GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
104.21.48.1302 Found 10 kB URL GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 104.21.48.1:443
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Certificate IssuerGoogle Trust Services
Subjectfpgnb.cn
Fingerprint84:55:5D:FC:4F:EC:10:1B:78:58:09:51:E6:08:13:27:99:AA:27:81
ValidityMon, 16 Jun 2025 15:55:04 GMT - Sun, 14 Sep 2025 16:52:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 17 Jun 2025 19:36:22 GMT
content-length: 0
cf-ray: 9514fed24fcc5697-OSL
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/180b6a431d85/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EV3vG%2F170kedCoBzbx8wKWExZVOWlvnOIWEgRtoWDIyMKfAVyWAQ4dJEQGBr%2BEM9g1buybsqUVYM2BTnYCx3nyCgUuBh4PfnHJHK5N0UkESVGd7KxNOL91DyJQBUtco7ImOKZjM03yrtDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=552&min_rtt=461&rtt_var=207&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3263&recv_bytes=1214&delivery_rate=6672811&cwnd=253&unsent_bytes=0&cid=ccf7ae60df39ff5b&ts=50&x=0"
X-Firefox-Spdy: h2
GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/h/g/jsd/r/0.9413210734770117:1750187697:zGwR7pPMrwPwjgNukiJvd1sZt5NomNQWAbJ8QOVrMVA/9514fed01ecd569b
104.21.48.1405 Method Not Allowed 0 B URL GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/h/g/jsd/r/0.9413210734770117:1750187697:zGwR7pPMrwPwjgNukiJvd1sZt5NomNQWAbJ8QOVrMVA/9514fed01ecd569b
IP 104.21.48.1:443
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Certificate IssuerGoogle Trust Services
Subjectfpgnb.cn
Fingerprint84:55:5D:FC:4F:EC:10:1B:78:58:09:51:E6:08:13:27:99:AA:27:81
ValidityMon, 16 Jun 2025 15:55:04 GMT - Sun, 14 Sep 2025 16:52:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/h/g/jsd/r/0.9413210734770117:1750187697:zGwR7pPMrwPwjgNukiJvd1sZt5NomNQWAbJ8QOVrMVA/9514fed01ecd569b HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://docom-behindad.fpgnb.cn
Referer: http://docom-behindad.fpgnb.cn/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 405 Method Not Allowed
date: Tue, 17 Jun 2025 19:36:22 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zzDTeSuAutuBi87KD1TTy8usDZFj51IWv49sJGLHHu%2Fs3dMBrBMJ5KruL28b%2FQBjRNjdEdkdL79F8gsNhqSpPqW4pViEgFytFghgunZjuAAsPBWEoJWQ2zoSnEmb0I54oyH3PIjnaGLqOw%3D%3D"}],"group":"cf-nel","max_age":604800}
allow: POST
cf-ray: 9514fed45d7cb503-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14299&min_rtt=1348&rtt_var=9756&sent=12&recv=6&lost=0&retrans=0&sent_bytes=3728&recv_bytes=1184&delivery_rate=432490&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=034733d99ccce53f&ts=58&inflight_dur=18&x=80"
GET docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
104.21.80.1403 Forbidden 4.9 kB URL User Request GET docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
IP 104.21.80.1:443
Certificate IssuerGoogle Trust Services
Subjectfpgnb.cn
Fingerprint84:55:5D:FC:4F:EC:10:1B:78:58:09:51:E6:08:13:27:99:AA:27:81
ValidityMon, 16 Jun 2025 15:55:04 GMT - Sun, 14 Sep 2025 16:52:27 GMT
File type HTML document, ASCII text, with very long lines (396)
Hash d7c273984a2883fe0ffe2bee4e6aab0c
d76a2928f7147e0b2ad22a400fda8cfde76c485f
3c4e4dc7b0dad347a08a6733843c53ead96ddc6a9e565a43b2bbca4e481991e7
GET /authuo/cgiarlonidlogin/ HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 17 Jun 2025 19:36:21 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2B6Y2CV78QPA3S4pCokBkqMz9DAwhekQa2rAz9qFQ1IdZeRfyQ%2FbH54804Je%2Bb6oL9jhid%2FtMkP5Lx6BcZSGnn9rVgPRCzHYcW5%2Bssp31hfnqNHhzQA%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: 9514fecf4c6656a3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
104.21.48.1403 Forbidden 6.0 kB URL User Request GET docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
IP 104.21.48.1:80
File type HTML document, ASCII text, with very long lines (1439)
Hash 659a0511798572eb246782e6ba1deda9
04af04e42fc0cd161a2b74a7b2ee895cfae791df
d05db6e15c04424cd4b599135a050b057cedcf02f7dfea50c8791b86c387df39
GET /authuo/cgiarlonidlogin/ HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Tue, 17 Jun 2025 19:36:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wYjKD1Jls5l%2FLUz7h1QrTxU1nNU44%2B4fjfeyS6HjlpzDRYRddrJPeN9Lf5ac7J5HOkcX6WefSZE7e7E09tRYj21SLlvHW%2FdNtm8%2FPOhohY%2FYjQnGRuV7kq2Cb2eLuYvZco0Z9pp7jIZapQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9514fed01ecd569b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
Server-Timing: cfOrigin;dur=0,cfEdge;dur=24, cfL4;desc="?proto=TCP&rtt=496&min_rtt=496&rtt_var=248&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=431&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET docom-behindad.fpgnb.cn/cdn-cgi/images/browser-bar.png?1376755637
104.21.48.1200 OK 715 B URL GET docom-behindad.fpgnb.cn/cdn-cgi/images/browser-bar.png?1376755637
IP 104.21.48.1:80
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
File type PNG image data, 960 x 53, 8-bit colormap, non-interlaced
Hash 226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://docom-behindad.fpgnb.cn/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jun 2025 19:36:21 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Mon, 16 Jun 2025 09:00:36 GMT
ETag: "684fdd34-2cb"
Server: cloudflare
CF-RAY: 9514fed1085e569b-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 17 Jun 2025 21:36:21 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
104.21.48.1302 Moved Temporarily 10 kB URL GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 104.21.48.1:80
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Tue, 17 Jun 2025 19:36:22 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/scripts/jsd/main.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7kgVdqdXDkVLnNp2wwqeWpiijyDRNioTHY3YqCwQTD7Zpej%2BDkYrG%2FYoytKGsPqjUljQZs%2BMGpDKFHP9o%2BRuv0UGxZsAlqTBsYM%2BHB6z%2BKJ3X91BCPmN7XZl1nK9sWuXM6M87zSl98HALw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9514fed1b968569b-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=564&min_rtt=460&rtt_var=65&sent=11&recv=16&lost=0&retrans=0&sent_bytes=9625&recv_bytes=1606&delivery_rate=11330203&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
POST docom-behindad.fpgnb.cn/cdn-cgi/rum?
104.21.48.1204 No Content 0 B URL POST docom-behindad.fpgnb.cn/cdn-cgi/rum?
IP 104.21.48.1:80
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
content-type: application/json
Content-Length: 1090
Origin: http://docom-behindad.fpgnb.cn
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Tue, 17 Jun 2025 19:36:22 GMT
Connection: keep-alive
access-control-allow-origin: http://docom-behindad.fpgnb.cn
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
Server: cloudflare
CF-RAY: 9514fed1cd0d1c12-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
POST docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/h/g/jsd/r/0.9413210734770117:1750187697:zGwR7pPMrwPwjgNukiJvd1sZt5NomNQWAbJ8QOVrMVA/9514fed01ecd569b
104.21.48.1302 Moved Temporarily 0 B URL POST docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/h/g/jsd/r/0.9413210734770117:1750187697:zGwR7pPMrwPwjgNukiJvd1sZt5NomNQWAbJ8QOVrMVA/9514fed01ecd569b
IP 104.21.48.1:80
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.9413210734770117:1750187697:zGwR7pPMrwPwjgNukiJvd1sZt5NomNQWAbJ8QOVrMVA/9514fed01ecd569b HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 11550
Origin: http://docom-behindad.fpgnb.cn
DNT: 1
Connection: keep-alive
Referer: http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Tue, 17 Jun 2025 19:36:22 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/h/g/jsd/r/0.9413210734770117:1750187697:zGwR7pPMrwPwjgNukiJvd1sZt5NomNQWAbJ8QOVrMVA/9514fed01ecd569b
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iReTkdiHkzt8ouDZ0nBlxySHLmwsWEy9PWCxBmvZp6hlWFc1%2FQIbS2er1as76NfO%2BXAE0hM2rQDehudYzx5XqApGEZ9ced9lEG21XYv1PKRlAMJjT8JJ6bJ8X9KNyPaI%2Bdf6R0fMouO7qA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9514fed3ff5d1c12-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=6320&min_rtt=444&rtt_var=11693&sent=12&recv=23&lost=0&retrans=0&sent_bytes=6807&recv_bytes=14523&delivery_rate=9605306&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET docom-behindad.fpgnb.cn/cdn-cgi/styles/cf.errors.css
104.21.48.1200 OK 24 kB URL GET docom-behindad.fpgnb.cn/cdn-cgi/styles/cf.errors.css
IP 104.21.48.1:80
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
File type ASCII text, with very long lines (24050)
Hash 5e8c69a459a691b5d1b9be442332c87d
f24dd1ad7c9080575d92a9a9a2c42620725ef836
84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jun 2025 19:36:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 16 Jun 2025 09:00:36 GMT
ETag: W/"684fdd34-5df3"
Server: cloudflare
CF-RAY: 9514fed0bfe7569b-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 17 Jun 2025 21:36:21 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
104.16.79.73200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP 104.16.79.73:443
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A
ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://docom-behindad.fpgnb.cn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 19:36:21 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 9514fed0ecec712a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET docom-behindad.fpgnb.cn/cdn-cgi/images/cf-no-screenshot-error.png
104.21.48.1200 OK 3.2 kB URL GET docom-behindad.fpgnb.cn/cdn-cgi/images/cf-no-screenshot-error.png
IP 104.21.48.1:80
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
File type PNG image data, 178 x 175, 8-bit colormap, non-interlaced
Hash 0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://docom-behindad.fpgnb.cn/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jun 2025 19:36:21 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Mon, 16 Jun 2025 09:00:36 GMT
ETag: "684fdd34-c8d"
Server: cloudflare
CF-RAY: 9514fed11c3a1c12-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 17 Jun 2025 21:36:21 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
GET docom-behindad.fpgnb.cn/favicon.ico
104.21.48.1403 Forbidden 4.5 kB URL GET docom-behindad.fpgnb.cn/favicon.ico
IP 104.21.48.1:80
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
File type HTML document, ASCII text, with very long lines (394)
Hash 7b8d8d64d5332c721e7cd6f005346006
3c1db54c03fb6d0d09231209a461cc1024e3d818
52ce35370728e41083c7481767e8f181b5b050bb2d5ad3c36a3a7c416337ae58
GET /favicon.ico HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Tue, 17 Jun 2025 19:36:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OuQxypJrAMHdaBkSEHzDLVL%2FFC3rFfrzbbNncbEg3bwpkcdQizvcZsToJ9tKPOtEaQdCDD4hsHl%2BC%2FYZPHEKPtw8r0xC3BWtea0qCh1hvWF5w4vTiH59hbJt3BvZbfOYm9e25Ee%2F790Xw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9514fed1acd91c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=477&min_rtt=444&rtt_var=102&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3651&recv_bytes=823&delivery_rate=9605306&cwnd=253&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/h/g/scripts/jsd/180b6a431d85/main.js?
104.21.48.1200 OK 10 kB URL GET docom-behindad.fpgnb.cn/cdn-cgi/challenge-platform/h/g/scripts/jsd/180b6a431d85/main.js?
IP 104.21.48.1:443
Requested by http://docom-behindad.fpgnb.cn/authuo/cgiarlonidlogin/
Certificate IssuerGoogle Trust Services
Subjectfpgnb.cn
Fingerprint84:55:5D:FC:4F:EC:10:1B:78:58:09:51:E6:08:13:27:99:AA:27:81
ValidityMon, 16 Jun 2025 15:55:04 GMT - Sun, 14 Sep 2025 16:52:27 GMT
File type JavaScript source, ASCII text, with very long lines (10006), with no line terminators
Hash 48ab8d355b5c840fd6b7b5de024a5ab6
e19d6749f50a4b5dde2713472979c31f1a7f51c2
c7d62ec490f5874f0f56ce0efc42c39ee25c295d2368272ca86bd8ac6cf9987d
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/180b6a431d85/main.js? HTTP/1.1
Host: docom-behindad.fpgnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 19:36:22 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ptRG5507YyV57dGuOZQsnjDTNSDaZhG%2B3guzfbR0JWme3KHy3%2FBVIuoc4BZ5lqWXR0172%2B7NlAYE5DQ%2FR51%2B2m4Lzk%2F%2B1UzkAiNeet%2BiE5tVxEX22j95jOfALTkhVdcvJwH1Hn285ll4fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9514fed278095697-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3296&min_rtt=461&rtt_var=5645&sent=8&recv=12&lost=0&retrans=0&sent_bytes=3945&recv_bytes=1326&delivery_rate=6672811&cwnd=255&unsent_bytes=0&cid=ccf7ae60df39ff5b&ts=68&x=0"
X-Firefox-Spdy: h2