down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
200 OK 13 kB URL User Request GET HTTP/1.1 down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1393), with CR, LF line terminators
Hash 1a09492eb87da9c964f36142902a52f6
fa0f90109f8dd3fd2cd2baa1981d458e5c5916d0
befe70024ff9e44435143bff099d952362d92a330403325a4f553daf10b52459
GET /cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/css/pcmodule.edd4638c5c3b3039832390269d40f1d8.css
200 OK 8.9 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/css/pcmodule.edd4638c5c3b3039832390269d40f1d8.css
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type ASCII text, with very long lines (2060)
Hash a40b6a29150a6f747689d9b33bc3b67f
452b447ecd995dd6c209cc17830b165846323ab1
9ccf54bd07d1609bd80ff00953701e71d341ec96bac8fccb80fc44d58829031d
GET /template/news/wandou/static/css/pcmodule.edd4638c5c3b3039832390269d40f1d8.css HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: text/css
Last-Modified: Tue, 05 Sep 2023 05:41:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bfa2-5b2d"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
android-screenimgs.25pp.com/fs08/2023/08/17/4/109_10135b744cb0dafbd148257e5dacfbd3_234x360.jpg
200 OK 32 kB URL GET HTTP/2 android-screenimgs.25pp.com/fs08/2023/08/17/4/109_10135b744cb0dafbd148257e5dacfbd3_234x360.jpg
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerDigiCert, Inc.
Subject*.25pp.com
FingerprintF5:B3:2D:21:46:AA:3F:AB:D3:7F:E4:80:3B:45:7D:6B:D9:57:B4:E6
ValidityMon, 26 Dec 2022 00:00:00 GMT - Mon, 25 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 202x359, components 3\012- data
Hash 7a45625929ac41e51ca4048f54943223
c369b3b5282112df77dd2ea61f7e224ee958ed29
31d1437c321355fd84e3c832edc3c2a1da0c0f40fe8ff575acb08aa7ec3c4964
GET /fs08/2023/08/17/4/109_10135b744cb0dafbd148257e5dacfbd3_234x360.jpg HTTP/1.1
Host: android-screenimgs.25pp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 32410
date: Wed, 29 Nov 2023 15:14:19 GMT
x-oss-request-id: 6567554B8F35C831351119B4
x-oss-cdn-auth: success
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-md5: ekViWSmsQeUcpASPVJQyIw==
x-oss-server-time: 7
ali-swift-global-savetime: 1701270859
via: cache19.l2fr1[557,557,304-0,M], cache33.l2fr1[559,0], cache3.nl2[0,0,200-0,H], cache3.nl2[1,0]
etag: "7A45625929AC41E51CA4048F54943223"
last-modified: Thu, 17 Aug 2023 11:21:48 GMT
x-oss-hash-crc64ecma: 15323554737824035699
age: 67
x-cache: HIT TCP_MEM_HIT dirn:11:103347069
x-swift-savetime: Wed, 29 Nov 2023 15:14:19 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: 2ff6309717012709264153577e
X-Firefox-Spdy: h2
android-screenimgs.25pp.com/fs08/2022/10/10/4/109_678066986b26b01ca44ebcd4e657b1b2_234x360.jpg
200 OK 34 kB URL GET HTTP/2 android-screenimgs.25pp.com/fs08/2022/10/10/4/109_678066986b26b01ca44ebcd4e657b1b2_234x360.jpg
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerDigiCert, Inc.
Subject*.25pp.com
FingerprintF5:B3:2D:21:46:AA:3F:AB:D3:7F:E4:80:3B:45:7D:6B:D9:57:B4:E6
ValidityMon, 26 Dec 2022 00:00:00 GMT - Mon, 25 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 240x360, components 3\012- data
Hash da7c2e813c808f09c98ad065e9e00fd5
baeb33c7b93e7bd31f2d9baf5daf60bcb7edaa28
d92aee52a2d8aaf18593375634c3927371556c3242d508663e9beded92c3c346
GET /fs08/2022/10/10/4/109_678066986b26b01ca44ebcd4e657b1b2_234x360.jpg HTTP/1.1
Host: android-screenimgs.25pp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 33748
date: Wed, 29 Nov 2023 15:15:17 GMT
x-oss-request-id: 6567558578E4A73433C64957
x-oss-cdn-auth: success
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-md5: 2nwugTyAjwnJitBl6eAP1Q==
x-oss-server-time: 25
ali-swift-global-savetime: 1701270917
via: cache27.l2fr1[604,604,304-0,M], cache12.l2fr1[606,0], cache2.nl2[0,0,200-0,H], cache3.nl2[2,0]
etag: "DA7C2E813C808F09C98AD065E9E00FD5"
last-modified: Mon, 10 Oct 2022 01:51:23 GMT
x-oss-hash-crc64ecma: 473957653179317234
age: 9
x-cache: HIT TCP_MEM_HIT dirn:2:16982987
x-swift-savetime: Wed, 29 Nov 2023 15:15:17 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: 2ff6309717012709264163586e
X-Firefox-Spdy: h2
down04995468.cdnxiazai.com/template/news/wandou/static/js/index.umd.js
200 OK 7.7 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/js/index.umd.js
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type Unicode text, UTF-8 text, with very long lines (20089)
Hash 5a2857f1b23ee74c39a9aafee4c30f62
caba5c19dc995bf4261d597ae9fb32734196a758
18650a49cb8da3af7d76341b59c47aa9b3318050c453c580c0cddb5dde114486
GET /template/news/wandou/static/js/index.umd.js HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 Sep 2023 05:41:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bfa0-5002"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
down04995468.cdnxiazai.com/js/orsxg5a.script
200 OK 1.0 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/js/orsxg5a.script
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 0a0de810835c9ea32adf25f93aba6404
75417036456865365c5981d782562ea3d0aaf12a
d8ea1afdf53afab5da79aa9909a67dcde75b8af5a6fa3c807b5b32d1f4ff8103
GET /js/orsxg5a.script HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/js/broadcast.js
200 OK 1.8 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/js/broadcast.js
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Hash 2bc684f4681d2228ef854d61eff5df3e
fafaac85b48f8ba2b5eac9c8ff260defd25bcfbb
f9b8c7431ce0616203acdc6d1dc1c7e18e9e267267a3df666aea03b42a700330
GET /template/news/wandou/static/js/broadcast.js HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 Sep 2023 05:41:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bf9f-10ec"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/css/appsdetail.54f4580855498888eaa0c55012c330fd.css
200 OK 99 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/css/appsdetail.54f4580855498888eaa0c55012c330fd.css
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type ASCII text, with very long lines (9610)
Hash f62c2e57564fc361ec60011f81fa2af1
438ab67a445ea5a85e92ac32adbe7aafaa5f0053
a1f4cabf3963edf680a76a0a7f077b77369e01e7a0d293a92afc90cebd06118e
GET /template/news/wandou/static/css/appsdetail.54f4580855498888eaa0c55012c330fd.css HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: text/css
Last-Modified: Tue, 05 Sep 2023 05:41:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bfa2-346d7"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/js/realnameauth.js
200 OK 39 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/js/realnameauth.js
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 0cf50d2ec782bb535adedb574bedb2b1
fefcf0c899c246498f1c2ccc6ca43d1aa2e0fed9
697665f407f8704912c0efcc51e9e733938079ca1d86dbf93fe2f3c03942a9e6
GET /template/news/wandou/static/js/realnameauth.js HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 Sep 2023 05:41:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bfa0-1c5b2"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/js/bl.js
200 OK 16 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/js/bl.js
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type ASCII text, with very long lines (41828), with no line terminators
Hash 76ad4e6bebd253e6f503e3f9fbbabb42
3ee7a5111adb43503914b75feea53f0c4df94c36
1887df99fdf341ac77c13d72958ee925ae13bdae1bfc8f2e760a74eb909f0b7c
GET /template/news/wandou/static/js/bl.js HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 Sep 2023 05:41:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bf9e-a364"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/js/08aee8621c2b40f9b2c5d9afc413632e.js
200 OK 5.7 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/js/08aee8621c2b40f9b2c5d9afc413632e.js
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type Unicode text, UTF-8 text, with very long lines (15318)
Hash f52ffc23be84724fea7d36857bf1328b
37d9922f1b97875d6e21f8f89f939da9e6ce0530
a3acd0fa807a8f2e14797ca5ffc5780686ee5873a6e288a6618038cd8e6a4b63
GET /template/news/wandou/static/js/08aee8621c2b40f9b2c5d9afc413632e.js HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 Sep 2023 05:41:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bf9e-3bdb"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
android-screenimgs.25pp.com/fs08/2022/04/20/3/109_fe6a0bbc71f3a2d7d0ff1a207d1828cb_234x360.jpg
200 OK 53 kB URL GET HTTP/2 android-screenimgs.25pp.com/fs08/2022/04/20/3/109_fe6a0bbc71f3a2d7d0ff1a207d1828cb_234x360.jpg
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerDigiCert, Inc.
Subject*.25pp.com
FingerprintF5:B3:2D:21:46:AA:3F:AB:D3:7F:E4:80:3B:45:7D:6B:D9:57:B4:E6
ValidityMon, 26 Dec 2022 00:00:00 GMT - Mon, 25 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 240x360, components 3\012- data
Hash a8bec52e92cb13d62b9315efa04d66db
36c263a2e56deacb6b7cc37113dde6b0e43b80ac
1b20e9018f045129e01e7bbbae596346e71206f3c79b8685a098bb9137eaef10
GET /fs08/2022/04/20/3/109_fe6a0bbc71f3a2d7d0ff1a207d1828cb_234x360.jpg HTTP/1.1
Host: android-screenimgs.25pp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 53042
date: Wed, 29 Nov 2023 15:15:26 GMT
x-oss-request-id: 6567558E9CA69D32330A0AD5
x-oss-cdn-auth: success
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-md5: qL7FLpLLE9YrkxXvoE1m2w==
x-oss-server-time: 19
ali-swift-global-savetime: 1701270926
via: cache40.l2fr1[549,549,304-0,M], cache35.l2fr1[550,0], cache7.nl2[571,571,200-0,H], cache3.nl2[573,0]
etag: "A8BEC52E92CB13D62B9315EFA04D66DB"
last-modified: Wed, 20 Apr 2022 10:25:56 GMT
x-oss-hash-crc64ecma: 1069017787494219225
age: 0
x-cache: HIT TCP_REFRESH_HIT dirn:11:359464302
x-swift-savetime: Wed, 29 Nov 2023 15:15:26 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: 2ff6309717012709264163582e
X-Firefox-Spdy: h2
down04995468.cdnxiazai.com/template/news/wandou/static/picture/37ca8f61326a43f4bbddb7f1aa0a7a25.gif
200 OK 504 B URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/37ca8f61326a43f4bbddb7f1aa0a7a25.gif
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type PNG image data, 165 x 165, 8-bit grayscale, non-interlaced\012- data
Hash 14dc844d0156428b837d12eaf7045824
a446711a3c0b4505a12b382badd3c51e291894e2
67a3726952ed7fcf2de9d9be5d5ea826aa8400acc82c47f972cb4c540c5f3618
GET /template/news/wandou/static/picture/37ca8f61326a43f4bbddb7f1aa0a7a25.gif HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: image/gif
Content-Length: 504
Last-Modified: Tue, 05 Sep 2023 05:41:49 GMT
Connection: keep-alive
ETag: "64f6bf9d-1f8"
Expires: Fri, 29 Dec 2023 15:15:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
down04995468.cdnxiazai.com/template/news/wandou/static/js/nc.js
200 OK 66 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/js/nc.js
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type ASCII text, with very long lines (32041)
Hash 11998461d3d77dde9e7ef72a65e08429
3863ac62c17ae5e0de527e1a8eeaea40e07c2531
994aae2408fa3aaca7faec5f32d6b0245012786ee65eec40df3ab54b48992b0a
GET /template/news/wandou/static/js/nc.js HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 Sep 2023 05:41:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64f6bf9f-35ff6"
Expires: Thu, 30 Nov 2023 03:15:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/picture/9570222ae3e03ef3326807f4ef117e2a.png
200 OK 9.3 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/9570222ae3e03ef3326807f4ef117e2a.png
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 117x111, components 3\012- data
Hash 246aec6f879e23c03e8462c8de240d42
3cefdb7cd584f7006b4320ac04e08bba404ebfa3
3e4bbe15fb4ffff801349e35ea05ebe1c2bbc5013c2af65334eeb32d921c44fd
GET /template/news/wandou/static/picture/9570222ae3e03ef3326807f4ef117e2a.png HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: image/png
Content-Length: 9275
Last-Modified: Tue, 05 Sep 2023 05:41:47 GMT
Connection: keep-alive
ETag: "64f6bf9b-243b"
Expires: Fri, 29 Dec 2023 15:15:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
android-screenimgs.25pp.com/fs08/2023/07/28/3/109_0b425d468978f59b549329483591a02e_234x360.jpg
200 OK 50 kB URL GET HTTP/2 android-screenimgs.25pp.com/fs08/2023/07/28/3/109_0b425d468978f59b549329483591a02e_234x360.jpg
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerDigiCert, Inc.
Subject*.25pp.com
FingerprintF5:B3:2D:21:46:AA:3F:AB:D3:7F:E4:80:3B:45:7D:6B:D9:57:B4:E6
ValidityMon, 26 Dec 2022 00:00:00 GMT - Mon, 25 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 240x360, components 3\012- data
Hash 32bfc75f3acb98b3688fc01596cccd6b
4b1110a99b541eb4e034a237e97e6eba406fee0c
b737067ab2949bfa26954bfaa4fe8a1af3bf8defd9e8487e9590ad45305530c2
GET /fs08/2023/07/28/3/109_0b425d468978f59b549329483591a02e_234x360.jpg HTTP/1.1
Host: android-screenimgs.25pp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 49509
date: Wed, 29 Nov 2023 15:15:26 GMT
x-oss-request-id: 6567558EAFB3163336B32CD0
x-oss-cdn-auth: success
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-md5: Mr/HXzrLmLNoj8AVlszNaw==
x-oss-server-time: 40
ali-swift-global-savetime: 1701270927
via: cache25.l2fr1[577,576,304-0,M], cache40.l2fr1[579,0], cache2.nl2[700,700,200-0,H], cache3.nl2[704,0]
etag: "32BFC75F3ACB98B3688FC01596CCCD6B"
last-modified: Fri, 28 Jul 2023 02:40:12 GMT
x-oss-hash-crc64ecma: 12175328600925470714
age: 0
x-cache: HIT TCP_REFRESH_HIT dirn:2:327719396
x-swift-savetime: Wed, 29 Nov 2023 15:15:27 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: 2ff6309717012709264163585e
X-Firefox-Spdy: h2
down04995468.cdnxiazai.com/template/news/wandou/static/picture/5ef8d8c2cb6c4f0da710581997b4fc7b.gif
200 OK 136 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/5ef8d8c2cb6c4f0da710581997b4fc7b.gif
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Macintosh), datetime=2014:04:09 20:26:14], baseline, precision 8, 500x500, components 3\012- data
Size 136 kB (136141 bytes)
Hash fafbfaf00acb3c89f2148dfae4d35cfd
3b6c8e9cd0cdcb3b1149c118169ef21d93d036b0
18683a1242bd2e67ca82458abb821318fbe2e408fa017b4eacd56d96ad914613
GET /template/news/wandou/static/picture/5ef8d8c2cb6c4f0da710581997b4fc7b.gif HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: image/gif
Content-Length: 136141
Last-Modified: Tue, 05 Sep 2023 05:41:48 GMT
Connection: keep-alive
ETag: "64f6bf9c-213cd"
Expires: Fri, 29 Dec 2023 15:15:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
g.alicdn.com/??/sd/baxia/2.5.3/baxiaCommon.js
200 OK 10 kB URL GET HTTP/2 g.alicdn.com/??/sd/baxia/2.5.3/baxiaCommon.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
Fingerprint21:DF:50:AB:CB:25:F1:C4:5F:84:6C:A7:C0:8B:88:2D:0C:25:5A:BD
ValidityThu, 29 Jun 2023 02:26:12 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File type C source, Unicode text, UTF-8 text, with very long lines (27290)
Hash 3dcc56d93fd849a22297a63432513915
cdacb7580f35891c634a6fc4e78ee3ad776f839c
07eedcf687f0ee60613eb53c5f51680aa65164b4775c12c76f6ac829ae3a6fb1
GET /??/sd/baxia/2.5.3/baxiaCommon.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://down04995468.cdnxiazai.com
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 10523
date: Wed, 29 Nov 2023 05:08:21 GMT
vary: Accept-Encoding
x-oss-request-id: 6566C745E477A23431EA154B
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5179173457092165503
x-oss-storage-class: Standard
cache-control: max-age=2592000,s-maxage=86400
content-md5: PcxW2T/YSaIil6Y0MlE5FQ==
x-oss-server-time: 33
access-control-allow-origin: *
x-bucket-code: 3
content-encoding: gzip
ali-swift-global-savetime: 1701234501
via: cache9.l2de2[0,0,200-0,H], cache11.l2de2[1,0], cache11.l2de2[1,0], ens-cache2.de4[0,21,200-0,H], ens-cache1.de4[24,0]
age: 36426
x-cache: HIT TCP_HIT dirn:8:269274037
x-swift-savetime: Wed, 29 Nov 2023 13:30:58 GMT
x-swift-cachetime: 56243
timing-allow-origin: *
eagleid: 2ff62b1917012709272765350e
X-Firefox-Spdy: h2
down04995468.cdnxiazai.com/template/news/wandou/static/picture/66a8113055d449db2fe7ffbaf25d66e0.png
200 OK 34 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/66a8113055d449db2fe7ffbaf25d66e0.png
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3\012- data
Hash 2cc746bed022d5f448586ea2d41b6392
e53e07476711443ba3e0f6fc7f7dab2f8c348601
87ae63a426df153ab839ff6bdf0af908718ff77b656e099013a20347bd0beeb6
GET /template/news/wandou/static/picture/66a8113055d449db2fe7ffbaf25d66e0.png HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: image/png
Content-Length: 33646
Last-Modified: Tue, 05 Sep 2023 05:41:49 GMT
Connection: keep-alive
ETag: "64f6bf9d-836e"
Expires: Fri, 29 Dec 2023 15:15:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
down04995468.cdnxiazai.com/template/news/wandou/static/picture/default_avatar.jpg
200 OK 21 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/default_avatar.jpg
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3\012- data
Hash f2103d2a3caf74e600ece7c8ad4355c0
227729b32adc5977527cdaa97dcd28e6ec3a85d4
1974ef43b59d7a01683617baf11c10cbba487d214eeccf9a71e5760d21325b4e
GET /template/news/wandou/static/picture/default_avatar.jpg HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: image/jpeg
Content-Length: 21000
Last-Modified: Tue, 05 Sep 2023 05:41:44 GMT
Connection: keep-alive
ETag: "64f6bf98-5208"
Expires: Fri, 29 Dec 2023 15:15:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_48e4ae2d857a0e208eda7d2d44819505_con.png
200 OK 98 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_48e4ae2d857a0e208eda7d2d44819505_con.png
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash af4fe2deb5ced3c521de8473009c8f9f
60f86b027bbe0c4b733a3659e324430d346ef726
1cf06d8f13152c7279c869ba01b94e9abf8c6269b2bff6cd1d38fc214917d3ad
GET /template/news/wandou/static/picture/109_48e4ae2d857a0e208eda7d2d44819505_con.png HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: image/png
Content-Length: 97934
Last-Modified: Tue, 05 Sep 2023 05:41:47 GMT
Connection: keep-alive
ETag: "64f6bf9b-17e8e"
Expires: Fri, 29 Dec 2023 15:15:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_c32f7cd928b599da55103eac5ee1a974_con_130x130.png
200 OK 11 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_c32f7cd928b599da55103eac5ee1a974_con_130x130.png
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type PNG image data, 130 x 130, 8-bit colormap, non-interlaced\012- data
Hash 6963349af26aeba4a4c59b773e282416
0c7a6e6e3db028e6a7581e4e4f349f664e9deeb7
55646d6edab5af7654bb7aa40ec35a33c936a3f976373d74fd3a5e9a53a6f4d7
GET /template/news/wandou/static/picture/109_c32f7cd928b599da55103eac5ee1a974_con_130x130.png HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: image/png
Content-Length: 10957
Last-Modified: Tue, 05 Sep 2023 05:41:46 GMT
Connection: keep-alive
ETag: "64f6bf9a-2acd"
Expires: Fri, 29 Dec 2023 15:15:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/
200 OK 2.2 kB IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash baba1d17293225225028471c64b1bc54
9d9bc8ae5f6be77aad99e35b8724918f23457e15
c325762c885f22c30bd0994b2d34f6ebfd593ffd53d25546b1d12104b69258df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: text/html
Last-Modified: Tue, 03 Oct 2023 08:52:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"651bd635-22f2"
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
down04995468.cdnxiazai.com/template/news/wandou/static/picture/cd90faecb0aaa5d4bb9cd6c1f7c46a9a_300_300.png
200 OK 102 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/cd90faecb0aaa5d4bb9cd6c1f7c46a9a_300_300.png
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced\012- data
Size 102 kB (102039 bytes)
Hash d67ab8e1f01c068f17333fbf1462a544
fe14783ebf6c3c8f07534766d8d600b22f589e11
d72a58b8f276836978c0516f7d8805c20ef009a19f1c6d265c31706373dfdea9
GET /template/news/wandou/static/picture/cd90faecb0aaa5d4bb9cd6c1f7c46a9a_300_300.png HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:26 GMT
Content-Type: image/png
Content-Length: 102039
Last-Modified: Tue, 05 Sep 2023 05:41:49 GMT
Connection: keep-alive
ETag: "64f6bf9d-18e97"
Expires: Fri, 29 Dec 2023 15:15:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_b7779a1b463f3dc146808c1d12e26b7c_con.png
200 OK 102 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_b7779a1b463f3dc146808c1d12e26b7c_con.png
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Size 102 kB (102111 bytes)
Hash 2ec1b42de9b09feaa89f541e920e22d1
c7927f2dca76bab48d0e48e2076019c7d6e73a47
a2bbb2c6a7f88edfe18a42511e02dfcbdfc9238dd9a581a578a7e065ed0eb507
GET /template/news/wandou/static/picture/109_b7779a1b463f3dc146808c1d12e26b7c_con.png HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: image/png
Content-Length: 102111
Last-Modified: Tue, 05 Sep 2023 05:41:46 GMT
Connection: keep-alive
ETag: "64f6bf9a-18edf"
Expires: Fri, 29 Dec 2023 15:15:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
down04995468.cdnxiazai.com/template/news/wandou/static/picture/0baa4f2a35d6406e9dcfd557f4f1910e.gif
200 OK 492 B URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/0baa4f2a35d6406e9dcfd557f4f1910e.gif
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type PNG image data, 165 x 165, 8-bit grayscale, non-interlaced\012- data
Hash 9e25ce397253e7c3fa083f0a443db964
835483a9a80f9db9ee8aa47072f762ddbc236cef
b0763abb1ae55bc09e36f3216b4add87d5c42d03972b63dc3786755ae1b8a656
GET /template/news/wandou/static/picture/0baa4f2a35d6406e9dcfd557f4f1910e.gif HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: image/gif
Content-Length: 492
Last-Modified: Tue, 05 Sep 2023 05:41:46 GMT
Connection: keep-alive
ETag: "64f6bf9a-1ec"
Expires: Fri, 29 Dec 2023 15:15:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_023a9990532e22cd3ad9e3b8370da1de_con.png
200 OK 98 kB URL GET HTTP/1.1 down04995468.cdnxiazai.com/template/news/wandou/static/picture/109_023a9990532e22cd3ad9e3b8370da1de_con.png
IP
ASN #137951 Clayer Limited
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash af4fe2deb5ced3c521de8473009c8f9f
60f86b027bbe0c4b733a3659e324430d346ef726
1cf06d8f13152c7279c869ba01b94e9abf8c6269b2bff6cd1d38fc214917d3ad
GET /template/news/wandou/static/picture/109_023a9990532e22cd3ad9e3b8370da1de_con.png HTTP/1.1
Host: down04995468.cdnxiazai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: image/png
Content-Length: 97934
Last-Modified: Tue, 05 Sep 2023 05:41:47 GMT
Connection: keep-alive
ETag: "64f6bf9b-17e8e"
Expires: Fri, 29 Dec 2023 15:15:27 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/css/swiper.min.css?v=2021web
200 OK 4.5 kB URL GET HTTP/1.1 155.159.252.52/static/css/swiper.min.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (13425), with CRLF line terminators
Hash 6604e7f8fbafb482f29e0dfa78e0e2e5
520ff7d839d3a94c855c9d75a76b5b166a5bf1b9
6d0a4af85bd32d089f36e072c98a15212d4468d562be75c0c3ef16c611c971cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/swiper.min.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Nov 2021 14:41:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6197b7a4-3579"
Expires: Thu, 30 Nov 2023 03:15:27 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
155.159.252.52/static/css/web.css?v=2021web
200 OK 3.9 kB URL GET HTTP/1.1 155.159.252.52/static/css/web.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (15835), with CRLF line terminators
Hash 7b2ba6b1693108bd2fd33ded77801fb0
26e4ce47051c560739f8dd3e26916e34554c2fa5
80a4949c8c56a68157cc94ba9a35c3df5f0ff031c1ef325362b8fc0229b57d07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/web.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:27 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Dec 2021 16:53:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ae4011-3def"
Expires: Thu, 30 Nov 2023 03:15:27 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
android-screenimgs.25pp.com/fs08/2023/07/12/8/109_fe4181e40146f3ab689127552db036c6_234x360.jpg
200 OK 93 kB URL GET HTTP/2 android-screenimgs.25pp.com/fs08/2023/07/12/8/109_fe4181e40146f3ab689127552db036c6_234x360.jpg
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerDigiCert, Inc.
Subject*.25pp.com
FingerprintF5:B3:2D:21:46:AA:3F:AB:D3:7F:E4:80:3B:45:7D:6B:D9:57:B4:E6
ValidityMon, 26 Dec 2022 00:00:00 GMT - Mon, 25 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 240x360, components 3\012- data
Hash af9726883567456ecbc0c2ffec4edabe
7dafe7da18854092d7e7ea1f028181ad0deb2b05
48fdce1d718122442534fd75e2319b996871526c845076fe08a9b985d1eafea4
GET /fs08/2023/07/12/8/109_fe4181e40146f3ab689127552db036c6_234x360.jpg HTTP/1.1
Host: android-screenimgs.25pp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 92980
date: Wed, 29 Nov 2023 15:15:27 GMT
x-oss-request-id: 6567558F3C40613037277C4C
x-oss-cdn-auth: success
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-md5: r5cmiDVnRW7LwML/7E7avg==
x-oss-server-time: 38
ali-swift-global-savetime: 1701270928
via: cache13.l2fr1[1613,1613,304-0,M], cache31.l2fr1[1614,0], cache5.nl2[1701,1702,200-0,H], cache3.nl2[1703,0]
etag: "AF9726883567456ECBC0C2FFEC4EDABE"
last-modified: Wed, 12 Jul 2023 01:50:48 GMT
x-oss-hash-crc64ecma: 8097940108421998006
age: 0
x-cache: HIT TCP_REFRESH_HIT dirn:1:405749777
x-swift-savetime: Wed, 29 Nov 2023 15:15:28 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: 2ff6309717012709264163580e
X-Firefox-Spdy: h2
155.159.252.52/config.js?v=2021web
200 OK 574 B URL GET HTTP/1.1 155.159.252.52/config.js?v=2021web
IP
ASN #137951 Clayer Limited
Hash 21d558e5033b4e04a2eb012c9a57187a
f7a4c5425140da3eb505543f17254e4d0564731e
a8a40f7d104e398ee6b9b6932afb7d2dfe5eb49af24bdee17cd5db59d1bac345
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /config.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: application/javascript
Last-Modified: Sat, 04 Nov 2023 14:36:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654656e3-48c"
Expires: Thu, 30 Nov 2023 03:15:28 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
155.159.252.52/static/img/titleimg_top_game.png
200 OK 5.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_top_game.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash 254b8b403316cc5754d821c3ac9620e6
dd75d61cd66f114f3ee66e880b9fea2495ade226
97dec4a15fd692863e0679d739c952d005e635c1fe02d499dbb165cca72ea618
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_top_game.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/png
Content-Length: 5680
Last-Modified: Fri, 19 Nov 2021 14:41:38 GMT
Connection: keep-alive
ETag: "6197b7a2-1630"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
img.ucdl.pp.uc.cn/upload_files/wdj_fe/misc/javascripts/analytics.js
200 OK 15 kB URL GET HTTP/1.1 img.ucdl.pp.uc.cn/upload_files/wdj_fe/misc/javascripts/analytics.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type ASCII text, with very long lines (1952)
Hash fb6f83ad87b3bb318e73e106e86ce1d7
63be6673b9b06b3656aa5a5aa31770e4912062fc
a24069a33b97ea2c9e80894adaa7fb8e70a3a4dcba403fdb87d4ba8454f4aaf3
GET /upload_files/wdj_fe/misc/javascripts/analytics.js HTTP/1.1
Host: img.ucdl.pp.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Date: Mon, 17 Apr 2023 20:55:55 GMT
x-oss-request-id: 643DB25B793288303980230C
x-oss-cdn-auth: success
ETag: W/"FB6F83AD87B3BB318E73E106E86CE1D7"
Last-Modified: Thu, 11 Jan 2018 02:44:15 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8202381837962442239
x-oss-storage-class: Standard
Content-MD5: +2+DrYezuzGOc+EG6Gzh1w==
x-oss-server-time: 102
Ali-Swift-Global-Savetime: 1681764955
Via: cache20.l2fr1[0,0,200-0,H], cache23.l2fr1[1,0], cache8.nl2[0,0,200-0,H], cache7.nl2[1,0]
Age: 19505973
X-Cache: HIT TCP_MEM_HIT dirn:10:1002144973
X-Swift-SaveTime: Fri, 27 Oct 2023 15:48:52 GMT
X-Swift-CacheTime: 76655223
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff6309b17012709284448104e
Content-Encoding: gzip
img.ucdl.pp.uc.cn/upload_files/wdj_web/public/img/favicon.ico
200 OK 5.6 kB URL GET HTTP/1.1 img.ucdl.pp.uc.cn/upload_files/wdj_web/public/img/favicon.ico
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
File type MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel\012- data
Hash 5efebb22548027d864db3e08465a45f3
aa22ef9b7bec9a1cbd50865bbbc2ca3f6749ad30
caab7b0a43779ee25038eecc3a7807251c701142ec7f5e0aea5883b6f87cd7b6
GET /upload_files/wdj_web/public/img/favicon.ico HTTP/1.1
Host: img.ucdl.pp.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/x-icon
Content-Length: 5558
Connection: keep-alive
Date: Wed, 29 Nov 2023 14:56:49 GMT
x-oss-request-id: 65675131E3A187383370C43A
x-oss-cdn-auth: success
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: Xv67IlSAJ9hk2z4IRlpF8w==
x-oss-server-time: 23
Ali-Swift-Global-Savetime: 1701269809
Via: cache16.l2fr1[0,0,304-0,H], cache14.l2fr1[1,0], cache5.nl2[0,0,200-0,H], cache7.nl2[1,0]
ETag: "5EFEBB22548027D864DB3E08465A45F3"
Last-Modified: Wed, 19 Apr 2017 01:59:45 GMT
x-oss-hash-crc64ecma: 9982089337360862404
Age: 1119
X-Cache: HIT TCP_MEM_HIT dirn:5:114362535
X-Swift-SaveTime: Wed, 29 Nov 2023 15:02:47 GMT
X-Swift-CacheTime: 3600
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff6309b17012709284848168e
155.159.252.52/static/js/swiper.min.js?v=2021web
200 OK 42 kB URL GET HTTP/1.1 155.159.252.52/static/js/swiper.min.js?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (65284)
Hash ad2b984fe68303c7fd990f49dd125f9e
a7970d44348a8709eb519f5b9daf870d0ba9426a
0d99312788aaac576be48996454890f9bfa4df8a6f94fdab5ad1366b8d846d2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/js/swiper.min.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: application/javascript
Last-Modified: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"639f2ea0-2265a"
Expires: Thu, 30 Nov 2023 03:15:28 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
155.159.252.52/static/img/pf_sz.png
200 OK 6.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 120 x 116, 8-bit colormap, non-interlaced\012- data
Hash ad91a2962b509f47929d99568cdde95a
624b3a593fb770e575d22407e3a59cfc8f5febea
4512d1cba75fab0d99ac353265a2450e839a63105c35182370752abdaa067d8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/png
Content-Length: 6450
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1932"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/nav.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/nav.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1200 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 82e9401b9a6fc203f2aaf3b130447bda
a4eb8ad361ba56dc05865a2dad042f6c58d141f8
6e413eb72acc206783c902b193cec3fc98ef1c55032d55e12143c5af2c682a5f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/nav.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/png
Content-Length: 15486
Last-Modified: Sun, 20 Nov 2022 09:51:44 GMT
Connection: keep-alive
ETag: "6379f8b0-3c7e"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_fc.png
200 OK 7.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_fc.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 136 x 132, 8-bit colormap, non-interlaced\012- data
Hash 996941a20bcd2d89398a38eeae1e0996
37655f7dbe5e890584dec5a8cbe0e994ccd1f9b1
c01cf130af4eb716b4d47f3306d41e63119e50e34ad52e80946f94fb038067ae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_fc.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/png
Content-Length: 7493
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-1d45"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_zq.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_zq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 128 x 120, 8-bit colormap, non-interlaced\012- data
Hash 29c208d312b1b25c23f7cc75d9d722da
1b1243dd105b5bd5856a9ddfb1f5396135caf788
bcdce634fbf54b4a84812895146a2a6e70f1a51f1d03180de40d6780dedac1a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_zq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/png
Content-Length: 6954
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1b2a"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/qz.js?0.47677951531336193
200 OK 420 B URL GET HTTP/1.1 155.159.252.52/qz.js?0.47677951531336193
IP
ASN #137951 Clayer Limited
Hash 824a9bb8d7c25cbb833d54d19b439e1d
08344f2b0a322d70d4a34353ba7fad70434b9a44
152744ac4ce5c2ad0b75a9eb4db51866ea3a14bd31e1b647a5889ab020bcbe71
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /qz.js?0.47677951531336193 HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: application/javascript
Last-Modified: Wed, 29 Nov 2023 15:08:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"656753f0-472"
Expires: Thu, 30 Nov 2023 03:15:28 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
hm.baidu.com/hm.js?344c36f53ee751e154642760cf1772c1
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?344c36f53ee751e154642760cf1772c1
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (620)
Hash 13568272f7e027e5e890c958f34d1a1e
c8bf33ee8c66b2547d6cd4ba9c5cec4f56e33fa7
8adab58523b27d314b93d66c80783aab5049efdee7443e5207f58beb6df7426c
GET /hm.js?344c36f53ee751e154642760cf1772c1 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Wed, 29 Nov 2023 15:15:28 GMT
Etag: b27eca3d4238941be467bb09590190d5
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F69B0CBD6882E0E6; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
155.159.252.52/static/img/pf_tq.png
200 OK 7.1 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_tq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 124 x 120, 8-bit colormap, non-interlaced\012- data
Hash 43833604561af8ebc610e245a093df7a
5720981a98db3e1d8e790aeb2aaed8736b488636
faf237f95fe09f4fab31e741b4849e84bc497bddd8fc6653b9d5bda04237efd5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_tq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 7085
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1bad"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_777.png
200 OK 10 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_777.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 172 x 164, 8-bit colormap, non-interlaced\012- data
Hash c338ca6f666f9a6389243e519679bafe
ce0e1fb215aaf52fb2711642cf954f7519f8ad5f
067ebd49fa7b3413fb912dd3801fbfab938371eeea09c7b269dbca6abcc79bfa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_777.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 10339
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-2863"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_sb.png
200 OK 8.3 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sb.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 140 x 136, 8-bit colormap, non-interlaced\012- data
Hash 517f51d310a42f070d0b9769981ef801
38f4fe2ae3acbadc7aa1bbe2211f14c46747dd77
c447ea77e4015e533924fc6574236c04ff5cc569f9b1f7267d788010c6d9be36
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sb.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 8339
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-2093"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_ty.png
200 OK 113 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_ty.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 113 kB (112821 bytes)
Hash 97bafd361b9b620c7678e552024225c3
cbdd8488090148f5f73a97a91d3a24a6c07453b3
a2340fa63f1b53aebb946f62730dd4f64c9f42585126eb1152057d71b56fadce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_ty.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/png
Content-Length: 112821
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1b8b5"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1967548006&si=344c36f53ee751e154642760cf1772c1&v=1.3.0&lv=1&sn=47868&r=0&ww=1280&u=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&tt=BOB%E4%BD%93%E8%82%B2%E5%85%A8%E7%AB%99APP%E4%B8%8B%E8%BD%BD(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99ios%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88%2F%E6%89%8B%E6%9C%BAapp%E4%B8%8B%E8%BD%BD
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1967548006&si=344c36f53ee751e154642760cf1772c1&v=1.3.0&lv=1&sn=47868&r=0&ww=1280&u=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&tt=BOB%E4%BD%93%E8%82%B2%E5%85%A8%E7%AB%99APP%E4%B8%8B%E8%BD%BD(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99ios%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88%2F%E6%89%8B%E6%9C%BAapp%E4%B8%8B%E8%BD%BD
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1967548006&si=344c36f53ee751e154642760cf1772c1&v=1.3.0&lv=1&sn=47868&r=0&ww=1280&u=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&tt=BOB%E4%BD%93%E8%82%B2%E5%85%A8%E7%AB%99APP%E4%B8%8B%E8%BD%BD(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99ios%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88%2F%E6%89%8B%E6%9C%BAapp%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Wed, 29 Nov 2023 15:15:29 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=99F28BE0BA6DBC24; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
155.159.252.52/static/img/hotgame_bottom_btn_bg.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_bottom_btn_bg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 360 x 120, 8-bit colormap, non-interlaced\012- data
Hash 4b57c35593f2e9db6ba931a2ea31652b
c10b51fed294260abfdf169be0b7446b8e356e77
e808a3cd1bec176cb7b9808bf49f6b8acc23d8ddb0f6882275af4783d1e7549b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_bottom_btn_bg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 6992
Last-Modified: Sat, 22 Oct 2022 03:08:25 GMT
Connection: keep-alive
ETag: "63535ea9-1b50"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_right.png
200 OK 743 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_right.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash c932553300eae7cdcb99696b1920bda9
6e4b0905ea61d8a0f77d6ac32bbf5e163a5d988b
31d0b6073a2432fd03fd42bef7c91db11b8f4c01225d2af4f1ddfaf9d7ae406a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_right.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 743
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2e7"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/banner.jpg
200 OK 406 kB URL GET HTTP/1.1 155.159.252.52/static/img/banner.jpg
IP
ASN #137951 Clayer Limited
File type JPEG image data, baseline, precision 8, 3840x1400, components 3\012- data
Size 406 kB (405909 bytes)
Hash d12e3b2899046285cb587aebe46d5850
7cd25d88958e51dbc3184d039ea31985fb2271a7
83b0adf4e17b74b999e843b3f8514032784503c0b52efb74bab464233e53f36d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/banner.jpg HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/jpeg
Content-Length: 405909
Last-Modified: Mon, 21 Nov 2022 11:32:04 GMT
Connection: keep-alive
ETag: "637b61b4-63195"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_left.png
200 OK 757 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_left.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash 3a547fa8debd16ad353a1071391b33b4
6b9fc14318ef032c8780ffea4316f71879587592
ec26d91bab019f3f6c2e6dfaa846470bdaa40b94d10e3b2dc1a48ed5507a8cd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_left.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 757
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2f5"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_tabsbg.png
200 OK 4.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_tabsbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2080 x 128, 8-bit colormap, non-interlaced\012- data
Hash 721b5f94951c6f0afd4737c11f68578f
a01cc2ce8bef94af3da98370d4e7ab66846f20e8
f47165133efac8e12274e9911ca4b6c47cf8cab47d0c7fd1e201b77f903d1ec2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_tabsbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 4722
Last-Modified: Fri, 19 Nov 2021 14:41:19 GMT
Connection: keep-alive
ETag: "6197b78f-1272"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_lbbg.png
200 OK 58 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_lbbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2380 x 488, 8-bit colormap, non-interlaced\012- data
Hash 3ae837307bc15ba6fcaf2832ce3d0402
c80a9e4ae384f2ae07e10308b72224a8352804f2
a71e6ed99105f1a2348c90777fa09b2a9b5b9278efc6759e6e768a168ec0a05a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_lbbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 57488
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-e090"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_itembg.png
200 OK 19 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_itembg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 694 x 920, 8-bit colormap, non-interlaced\012- data
Hash 24212179c159aa856ecaa975a7138ed4
26c23b212280736a857f480b43b95b2bed94f4d9
631c864daa8c608f3390b717d4099e1725cdf134bb213ae3754ff918b2c515cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_itembg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 18954
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-4a0a"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hd.png
200 OK 347 kB URL GET HTTP/1.1 155.159.252.52/static/img/hd.png
IP
ASN #137951 Clayer Limited
File type JPEG image data, progressive, precision 8, 969x1088, components 3\012- data
Size 347 kB (346703 bytes)
Hash 221471375bf8702a176becdf4212cd24
ef80818c34189fa9dceefa1738bcd84886e45595
8b0a9db25f2b4675591b97eb59945d223f46650d1b05df9c21e01c61891bc5f3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hd.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:28 GMT
Content-Type: image/png
Content-Length: 346703
Last-Modified: Fri, 25 Nov 2022 12:17:55 GMT
Connection: keep-alive
ETag: "6380b273-54a4f"
Expires: Fri, 29 Dec 2023 15:15:28 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/downloadbg.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/downloadbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 490 x 668, 8-bit colormap, non-interlaced\012- data
Hash 54aea9069ebd594d06452f981ef0e082
7be69fe602b6a08a9d33b2818b7b2435cbfe1c51
be14f003ebb563bca19a5adedb51cce325609eb2c781de3bdbf36c725d4afdbd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/downloadbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 16155
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-3f1b"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/footerbg.png
200 OK 28 kB URL GET HTTP/1.1 155.159.252.52/static/img/footerbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1920 x 324, 8-bit colormap, non-interlaced\012- data
Hash 3b9ae1ce28bdf234e7e3245305371937
9c36e5d742a69c80ed0693cbcf3a00f2b0c82d73
17df7cb78bb02c8bda5b7ffb7febbf48f046b5b54e0fa137ba6d37878e4fa6e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/footerbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 27856
Last-Modified: Fri, 19 Nov 2021 14:41:13 GMT
Connection: keep-alive
ETag: "6197b789-6cd0"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/fd_totop.png
200 OK 2.8 kB URL GET HTTP/1.1 155.159.252.52/static/img/fd_totop.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 76 x 76, 8-bit colormap, non-interlaced\012- data
Hash b1e36b9e83803b77e6ac09da9eead509
99e72f62ec65667e89a9b288b627b357be96701f
38b57c517260980e644dfb405ef08146d2111b714abec7255efbd4b354cd7583
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/fd_totop.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 2797
Last-Modified: Fri, 19 Nov 2021 14:41:12 GMT
Connection: keep-alive
ETag: "6197b788-aed"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/app_logo1.png
200 OK 31 kB URL GET HTTP/1.1 155.159.252.52/static/img/app_logo1.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f09a00bf070107b33d37c05441ee3ac
de368c24abff83e1ce0732780a7dcf62645532e0
86b5eb8183d8f7b2d4a00275d6f84981d00da62f78647447bf6a143ccc0199a9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/app_logo1.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 31226
Last-Modified: Sun, 20 Nov 2022 09:56:26 GMT
Connection: keep-alive
ETag: "6379f9ca-79fa"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_qp.png
200 OK 115 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_qp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 115 kB (115196 bytes)
Hash 0ea04fcfea1b06ea4f8d6b968b8b3a8f
453e2e125220a1eeb3f9d948d7f08833ef6aff6b
381944f290c0f63dbeb208634a3de02b821024e5d8d216369f192cee6d27f76c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_qp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 115196
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-1c1fc"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dj.png
200 OK 118 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dj.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 118 kB (118485 bytes)
Hash 38ffc4b03162e8dc89bdc33aaa16d18e
8b9cf42cd90a0e867b069911afd8f722ba1bd6bd
89d9caf40ad22305ba8e2531e92af0d5695202950af14c0074b68ed32cf701d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dj.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 118485
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1ced5"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_cp.png
200 OK 125 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_cp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 125 kB (124841 bytes)
Hash 6cea918d7d824577f3bab4d14a864125
0370a8ddf1a99294acd7b33c59bea06c3ee110d0
5fd3fa7f8b23b33bf6fababc924645de9685f166b351e7684c6f936a4452edb6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_cp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 124841
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1e7a9"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_zr.png
200 OK 121 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_zr.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 121 kB (121229 bytes)
Hash a691f396c473aa877d66dcc169597c64
d9b5daf91bfa46233fcd701146691f11d30aba87
c8bdd010d21a319777891807be19d13173d5730c966ff6897d65ce8a0b2244b0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_zr.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:29 GMT
Content-Type: image/png
Content-Length: 121229
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1d98d"
Expires: Fri, 29 Dec 2023 15:15:29 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/download_bottom_img.png
200 OK 40 kB URL GET HTTP/1.1 155.159.252.52/static/img/download_bottom_img.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1264 x 320, 8-bit colormap, non-interlaced\012- data
Hash 2562815ac75731e40a21f53a93ddc94e
f614090083587a2c0118b0f8996e10060d82b04f
f42316c348280e18dbdf1174fc2e2759204b0109ae23c43a00ab2999abe84ed4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/download_bottom_img.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:30 GMT
Content-Type: image/png
Content-Length: 39832
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-9b98"
Expires: Fri, 29 Dec 2023 15:15:30 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_contact.png
200 OK 7.9 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_contact.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash bba44c514b5da0fa122db10bd5dd4a25
456d99769aa1b15714feb48d141a67f50f5d9c62
c1c6f0209d71d61adac42db73154e66ddebc258404fe6feb914f1b0ec3ba2bc4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_contact.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:30 GMT
Content-Type: image/png
Content-Length: 7875
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1ec3"
Expires: Fri, 29 Dec 2023 15:15:30 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dz.png
200 OK 124 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 124 kB (124185 bytes)
Hash d57cfec1caaa46c2d0302708ca606ac3
9c68a596ad3b1b7de67ae6ae481d25de3a968f29
07aeb4f99135e35b0ca7f9e08e03575e697454c71482789caac9d6ff958225ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 15:15:30 GMT
Content-Type: image/png
Content-Length: 124185
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-1e519"
Expires: Fri, 29 Dec 2023 15:15:30 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
ocsp2.globalsign.com/gsorganizationvalsha2g2
1.5 kB URL ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 329ad5a45dca4df52445ddfd15ab679a
cc9e0620d15618fc6746da659a0bf137fedb3555
43b8e0575a056425d592d676956c86b23b56ec04bd2da9bcc7b966e041ace9b7
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 Nov 2023 15:15:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 03 Dec 2023 11:33:58 GMT
ETag: "cc9e0620d15618fc6746da659a0bf137fedb3555"
Last-Modified: Wed, 29 Nov 2023 11:33:59 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3344
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82dbce78cb56569a-OSL
arms-retcode.aliyuncs.com/r.png?t=resourceError×=1&page=down04995468.cdnxiazai.com%2Fcx%2F**%2F**%2Fasssdbechmarkack.epro5c8192_92015.exe&tag=&release=&environment=prod&begin=1701270931457&src=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&node_name=img&xpath=div.cols.clearfix%20%3E%20div.col-left%20%3E%20div.midbanner.hide%20%3E%20a.%20%3E%20img.&sr=1280x1024&vp=1280x1024&ct=&uid=qzl0Ip1yjz3w6ysgkcFb1LttjO07&sid=3ClRtpkpjzCwFnsgkcny161uwFyj&pid=dsv9zcel92%40627f16fecc1c1e0&_v=1.8.31&pv_id=9Fl9apdjjC3wL4sqgbv4yyet9g77&sampling=1&z=lpjwsbys
200 OK 0 B URL HEAD HTTP/2 arms-retcode.aliyuncs.com/r.png?t=resourceError×=1&page=down04995468.cdnxiazai.com%2Fcx%2F**%2F**%2Fasssdbechmarkack.epro5c8192_92015.exe&tag=&release=&environment=prod&begin=1701270931457&src=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&node_name=img&xpath=div.cols.clearfix%20%3E%20div.col-left%20%3E%20div.midbanner.hide%20%3E%20a.%20%3E%20img.&sr=1280x1024&vp=1280x1024&ct=&uid=qzl0Ip1yjz3w6ysgkcFb1LttjO07&sid=3ClRtpkpjzCwFnsgkcny161uwFyj&pid=dsv9zcel92%40627f16fecc1c1e0&_v=1.8.31&pv_id=9Fl9apdjjC3wL4sqgbv4yyet9g77&sampling=1&z=lpjwsbys
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerGlobalSign nv-sa
Subject*.arms.aliyuncs.com
FingerprintDD:EC:84:C3:4A:93:4F:F5:D3:8C:51:49:2B:D4:88:5A:02:04:4B:92
ValidityWed, 28 Dec 2022 07:01:02 GMT - Mon, 29 Jan 2024 07:01:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /r.png?t=resourceError×=1&page=down04995468.cdnxiazai.com%2Fcx%2F**%2F**%2Fasssdbechmarkack.epro5c8192_92015.exe&tag=&release=&environment=prod&begin=1701270931457&src=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&node_name=img&xpath=div.cols.clearfix%20%3E%20div.col-left%20%3E%20div.midbanner.hide%20%3E%20a.%20%3E%20img.&sr=1280x1024&vp=1280x1024&ct=&uid=qzl0Ip1yjz3w6ysgkcFb1LttjO07&sid=3ClRtpkpjzCwFnsgkcny161uwFyj&pid=dsv9zcel92%40627f16fecc1c1e0&_v=1.8.31&pv_id=9Fl9apdjjC3wL4sqgbv4yyet9g77&sampling=1&z=lpjwsbys HTTP/1.1
Host: arms-retcode.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://down04995468.cdnxiazai.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 15:15:32 GMT
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
arms-retcode.aliyuncs.com/r.png?t=resourceError×=1&page=down04995468.cdnxiazai.com%2Fcx%2F**%2F**%2Fasssdbechmarkack.epro5c8192_92015.exe&tag=&release=&environment=prod&begin=1701270931458&src=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&node_name=img&xpath=html.%20%3E%20body.detail.PC.wdj-web-view.wdj-web-view-appsdetail..log-param-f%20%3E%20div.botbanner.hide%20%3E%20a.%20%3E%20img.&sr=1280x1024&vp=1280x1024&ct=&uid=qzl0Ip1yjz3w6ysgkcFb1LttjO07&sid=3ClRtpkpjzCwFnsgkcny161uwFyj&pid=dsv9zcel92%40627f16fecc1c1e0&_v=1.8.31&pv_id=9Fl9apdjjC3wL4sqgbv4yyet9g77&sampling=1&z=lpjwsbyt
200 OK 0 B URL HEAD HTTP/2 arms-retcode.aliyuncs.com/r.png?t=resourceError×=1&page=down04995468.cdnxiazai.com%2Fcx%2F**%2F**%2Fasssdbechmarkack.epro5c8192_92015.exe&tag=&release=&environment=prod&begin=1701270931458&src=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&node_name=img&xpath=html.%20%3E%20body.detail.PC.wdj-web-view.wdj-web-view-appsdetail..log-param-f%20%3E%20div.botbanner.hide%20%3E%20a.%20%3E%20img.&sr=1280x1024&vp=1280x1024&ct=&uid=qzl0Ip1yjz3w6ysgkcFb1LttjO07&sid=3ClRtpkpjzCwFnsgkcny161uwFyj&pid=dsv9zcel92%40627f16fecc1c1e0&_v=1.8.31&pv_id=9Fl9apdjjC3wL4sqgbv4yyet9g77&sampling=1&z=lpjwsbyt
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerGlobalSign nv-sa
Subject*.arms.aliyuncs.com
FingerprintDD:EC:84:C3:4A:93:4F:F5:D3:8C:51:49:2B:D4:88:5A:02:04:4B:92
ValidityWed, 28 Dec 2022 07:01:02 GMT - Mon, 29 Jan 2024 07:01:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /r.png?t=resourceError×=1&page=down04995468.cdnxiazai.com%2Fcx%2F**%2F**%2Fasssdbechmarkack.epro5c8192_92015.exe&tag=&release=&environment=prod&begin=1701270931458&src=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&node_name=img&xpath=html.%20%3E%20body.detail.PC.wdj-web-view.wdj-web-view-appsdetail..log-param-f%20%3E%20div.botbanner.hide%20%3E%20a.%20%3E%20img.&sr=1280x1024&vp=1280x1024&ct=&uid=qzl0Ip1yjz3w6ysgkcFb1LttjO07&sid=3ClRtpkpjzCwFnsgkcny161uwFyj&pid=dsv9zcel92%40627f16fecc1c1e0&_v=1.8.31&pv_id=9Fl9apdjjC3wL4sqgbv4yyet9g77&sampling=1&z=lpjwsbyt HTTP/1.1
Host: arms-retcode.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://down04995468.cdnxiazai.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 15:15:32 GMT
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
fourier.taobao.com/rp?ext=51&data=jm_null&random=3557750042883683&href=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&protocol=http:
200 OK 1.4 kB URL GET HTTP/2 fourier.taobao.com/rp?ext=51&data=jm_null&random=3557750042883683&href=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&protocol=http:
IP
Requested by http://down04995468.cdnxiazai.com/cx/160624/16/asssdbechmarkack.epro5C8192_92015.exe
Certificate IssuerGlobalSign nv-sa
Subject*.taobao.com
FingerprintFB:EA:94:64:63:CD:31:39:2F:C2:D8:7B:E5:E4:D5:ED:B1:AA:81:20
ValidityTue, 22 Aug 2023 03:42:02 GMT - Sat, 08 Jun 2024 02:06:47 GMT
File type ASCII text, with very long lines (1499), with no line terminators
Hash f54f7941b1422013e0cf9ad1215bddd6
9fa816a326c3bdb5cc320ffadc88818b97616f55
f207766e70b4622e60f99986307c29b592b8532da5eb577c2872148168912285
GET /rp?ext=51&data=jm_null&random=3557750042883683&href=http%3A%2F%2Fdown04995468.cdnxiazai.com%2Fcx%2F160624%2F16%2Fasssdbechmarkack.epro5C8192_92015.exe&protocol=http: HTTP/1.1
Host: fourier.taobao.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://down04995468.cdnxiazai.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 15:15:29 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
server: Tengine
cache-control: no-store
access-control-allow-credentials: true
use-raw: true
bxuuid: 7857bcb3e4e46868162b39c653715125, {"login-token":"7857bcb3e4e46868162b39c653715125___87053___1636b5eddc3cd488b33ff3231d54105e"}
set-cookie: x5secdata=xdd496662f010406ae7857bcb3e4e46868162b39c6537151251701270929a-717315356a1993109894abaac2caa__bx__fourier.taobao.com%3A443%2Frp; Max-Age=20; Expires=Wed, 29-Nov-2023 15:15:49 GMT; Domain=taobao.com; Path=/
bxpunish: 1
via: tengine-ingress.033062041249.na610[web,200]
content-encoding: gzip
X-Firefox-Spdy: h2
155.159.179.243
163.181.56.244
47.110.73.164
47.246.48.228
103.235.46.191
104.18.20.226