gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
3.7 kB URL User Request GET gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1279)
Hash 535233d735de4fbadde5c5827078a322
509b785c3f879fb3e3701ed6b1236a0174ce2cbc
d9ef46b41affb1462127348a89c07946f17f16d24f54c9e095e0d18858b85545
GET /cx/071287/107/setup_0049bgji.exe HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/template/news/ygx/static/css/mdy.css
200 OK 4.1 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/css/mdy.css
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type ASCII text, with very long lines (431)
Hash aec103509c4a6c5e05230b8daf318291
5cb786120983bd856f44f118327ec96a3427924e
ed8d793a0b6e9751d6c97f540aca9a8aa2b9df3bde8ae30570ab78587a0f26b8
GET /template/news/ygx/static/css/mdy.css HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:31 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-3186"
Expires: Wed, 27 Sep 2023 03:02:31 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/template/news/ygx/static/js/mdy.js
200 OK 6.3 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/js/mdy.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a2dc3dae6bb6341bb498fbb6fc8190e1
6b242658f35afd23c641c68e13a75b58ac02284f
4e0f9c240ad1cc00feccd6a583d1fa651f2639107d82afd642e88f4c7ead7199
GET /template/news/ygx/static/js/mdy.js HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-4a28"
Expires: Wed, 27 Sep 2023 03:02:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/template/news/ygx/static/js/zgjjw.min.4.js
200 OK 17 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/js/zgjjw.min.4.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type ASCII text, with very long lines (32019)
Hash ab8160556f4c2294f6a05bf21f2ae3e5
f090f22bcf536f4831f91bf8603cfc9d8ebff106
8da0058b8d4b9d2372b0030837c4c27d60623f77b51cbc24a4ad53e56c5313fa
GET /template/news/ygx/static/js/zgjjw.min.4.js HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:31 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-ca04"
Expires: Wed, 27 Sep 2023 03:02:31 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/js/orsxg5a.script
200 OK 1.0 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/js/orsxg5a.script
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 37e3975ee5f1d69f4e7b32da36a4e1d3
93f088664e21865a434a4ed8e6da858099c33e27
5434bae1a51380804285c751b5c00d11d4b3b6963d54e9112b694997d0d35a2e
GET /js/orsxg5a.script HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/template/news/ygx/static/images/banner.png
200 OK 12 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/images/banner.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type PNG image data, 640 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 87f4b623c56c7ea5b2737c5e22467f25
2e3d66954a3279ef946f360344778ea4ef69f1e9
2d95d446d369afee1b2edcfc1e7cc451cdcb3c71df103ddbf928141c84ec0311
GET /template/news/ygx/static/images/banner.png HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/template/news/ygx/static/css/mdy.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: image/png
Content-Length: 12130
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-2f62"
Expires: Thu, 26 Oct 2023 15:02:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295846.dwonxiazai.com/template/news/ygx/static/js/jqmin11.js
200 OK 38 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/js/jqmin11.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type ASCII text, with very long lines (32341), with CRLF line terminators
Hash a1cd7fc161a5cb1d7102d1e72ee1e67f
295153b52a34427bcaecb4a55c0aabcca825d544
af2419dd15e09ea913cfe94d130f9870486732e57764e0f02ea3846f204146ee
GET /template/news/ygx/static/js/jqmin11.js HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e117e6-1787f"
Expires: Wed, 27 Sep 2023 03:02:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/template/news/ygx/static/picture/item.png
200 OK 1.3 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/picture/item.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type PNG image data, 44 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f1148320c477f104800c248580e2ef4
bcf7737a74ec14a7f5fb693818ade80c23c3ef01
ecc219eb8a5e74a1a9c6c3c88eb5c50bf196ec55f6760ce4623b627e6cbf185e
GET /template/news/ygx/static/picture/item.png HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: image/png
Content-Length: 1308
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-51c"
Expires: Thu, 26 Oct 2023 15:02:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295846.dwonxiazai.com/template/news/ygx/static/images/share.jpg
200 OK 6.9 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/images/share.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 92x67, components 3\012- data
Hash 9b2749c43b9d8113871080ce7692bbfd
fd2898487118f34dc9fc84a8f3a4d556d6ba425b
e6ef622c7cdb9497f21e18dc526df3fe8147490cfddd043593fdadd35e789069
GET /template/news/ygx/static/images/share.jpg HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/template/news/ygx/static/css/mdy.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: image/jpeg
Content-Length: 6910
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-1afe"
Expires: Thu, 26 Oct 2023 15:02:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
partner.toutiao.com/user_mark/?callback=__jsonp__tzcbh2mhcj
404 Not Found 144 B URL GET HTTP/1.1 partner.toutiao.com/user_mark/?callback=__jsonp__tzcbh2mhcj
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 23143cf7520b6cfed03dbd90ddca4a02
ad099c7199fe144c2bf30f7058e0a9df5764b015
b282ac8512c5e029959282e6fd450dc119f5db4a072869eabf45e31440596248
GET /user_mark/?callback=__jsonp__tzcbh2mhcj HTTP/1.1
Host: partner.toutiao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: Tengine
Content-Type: text/html
Content-Length: 144
Connection: keep-alive
Date: Tue, 26 Sep 2023 15:02:32 GMT
x-tt-trace-host: 01f3e28cd610d2bb6b357c1c3e57b8ac4b6266ca98ff5b9bc0736781b84963678d4a2430d8e94a38e93840a4660bafaa640d4ef1daa7d6b4c4418aad9a631ab988
x-tt-trace-tag: id=03;cdn-cache=miss;type=dyn
X-TT-LOGID: 2023092623023257BEBD4D3326217E097C
x-alicdn-da-ups-status: endOs,0,404
Via: cache21.l2nm125[5,0], cache21.l2de2[179,0], cache3.se1[202,0]
server-timing: cdn-cache;desc=MISS,edge;dur=197,origin;dur=5
Timing-Allow-Origin: *
EagleId: 2ff62c9716957405523947887e
gxx8295846.dwonxiazai.com/cx/071287/107/%7B$theme_path%7D/static/js/analytics.js
400 Bad Request 13 B URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/cx/071287/107/%7B$theme_path%7D/static/js/analytics.js
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type ASCII text, with no line terminators
Hash 1e6cd917ed71a1241e4bedc29264bd98
5b65037351caeb0e5a48d963d7ffa88d0271d546
7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402
GET /cx/071287/107/%7B$theme_path%7D/static/js/analytics.js HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
gxx8295846.dwonxiazai.com/template/news/ygx/static/images/backtop.png
200 OK 3.1 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/images/backtop.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type PNG image data, 124 x 146, 8-bit/color RGB, non-interlaced\012- data
Hash 97598ecbdb5b02a152a9c0b91c962661
2fa4cc723cda3667d8859a4d0d855ec354a8d603
ec7cf155c6c06827149367e88065eb6423179074f2c11648028194f389c6e9f7
GET /template/news/ygx/static/images/backtop.png HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/template/news/ygx/static/css/mdy.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: image/png
Content-Length: 3116
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-c2c"
Expires: Thu, 26 Oct 2023 15:02:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
gxx8295846.dwonxiazai.com/uploads/images/2628120.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/uploads/images/2628120.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/2628120.jpg HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://n.sinaimg.cn/news/transform/w600h400/20180313/8Y_6-fyscsmu9651077.jpg?zdy
n.sinaimg.cn/news/transform/w600h400/20180313/8Y_6-fyscsmu9651077.jpg?zdy
200 OK 60 kB URL GET HTTP/1.1 n.sinaimg.cn/news/transform/w600h400/20180313/8Y_6-fyscsmu9651077.jpg?zdy
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash eaa0e33cf76bae627f38258a4fe54b32
6896520faf406c61aad5fd38eb73dac13ce2590c
7b5b08b5a19ebc86d7cc32f220e13bc5b141ea5dcdc39acb730739783007c039
GET /news/transform/w600h400/20180313/8Y_6-fyscsmu9651077.jpg?zdy HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gxx8295846.dwonxiazai.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 59855
Connection: keep-alive
Date: Sun, 12 Mar 2023 00:00:27 GMT
X-RequestId: 6111f60d-2303-1208-0027-5ca7213e0304
X-Requester: GRPS000000ANONYMOUSE
Last-Modified: Sun, 14 Jul 2019 08:01:14 GMT
X-Filesize: 59855
ETag: "eaa0e33cf76bae627f38258a4fe54b32"
x-amz-meta-crc32: B4A0F744
Cache-Control: max-age=31536000
Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
Access-Control-Max-Age: 31536000
Access-Control-Allow-Origin: *
Edge-Copy-Time: 1678579227306
Via: http/1.1 cmcc.guangzhou.union.64 (ApacheTrafficServer/6.2.1 [cMsSfW]), cache41.l2st3-1[0,0,200-0,H], cache23.l2st3-1[2,0], cache29.l2hk2[0,28,200-0,H], cache25.l2hk2[30,0], cache1.l2de2[0,0,304-0,H], cache3.l2de2[0,0], cache4.se1[0,0,200-0,H], cache1.se1[1,0]
X-Via-CDN: f=aliyun,s=cache1.se1,c=91.90.42.154;f=edge,s=ctc.guangzhou.union.187.nb.sinaedge.com,c=120.241.4.168;f=Edge,s=cmcc.guangzhou.union.64,c=10.31.50.187
X-Via-Edge: 1678579227091a804f178bb321f0a52d725fe
Ali-Swift-Global-Savetime: 1678579227
Age: 17161325
X-Cache: HIT TCP_MEM_HIT dirn:2:293419267
X-Swift-SaveTime: Sat, 03 Jun 2023 10:35:38 GMT
X-Swift-CacheTime: 24326689
Timing-Allow-Origin: *
EagleId: 2ff62c9516957405528673320e
gxx8295846.dwonxiazai.com/template/news/ygx/static/picture/share_weixin1.png
200 OK 18 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/picture/share_weixin1.png
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type PNG image data, 419 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 1cb2feb4fd6938f48b34ae97a926766d
957e730e07889ac13e9100ff7b7358cec9bc3f36
8c7d5ee432641486d92d705de0c713d49ad3a26d1995235a2ffd1794dabbf6ef
GET /template/news/ygx/static/picture/share_weixin1.png HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: image/png
Content-Length: 17625
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-44d9"
Expires: Thu, 26 Oct 2023 15:02:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/
200 OK 2.2 kB IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash baba1d17293225225028471c64b1bc54
9d9bc8ae5f6be77aad99e35b8724918f23457e15
c325762c885f22c30bd0994b2d34f6ebfd593ffd53d25546b1d12104b69258df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: text/html
Last-Modified: Wed, 16 Aug 2023 06:34:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64dc6de6-22f2"
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/template/news/ygx/static/picture/cecn-icon.jpg
200 OK 94 kB URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/template/news/ygx/static/picture/cecn-icon.jpg
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3\012- data
Hash dece860a26327ed93ef6525f3aadeaab
9b49c3edecd37a6bec6cc2d9f932938e249eebf9
f495b63b95cb083e3a4c0ba05dfb8942e79d6f46351e02b6b3ed442c68670f62
GET /template/news/ygx/static/picture/cecn-icon.jpg HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:32 GMT
Content-Type: image/jpeg
Content-Length: 94013
Last-Modified: Mon, 06 Feb 2023 15:08:22 GMT
Connection: keep-alive
ETag: "63e117e6-16f3d"
Expires: Thu, 26 Oct 2023 15:02:32 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/css/swiper.min.css?v=2021web
200 OK 4.5 kB URL GET HTTP/1.1 155.159.252.52/static/css/swiper.min.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (13425), with CRLF line terminators
Hash 6604e7f8fbafb482f29e0dfa78e0e2e5
520ff7d839d3a94c855c9d75a76b5b166a5bf1b9
6d0a4af85bd32d089f36e072c98a15212d4468d562be75c0c3ef16c611c971cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/swiper.min.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Nov 2021 14:41:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6197b7a4-3579"
Expires: Wed, 27 Sep 2023 03:02:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/css/web.css?v=2021web
200 OK 3.9 kB URL GET HTTP/1.1 155.159.252.52/static/css/web.css?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (15835), with CRLF line terminators
Hash 7b2ba6b1693108bd2fd33ded77801fb0
26e4ce47051c560739f8dd3e26916e34554c2fa5
80a4949c8c56a68157cc94ba9a35c3df5f0ff031c1ef325362b8fc0229b57d07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/css/web.css?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Dec 2021 16:53:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61ae4011-3def"
Expires: Wed, 27 Sep 2023 03:02:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
gxx8295846.dwonxiazai.com/favicon.ico
200 OK 0 B URL GET HTTP/1.1 gxx8295846.dwonxiazai.com/favicon.ico
IP
ASN #137951 Clayer Limited
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: gxx8295846.dwonxiazai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Fri, 19 May 2023 11:18:09 GMT
Connection: keep-alive
ETag: "64675af1-0"
Accept-Ranges: bytes
155.159.252.52/config.js?v=2021web
200 OK 594 B URL GET HTTP/1.1 155.159.252.52/config.js?v=2021web
IP
ASN #137951 Clayer Limited
Hash 75563f1c596eb176ae2de67f5e4a2b78
4aeeccd0dd450179e4709e6ebf432c3e0a5791ef
c3c2d2a219a8b7fb0f22608174965eef9beaa155a3710a08331af1f24dc2a0cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /config.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: application/javascript
Last-Modified: Sun, 28 May 2023 08:03:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64730aec-49c"
Expires: Wed, 27 Sep 2023 03:02:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?3f7487e9fa770fdc0dcffa98b6d51956
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://gxx8295846.dwonxiazai.com/cx/071287/107/setup_0049bgji.exe
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?3f7487e9fa770fdc0dcffa98b6d51956 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gxx8295846.dwonxiazai.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Tue, 26 Sep 2023 15:02:33 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
155.159.252.52/static/img/pf_sz.png
200 OK 6.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 120 x 116, 8-bit colormap, non-interlaced\012- data
Hash ad91a2962b509f47929d99568cdde95a
624b3a593fb770e575d22407e3a59cfc8f5febea
4512d1cba75fab0d99ac353265a2450e839a63105c35182370752abdaa067d8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: image/png
Content-Length: 6450
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1932"
Expires: Thu, 26 Oct 2023 15:02:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_fc.png
200 OK 7.5 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_fc.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 136 x 132, 8-bit colormap, non-interlaced\012- data
Hash 996941a20bcd2d89398a38eeae1e0996
37655f7dbe5e890584dec5a8cbe0e994ccd1f9b1
c01cf130af4eb716b4d47f3306d41e63119e50e34ad52e80946f94fb038067ae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_fc.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: image/png
Content-Length: 7493
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-1d45"
Expires: Thu, 26 Oct 2023 15:02:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/nav.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/nav.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1200 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 82e9401b9a6fc203f2aaf3b130447bda
a4eb8ad361ba56dc05865a2dad042f6c58d141f8
6e413eb72acc206783c902b193cec3fc98ef1c55032d55e12143c5af2c682a5f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/nav.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: image/png
Content-Length: 15486
Last-Modified: Sun, 20 Nov 2022 09:51:44 GMT
Connection: keep-alive
ETag: "6379f8b0-3c7e"
Expires: Thu, 26 Oct 2023 15:02:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_zq.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_zq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 128 x 120, 8-bit colormap, non-interlaced\012- data
Hash 29c208d312b1b25c23f7cc75d9d722da
1b1243dd105b5bd5856a9ddfb1f5396135caf788
bcdce634fbf54b4a84812895146a2a6e70f1a51f1d03180de40d6780dedac1a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_zq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: image/png
Content-Length: 6954
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1b2a"
Expires: Thu, 26 Oct 2023 15:02:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/js/swiper.min.js?v=2021web
200 OK 42 kB URL GET HTTP/1.1 155.159.252.52/static/js/swiper.min.js?v=2021web
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (65284)
Hash ad2b984fe68303c7fd990f49dd125f9e
a7970d44348a8709eb519f5b9daf870d0ba9426a
0d99312788aaac576be48996454890f9bfa4df8a6f94fdab5ad1366b8d846d2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/js/swiper.min.js?v=2021web HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: application/javascript
Last-Modified: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"639f2ea0-2265a"
Expires: Wed, 27 Sep 2023 03:02:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/pf_tq.png
200 OK 7.1 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_tq.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 124 x 120, 8-bit colormap, non-interlaced\012- data
Hash 43833604561af8ebc610e245a093df7a
5720981a98db3e1d8e790aeb2aaed8736b488636
faf237f95fe09f4fab31e741b4849e84bc497bddd8fc6653b9d5bda04237efd5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_tq.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 7085
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-1bad"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_777.png
200 OK 10 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_777.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 172 x 164, 8-bit colormap, non-interlaced\012- data
Hash c338ca6f666f9a6389243e519679bafe
ce0e1fb215aaf52fb2711642cf954f7519f8ad5f
067ebd49fa7b3413fb912dd3801fbfab938371eeea09c7b269dbca6abcc79bfa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_777.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 10339
Last-Modified: Fri, 19 Nov 2021 14:41:35 GMT
Connection: keep-alive
ETag: "6197b79f-2863"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/pf_sb.png
200 OK 8.3 kB URL GET HTTP/1.1 155.159.252.52/static/img/pf_sb.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 140 x 136, 8-bit colormap, non-interlaced\012- data
Hash 517f51d310a42f070d0b9769981ef801
38f4fe2ae3acbadc7aa1bbe2211f14c46747dd77
c447ea77e4015e533924fc6574236c04ff5cc569f9b1f7267d788010c6d9be36
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/pf_sb.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 8339
Last-Modified: Fri, 19 Nov 2021 14:41:36 GMT
Connection: keep-alive
ETag: "6197b7a0-2093"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_right.png
200 OK 743 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_right.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash c932553300eae7cdcb99696b1920bda9
6e4b0905ea61d8a0f77d6ac32bbf5e163a5d988b
31d0b6073a2432fd03fd42bef7c91db11b8f4c01225d2af4f1ddfaf9d7ae406a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_right.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 743
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2e7"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/top_game_titletext_left.png
200 OK 757 B URL GET HTTP/1.1 155.159.252.52/static/img/top_game_titletext_left.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1000 x 40, 8-bit colormap, non-interlaced\012- data
Hash 3a547fa8debd16ad353a1071391b33b4
6b9fc14318ef032c8780ffea4316f71879587592
ec26d91bab019f3f6c2e6dfaa846470bdaa40b94d10e3b2dc1a48ed5507a8cd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/top_game_titletext_left.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 757
Last-Modified: Fri, 19 Nov 2021 14:41:39 GMT
Connection: keep-alive
ETag: "6197b7a3-2f5"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/qz.js?0.938984205086429
200 OK 424 B URL GET HTTP/1.1 155.159.252.52/qz.js?0.938984205086429
IP
ASN #137951 Clayer Limited
Hash fde1acd3828e338a56c1765f062a121b
1ec6bd9ad84885c3a79bb0dcad95e81c808e810d
21ab6a287aa43fe216c0ffbda1b88490f4a366f78b7dd40df17144ba9a9465b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /qz.js?0.938984205086429 HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Sep 2023 13:47:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6512e0d4-478"
Expires: Wed, 27 Sep 2023 03:02:34 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
155.159.252.52/static/img/hotgame_tabsbg.png
200 OK 4.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_tabsbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2080 x 128, 8-bit colormap, non-interlaced\012- data
Hash 721b5f94951c6f0afd4737c11f68578f
a01cc2ce8bef94af3da98370d4e7ab66846f20e8
f47165133efac8e12274e9911ca4b6c47cf8cab47d0c7fd1e201b77f903d1ec2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_tabsbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 4722
Last-Modified: Fri, 19 Nov 2021 14:41:19 GMT
Connection: keep-alive
ETag: "6197b78f-1272"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_bottom_btn_bg.png
200 OK 7.0 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_bottom_btn_bg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 360 x 120, 8-bit colormap, non-interlaced\012- data
Hash 4b57c35593f2e9db6ba931a2ea31652b
c10b51fed294260abfdf169be0b7446b8e356e77
e808a3cd1bec176cb7b9808bf49f6b8acc23d8ddb0f6882275af4783d1e7549b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_bottom_btn_bg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 6992
Last-Modified: Sat, 22 Oct 2022 03:08:25 GMT
Connection: keep-alive
ETag: "63535ea9-1b50"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/footerbg.png
200 OK 28 kB URL GET HTTP/1.1 155.159.252.52/static/img/footerbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1920 x 324, 8-bit colormap, non-interlaced\012- data
Hash 3b9ae1ce28bdf234e7e3245305371937
9c36e5d742a69c80ed0693cbcf3a00f2b0c82d73
17df7cb78bb02c8bda5b7ffb7febbf48f046b5b54e0fa137ba6d37878e4fa6e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/footerbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 27856
Last-Modified: Fri, 19 Nov 2021 14:41:13 GMT
Connection: keep-alive
ETag: "6197b789-6cd0"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/downloadbg.png
200 OK 16 kB URL GET HTTP/1.1 155.159.252.52/static/img/downloadbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 490 x 668, 8-bit colormap, non-interlaced\012- data
Hash 54aea9069ebd594d06452f981ef0e082
7be69fe602b6a08a9d33b2818b7b2435cbfe1c51
be14f003ebb563bca19a5adedb51cce325609eb2c781de3bdbf36c725d4afdbd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/downloadbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 16155
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-3f1b"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_itembg.png
200 OK 19 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_itembg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 694 x 920, 8-bit colormap, non-interlaced\012- data
Hash 24212179c159aa856ecaa975a7138ed4
26c23b212280736a857f480b43b95b2bed94f4d9
631c864daa8c608f3390b717d4099e1725cdf134bb213ae3754ff918b2c515cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_itembg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 18954
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-4a0a"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/fd_totop.png
200 OK 2.8 kB URL GET HTTP/1.1 155.159.252.52/static/img/fd_totop.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 76 x 76, 8-bit colormap, non-interlaced\012- data
Hash b1e36b9e83803b77e6ac09da9eead509
99e72f62ec65667e89a9b288b627b357be96701f
38b57c517260980e644dfb405ef08146d2111b714abec7255efbd4b354cd7583
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/fd_totop.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 2797
Last-Modified: Fri, 19 Nov 2021 14:41:12 GMT
Connection: keep-alive
ETag: "6197b788-aed"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_top_game.png
200 OK 5.7 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_top_game.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash 254b8b403316cc5754d821c3ac9620e6
dd75d61cd66f114f3ee66e880b9fea2495ade226
97dec4a15fd692863e0679d739c952d005e635c1fe02d499dbb165cca72ea618
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_top_game.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 5680
Last-Modified: Fri, 19 Nov 2021 14:41:38 GMT
Connection: keep-alive
ETag: "6197b7a2-1630"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/app_logo1.png
200 OK 31 kB URL GET HTTP/1.1 155.159.252.52/static/img/app_logo1.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f09a00bf070107b33d37c05441ee3ac
de368c24abff83e1ce0732780a7dcf62645532e0
86b5eb8183d8f7b2d4a00275d6f84981d00da62f78647447bf6a143ccc0199a9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/app_logo1.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 31226
Last-Modified: Sun, 20 Nov 2022 09:56:26 GMT
Connection: keep-alive
ETag: "6379f9ca-79fa"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_lbbg.png
200 OK 58 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_lbbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 2380 x 488, 8-bit colormap, non-interlaced\012- data
Hash 3ae837307bc15ba6fcaf2832ce3d0402
c80a9e4ae384f2ae07e10308b72224a8352804f2
a71e6ed99105f1a2348c90777fa09b2a9b5b9278efc6759e6e768a168ec0a05a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_lbbg.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/static/css/web.css?v=2021web
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:34 GMT
Content-Type: image/png
Content-Length: 57488
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-e090"
Expires: Thu, 26 Oct 2023 15:02:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_qp.png
200 OK 115 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_qp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 115 kB (115196 bytes)
Hash 0ea04fcfea1b06ea4f8d6b968b8b3a8f
453e2e125220a1eeb3f9d948d7f08833ef6aff6b
381944f290c0f63dbeb208634a3de02b821024e5d8d216369f192cee6d27f76c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_qp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 115196
Last-Modified: Fri, 19 Nov 2021 14:41:18 GMT
Connection: keep-alive
ETag: "6197b78e-1c1fc"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dj.png
200 OK 118 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dj.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 118 kB (118485 bytes)
Hash 38ffc4b03162e8dc89bdc33aaa16d18e
8b9cf42cd90a0e867b069911afd8f722ba1bd6bd
89d9caf40ad22305ba8e2531e92af0d5695202950af14c0074b68ed32cf701d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dj.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 118485
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1ced5"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_ty.png
200 OK 113 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_ty.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 113 kB (112821 bytes)
Hash 97bafd361b9b620c7678e552024225c3
cbdd8488090148f5f73a97a91d3a24a6c07453b3
a2340fa63f1b53aebb946f62730dd4f64c9f42585126eb1152057d71b56fadce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_ty.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 112821
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1b8b5"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_zr.png
200 OK 121 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_zr.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 121 kB (121229 bytes)
Hash a691f396c473aa877d66dcc169597c64
d9b5daf91bfa46233fcd701146691f11d30aba87
c8bdd010d21a319777891807be19d13173d5730c966ff6897d65ce8a0b2244b0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_zr.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:35 GMT
Content-Type: image/png
Content-Length: 121229
Last-Modified: Fri, 19 Nov 2021 14:41:20 GMT
Connection: keep-alive
ETag: "6197b790-1d98d"
Expires: Thu, 26 Oct 2023 15:02:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/titleimg_contact.png
200 OK 7.9 kB URL GET HTTP/1.1 155.159.252.52/static/img/titleimg_contact.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 596 x 132, 8-bit colormap, non-interlaced\012- data
Hash bba44c514b5da0fa122db10bd5dd4a25
456d99769aa1b15714feb48d141a67f50f5d9c62
c1c6f0209d71d61adac42db73154e66ddebc258404fe6feb914f1b0ec3ba2bc4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/titleimg_contact.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: image/png
Content-Length: 7875
Last-Modified: Fri, 19 Nov 2021 14:41:37 GMT
Connection: keep-alive
ETag: "6197b7a1-1ec3"
Expires: Thu, 26 Oct 2023 15:02:37 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/download_bottom_img.png
200 OK 40 kB URL GET HTTP/1.1 155.159.252.52/static/img/download_bottom_img.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 1264 x 320, 8-bit colormap, non-interlaced\012- data
Hash 2562815ac75731e40a21f53a93ddc94e
f614090083587a2c0118b0f8996e10060d82b04f
f42316c348280e18dbdf1174fc2e2759204b0109ae23c43a00ab2999abe84ed4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/download_bottom_img.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: image/png
Content-Length: 39832
Last-Modified: Fri, 19 Nov 2021 14:41:08 GMT
Connection: keep-alive
ETag: "6197b784-9b98"
Expires: Thu, 26 Oct 2023 15:02:37 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_dz.png
200 OK 124 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_dz.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 124 kB (124185 bytes)
Hash d57cfec1caaa46c2d0302708ca606ac3
9c68a596ad3b1b7de67ae6ae481d25de3a968f29
07aeb4f99135e35b0ca7f9e08e03575e697454c71482789caac9d6ff958225ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_dz.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: image/png
Content-Length: 124185
Last-Modified: Fri, 19 Nov 2021 14:41:17 GMT
Connection: keep-alive
ETag: "6197b78d-1e519"
Expires: Thu, 26 Oct 2023 15:02:37 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hotgame_cp.png
200 OK 125 kB URL GET HTTP/1.1 155.159.252.52/static/img/hotgame_cp.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 736 x 623, 8-bit colormap, non-interlaced\012- data
Size 125 kB (124841 bytes)
Hash 6cea918d7d824577f3bab4d14a864125
0370a8ddf1a99294acd7b33c59bea06c3ee110d0
5fd3fa7f8b23b33bf6fababc924645de9685f166b351e7684c6f936a4452edb6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hotgame_cp.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:37 GMT
Content-Type: image/png
Content-Length: 124841
Last-Modified: Fri, 19 Nov 2021 14:41:16 GMT
Connection: keep-alive
ETag: "6197b78c-1e7a9"
Expires: Thu, 26 Oct 2023 15:02:37 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/hd.png
200 OK 347 kB URL GET HTTP/1.1 155.159.252.52/static/img/hd.png
IP
ASN #137951 Clayer Limited
File type JPEG image data, progressive, precision 8, 969x1088, components 3\012- data
Size 347 kB (346703 bytes)
Hash 221471375bf8702a176becdf4212cd24
ef80818c34189fa9dceefa1738bcd84886e45595
8b0a9db25f2b4675591b97eb59945d223f46650d1b05df9c21e01c61891bc5f3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/hd.png HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: image/png
Content-Length: 346703
Last-Modified: Fri, 25 Nov 2022 12:17:55 GMT
Connection: keep-alive
ETag: "6380b273-54a4f"
Expires: Thu, 26 Oct 2023 15:02:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.252.52/static/img/banner.jpg
200 OK 406 kB URL GET HTTP/1.1 155.159.252.52/static/img/banner.jpg
IP
ASN #137951 Clayer Limited
File type JPEG image data, baseline, precision 8, 3840x1400, components 3\012- data
Size 406 kB (405909 bytes)
Hash d12e3b2899046285cb587aebe46d5850
7cd25d88958e51dbc3184d039ea31985fb2271a7
83b0adf4e17b74b999e843b3f8514032784503c0b52efb74bab464233e53f36d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /static/img/banner.jpg HTTP/1.1
Host: 155.159.252.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://155.159.252.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 15:02:33 GMT
Content-Type: image/jpeg
Content-Length: 405909
Last-Modified: Mon, 21 Nov 2022 11:32:04 GMT
Connection: keep-alive
ETag: "637b61b4-63195"
Expires: Thu, 26 Oct 2023 15:02:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
155.159.177.233
47.246.44.228
103.235.46.191