| qhdmyjdwx.com/list/10_1 |  23.224.105.36 | | 958 B |
IP23.224.105.36:0
Hash83bb8e6f4d62b47c3abdbdfbc3e2e396 aff4bec38eaef818aee4f030d977fd494cc13bd9 543b83f8700deccaf0b5ef8b3753b04bfb827f3f5ecd7204807beee27d4cd9be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /list/10_1 HTTP/1.1
Host: qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 958
Pragma: no-cache
Cache-control: no-store
|
|
| qhdmyjdwx.com/favicon.ico | 23.224.105.36 | | 7.2 kB |
URL qhdmyjdwx.com/favicon.ico IP23.224.105.36:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hashc5e653426d997b5fd5bca09662ad9d8a eff4373a3d53d0d745f3c053bb3140bd0576b1d2 c767a62cbf3c8e53da5aa599b5f38d52b5f2f040451b8a56119c4cd7f9e6414a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/list/10_1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Location: /favicon.ico
Connection: Close
|
|
| qhdmyjdwx.com/list/10_1?aepkzg=0dd621 | 23.224.105.36 | 200 OK | 5.2 kB |
URL User Request GET HTTP/1.1qhdmyjdwx.com/list/10_1?aepkzg=0dd621 IP23.224.105.36:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (453), with CRLF, LF line terminators Hashc1660fdde9ec9387638e0a30a2cb0853 d02e58c379147fdbfe71022e542242f2cc0e468e c84a60211d69528a2668906ee83bfa52c7ad6dce8907ad24cd25129b64458f43
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /list/10_1?aepkzg=0dd621 HTTP/1.1
Host: qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://qhdmyjdwx.com/list/10_1
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 13:52:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| cdn.staticfile.org/jquery/1.8.3/jquery.min.js |  104.18.52.201 | 301 Moved Permanently | 167 B |
URL GET HTTP/1.1cdn.staticfile.org/jquery/1.8.3/jquery.min.js IP104.18.52.201:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /jquery/1.8.3/jquery.min.js HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Apr 2024 13:52:03 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Apr 2024 14:52:03 GMT
Location: https://cdn.staticfile.org/jquery/1.8.3/jquery.min.js
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879ecfb5b8795690-OSL
|
|
| cdn.staticfile.org/jquery.lazyload/1.9.1/jquery.lazyload.min.js | 104.18.52.201 | 301 Moved Permanently | 167 B |
URL GET HTTP/1.1cdn.staticfile.org/jquery.lazyload/1.9.1/jquery.lazyload.min.js IP104.18.52.201:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /jquery.lazyload/1.9.1/jquery.lazyload.min.js HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Apr 2024 13:52:03 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Apr 2024 14:52:03 GMT
Location: https://cdn.staticfile.org/jquery.lazyload/1.9.1/jquery.lazyload.min.js
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879ecfb5ceed568f-OSL
|
|
| qhdmyjdwx.com/static/shipsay/style.css | 23.224.105.36 | 200 OK | 5.3 kB |
URL GET HTTP/1.1qhdmyjdwx.com/static/shipsay/style.css IP23.224.105.36:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashabeeca8e3753c367345a139100b3395d f7220e944ea17f74a882dc3701d4f1caab6a5fcc afc7844df0fc24cea6edc0ecdc81d559601c4dfd79a1b0214bce2d2aee801fff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/shipsay/style.css HTTP/1.1
Host: qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 13:52:03 GMT
Content-Type: text/css
Last-Modified: Sun, 15 Dec 2019 14:19:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5df6410c-4856"
Expires: Fri, 26 Apr 2024 01:52:03 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| qhdmyjdwx.com/static/shipsay/common.js | 23.224.105.36 | 200 OK | 12 kB |
URL GET HTTP/1.1qhdmyjdwx.com/static/shipsay/common.js IP23.224.105.36:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeUnicode text, UTF-8 text, with very long lines (2556), with CRLF line terminators Hash4e71484b63d2328664bf93c02b296a9d 2438ef83d25c81ffb1633efa34cc1ba6a4791ef4 450fd568d2e88d4018799599c5bf16487239b915a0a7dce2bf2265b1992aea71
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/shipsay/common.js HTTP/1.1
Host: qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 13:52:03 GMT
Content-Type: application/javascript
Last-Modified: Mon, 07 Nov 2022 04:19:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6368873d-51e1"
Expires: Fri, 26 Apr 2024 01:52:03 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| js.users.51.la/21781891.js |  47.246.44.239 | 200 OK | 4.9 kB |
URL GET HTTP/1.1js.users.51.la/21781891.js IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeJavaScript source, ASCII text, with very long lines (4898), with no line terminators Hash257283a617889727576c69334a4820c4 cc40ab65c1f632115dd62652348b9de4e9609e00 8bd2343aa7824cd7ac1c3ed46ed8c6f0fdbf391bf49fdd64e7980e4075289c49
GET /21781891.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 25 Apr 2024 13:52:04 GMT
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Ali-Swift-Global-Savetime: 1714053124
Via: cache2.l2fr1[384,384,200-0,M], cache18.l2fr1[385,0], ens-cache2.se2[420,419,200-0,M], ens-cache9.se2[421,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Thu, 25 Apr 2024 13:52:04 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9d17140531236715092e
|
|
| qhdmyjdwx.com/static/shipsay/nocover.jpg | 23.224.105.36 | 307 Temporary Redirect | 1.4 kB |
URL GET HTTP/1.1qhdmyjdwx.com/static/shipsay/nocover.jpg IP23.224.105.36:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 120x150, components 3 Hashd4fd2108bf418fe209494aab1b9ce827 a4d6695a3d3ccfeaaa102b1196b575b5c86ab423 aba7a80fa0c8bbd9efa929b55ee774eac176e12482024c8b4457a2aeea8486d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/shipsay/nocover.jpg HTTP/1.1
Host: qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
DNT: 1
Connection: keep-alive
Cookie: zh_choose=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 13:52:04 GMT
Content-Type: image/jpeg
Content-Length: 1437
Last-Modified: Thu, 26 Dec 2019 01:47:04 GMT
Connection: keep-alive
ETag: "5e041118-59d"
Expires: Sat, 25 May 2024 13:52:04 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| ia.51.la/go1?id=21781891&rt=1714053124142&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25B0%258F%25E8%25AF%25B4%252C%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E6%259C%2580%25E6%2596%25B0%25E7%25AB%25A0%25E8%258A%2582%25E5%2585%258D%25E8%25B4%25B9%25E9%2598%2585%25E8%25AF%25BB%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E5%25A5%2587%25E5%25B9%25BB%25E6%2596%2587%25E5%25AD%25A6%25E7%25BD%2591%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&ing=1&ekc=&sid=1714053124142&tt=%25E7%25BB%25BC%25E5%2590%2588%25E5%2585%25B6%25E4%25BB%2596_%25E4%25B9%25A6%25E5%258F%258B%25E6%259C%2580%25E5%2580%25BC%25E5%25BE%2597%25E6%2594%25B6%25E8%2597%258F%25E7%259A%2584%25E7%25BD%2591%25E7%25BB%259C%25E5%25B0%258F%25E8%25AF%25B4%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&kw=%25E5%25B0%258F%25E8%25AF%25B4%252C%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E6%259C%2580%25E6%2596%25B0%25E7%25AB%25A0%25E8%258A%2582%25E5%2585%258D%25E8%25B4%25B9%25E9%2598%2585%25E8%25AF%25BB%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E5%25A5%2587%25E5%25B9%25BB%25E6%2596%2587%25E5%25AD%25A6%25E7%25BD%2591%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&cu=http%253A%252F%252Fqhdmyjdwx.com%252Flist%252F10_1%253Faepkzg%253D0dd621&pu=http%253A%252F%252Fqhdmyjdwx.com%252Flist%252F10_1 |  203.107.86.226 | 200 | 0 B |
URL GET HTTP/1.1ia.51.la/go1?id=21781891&rt=1714053124142&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25B0%258F%25E8%25AF%25B4%252C%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E6%259C%2580%25E6%2596%25B0%25E7%25AB%25A0%25E8%258A%2582%25E5%2585%258D%25E8%25B4%25B9%25E9%2598%2585%25E8%25AF%25BB%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E5%25A5%2587%25E5%25B9%25BB%25E6%2596%2587%25E5%25AD%25A6%25E7%25BD%2591%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&ing=1&ekc=&sid=1714053124142&tt=%25E7%25BB%25BC%25E5%2590%2588%25E5%2585%25B6%25E4%25BB%2596_%25E4%25B9%25A6%25E5%258F%258B%25E6%259C%2580%25E5%2580%25BC%25E5%25BE%2597%25E6%2594%25B6%25E8%2597%258F%25E7%259A%2584%25E7%25BD%2591%25E7%25BB%259C%25E5%25B0%258F%25E8%25AF%25B4%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&kw=%25E5%25B0%258F%25E8%25AF%25B4%252C%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E6%259C%2580%25E6%2596%25B0%25E7%25AB%25A0%25E8%258A%2582%25E5%2585%258D%25E8%25B4%25B9%25E9%2598%2585%25E8%25AF%25BB%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E5%25A5%2587%25E5%25B9%25BB%25E6%2596%2587%25E5%25AD%25A6%25E7%25BD%2591%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&cu=http%253A%252F%252Fqhdmyjdwx.com%252Flist%252F10_1%253Faepkzg%253D0dd621&pu=http%253A%252F%252Fqhdmyjdwx.com%252Flist%252F10_1 IP203.107.86.226:80 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21781891&rt=1714053124142&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25B0%258F%25E8%25AF%25B4%252C%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E6%259C%2580%25E6%2596%25B0%25E7%25AB%25A0%25E8%258A%2582%25E5%2585%258D%25E8%25B4%25B9%25E9%2598%2585%25E8%25AF%25BB%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E5%25A5%2587%25E5%25B9%25BB%25E6%2596%2587%25E5%25AD%25A6%25E7%25BD%2591%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&ing=1&ekc=&sid=1714053124142&tt=%25E7%25BB%25BC%25E5%2590%2588%25E5%2585%25B6%25E4%25BB%2596_%25E4%25B9%25A6%25E5%258F%258B%25E6%259C%2580%25E5%2580%25BC%25E5%25BE%2597%25E6%2594%25B6%25E8%2597%258F%25E7%259A%2584%25E7%25BD%2591%25E7%25BB%259C%25E5%25B0%258F%25E8%25AF%25B4%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&kw=%25E5%25B0%258F%25E8%25AF%25B4%252C%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E6%259C%2580%25E6%2596%25B0%25E7%25AB%25A0%25E8%258A%2582%25E5%2585%258D%25E8%25B4%25B9%25E9%2598%2585%25E8%25AF%25BB%25E5%25B0%258F%25E8%25AF%25B4%25E7%25BD%2591%252C%25E5%25A5%2587%25E5%25B9%25BB%25E6%2596%2587%25E5%25AD%25A6%25E7%25BD%2591%25E9%2598%2585%25E8%25AF%25BB%25E7%25BD%2591&cu=http%253A%252F%252Fqhdmyjdwx.com%252Flist%252F10_1%253Faepkzg%253D0dd621&pu=http%253A%252F%252Fqhdmyjdwx.com%252Flist%252F10_1 HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Thu, 25 Apr 2024 13:52:04 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=aa3ed3eeb473eb9c116492f609695eb71cf902a7678d9e985226736d46933547; Path=/; HttpOnly
acw_tc=ac11000117140531246066354e874e25d7a9fa7e44d728de223941e318b5ec;path=/;HttpOnly;Max-Age=1800
|
|
| cdn.staticfile.org/font-awesome/4.7.0/css/font-awesome.min.css | 104.18.52.201 | 200 OK | 85 kB |
URL GET HTTP/2cdn.staticfile.org/font-awesome/4.7.0/css/font-awesome.min.css IP104.18.52.201:443
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621 CertificateIssuerGoogle Trust Services LLC Subjectcdn.staticfile.org Fingerprint13:7C:E5:1B:86:D1:10:4A:B0:8D:70:4A:75:D6:29:72:5A:12:CC:80 ValidityFri, 12 Apr 2024 08:18:39 GMT - Thu, 11 Jul 2024 08:18:38 GMT
File typegzip compressed data, from Unix Hash7922c030e2b462e58fc12ab77d1e4506 9da3a0a5bbba4dbc3523c2518e6943d2dba95efd 85b7930554957fa61defa9209c5b2334221b2a8841600b9732f81e448e671812
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:52:03 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 13:17:13 GMT
etag: W/"6613ee59-7918"
expires: Fri, 25 Apr 2025 13:52:03 GMT
cache-control: public, max-age=31536000
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, Token
x-cloud-fetchl: true
content-encoding: gzip
cf-cache-status: HIT
age: 1126513
vary: Accept-Encoding
server: cloudflare
cf-ray: 879ecfb5cb2eb4f4-OSL
X-Firefox-Spdy: h2
|
|
| qhdmyjdwx.com/static/shipsay/favicon.ico | 23.224.105.36 | 200 OK | 4.3 kB |
URL GET HTTP/1.1qhdmyjdwx.com/static/shipsay/favicon.ico IP23.224.105.36:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hashb5aeb2a26b7636d855d2070daf083102 a422c87fc85bd54c3248d474b4078b4466237477 2d00d5f7d0377b0e6be3423b099b5f642e9654f8508e0aa05ebc598f8d0b40f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/shipsay/favicon.ico HTTP/1.1
Host: qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
Cookie: zh_choose=; __tins__21781891=%7B%22sid%22%3A%201714053124142%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201714054924142%7D; __51cke__=; __51laig__=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 13:52:05 GMT
Content-Type: image/x-icon
Content-Length: 4286
Last-Modified: Tue, 31 Dec 2019 15:04:34 GMT
Connection: keep-alive
ETag: "5e0b6382-10be"
Accept-Ranges: bytes
|
|
| img.qhdmyjdwx.com//files/article/image/16/16100/16100s.jpg | 180.101.88.199 | 404 Not Found | 146 B |
URL GET HTTP/1.1img.qhdmyjdwx.com//files/article/image/16/16100/16100s.jpg IP180.101.88.199:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //files/article/image/16/16100/16100s.jpg HTTP/1.1
Host: img.qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 13:52:07 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| img.qhdmyjdwx.com//files/article/image/16/16215/16215s.jpg | 180.101.88.199 | 404 Not Found | 146 B |
URL GET HTTP/1.1img.qhdmyjdwx.com//files/article/image/16/16215/16215s.jpg IP180.101.88.199:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //files/article/image/16/16215/16215s.jpg HTTP/1.1
Host: img.qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 13:52:08 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| img.qhdmyjdwx.com//files/article/image/16/16096/16096s.jpg | 180.101.88.199 | 404 Not Found | 146 B |
URL GET HTTP/1.1img.qhdmyjdwx.com//files/article/image/16/16096/16096s.jpg IP180.101.88.199:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //files/article/image/16/16096/16096s.jpg HTTP/1.1
Host: img.qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 13:52:08 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| img.qhdmyjdwx.com//files/article/image/16/16045/16045s.jpg | 180.101.88.199 | 404 Not Found | 146 B |
URL GET HTTP/1.1img.qhdmyjdwx.com//files/article/image/16/16045/16045s.jpg IP180.101.88.199:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //files/article/image/16/16045/16045s.jpg HTTP/1.1
Host: img.qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 13:52:08 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| img.qhdmyjdwx.com//files/article/image/16/16209/16209s.jpg | 180.101.88.199 | 404 Not Found | 146 B |
URL GET HTTP/1.1img.qhdmyjdwx.com//files/article/image/16/16209/16209s.jpg IP180.101.88.199:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //files/article/image/16/16209/16209s.jpg HTTP/1.1
Host: img.qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 13:52:08 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| cdn.staticfile.org/jquery.lazyload/1.9.1/jquery.lazyload.min.js | 104.18.52.201 | 301 Moved Permanently | 1.5 kB |
URL GET HTTP/1.1cdn.staticfile.org/jquery.lazyload/1.9.1/jquery.lazyload.min.js IP104.18.52.201:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typegzip compressed data, from Unix Hashbf5ba4718906352c36af92f018b873df c076b3d5895b96ef3392e47dd6bf5e4b9ccc098a 9837af312a022a7050d9d94b970f1a76278c23ace06d3b25de513ba298dd6ba0
GET /jquery.lazyload/1.9.1/jquery.lazyload.min.js HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://qhdmyjdwx.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:52:03 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token
cache-control: public, max-age=14400
x-cloud-cdn: true
content-encoding: gzip
last-modified: Fri, 12 Apr 2024 12:29:58 GMT
cf-cache-status: HIT
age: 1128060
expires: Thu, 25 Apr 2024 17:52:03 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 879ecfb5db3cb4f4-OSL
X-Firefox-Spdy: h2
|
|
| img.qhdmyjdwx.com//files/article/image/16/16141/16141s.jpg | 180.101.88.199 | 404 Not Found | 146 B |
URL GET HTTP/1.1img.qhdmyjdwx.com//files/article/image/16/16141/16141s.jpg IP180.101.88.199:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //files/article/image/16/16141/16141s.jpg HTTP/1.1
Host: img.qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 13:52:11 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| img.qhdmyjdwx.com//files/article/image/16/16212/16212s.jpg | 180.101.88.199 | 404 Not Found | 0 B |
URL GET HTTP/1.1img.qhdmyjdwx.com//files/article/image/16/16212/16212s.jpg IP180.101.88.199:80
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //files/article/image/16/16212/16212s.jpg HTTP/1.1
Host: img.qhdmyjdwx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://qhdmyjdwx.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 13:52:09 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| cdn.staticfile.org/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.18.52.201 | 200 OK | 77 kB |
URL GET HTTP/2cdn.staticfile.org/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.18.52.201:443
Requested byhttp://qhdmyjdwx.com/list/10_1?aepkzg=0dd621 CertificateIssuerGoogle Trust Services LLC Subjectcdn.staticfile.org Fingerprint13:7C:E5:1B:86:D1:10:4A:B0:8D:70:4A:75:D6:29:72:5A:12:CC:80 ValidityFri, 12 Apr 2024 08:18:39 GMT - Thu, 11 Jul 2024 08:18:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://qhdmyjdwx.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.staticfile.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:52:04 GMT
content-type: font/woff2
content-length: 77160
last-modified: Fri, 19 Jan 2024 06:40:21 GMT
etag: "65aa1955-12d68"
expires: Fri, 25 Apr 2025 13:52:04 GMT
cache-control: public, max-age=31536000
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, Token
x-cloud-fetchl: true
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879ecfb78cb4b4f4-OSL
X-Firefox-Spdy: h2
|
|