200 OK 4.9 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 079f7c1c8e97c36bbec23843dd5deb50
6502a46dcc39626ff5a3ae945b983391893a1b91
07759f9ba070e86f7bc049a2e4c6adf1a27fa7081672b0e48a44e9260d7785d7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.38
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash 46a98adcba0a067591be1fb36b779473
8303da516b26b1d75b6b9798730c6311245c4122
91e198fc434e5db4b6375002c0ab751f38e75e02e595a6a6024c1b1226151d5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 16:15:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 46a98adcba0a067591be1fb36b779473
8303da516b26b1d75b6b9798730c6311245c4122
91e198fc434e5db4b6375002c0ab751f38e75e02e595a6a6024c1b1226151d5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 16:15:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-127175109-1
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-127175109-1
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (4179)
Hash 9598ec30b0a0c7ba52b590aab69e2b85
dcb2a61cc71b0d51da0578890d5627b4a1ff1444
cb88e5df9afee8526caa95ac70bb74bbf3cc369813054f671c5332f9f849bc52
GET /gtag/js?id=UA-127175109-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 16:15:31 GMT
expires: Mon, 02 Oct 2023 16:15:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68990
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-163576470-1
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-163576470-1
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (4179)
Hash 8cf9c5a01bc11b041f0aafe23bc81a32
46f1dbcc0fe0323117f2bad477f8b618bf3b2b2d
49db23983570f4caae8233564a25638a870a8cd68a6eaadca2b1d47c408851ba
GET /gtag/js?id=UA-163576470-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 16:15:31 GMT
expires: Mon, 02 Oct 2023 16:15:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68990
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
199.189.106.213/templates/frontend/moneymaker/js/jquery-1.2.6.pack.js
200 OK 17 kB URL GET HTTP/1.1 199.189.106.213/templates/frontend/moneymaker/js/jquery-1.2.6.pack.js
IP
File type ASCII text, with very long lines (30775)
Hash 7447d985396a9b7b507d5841c28dd7f8
c10dbe0c2b23444d0794f3376398702d84f41583
4b4e5615009a01b9dc1c7372569c28b8ba705e2d1544692821fbe32d66a3f9e6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/frontend/moneymaker/js/jquery-1.2.6.pack.js HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:30 GMT
Content-Type: application/x-javascript
Last-Modified: Thu, 12 Aug 2010 03:18:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
199.189.106.213/templates/frontend/moneymaker/js/caoaa2.js
200 OK 2.1 kB URL GET HTTP/1.1 199.189.106.213/templates/frontend/moneymaker/js/caoaa2.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (302), with CRLF line terminators
Hash 1aa7d0877525dfc0a85b83bf45b530eb
a646de71dca75d25178eaaeab6b603d9260fc22c
c1f6cee2ef3578721298f17c8988395ccfd24efd00217ac92b3bc3b65e449720
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/frontend/moneymaker/js/caoaa2.js HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: application/x-javascript
Last-Modified: Thu, 09 May 2019 02:12:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
199.189.106.213/caoaa2
200 OK 274 B IP
File type HTML document, Unicode text, UTF-8 text, with no line terminators
Hash 8e34a3ed5b394146aee7f201e9d92ba7
d154bf914e29a9ba99330d7902808ca3c0c19eea
a95713215e674a1e58f5333fe2833289684baea59e0ed5548d54bbe80e60090f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /caoaa2 HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: text/html
Connection: keep-alive
Content-Location: caoaa2.php
Vary: negotiate
TCN: choice
X-Powered-By: PHP/5.4.38
Content-Length: 274
ocsp.pki.goog/gts1c3
471 B IP
Hash 46a98adcba0a067591be1fb36b779473
8303da516b26b1d75b6b9798730c6311245c4122
91e198fc434e5db4b6375002c0ab751f38e75e02e595a6a6024c1b1226151d5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 16:15:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
199.189.106.213/templates/frontend/moneymaker/images/logo.png
200 OK 18 kB URL GET HTTP/1.1 199.189.106.213/templates/frontend/moneymaker/images/logo.png
IP
File type PNG image data, 236 x 61, 8-bit/color RGB, non-interlaced\012- data
Hash 9b566d24eae2ca089bb52a7759699f49
df145f775ab423db50e0941d6b3013db4c80fed4
3114bdf3894aacd8193528fa9650b05f2f40861dac08d961e24b1ad9665738d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/frontend/moneymaker/images/logo.png HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: image/png
Content-Length: 18151
Last-Modified: Mon, 06 Sep 2010 07:18:48 GMT
Connection: keep-alive
Accept-Ranges: bytes
199.189.106.213/templates/frontend/moneymaker/images/enter_btn.png
200 OK 3.0 kB URL GET HTTP/1.1 199.189.106.213/templates/frontend/moneymaker/images/enter_btn.png
IP
File type PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash e23e5a44e68ff85793359a014d3ff261
7743c4adc7f8374d9d4f01855d7b9ef53ea2f5f0
4bf23677d9f4fa928ad466039154c7c19a5de8b441d2fa4bd490b21269feb5cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /templates/frontend/moneymaker/images/enter_btn.png HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: image/png
Content-Length: 3037
Last-Modified: Thu, 12 Aug 2010 03:13:46 GMT
Connection: keep-alive
Accept-Ranges: bytes
199.189.106.213/ima--ges/df300.gif
200 OK 42 kB URL GET HTTP/1.1 199.189.106.213/ima--ges/df300.gif
IP
File type GIF image data, version 89a, 300 x 100\012- data
Hash 3e5024d16af85b9255a5eb05567a8431
4d413058884710fd0318a376055c1e3822262b97
4df406bf48393b429adc23e995301e32c2e498023f28411369bd714957754c88
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ima--ges/df300.gif HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: image/gif
Content-Length: 41559
Last-Modified: Mon, 16 Jun 2014 22:50:35 GMT
Connection: keep-alive
Accept-Ranges: bytes
199.189.106.213/ima--ges/dafa120_240.gif
200 OK 27 kB URL GET HTTP/1.1 199.189.106.213/ima--ges/dafa120_240.gif
IP
File type GIF image data, version 89a, 120 x 240\012- data
Hash 127c01833a24bbdfd89751b5b72001e7
50e0399eeb0514c3e500bf84bf7b29906d870759
70b7ad17d20470d5b6f8c6b700fc8aaeb3016896b20b2c4b9c8f50088ee78f7f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ima--ges/dafa120_240.gif HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: image/gif
Content-Length: 27447
Last-Modified: Mon, 07 Jan 2019 08:38:06 GMT
Connection: keep-alive
Accept-Ranges: bytes
199.189.106.213/ima--ges/dafac.gif
200 OK 73 kB URL GET HTTP/1.1 199.189.106.213/ima--ges/dafac.gif
IP
File type GIF image data, version 89a, 860 x 90\012- data
Hash af37675366242836e2635d5c11199ddf
7608db195196bfa25f4e63125bb410dac915bdf2
1229291919c3df6c73b1631543c93c99214f4499673b88e145f80e01d89f3ffc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ima--ges/dafac.gif HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: image/gif
Content-Length: 72657
Last-Modified: Mon, 14 Dec 2015 04:16:24 GMT
Connection: keep-alive
Accept-Ranges: bytes
199.189.106.213/ima--ges/8kk970.gif
200 OK 448 kB URL GET HTTP/1.1 199.189.106.213/ima--ges/8kk970.gif
IP
File type GIF image data, version 89a, 970 x 70\012- data
Size 448 kB (447885 bytes)
Hash 4a5f9c3ee73b4dcb9abab3971303c4ab
560096c0300db27325757d3e091111f4c88d108a
4515154bafc928ef3b67d3334bb69dff254f2df7182c85be04d51a27e41761cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ima--ges/8kk970.gif HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:31 GMT
Content-Type: image/gif
Content-Length: 447885
Last-Modified: Mon, 20 Dec 2021 22:47:36 GMT
Connection: keep-alive
Accept-Ranges: bytes
199.189.106.213/favicon.ico
200 OK 1.2 kB URL GET HTTP/1.1 199.189.106.213/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 8ca72c951bb54e0f16841310c936ca73
4c569b9ffe78e8a2759651357f6e37517c1f2100
63d25357d443e206e3a53a01a38715ba33da6606bc702a844f2a2ab05f6a823f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 199.189.106.213
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx admin
Date: Mon, 02 Oct 2023 16:15:34 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Sat, 28 Aug 2010 21:46:51 GMT
Connection: keep-alive
Accept-Ranges: bytes
js.users.51.la/15008471.js
200 OK 2.5 kB URL GET HTTP/1.1 js.users.51.la/15008471.js
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerGlobalSign nv-sa
Subject*.users.51.la
Fingerprint8E:9F:59:98:28:F2:49:A9:E1:19:45:C2:49:ED:B2:F6:B8:E1:C6:39
ValidityFri, 14 Apr 2023 03:17:41 GMT - Wed, 15 May 2024 03:17:40 GMT
File type HTML document, ASCII text, with very long lines (5207), with no line terminators
Hash 364dec6178307a8f80a7307cae04f872
334936cfb72a8fc0ddce180bb00c42f296ec5393
ee85c2428f6cc42200a948a4418ea06362b7311f63c33de5a3fd2b23faf5dd61
GET /15008471.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 02 Oct 2023 16:15:34 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
www.googletagmanager.com/gtag/js?id=G-Z52NTN9DYJ&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-Z52NTN9DYJ&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (5788)
Hash 995b9555708e613b670171b04bf7bdef
67ebee8cafe811ee874302ef910d115520186ec9
962ef6f0e6275272505ce84495da1fbe284d47322069a963ffc4c44b46c23fe9
GET /gtag/js?id=G-Z52NTN9DYJ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 16:15:34 GMT
expires: Mon, 02 Oct 2023 16:15:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81256
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-YZBF49FBE9&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-YZBF49FBE9&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (5788)
Hash f0f8a701d13a1b759aedfa64a8a57d8e
1f489ab12fa5e0367227a664b3765332cee62a84
184822bca9d79071620c8b8af9661d648a2d03ffdaa697bf23ebd869356389cb
GET /gtag/js?id=G-YZBF49FBE9&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 16:15:35 GMT
expires: Mon, 02 Oct 2023 16:15:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81228
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ia.51.la/go1?id=15008471&rt=1696263335178&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%2585%258D%25E8%25B4%25B9%25E8%2589%25B2%25E6%2583%2585%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E5%259C%25A8%25E7%25BA%25BF%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E6%2583%2585%25E8%2589%25B2%25E7%2594%25B5%25E5%25BD%25B1%252CFree%2520Porn%2520Vid&ing=1&ekc=&sid=1696263335178&tt=CaoPorn%2520-%2520%25E8%25B6%2585%25E7%25A2%25B0%25E5%259C%25A8%25E7%25BA%25BF%25E8%25A7%2586%25E9%25A2%2591&kw=%25E6%2583%2585%25E8%2589%25B2%25EF%25BC%258C%25E8%2589%25B2%25E6%2583%2585%25EF%25BC%258C%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E5%259C%25A8%25E7%25BA%25BF%25EF%25BC%258C%25E6%25B8%25B8%25E6%2588%258F%25EF%25BC%258C%25E5%259B%25BE%25E7%2589%2587%25EF%25BC%258Cporn%252C%2520sex%252C%2520porno%252C%2520free%2520porn%252C%2520porn%2520tube%252C%2520porn%2520videos%252C%2520stream%2520porn%252C%2520free%2520streaming%2520p&cu=http%253A%252F%252F199.189.106.213%252F&pu=
200 OK 0 B URL GET HTTP/1.1 ia.51.la/go1?id=15008471&rt=1696263335178&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%2585%258D%25E8%25B4%25B9%25E8%2589%25B2%25E6%2583%2585%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E5%259C%25A8%25E7%25BA%25BF%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E6%2583%2585%25E8%2589%25B2%25E7%2594%25B5%25E5%25BD%25B1%252CFree%2520Porn%2520Vid&ing=1&ekc=&sid=1696263335178&tt=CaoPorn%2520-%2520%25E8%25B6%2585%25E7%25A2%25B0%25E5%259C%25A8%25E7%25BA%25BF%25E8%25A7%2586%25E9%25A2%2591&kw=%25E6%2583%2585%25E8%2589%25B2%25EF%25BC%258C%25E8%2589%25B2%25E6%2583%2585%25EF%25BC%258C%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E5%259C%25A8%25E7%25BA%25BF%25EF%25BC%258C%25E6%25B8%25B8%25E6%2588%258F%25EF%25BC%258C%25E5%259B%25BE%25E7%2589%2587%25EF%25BC%258Cporn%252C%2520sex%252C%2520porno%252C%2520free%2520porn%252C%2520porn%2520tube%252C%2520porn%2520videos%252C%2520stream%2520porn%252C%2520free%2520streaming%2520p&cu=http%253A%252F%252F199.189.106.213%252F&pu=
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=15008471&rt=1696263335178&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%2585%258D%25E8%25B4%25B9%25E8%2589%25B2%25E6%2583%2585%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E5%259C%25A8%25E7%25BA%25BF%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E6%2583%2585%25E8%2589%25B2%25E7%2594%25B5%25E5%25BD%25B1%252CFree%2520Porn%2520Vid&ing=1&ekc=&sid=1696263335178&tt=CaoPorn%2520-%2520%25E8%25B6%2585%25E7%25A2%25B0%25E5%259C%25A8%25E7%25BA%25BF%25E8%25A7%2586%25E9%25A2%2591&kw=%25E6%2583%2585%25E8%2589%25B2%25EF%25BC%258C%25E8%2589%25B2%25E6%2583%2585%25EF%25BC%258C%25E7%2594%25B5%25E5%25BD%25B1%25EF%25BC%258C%25E5%259C%25A8%25E7%25BA%25BF%25EF%25BC%258C%25E6%25B8%25B8%25E6%2588%258F%25EF%25BC%258C%25E5%259B%25BE%25E7%2589%2587%25EF%25BC%258Cporn%252C%2520sex%252C%2520porno%252C%2520free%2520porn%252C%2520porn%2520tube%252C%2520porn%2520videos%252C%2520stream%2520porn%252C%2520free%2520streaming%2520p&cu=http%253A%252F%252F199.189.106.213%252F&pu= HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://199.189.106.213/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Length: 0
Connection: keep-alive
Date: Mon, 02 Oct 2023 16:11:35 GMT
Ali-Swift-Global-Savetime: 1696263338
Via: cache16.l2de2[3372,3372,200-0,M], cache5.l2de2[3373,0], cache7.se1[3396,3396,200-0,M], cache1.se1[3398,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 02 Oct 2023 16:15:38 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9516962633352293074e
199.189.106.213
42.236.73.41
47.246.44.146
0.0.0.0