmv3953556.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 92630
Connection: keep-alive
Date: Sun, 14 May 2023 13:53:30 GMT
X-RequestId: 8071622e-2305-1421-5330-5ca7213e0298
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:01:14 GMT
X-Filesize: 92630
ETag: "a069c8fe129def0f9d6c80e5684ecd1b"
x-amz-meta-crc32: 9A1E14B4
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1684072410708
Via: http/1.1 ctc.guangzhou.union.57 (ApacheTrafficServer/6.2.1 [cMsSfW]), cache8.l2st3-1[0,16,200-0,H], cache17.l2st3-1[18,0], cache12.l2hk2[0,0,200-0,H], cache27.l2hk2[1,0], cache11.l2de2[0,0,304-0,H], cache8.l2de2[0,0], cache7.se1[0,0,200-0,H], cache2.se1[1,0]
X-Via-CDN: f=aliyun,s=cache2.se1,c=91.90.42.154;f=sinaedge,s=cmcc.guangzhou.union.80.nb.sinaedge.com,c=113.96.59.26;f=Edge,s=ctc.guangzhou.union.57,c=172.16.174.80
X-Via-Edge: 16840724104051a3b607150ae10ac18693744
Ali-Swift-Global-Savetime: 1684072410
Age: 11668148
X-Cache: HIT TCP_MEM_HIT dirn:3:24285214
X-Swift-SaveTime: Fri, 09 Jun 2023 12:29:35 GMT
X-Swift-CacheTime: 29294635
Timing-Allow-Origin: *
EagleId: 2ff62c9616957405586602702e
gxx8295850.dwonxiazai.com/template/news/kp/static/common.js?_=1695740558658
404 Not Found 33 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/common.js?_=1695740558658
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type ASCII text, with no line terminators
Hash 1e6cd917ed71a1241e4bedc29264bd98
5b65037351caeb0e5a48d963d7ffa88d0271d546
7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402
GET /template/news/kp/static/common.js?_=1695740558658 HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/uploads/images/9143640.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/9143640.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/9143640.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/w1500h1000/20180314/hGGK-fyscsmv5188267.jpg?zdy
155.159.252.52/
200 OK 2.2 kB IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash baba1d17293225225028471c64b1bc54
9d9bc8ae5f6be77aad99e35b8724918f23457e15
c325762c885f22c30bd0994b2d34f6ebfd593ffd53d25546b1d12104b69258df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: text/html
Last-Modified: Wed, 16 Aug 2023 06:34:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64dc6de6-22f2"
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/uploads/images/279070.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/279070.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/279070.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/1_img/upload/2b0c102b/w899h599/20180314/3skQ-fyshaif9761582.jpg?zdy
n.sinaimg.cn/news/w1500h1000/20180314/hGGK-fyscsmv5188267.jpg?zdy
200 OK 873 kB URL GET HTTP/1.1 n.sinaimg.cn/news/w1500h1000/20180314/hGGK-fyscsmv5188267.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS 5D Mark III, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom 6.7 (Windows), datetime=2017:09:06 23:43:48], baseline, precision 8, 1500x1000, components 3\012- data
Size 873 kB (873183 bytes)
Hash 009288349e9f0d18b787ec696ae44706
a4e80620a8225b95225d438daa1f96e5051cc8e2
7d5f379aabc6fa35e35458ef5a81266ae60b78af0afed67e44981a8b75aed098
GET /news/w1500h1000/20180314/hGGK-fyscsmv5188267.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 873183
Connection: keep-alive
Date: Tue, 25 Apr 2023 05:22:03 GMT
X-RequestId: 65599169-2304-2513-2203-b0087553a06f
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:03:00 GMT
X-Filesize: 873183
ETag: "009288349e9f0d18b787ec696ae44706"
x-amz-meta-crc32: 389222BF
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1682400123877
Via: http/1.1 ctc.guangzhou.union.188 (ApacheTrafficServer/6.2.1 [cMsSfW]), cache34.l2st3-1[0,28,200-0,H], cache23.l2st3-1[30,0], cache23.l2hk2[0,0,200-0,H], cache2.l2hk2[2,0], cache10.l2de2[0,17,304-0,H], cache26.l2de2[19,0], cache7.se1[0,1,200-0,H], cache2.se1[2,0]
X-Via-CDN: f=aliyun,s=cache2.se1,c=91.90.42.154;f=sinaedge,s=cmcc.guangzhou.union.99.nb.sinaedge.com,c=120.241.4.153;f=Edge,s=ctc.guangzhou.union.188,c=172.16.174.99
X-Via-Edge: 16824001232679904f17863ae10ac222cd4a3
Ali-Swift-Global-Savetime: 1682400123
Age: 13340435
X-Cache: HIT TCP_HIT dirn:11:389794386
X-Swift-SaveTime: Wed, 31 May 2023 21:32:03 GMT
X-Swift-CacheTime: 28367400
Timing-Allow-Origin: *
EagleId: 2ff62c9616957405589383184e
gxx8295850.dwonxiazai.com/uploads/images/8093360.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/8093360.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/8093360.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/translate/w1000h600/20180315/7cUc-fyscsmv9629254.jpg?zdy
gxx8295850.dwonxiazai.com/uploads/images/9965410.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/9965410.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/9965410.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/transform/w600h400/20180313/8yoX-fyscsmu9363918.jpg?zdy
gxx8295850.dwonxiazai.com/template/news/kp/static/images/s_top.png
200 OK 21 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/images/s_top.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type PNG image data, 124 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash 41b1c76ccf09dc08379eb9dbaa818d5f
ce958d0ce67cb3bb781ca2dcc7cb83397bf55509
b95de7ea4a8675e1c56a529cb04d45da114ccff5488a9be3f920102d23db4f4c
GET /template/news/kp/static/images/s_top.png HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/template/news/kp/static/css/default.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/png
Content-Length: 21126
Last-Modified: Fri, 30 Dec 2022 04:50:38 GMT
Connection: keep-alive
ETag: "63ae6e1e-5286"
Expires: Thu, 26 Oct 2023 15:02:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
n.sinaimg.cn/news/1_img/upload/2b0c102b/w899h599/20180314/3skQ-fyshaif9761582.jpg?zdy
200 OK 339 kB URL GET HTTP/1.1 n.sinaimg.cn/news/1_img/upload/2b0c102b/w899h599/20180314/3skQ-fyshaif9761582.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 899x599, components 3\012- data
Size 339 kB (339316 bytes)
Hash 339a827ac767cf5d74003dce7e282b34
c58e858a0d8dcc48b4d17844889edba4f1e46790
74ce0bdcc783fff058d2e8709ed8453e86cd9c82d6b192afb8cc42d604a7bce3
GET /news/1_img/upload/2b0c102b/w899h599/20180314/3skQ-fyshaif9761582.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 339316
Connection: keep-alive
Date: Tue, 01 Aug 2023 08:16:14 GMT
X-RequestId: 72aba278-2308-0114-0127-b0087553a676
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 03:07:31 GMT
X-Filesize: 339316
ETag: "339a827ac767cf5d74003dce7e282b34"
x-amz-meta-crc32: B4210D35
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1690871227865
Via: http/1.1 cmcc.guangzhou.union.78 (ApacheTrafficServer/6.2.1 [cHs f ]), http/1.1 ctc.yongfeng.union.101 (ApacheTrafficServer/6.2.1 [cHs f ]), cache4.l2st3-1[169,169,200-0,M], cache19.l2st3-1[171,0], cache3.l2sg2[293,292,200-0,M], cache9.l2sg2[294,0], cache6.l2de2[0,14,304-0,H], cache25.l2de2[16,0], cache3.se1[0,0,200-0,H], cache2.se1[1,0]
X-Via-Edge: 1690877774890a104f17864b510ac79e5dcd4
X-Via-CDN: f=aliyun,s=cache2.se1,c=91.90.42.154;f=sinaedge,s=cmcc.beijing.union.110.nb.sinaedge.com,c=120.241.4.161;f=Edge,s=ctc.yongfeng.union.101,c=172.16.181.100
Ali-Swift-Global-Savetime: 1690877774
Age: 4862785
X-Cache: HIT TCP_MEM_HIT dirn:2:438470718
X-Swift-SaveTime: Wed, 02 Aug 2023 10:55:49 GMT
X-Swift-CacheTime: 31440025
Timing-Allow-Origin: *
EagleId: 2ff62c9616957405590403338e
n.sinaimg.cn/translate/w1000h600/20180315/7cUc-fyscsmv9629254.jpg?zdy
200 OK 131 kB URL GET HTTP/1.1 n.sinaimg.cn/translate/w1000h600/20180315/7cUc-fyscsmv9629254.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x600, components 3\012- data
Size 131 kB (130628 bytes)
Hash 6fe9481994b973605f8fa51dc4644f3c
8d6cb198f06a7a5062f5843fbf18e43ca97b02d2
c4471c150a8a51806984724f176b12c2e553b7e5199697789fa7c583961dd7b7
GET /translate/w1000h600/20180315/7cUc-fyscsmv9629254.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 130628
Connection: keep-alive
Date: Thu, 06 Jul 2023 08:21:18 GMT
X-RequestId: 84bca25b-2307-0219-5635-b0087553a06f
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Thu, 15 Mar 2018 03:43:13 GMT
X-Filesize: 130628
ETag: "6fe9481994b973605f8fa51dc4644f3c"
x-amz-meta-crc32: 26A6381E
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1688298995916
Via: http/1.1 ctc.guangzhou.union.183 (ApacheTrafficServer/6.2.1 [cHs f ]), cache11.l2st3-1[0,14,200-0,H], cache45.l2st3-1[15,0], cache16.l2hk2[0,26,200-0,H], cache14.l2hk2[29,0], cache1.l2de2[0,0,304-0,H], cache3.l2de2[1,0], cache4.se1[0,0,200-0,H], cache2.se1[1,0]
X-Via-CDN: f=aliyun,s=cache2.se1,c=91.90.42.154;f=sinaedge,s=cmcc.guangzhou.union.64.nb.sinaedge.com,c=120.241.4.131;f=Edge,s=ctc.guangzhou.union.183,c=172.16.174.64
X-Via-Edge: 16886316781578304f17840ae10ac3e136b79
Ali-Swift-Global-Savetime: 1688631678
Age: 7108881
X-Cache: HIT TCP_MEM_HIT dirn:4:143913585
X-Swift-SaveTime: Tue, 01 Aug 2023 08:03:22 GMT
X-Swift-CacheTime: 29290676
Timing-Allow-Origin: *
EagleId: 2ff62c9616957405591813590e
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/20200720.jpg
200 OK 4.1 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/20200720.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 116x46, components 3\012- data
Hash 26404a7f8316cb83fed2947bb87120fa
ebeeeaca5fd4f8dde0f996bf9ab39261383f515c
2b164c6edb6ec15f02e4752cf10b412bcb920da0b25dac21039eead0d64ae1fe
GET /template/news/kp/static/picture/20200720.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 4124
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-101c"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
n.sinaimg.cn/news/transform/w600h400/20180313/8yoX-fyscsmu9363918.jpg?zdy
200 OK 56 kB URL GET HTTP/1.1 n.sinaimg.cn/news/transform/w600h400/20180313/8yoX-fyscsmu9363918.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash 27a1042c816d22dd2bcdb5d4df16ea73
959e122ce969e3a4f283a1b83da889d40d2a3a11
4bf31101aec15cf4390143092d8463f6bce752f44020b85b7250996bdd3ae1fb
GET /news/transform/w600h400/20180313/8yoX-fyscsmu9363918.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 55761
Connection: keep-alive
Date: Thu, 16 Mar 2023 19:20:37 GMT
X-RequestId: 636f9036-2303-1700-3155-b4055d712bad
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:01:14 GMT
X-Filesize: 55761
ETag: "27a1042c816d22dd2bcdb5d4df16ea73"
x-amz-meta-crc32: A5908162
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1678984315760
Via: http/1.1 cmcc.guangzhou.union.82 (ApacheTrafficServer/6.2.1 [cHs f ]), cache42.l2st3-1[0,0,200-0,H], cache21.l2st3-1[1,0], cache22.l2hk2[0,17,200-0,H], cache24.l2hk2[19,0], cache21.l2de2[0,9,304-0,H], cache20.l2de2[13,0], cache3.se1[0,0,200-0,H], cache2.se1[1,0]
X-Via-CDN: f=aliyun,s=cache2.se1,c=91.90.42.154;f=edge,s=ctc.guangzhou.union.54.nb.sinaedge.com,c=120.241.4.160;f=Edge,s=cmcc.guangzhou.union.82,c=10.31.54.54
X-Via-Edge: 1678994437798a004f17836361f0a01708576
Ali-Swift-Global-Savetime: 1678994437
Age: 16746122
X-Cache: HIT TCP_MEM_HIT dirn:1:348404954
X-Swift-SaveTime: Tue, 30 May 2023 21:28:18 GMT
X-Swift-CacheTime: 25048339
Timing-Allow-Origin: *
EagleId: 2ff62c9616957405592193627e
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd371f.gif
200 OK 943 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd371f.gif
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type GIF image data, version 87a, 118 x 48\012- data
Hash d9a435af2983888c8bd3a48e6b55ebdd
220114afe05d53eb7db10ced337948c764424a7e
a885a265b14dd9a9c87027dd382d550d48d467c3f4e6578a222ed788c371b843
GET /template/news/kp/static/picture/001aa0c3d91f119fcd371f.gif HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/gif
Content-Length: 943
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-3af"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/12377_2.jpg
200 OK 4.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/12377_2.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x48, components 3\012- data
Hash 65b4349aa4f1098f132646e11accdeec
ead984be590cd09040a2722d0f715165994879a7
8312675bed2950c848d7a5fbdb35cf882dcec44c2d42f9064b6dba0df3bfef10
GET /template/news/kp/static/picture/12377_2.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 4167
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-1047"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/wenhua.jpg
200 OK 2.7 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/wenhua.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 48x48, components 3\012- data
Hash 2981a06ef63d392be814ea291b73266c
855fbdb82a7ba511f0e08703159d078e37b90474
870a8e7e09f6d753231bd640d97f04c58b3d4f6733b852dbb6960732edb71c2b
GET /template/news/kp/static/picture/wenhua.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 2717
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-a9d"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd3721.gif
200 OK 1.2 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/001aa0c3d91f119fcd3721.gif
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type GIF image data, version 87a, 118 x 48\012- data
Hash f643e23ae115467c3cbf94d55d524680
1b503d5cfbaeb58303488fb46a5d88e6c5078f44
9dc874495c122bc7c63fcf2f1d23661e7b279ad02130d7077c054f9bb187349f
GET /template/news/kp/static/picture/001aa0c3d91f119fcd3721.gif HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/gif
Content-Length: 1238
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-4d6"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/css/swiper.min.css?v=2021web
200 OK 4.5 kB URL GET HTTP/1.1 155.159.252.52/static/css/swiper.min.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (13425), with CRLF line terminators
Hash 6604e7f8fbafb482f29e0dfa78e0e2e5
520ff7d839d3a94c855c9d75a76b5b166a5bf1b9
6d0a4af85bd32d089f36e072c98a15212d4468d562be75c0c3ef16c611c971cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/swiper.min.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Nov 2021 14:41:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6197b7a4-3579"
Expires: Wed, 27 Sep 2023 03:02:39 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/css/web.css?v=2021web
200 OK 3.9 kB URL GET HTTP/1.1 155.159.252.52/static/css/web.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (15835), with CRLF line terminators
Hash 7b2ba6b1693108bd2fd33ded77801fb0
26e4ce47051c560739f8dd3e26916e34554c2fa5
80a4949c8c56a68157cc94ba9a35c3df5f0ff031c1ef325362b8fc0229b57d07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/web.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Dec 2021 16:53:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ae4011-3def"
Expires: Wed, 27 Sep 2023 03:02:39 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hbrb.jpg
200 OK 4.3 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hbrb.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 72x72, components 3\012- data
Hash 595b7c98de7da5dc3681da4ccf880f6e
f7988064cfcce067c57cdab4ca54eaa3f306db87
0985c85e6927d2b559cf41a50386e8ecfe6571bee3deeae641e0176e29849ef0
GET /template/news/kp/static/picture/weixin_hbrb.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 4342
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-10f6"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_yzdsb.jpg
200 OK 4.4 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_yzdsb.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 72x75, components 3\012- data
Hash cd04e73d8c5cc9f5821fc19dd2b8d5cd
118f5c19b2fc32ced4ed30b56e8e8983869145d2
0bee655776a550aba9f848b50eebf3e448e73d4977910912f6476f087c3dcac0
GET /template/news/kp/static/picture/weixin_yzdsb.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 4443
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-115b"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?3f7487e9fa770fdc0dcffa98b6d51956 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Tue, 26 Sep 2023 15:02:39 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
gxx8295850.dwonxiazai.com/uploads/images/752397.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/uploads/images/752397.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/752397.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:38 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/front/w763h720/20180311/lubF-fxpwyhx0209095.jpg?zdy
155.159.252.52/config.js?v=2021web
200 OK 594 B URL GET HTTP/1.1 155.159.252.52/config.js?v=2021web
IP
ASN #137951 Clayer Limited
Hash 75563f1c596eb176ae2de67f5e4a2b78
4aeeccd0dd450179e4709e6ebf432c3e0a5791ef
c3c2d2a219a8b7fb0f22608174965eef9beaa155a3710a08331af1f24dc2a0cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /config.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: application/javascript
Last-Modified: Sun, 28 May 2023 08:03:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64730aec-49c"
Expires: Wed, 27 Sep 2023 03:02:39 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/2022qr2.jpg
200 OK 5.7 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/2022qr2.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 72x72, components 3\012- data
Hash 2f0ef987eee35d189af59b1976f20cc7
1b020bfdb3a06069dcf7cdecede4f3116e44d407
f30c48c4b0daf39906a5c1cfc8f2ae669ee6cd4ebb4208ae7e9960c83968de7a
GET /template/news/kp/static/picture/2022qr2.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 5726
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-165e"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
n.sinaimg.cn/front/w763h720/20180311/lubF-fxpwyhx0209095.jpg?zdy
200 OK 166 kB URL GET HTTP/1.1 n.sinaimg.cn/front/w763h720/20180311/lubF-fxpwyhx0209095.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 763x720, components 3\012- data
Size 166 kB (166340 bytes)
Hash c2bc20f6bae6ecf6ec2677de0e285a4a
db11c9918dca34c908deedfb93ef5bf2566f4a42
6626890014a225155656540eeec37168489ad67e4e1796f58808b8a4157c3c78
GET /front/w763h720/20180311/lubF-fxpwyhx0209095.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295850.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 166340
Connection: keep-alive
Date: Wed, 17 May 2023 11:11:09 GMT
X-RequestId: 81a8e484-2305-1701-5335-b00875539d4a
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 11 Mar 2018 07:00:16 GMT
X-Filesize: 166340
ETag: "c2bc20f6bae6ecf6ec2677de0e285a4a"
x-amz-meta-crc32: 3B96974E
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1684259615561
Via: http/1.1 cmcc.guangzhou.union.80 (ApacheTrafficServer/6.2.1 [cHs f ]), cache1.l2st3-1[26,26,200-0,M], cache10.l2st3-1[27,0], cache35.l2hk2[0,20,200-0,H], cache1.l2hk2[22,0], cache1.l2de2[0,0,200-0,H], cache11.l2de2[1,0], cache4.se1[0,10,200-0,H], cache2.se1[13,0]
X-Via-CDN: f=aliyun,s=cache2.se1,c=91.90.42.154;f=sinaedge,s=cmcc.guangzhou.union.82.nb.sinaedge.com,c=157.255.168.105;f=Edge,s=cmcc.guangzhou.union.80,c=172.16.174.82
X-Via-Edge: 168432186918969a8ff9d52ae10ac428110cb
Ali-Swift-Global-Savetime: 1684321869
Age: 11418690
X-Cache: HIT TCP_HIT dirn:2:64553950
X-Swift-SaveTime: Thu, 01 Jun 2023 06:40:33 GMT
X-Swift-CacheTime: 30256236
Timing-Allow-Origin: *
EagleId: 2ff62c9616957405597544375e
gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hebnews.jpg
200 OK 17 kB URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/template/news/kp/static/picture/weixin_hebnews.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=72, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=72], baseline, precision 8, 72x72, components 3\012- data
Hash 7fc13d1ec14af080956a41236134c059
7b51610e57511567efec51eb1234cbfdbea695b5
04788c54ba72c15ba605b65a2dbac7cdba0e07f4ab8903cd6dc121f9d4991afa
GET /template/news/kp/static/picture/weixin_hebnews.jpg HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 17091
Last-Modified: Fri, 30 Dec 2022 04:50:20 GMT
Connection: keep-alive
ETag: "63ae6e0c-42c3"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_top_game.png
200 OK 5.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_top_game.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash 254b8b403316cc5754d821c3ac9620e6
dd75d61cd66f114f3ee66e880b9fea2495ade226
97dec4a15fd692863e0679d739c952d005e635c1fe02d499dbb165cca72ea618
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_top_game.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/png
Content-Length: 5680
Last-Modified: Fri, 19 Nov 2021 14:41:38 GMT
Connection: keep-alive
ETag: "6197b7a2-1630"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295850.dwonxiazai.com/favicon.ico
200 OK 0 B URL GET HTTP/1.1 gxx8295850.dwonxiazai.com/favicon.ico
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: gxx8295850.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295850.dwonxiazai.com/cx/071287/109/setup_1848woac.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Fri, 19 May 2023 11:18:09 GMT
Connection: keep-alive
ETag: "64675af1-0"
Accept-Ranges: bytes
155.159.252.52/static/img/pf_sz.png
200 OK 6.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 120 x 116, 8-bit colormap, non-interlaced\012- data
Hash ad91a2962b509f47929d99568cdde95a
624b3a593fb770e575d22407e3a59cfc8f5febea
4512d1cba75fab0d99ac353265a2450e839a63105c35182370752abdaa067d8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:40 GMT
Content-Type: image/png
Content-Length: 6450
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1932"
Expires: Thu, 26 Oct 2023 15:02:40 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/js/swiper.min.js?v=2021web
200 OK 42 kB URL GET HTTP/1.1 155.159.252.52/static/js/swiper.min.js?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (65284)
Hash ad2b984fe68303c7fd990f49dd125f9e
a7970d44348a8709eb519f5b9daf870d0ba9426a
0d99312788aaac576be48996454890f9bfa4df8a6f94fdab5ad1366b8d846d2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/js/swiper.min.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: application/javascript
Last-Modified: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"639f2ea0-2265a"
Expires: Wed, 27 Sep 2023 03:02:39 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/pf_fc.png
200 OK 7.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_fc.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 136 x 132, 8-bit colormap, non-interlaced\012- data
Hash 996941a20bcd2d89398a38eeae1e0996
37655f7dbe5e890584dec5a8cbe0e994ccd1f9b1
c01cf130af4eb716b4d47f3306d41e63119e50e34ad52e80946f94fb038067ae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_fc.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:40 GMT
Content-Type: image/png
Content-Length: 7493
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-1d45"
Expires: Thu, 26 Oct 2023 15:02:40 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/qz.js?0.9404492917086392
200 OK 424 B URL GET HTTP/1.1 155.159.252.52/qz.js?0.9404492917086392
IP
ASN #137951 Clayer Limited
Hash fde1acd3828e338a56c1765f062a121b
1ec6bd9ad84885c3a79bb0dcad95e81c808e810d
21ab6a287aa43fe216c0ffbda1b88490f4a366f78b7dd40df17144ba9a9465b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /qz.js?0.9404492917086392 HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:40 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Sep 2023 13:47:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6512e0d4-478"
Expires: Wed, 27 Sep 2023 03:02:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/pf_zq.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_zq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 128 x 120, 8-bit colormap, non-interlaced\012- data
Hash 29c208d312b1b25c23f7cc75d9d722da
1b1243dd105b5bd5856a9ddfb1f5396135caf788
bcdce634fbf54b4a84812895146a2a6e70f1a51f1d03180de40d6780dedac1a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_zq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:41 GMT
Content-Type: image/png
Content-Length: 6954
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1b2a"
Expires: Thu, 26 Oct 2023 15:02:41 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_tq.png
200 OK 7.1 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_tq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 124 x 120, 8-bit colormap, non-interlaced\012- data
Hash 43833604561af8ebc610e245a093df7a
5720981a98db3e1d8e790aeb2aaed8736b488636
faf237f95fe09f4fab31e741b4849e84bc497bddd8fc6653b9d5bda04237efd5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_tq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:41 GMT
Content-Type: image/png
Content-Length: 7085
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1bad"
Expires: Thu, 26 Oct 2023 15:02:41 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_777.png
200 OK 10 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_777.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 172 x 164, 8-bit colormap, non-interlaced\012- data
Hash c338ca6f666f9a6389243e519679bafe
ce0e1fb215aaf52fb2711642cf954f7519f8ad5f
067ebd49fa7b3413fb912dd3801fbfab938371eeea09c7b269dbca6abcc79bfa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_777.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:41 GMT
Content-Type: image/png
Content-Length: 10339
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-2863"
Expires: Thu, 26 Oct 2023 15:02:41 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_zr.png
200 OK 121 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_zr.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 121 kB (121229 bytes)
Hash a691f396c473aa877d66dcc169597c64
d9b5daf91bfa46233fcd701146691f11d30aba87
c8bdd010d21a319777891807be19d13173d5730c966ff6897d65ce8a0b2244b0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_zr.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/png
Content-Length: 121229
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1d98d"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_qp.png
200 OK 115 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_qp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 115 kB (115196 bytes)
Hash 0ea04fcfea1b06ea4f8d6b968b8b3a8f
453e2e125220a1eeb3f9d948d7f08833ef6aff6b
381944f290c0f63dbeb208634a3de02b821024e5d8d216369f192cee6d27f76c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_qp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/png
Content-Length: 115196
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-1c1fc"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_sb.png
200 OK 8.3 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sb.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 140 x 136, 8-bit colormap, non-interlaced\012- data
Hash 517f51d310a42f070d0b9769981ef801
38f4fe2ae3acbadc7aa1bbe2211f14c46747dd77
c447ea77e4015e533924fc6574236c04ff5cc569f9b1f7267d788010c6d9be36
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sb.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:41 GMT
Content-Type: image/png
Content-Length: 8339
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-2093"
Expires: Thu, 26 Oct 2023 15:02:41 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_left.png
200 OK 757 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_left.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash 3a547fa8debd16ad353a1071391b33b4
6b9fc14318ef032c8780ffea4316f71879587592
ec26d91bab019f3f6c2e6dfaa846470bdaa40b94d10e3b2dc1a48ed5507a8cd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_left.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 757
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2f5"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_ty.png
200 OK 113 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_ty.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 113 kB (112821 bytes)
Hash 97bafd361b9b620c7678e552024225c3
cbdd8488090148f5f73a97a91d3a24a6c07453b3
a2340fa63f1b53aebb946f62730dd4f64c9f42585126eb1152057d71b56fadce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_ty.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/png
Content-Length: 112821
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1b8b5"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_tabsbg.png
200 OK 4.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_tabsbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2080 x 128, 8-bit colormap, non-interlaced\012- data
Hash 721b5f94951c6f0afd4737c11f68578f
a01cc2ce8bef94af3da98370d4e7ab66846f20e8
f47165133efac8e12274e9911ca4b6c47cf8cab47d0c7fd1e201b77f903d1ec2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_tabsbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 4722
Last-Modified: Fri, 19 Nov 2021 14:41:19 GMT
Connection: keep-alive
ETag: "6197b78f-1272"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_right.png
200 OK 743 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_right.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash c932553300eae7cdcb99696b1920bda9
6e4b0905ea61d8a0f77d6ac32bbf5e163a5d988b
31d0b6073a2432fd03fd42bef7c91db11b8f4c01225d2af4f1ddfaf9d7ae406a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_right.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 743
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2e7"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_bottom_btn_bg.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_bottom_btn_bg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 360 x 120, 8-bit colormap, non-interlaced\012- data
Hash 4b57c35593f2e9db6ba931a2ea31652b
c10b51fed294260abfdf169be0b7446b8e356e77
e808a3cd1bec176cb7b9808bf49f6b8acc23d8ddb0f6882275af4783d1e7549b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_bottom_btn_bg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 6992
Last-Modified: Sat, 22 Oct 2022 03:08:25 GMT
Connection: keep-alive
ETag: "63535ea9-1b50"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_itembg.png
200 OK 19 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_itembg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 694 x 920, 8-bit colormap, non-interlaced\012- data
Hash 24212179c159aa856ecaa975a7138ed4
26c23b212280736a857f480b43b95b2bed94f4d9
631c864daa8c608f3390b717d4099e1725cdf134bb213ae3754ff918b2c515cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_itembg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 18954
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-4a0a"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/footerbg.png
200 OK 28 kB URL GET HTTP/1.1 155.159.252.52/static/img/footerbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1920 x 324, 8-bit colormap, non-interlaced\012- data
Hash 3b9ae1ce28bdf234e7e3245305371937
9c36e5d742a69c80ed0693cbcf3a00f2b0c82d73
17df7cb78bb02c8bda5b7ffb7febbf48f046b5b54e0fa137ba6d37878e4fa6e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/footerbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 27856
Last-Modified: Fri, 19 Nov 2021 14:41:13 GMT
Connection: keep-alive
ETag: "6197b789-6cd0"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_lbbg.png
200 OK 58 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_lbbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2380 x 488, 8-bit colormap, non-interlaced\012- data
Hash 3ae837307bc15ba6fcaf2832ce3d0402
c80a9e4ae384f2ae07e10308b72224a8352804f2
a71e6ed99105f1a2348c90777fa09b2a9b5b9278efc6759e6e768a168ec0a05a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_lbbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 57488
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-e090"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/downloadbg.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/downloadbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 490 x 668, 8-bit colormap, non-interlaced\012- data
Hash 54aea9069ebd594d06452f981ef0e082
7be69fe602b6a08a9d33b2818b7b2435cbfe1c51
be14f003ebb563bca19a5adedb51cce325609eb2c781de3bdbf36c725d4afdbd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/downloadbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 16155
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-3f1b"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/fd_totop.png
200 OK 2.8 kB URL GET HTTP/1.1 155.159.252.52/static/img/fd_totop.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 76 x 76, 8-bit colormap, non-interlaced\012- data
Hash b1e36b9e83803b77e6ac09da9eead509
99e72f62ec65667e89a9b288b627b357be96701f
38b57c517260980e644dfb405ef08146d2111b714abec7255efbd4b354cd7583
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/fd_totop.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:43 GMT
Content-Type: image/png
Content-Length: 2797
Last-Modified: Fri, 19 Nov 2021 14:41:12 GMT
Connection: keep-alive
ETag: "6197b788-aed"
Expires: Thu, 26 Oct 2023 15:02:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/app_logo1.png
200 OK 31 kB URL GET HTTP/1.1 155.159.252.52/static/img/app_logo1.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f09a00bf070107b33d37c05441ee3ac
de368c24abff83e1ce0732780a7dcf62645532e0
86b5eb8183d8f7b2d4a00275d6f84981d00da62f78647447bf6a143ccc0199a9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/app_logo1.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:42 GMT
Content-Type: image/png
Content-Length: 31226
Last-Modified: Sun, 20 Nov 2022 09:56:26 GMT
Connection: keep-alive
ETag: "6379f9ca-79fa"
Expires: Thu, 26 Oct 2023 15:02:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_contact.png
200 OK 7.9 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_contact.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash bba44c514b5da0fa122db10bd5dd4a25
456d99769aa1b15714feb48d141a67f50f5d9c62
c1c6f0209d71d61adac42db73154e66ddebc258404fe6feb914f1b0ec3ba2bc4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_contact.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:43 GMT
Content-Type: image/png
Content-Length: 7875
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1ec3"
Expires: Thu, 26 Oct 2023 15:02:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/download_bottom_img.png
200 OK 40 kB URL GET HTTP/1.1 155.159.252.52/static/img/download_bottom_img.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1264 x 320, 8-bit colormap, non-interlaced\012- data
Hash 2562815ac75731e40a21f53a93ddc94e
f614090083587a2c0118b0f8996e10060d82b04f
f42316c348280e18dbdf1174fc2e2759204b0109ae23c43a00ab2999abe84ed4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/download_bottom_img.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:43 GMT
Content-Type: image/png
Content-Length: 39832
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-9b98"
Expires: Thu, 26 Oct 2023 15:02:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dj.png
200 OK 118 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dj.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 118 kB (118485 bytes)
Hash 38ffc4b03162e8dc89bdc33aaa16d18e
8b9cf42cd90a0e867b069911afd8f722ba1bd6bd
89d9caf40ad22305ba8e2531e92af0d5695202950af14c0074b68ed32cf701d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dj.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:43 GMT
Content-Type: image/png
Content-Length: 118485
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1ced5"
Expires: Thu, 26 Oct 2023 15:02:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/nav.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/nav.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1200 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 82e9401b9a6fc203f2aaf3b130447bda
a4eb8ad361ba56dc05865a2dad042f6c58d141f8
6e413eb72acc206783c902b193cec3fc98ef1c55032d55e12143c5af2c682a5f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/nav.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:44 GMT
Content-Type: image/png
Content-Length: 15486
Last-Modified: Sun, 20 Nov 2022 09:51:44 GMT
Connection: keep-alive
ETag: "6379f8b0-3c7e"
Expires: Thu, 26 Oct 2023 15:02:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/banner.jpg
200 OK 406 kB URL GET HTTP/1.1 155.159.252.52/static/img/banner.jpg
IP
ASN #137951 Clayer Limited
File type JPEG image data, baseline, precision 8, 3840x1400, components 3\012- data
Size 406 kB (405909 bytes)
Hash d12e3b2899046285cb587aebe46d5850
7cd25d88958e51dbc3184d039ea31985fb2271a7
83b0adf4e17b74b999e843b3f8514032784503c0b52efb74bab464233e53f36d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/banner.jpg HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:39 GMT
Content-Type: image/jpeg
Content-Length: 405909
Last-Modified: Mon, 21 Nov 2022 11:32:04 GMT
Connection: keep-alive
ETag: "637b61b4-63195"
Expires: Thu, 26 Oct 2023 15:02:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hd.png
200 OK 347 kB URL GET HTTP/1.1 155.159.252.52/static/img/hd.png
IP
ASN #137951 Clayer Limited
File type JPEG image data, progressive, precision 8, 969x1088, components 3\012- data
Size 347 kB (346703 bytes)
Hash 221471375bf8702a176becdf4212cd24
ef80818c34189fa9dceefa1738bcd84886e45595
8b0a9db25f2b4675591b97eb59945d223f46650d1b05df9c21e01c61891bc5f3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hd.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:40 GMT
Content-Type: image/png
Content-Length: 346703
Last-Modified: Fri, 25 Nov 2022 12:17:55 GMT
Connection: keep-alive
ETag: "6380b273-54a4f"
Expires: Thu, 26 Oct 2023 15:02:40 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_cp.png
200 OK 125 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_cp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 125 kB (124841 bytes)
Hash 6cea918d7d824577f3bab4d14a864125
0370a8ddf1a99294acd7b33c59bea06c3ee110d0
5fd3fa7f8b23b33bf6fababc924645de9685f166b351e7684c6f936a4452edb6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_cp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:43 GMT
Content-Type: image/png
Content-Length: 124841
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1e7a9"
Expires: Thu, 26 Oct 2023 15:02:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dz.png
200 OK 124 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 124 kB (124185 bytes)
Hash d57cfec1caaa46c2d0302708ca606ac3
9c68a596ad3b1b7de67ae6ae481d25de3a968f29
07aeb4f99135e35b0ca7f9e08e03575e697454c71482789caac9d6ff958225ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:43 GMT
Content-Type: image/png
Content-Length: 124185
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-1e519"
Expires: Thu, 26 Oct 2023 15:02:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.177.233
47.246.44.228
103.235.46.191