302 Found 145 B URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ca35f86083c327b09ec3df0adfe284e7
bd680276bffaf6fdb304657003d51a74b5c2f998
84c1fdfe0e68e2ed14b46fd867e91688936072ad51471ea9fa0c7616480ab912
GET / HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 28 Nov 2023 23:45:12 GMT
content-type: text/html
content-length: 145
location: http://4958806.com/XGCP
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?9000eab0ef7e56f593f18c68c8574048
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?9000eab0ef7e56f593f18c68c8574048
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?9000eab0ef7e56f593f18c68c8574048 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Tue, 28 Nov 2023 23:45:14 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
res.sharetrace.com/sharetrace.min.js
200 OK 3.7 kB URL GET HTTP/2 res.sharetrace.com/sharetrace.min.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerTrustAsia Technologies, Inc.
Subjectres.sharetrace.com
FingerprintFF:9C:0F:5C:58:66:EF:42:A2:0D:CE:AB:CD:C8:13:F7:74:92:FE:4A
ValidityWed, 24 May 2023 00:00:00 GMT - Thu, 23 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (8703), with no line terminators
Hash 6867e80da66f3949e1592a3baf3aebe1
55d8ae505161a418fd2f98a5bea9bee48ea0d310
7b04fb5c01f04dd471f51803ebb899a56aded8ff637858598a7be1c3b1c64b93
GET /sharetrace.min.js HTTP/1.1
Host: res.sharetrace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/javascript
content-length: 3735
date: Tue, 28 Nov 2023 09:06:22 GMT
cache-control: public, max-age=86400
x-m-log: QNM:fn194;QNM3/304
x-m-reqid: yH0AAPyHZXAsvpsX
x-qnm-cache: Hit
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
content-disposition: inline; filename="sharetrace.min.js"; filename*=utf-8''sharetrace.min.js
content-md5: aGfoDaZvOUnhWSo7rzrr4Q==
content-transfer-encoding: binary
x-log: X-Log
x-qiniu-zone: 2
x-reqid: OtMAAABVw5IuRG4X
x-svr: IO
ali-swift-global-savetime: 1701162382
via: cache19.l2de2[0,0,304-0,H], cache7.l2de2[5,0], cache3.se1[0,0,200-0,H], cache8.se1[1,0]
etag: "FlXYrlBRYaQY_S-Ypb6pvuSOoNMQ.gz"
last-modified: Mon, 03 Jul 2023 05:24:00 GMT
vary: Accept-Encoding
content-encoding: gzip
age: 52733
x-cache: HIT TCP_HIT dirn:2:157677138
x-swift-savetime: Tue, 28 Nov 2023 09:30:10 GMT
x-swift-cachetime: 171372
timing-allow-origin: *
eagleid: 2ff62c9c17012151153231949e
X-Firefox-Spdy: h2
cstaticdun.126.net/load.min.js
200 OK 14 kB URL GET HTTP/1.1 cstaticdun.126.net/load.min.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerTrustAsia Technologies, Inc.
Subject*.126.net
FingerprintEA:33:DC:8A:74:98:10:14:DB:A3:1D:D7:C7:F4:19:7A:83:CB:81:F9
ValidityWed, 15 Nov 2023 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (32011)
Hash 3d6e482d7f58d6e2e46084b0dfdb4b0d
5006bf0484a48501d799e5309543d3206fb3f38c
38455a598288d3d5f1d8ca98490211113dd2c76b4b8d4d11b6594ccb3376a81e
GET /load.min.js HTTP/1.1
Host: cstaticdun.126.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 13890
Connection: keep-alive
Date: Tue, 28 Nov 2023 16:42:44 GMT
Timing-Allow-Origin: *, *
Cache-Control: max-age=300
Expires: Thu, 26 Oct 2023 04:47:39 GMT
Ali-Swift-Global-Savetime: 1701189764
Via: cache12.l2nu20-8[58,58,304-0,H], cache65.l2nu20-8[60,0], cache28.l2hk2[0,0,304-0,H], cache12.l2hk2[1,0], cache2.l2de2[0,0,304-0,H], cache19.l2de2[1,0], cache4.se1[0,0,200-0,H], cache7.se1[3,0]
Content-Encoding: gzip
Last-Modified: Thu, 26 Oct 2023 02:33:36 GMT
Vary: Accept-Encoding
Age: 25351
X-Cache: HIT TCP_MEM_HIT dirn:2:42037274
X-Swift-SaveTime: Tue, 28 Nov 2023 16:42:55 GMT
X-Swift-CacheTime: 43189
Access-Control-Allow-Methods: GET,POST,OPTIONS,HEAD
Access-Control-Expose-Headers: *
Access-Control-Allow-Origin: *
EagleId: 2ff62c9b17012151154833820e
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 818dd16f44cb55d8112394fb61a06bf5
516fb5ba70006c36066b40f3b9278ce60cafd0be
b20217b2611c9495e9a3c96a5fa66917a4bb98d074a3eca19cb4573756460044
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 28 Nov 2023 23:45:15 GMT
Ali-Swift-Global-Savetime: 1701215115
Via: cache19.l2de2[529,529,200-0,M], cache19.l2de2[530,0], cache1.se1[551,551,200-0,M], cache1.se1[553,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 28 Nov 2023 23:45:15 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9517012151151221318e
ocsp.trust-provider.cn/
599 B IP
ASN #4808 China Unicom Beijing Province Network
Hash 65fbb940013967394c3ddb567e354b08
0b9a702a52b4bd45310aad38827f26d0f5f958e6
487834332d9cff05fcdc378366c6a180d5273771d7e77d8fb92736fdff004fa1
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 28 Nov 2023 23:45:15 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82c22f8d3f125c18-SJC
ETag: "0b9a702a52b4bd45310aad38827f26d0f5f958e6"
Expires: Sun, 03 Dec 2023 11:49:35 GMT
Last-Modified: Sun, 26 Nov 2023 11:49:36 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PS-000-011su59:0 (Cdn Cache Server V2.0), 1.1 PS-PEK-01Tf243:17 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65667b8b_PS-PEK-01juf42_24430-18066
via: n173-090-131.bdcdn-bjcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701215115b3d344b71f891967ff552d4e245f3c5c
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=4, edge;dur=0
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 818dd16f44cb55d8112394fb61a06bf5
516fb5ba70006c36066b40f3b9278ce60cafd0be
b20217b2611c9495e9a3c96a5fa66917a4bb98d074a3eca19cb4573756460044
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 28 Nov 2023 23:45:15 GMT
Ali-Swift-Global-Savetime: 1701215115
Via: cache19.l2de2[488,488,200-0,M], cache19.l2de2[489,0], cache8.se1[510,509,200-0,M], cache8.se1[512,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 28 Nov 2023 23:45:15 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c17012151153812053e
ocsp.trust-provider.cn/
600 B IP
ASN #4808 China Unicom Beijing Province Network
Hash 584d88da108c6c5a5e54411abdd2137b
72035e53d8a9f564dffd28020b0eac30304944ea
0ddc7471c8caf8f55e8282cfdc7145d2ec9670cbbf8c77abe1a99fba72d75440
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Tue, 28 Nov 2023 23:45:15 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82ce50161bc76e49-HKG
ETag: "72035e53d8a9f564dffd28020b0eac30304944ea"
Expires: Mon, 04 Dec 2023 23:46:37 GMT
Last-Modified: Mon, 27 Nov 2023 23:46:38 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 dianxun180:8 (Cdn Cache Server V2.0), 1.1 PS-HFE-01xMg146:2 (Cdn Cache Server V2.0), 1.1 gwt17:14 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65667b8b_PStjkgwtog76_24279-7564
via: n173-090-131.bdcdn-bjcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 17012151156f4448be74c1d36f2e8e5f9fcafab35a
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=5, edge;dur=0
sg.captcha.qcloud.com/TCaptcha-global.js
200 OK 26 kB URL GET HTTP/1.1 sg.captcha.qcloud.com/TCaptcha-global.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Certificate IssuerDigiCert Inc
Subjectapr02-2023-1.ias.qcloud.com
Fingerprint69:EC:64:F0:FC:97:7D:F3:2A:AE:4B:99:04:81:E3:72:37:5C:6D:10
ValiditySat, 01 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 20192c1888c78f09221455e186ceb260
8dcdfc72e2fe0e1fd5c696ef37ebe9ea530a386d
2ff7885a81708c410937657971c966b9d12c96aa64edc1b868ccf9bef0395084
GET /TCaptcha-global.js HTTP/1.1
Host: sg.captcha.qcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 23:45:15 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP=CAO PSA OUR
Server: Trpc httpd, tencent http server
Cache-Control: max-age=600
Content-Encoding: gzip
4958806.com/static/js/chunk-2d0aeeb8.3c5f304701ac9f84a3df.20231117041309.js
200 OK 278 B URL GET HTTP/2 4958806.com/static/js/chunk-2d0aeeb8.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type ASCII text, with no line terminators
Hash 1f987706a9c19f6132164462caffe676
97369750690c155e920885cf6dbaa44988899e64
3c599611c7cbac83ee0fd7919e987585263feae741f0700bdc79a67f4ebb80d7
GET /static/js/chunk-2d0aeeb8.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:16 GMT
content-type: application/javascript
content-length: 278
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: "6556e949-116"
accept-ranges: bytes
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash a6fa5fb3d68da5eeca91a42dc266bada
b79cbd936737308cc9bf7c1ccb7792385445b847
cd6b859f710f6371c280aa70ca524ba7faa5bf2b0e9b6d0a31ce5a77b9bb876d
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 28 Nov 2023 23:45:17 GMT
Ali-Swift-Global-Savetime: 1701215117
Via: cache8.l2de2[129,129,200-0,M], cache8.l2de2[132,0], cache1.se1[155,154,200-0,M], cache1.se1[156,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 28 Nov 2023 23:45:17 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9517012151169703548e
global.captcha.gtimg.com/tcaptcha-frame.7f61d9f7.js
200 OK 53 kB URL GET HTTP/2 global.captcha.gtimg.com/tcaptcha-frame.7f61d9f7.js
IP
Certificate IssuerDigiCert Inc
Subject*.captcha.gtimg.com
Fingerprint49:0B:E6:49:D9:6C:E0:47:91:48:5B:4C:27:84:00:48:29:BB:D5:6F
ValidityWed, 08 Nov 2023 00:00:00 GMT - Thu, 05 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4735be8fe0ffd6d65183ac6be9da1d4b
ed49d6e8c8c067f08d16c5b7127a0aa32a5682e5
2967a3d18973ffd6ecbc78b2328f04721572d3b40b6e18d673e2047ac9a98161
GET /tcaptcha-frame.7f61d9f7.js HTTP/1.1
Host: global.captcha.gtimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
date: Tue, 31 Oct 2023 14:09:19 GMT
content-type: text/javascript
p3p: CP=CAO PSA OUR
server: Trpc httpd, tencent http server
content-length: 52564
accept-ranges: bytes
x-nws-log-uuid: 4979307977979097140
x-cache-lookup: Cache Hit
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
global.captcha.gtimg.com/template/drag_ele_global.html
200 OK 23 kB URL GET HTTP/2 global.captcha.gtimg.com/template/drag_ele_global.html
IP
Certificate IssuerDigiCert Inc
Subject*.captcha.gtimg.com
Fingerprint49:0B:E6:49:D9:6C:E0:47:91:48:5B:4C:27:84:00:48:29:BB:D5:6F
ValidityWed, 08 Nov 2023 00:00:00 GMT - Thu, 05 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (61554)
Hash f3dabe5cc8901c9027137ac686175ac0
d472d916481b18b04438357c7481eb5e65b0491a
66fbadb89f171e8b6f307878094c5f17489fe5496f685128958b8665352ea82f
GET /template/drag_ele_global.html HTTP/1.1
Host: global.captcha.gtimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
date: Thu, 23 Nov 2023 05:43:52 GMT
content-type: text/html
p3p: CP=CAO PSA OUR
pragma: No-cache
server: Trpc httpd, tencent http server
content-length: 23411
accept-ranges: bytes
x-nws-log-uuid: 3969992490982890768
x-cache-lookup: Cache Hit
access-control-allow-origin: *
cache-control: max-age=0
X-Firefox-Spdy: h2
4958806.com/static/js/chunk-59f515cc.3c5f304701ac9f84a3df.20231117041309.js
200 OK 193 kB URL GET HTTP/2 4958806.com/static/js/chunk-59f515cc.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type Unicode text, UTF-8 text, with very long lines (65400), with no line terminators
Size 193 kB (193378 bytes)
Hash 0f84246f2f8e8439ef9d73aba06ffe4b
661b1795fc36e96decf1516373fb90841464d28c
3b9fbaf15a5e8ae7757245324a6b055045090eca7eac50eadee9c1225c8dd9b7
GET /static/js/chunk-59f515cc.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: W/"6556e949-52d14"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/js/chunk-71002a88.3c5f304701ac9f84a3df.20231117041309.js
200 OK 85 kB URL GET HTTP/2 4958806.com/static/js/chunk-71002a88.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type Unicode text, UTF-8 text, with very long lines (65322), with no line terminators
Hash e59a8e4af51e5239295ce6f0a4e1e025
900de7abd8d290a196484dbf8ccd20b39cfd88ea
2c34456fe728b921545a675cf730675c54bc24cf4b171f575e0135adea979f91
GET /static/js/chunk-71002a88.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: W/"6556e948-117ee"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data/version
200 OK 0 B URL GET HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data/version
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-DRAWING/noauth/lottery/data/version HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:17 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getAddress
200 OK 0 B URL GET HTTP/2 h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getAddress
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-OPERATOR/noauth/tenant/getAddress HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:17 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getBaseConfig
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getBaseConfig
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-OPERATOR/noauth/tenant/getBaseConfig HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:17 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/status
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/status
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-DRAWING/noauth/lottery/status HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:17 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
js.users.51.la/21593023.js
200 OK 2.3 kB URL GET HTTP/1.1 js.users.51.la/21593023.js
IP
Certificate IssuerGlobalSign nv-sa
Subject*.users.51.la
Fingerprint8E:9F:59:98:28:F2:49:A9:E1:19:45:C2:49:ED:B2:F6:B8:E1:C6:39
ValidityFri, 14 Apr 2023 03:17:41 GMT - Wed, 15 May 2024 03:17:40 GMT
File type ASCII text, with very long lines (4898), with no line terminators
Hash 7a43d4d30ab23420a6b572de93f123be
f39c0ac8c699c088e5fbfd90c15607ca2fb1bbf4
93461c9c8891ae6065262d63781e9ff46dfae6131b74e995a2a813df0ad89f6c
GET /21593023.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 23:45:17 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: aliyungf_tc=d5db054bc6e2dddd248134053713746c1db5c3a30692fc56f05ff298ad92fa00; Path=/; HttpOnly
acw_tc=ac11000117012151177438277e3de2a91fa56e71d1d6c30422786ea163dd51;path=/;HttpOnly;Max-Age=1800
Server: openresty
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data/version
200 OK 158 B URL GET HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data/version
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cd210b009ed5c8385d3e58e8c3fc65c2
0924cbcc0f60e95182a33212ea305de70fa4fde5
84f0808a71a714e395657d5aa4e57040c880111a7e1390aee7847c110081eef3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-DRAWING/noauth/lottery/data/version HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: application/json
content-length: 158
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: Set-Cookie
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getBaseConfig
200 OK 972 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getBaseConfig
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type JSON data\012- , ASCII text, with very long lines (972), with no line terminators
Hash 42a9c61a749c6025b03685a3c8758b20
638ec67313ac2949fee0aaac8bd8536d22bd395b
5d37edb652dc00e463c8f6780a416f869c893ad22ebe6b5d0219f4f27f227002
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-OPERATOR/noauth/tenant/getBaseConfig HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: application/json
content-length: 972
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
sdk.51.la/js-sdk-pro.min.js
13 kB URL GET sdk.51.la/js-sdk-pro.min.js
IP
Certificate IssuerGlobalSign nv-sa
Subject*.51.la
Fingerprint9E:F3:EB:9A:59:E9:6D:6E:48:13:64:78:3C:33:1D:AA:79:52:5B:79
ValidityThu, 20 Apr 2023 01:12:57 GMT - Tue, 21 May 2024 01:12:56 GMT
File type Unicode text, UTF-8 text, with very long lines (34110)
Hash 12b38788244af30e6f2b43ac1e0905c6
8c57c30de889c77a4ace4e4ce33a46005868e0ca
c54ff899b5b9f90bd2ecc4dd87d877e87562f8c739ba2c167ccb61f02096abfa
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 23:45:18 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: aliyungf_tc=2b6dcd02978bf14364bd51346ccb821c8f82f588c7094976f48f6aecea988e7e; Path=/; HttpOnly
Server: openresty
Cache-Control: no-store
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash b05a5e0f3db07536af2df2255076bd57
0eb4a9471307ef0778ee82930674595ef40b80cd
9ae895408ddb18feffe325204b60c721f1221daeed1f98d5aeebc95d4fd72b5f
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 28 Nov 2023 23:45:18 GMT
Ali-Swift-Global-Savetime: 1701215118
Via: cache19.l2de2[190,190,200-0,M], cache19.l2de2[191,0], cache8.se1[212,211,200-0,M], cache8.se1[213,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 28 Nov 2023 23:45:18 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c17012151182645510e
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-DRAWING/noauth/lottery/data HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getAddress
200 OK 594 B URL GET HTTP/2 h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getAddress
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1121), with no line terminators
Hash 49f8d654d0a2119307200f3cb22209a9
d348ddb981e78c014c2e3fbe087db31e8896b135
2a40b0315a634df758403cebd21592edbc1b4d0b9fff7dc71f98f42cedb844c1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-OPERATOR/noauth/tenant/getAddress HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: application/json
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
tam.cdn-go.cn/aegis-sdk/latest/aegis.min.js?max_age=3600
200 OK 22 kB URL GET HTTP/2 tam.cdn-go.cn/aegis-sdk/latest/aegis.min.js?max_age=3600
IP
Requested by https://global.captcha.gtimg.com/template/drag_ele_global.html
Certificate IssuerDigiCert Inc
Subjectcdnv4-go.cn
FingerprintD9:17:47:8F:C2:C5:1C:83:3D:A6:04:BE:67:85:F2:A5:9F:88:99:7A
ValidityWed, 15 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64995)
Hash 36c8c97b0241c7050ef3d2dd0fe121a9
9e713c93a04a0674d9e41b78a26c317bcbb98872
723507397a0043fcddcc9c54b19abb143b15264f4c3797c636d3b8f1b1132900
GET /aegis-sdk/latest/aegis.min.js?max_age=3600 HTTP/1.1
Host: tam.cdn-go.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global.captcha.gtimg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: application/javascript
content-length: 22050
cache-control: max-age=3600
expires: Wed, 29 Nov 2023 00:45:17 GMT
last-modified: Wed, 15 Nov 2023 07:55:02 GMT
content-encoding: gzip
x-nws-log-uuid: a1e55529-6548-4ce8-8db8-517b73303633
vary: Origin
is-immutable-in-the-future: false
timing-allow-origin: *
access-control-allow-origin: *
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_agzr1.1942f92f.png
200 OK 6.6 kB URL GET HTTP/2 4958806.com/static/img/nh_agzr1.1942f92f.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 115 x 126, 8-bit colormap, non-interlaced\012- data
Hash 1942f92f5ddaa39dc5b500338e5b24ec
dd0cb978b3c0d0454f8b10a56e2aad68b1427ed3
bb993f5205d1f0b1daa505de235c74f4061ff44a18729e791ee64a17f43c4f85
GET /static/img/nh_agzr1.1942f92f.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 6561
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-19a1"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_agzr2.58ea5271.png
200 OK 7.1 kB URL GET HTTP/2 4958806.com/static/img/nh_agzr2.58ea5271.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 115 x 125, 8-bit colormap, non-interlaced\012- data
Hash 58ea52715998b40a70c3b0427066fc2d
a05198130e021aeba80440a2a9ded07748686b13
292510c95321b0e144138f31b05b58ee56ce831bdd197ddb70363e5106e822c3
GET /static/img/nh_agzr2.58ea5271.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 7090
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-1bb2"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/jsstore.worker.js
200 OK 55 kB URL GET HTTP/2 4958806.com/jsstore.worker.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash e83b5f9f60d9d3972cff66605890dd09
77d08463d144c345308749877e64a788cbafaf87
a2328e7e468e95e615df37ce87c9c65a85bdf038d93bf36fb3f5c0bbc4840050
GET /jsstore.worker.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:17 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: W/"6556e948-3b7ca"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/img/nh_by2.956ce9d1.png
200 OK 8.1 kB URL GET HTTP/2 4958806.com/static/img/nh_by2.956ce9d1.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 150 x 112, 8-bit colormap, non-interlaced\012- data
Hash 956ce9d17e78c577c6faadebc0d5a92c
e2ca9cc552842e6446c7d3294203ba41ed4790e1
d1a0106b192f5f569a5a28a0b737761fecc8e58829aecc05aa36c13cd8b10808
GET /static/img/nh_by2.956ce9d1.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 8060
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-1f7c"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/js/index.3c5f304701ac9f84a3df.20231117041309.js
200 OK 396 kB URL GET HTTP/2 4958806.com/static/js/index.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type gzip compressed data, max speed, from Unix\012- data
Size 396 kB (396191 bytes)
Hash 4436158aef340d2ff30b1a434dc138d1
c0af78ea7b326c08873477e78a68c8ec34f59e42
6deca8a5521eb4a15144928aea734cb1688e9541904be563f30f225113f927dd
GET /static/js/index.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: W/"6556e949-d551c"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/img/nh_by4.5fede68c.png
200 OK 9.1 kB URL GET HTTP/2 4958806.com/static/img/nh_by4.5fede68c.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 162 x 103, 8-bit colormap, non-interlaced\012- data
Hash 5fede68c2d43883bf945120355585072
92f6df4f40d88fc20be4f7ce9e141cd83ce383d8
c48b110f03f329a173e1dd173079ce64f1b54e35029c58653e599497ad414366
GET /static/img/nh_by4.5fede68c.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 9053
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-235d"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_ty1.7addd048.png
200 OK 16 kB URL GET HTTP/2 4958806.com/static/img/nh_ty1.7addd048.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 196 x 231, 8-bit colormap, non-interlaced\012- data
Hash 7addd0487882f7f70f70ae20fb23bd08
dd01e207cdcc0eb7471ccc964620dc286348ecb2
4651ceb84a5599956a1879b9be1c418cb2ed041a156e35007f3f8cc4782fa3e2
GET /static/img/nh_ty1.7addd048.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 16305
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-3fb1"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_bg.321a9707.png
200 OK 4.7 kB URL GET HTTP/2 4958806.com/static/img/nh_bg.321a9707.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 725 x 119, 4-bit colormap, non-interlaced\012- data
Hash 321a9707cfb46ef92a845e2a94321ece
3f0a2290eccaa11ae4c6d931e5b2621e7d1cb2df
02dbfa94f67766c2f8a65899fd12c22d6896218fbc62f34e2ab5aad70857ea22
GET /static/img/nh_bg.321a9707.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 4685
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-124d"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nav_bg_b.5333abc2.jpg
200 OK 4.8 kB URL GET HTTP/2 4958806.com/static/img/nav_bg_b.5333abc2.jpg
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 563x1135, components 3\012- data
Hash 5333abc2ee469dc9b11d628ce4ecb179
66f74b0e0b4fcb171b1454b909d68e5ce5f845ad
c2f3d4d471d6b540859fe174c50645538fbb513c8423556d88d2865ab20cc2f4
GET /static/img/nav_bg_b.5333abc2.jpg HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/jpeg
content-length: 4760
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-1298"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/download.0a0ad40e.png
200 OK 8.7 kB URL GET HTTP/2 4958806.com/static/img/download.0a0ad40e.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 158 x 155, 8-bit colormap, non-interlaced\012- data
Hash 0a0ad40e1f72a0f18db8493e939be80b
bdf565a4ae2b273b28eec34eb534dbd46d11e39a
d9145916cf51ed0b2266a2942891955ead2e3aace49e65f0365402750723b5e7
GET /static/img/download.0a0ad40e.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 8671
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-21df"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-MEMBER/noauth/domain/list?type=2
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-MEMBER/noauth/domain/list?type=2
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-MEMBER/noauth/domain/list?type=2 HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/cpad/list
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/cpad/list
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-NOTICE/noauth/cpad/list HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getBaseConfig
200 OK 972 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getBaseConfig
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type JSON data\012- , ASCII text, with very long lines (972), with no line terminators
Hash 42a9c61a749c6025b03685a3c8758b20
638ec67313ac2949fee0aaac8bd8536d22bd395b
5d37edb652dc00e463c8f6780a416f869c893ad22ebe6b5d0219f4f27f227002
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-OPERATOR/noauth/tenant/getBaseConfig HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: application/json
content-length: 972
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/getMainLottery/list
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/getMainLottery/list
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-DRAWING/noauth/lottery/getMainLottery/list HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/announcement/list
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/announcement/list
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-NOTICE/noauth/announcement/list HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-FORUM/noauth/post/getTopPost?currentPage=1&pageSize=5&lotteryId=39
200 OK 0 B URL GET HTTP/2 h5-gateway.chfjvyhchg.com/CPT-FORUM/noauth/post/getTopPost?currentPage=1&pageSize=5&lotteryId=39
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-FORUM/noauth/post/getTopPost?currentPage=1&pageSize=5&lotteryId=39 HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getInteractiveConfig
200 OK 550 B URL GET HTTP/2 h5-gateway.chfjvyhchg.com/CPT-OPERATOR/noauth/tenant/getInteractiveConfig
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type JSON data\012- , ASCII text, with very long lines (550), with no line terminators
Hash 91d4ba24ebf8bab3227b0450769a834a
c730d9545c25e40002162d719417b99e876db1cc
c027a1249ab3ac4cf22d6499524389fa56cee4486771ffbce1460e7524cc9ba2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-OPERATOR/noauth/tenant/getInteractiveConfig HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: application/json
content-length: 550
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
4958806.com/static/js/chunk-00afa7b9.3c5f304701ac9f84a3df.20231117041309.js
200 OK 32 kB URL GET HTTP/2 4958806.com/static/js/chunk-00afa7b9.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 54283b1c0fc84f3c32b8a3c63ede46d7
fd9d2770da929c8eb4b2303d3ceb74aa283677af
2e196adf835538909761dd26a65698d846577979d64d639f0b9ffb9d54939b92
GET /static/js/chunk-00afa7b9.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: W/"6556e949-4b5e"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-MEMBER/noauth/domain/list?type=2
200 OK 637 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-MEMBER/noauth/domain/list?type=2
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (625), with no line terminators
Hash 2f5d8a7a41b6f171121989d89800cc6b
0fa8d5442078fd63ede73df5db8df44cb062f092
ee8bb82d4de7e6444ed5aaa630192a881ff87325c98f31e5f45058350cb53cc8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-MEMBER/noauth/domain/list?type=2 HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:19 GMT
content-type: application/json;charset=UTF-8
content-length: 637
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/getMainLottery/list
200 OK 960 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/getMainLottery/list
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (938), with no line terminators
Hash 0271b3e4c4097189c54d42186091c07f
6adf77b179d9f3ed0f8f80f21ef3f7b8b202ae2d
d4404e577cb4d7949a1e74b68a741bd973c2a031b072b96b7c49d493de1c2572
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-DRAWING/noauth/lottery/getMainLottery/list HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:19 GMT
content-type: application/json
content-length: 960
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: Set-Cookie
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
4958806.com/static/img/nh_bg_r.5eaac4b3.png
200 OK 13 kB URL GET HTTP/2 4958806.com/static/img/nh_bg_r.5eaac4b3.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5eaac4b37cf9d74d192a54cc8278a860
1ea0279ebc8115a58fe566aa0f4e13515a5ff100
015223de83041160710f6bcabb58000c5dd7c2c803d896ca9330f96a9de037fd
GET /static/img/nh_bg_r.5eaac4b3.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:20 GMT
content-type: image/png
content-length: 13118
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-333e"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/announcement/list
200 OK 10 kB URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/announcement/list
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash fbe4e7049e9dc7498b9b28eb4cd1bffa
9edec419b59c528cbc5bd7c21181e86e4b2d8f91
98e9161c612ddc574715ad8bbf8fbcd3b46d526e2c6a28c89403c7265aed75ca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-NOTICE/noauth/announcement/list HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:19 GMT
content-type: application/json
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp11.2c9433f4.png
200 OK 7.9 kB URL GET HTTP/2 4958806.com/static/img/nh_cp11.2c9433f4.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 138 x 133, 8-bit colormap, non-interlaced\012- data
Hash 2c9433f4d82263779335f5f9fb3919a0
32bc1194c8f63070f5017de41aa706ea3bd44185
f2c9c145fb377e97b6fb37b432cfad5f462f883957ddb1b82e885ee8522e1028
GET /static/img/nh_cp11.2c9433f4.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 7939
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-1f03"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp12.9cf7289e.png
200 OK 9.6 kB URL GET HTTP/2 4958806.com/static/img/nh_cp12.9cf7289e.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 140 x 133, 8-bit colormap, non-interlaced\012- data
Hash 9cf7289e1c20f301cf305fa68d0f0f77
452ca2bf605779b59bbcd1859ffaded136a61e54
cc7c08b7b089770090b5084d06ed2ad486e85cced37c4cf0af6739f87a4e45cf
GET /static/img/nh_cp12.9cf7289e.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 9559
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-2557"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp13.c5ee6e76.png
200 OK 8.3 kB URL GET HTTP/2 4958806.com/static/img/nh_cp13.c5ee6e76.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 119 x 136, 8-bit colormap, non-interlaced\012- data
Hash c5ee6e76169db0f9906b521b29146272
b88ff6e2dc3db9c372bdf2a98ffe635b793cde64
2969901fd5d466137e75fa67e7b1fea8e70c71e3c01d0db839bc5473903a84a4
GET /static/img/nh_cp13.c5ee6e76.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 8259
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-2043"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp14.72ddb675.png
200 OK 8.4 kB URL GET HTTP/2 4958806.com/static/img/nh_cp14.72ddb675.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 131 x 127, 8-bit colormap, non-interlaced\012- data
Hash 72ddb675492a82a7b1f0c7c5cde3a294
ac41b53ec0a0eb0f478961e03a25674936aa7321
d4b669b6090b30ba6946278d65cc494c69342af9b575ac4c2eb255bf21b9e9bd
GET /static/img/nh_cp14.72ddb675.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 8421
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-20e5"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp16.1e78644f.png
200 OK 8.8 kB URL GET HTTP/2 4958806.com/static/img/nh_cp16.1e78644f.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 115 x 126, 8-bit colormap, non-interlaced\012- data
Hash 1e78644f9c6204f26ebd55825fc7481d
4a04add7ae6e558493fd71e9c01a6e97a90312b5
0cb7d86d1cbdbd901184cb0ac9a11a09e6995f7a3f811d5c83eaa372dc1e93ec
GET /static/img/nh_cp16.1e78644f.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 8794
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-225a"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp15.72ddb675.png
200 OK 8.4 kB URL GET HTTP/2 4958806.com/static/img/nh_cp15.72ddb675.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 131 x 127, 8-bit colormap, non-interlaced\012- data
Hash 72ddb675492a82a7b1f0c7c5cde3a294
ac41b53ec0a0eb0f478961e03a25674936aa7321
d4b669b6090b30ba6946278d65cc494c69342af9b575ac4c2eb255bf21b9e9bd
GET /static/img/nh_cp15.72ddb675.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 8421
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-20e5"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp17.72ddb675.png
200 OK 8.4 kB URL GET HTTP/2 4958806.com/static/img/nh_cp17.72ddb675.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 131 x 127, 8-bit colormap, non-interlaced\012- data
Hash 72ddb675492a82a7b1f0c7c5cde3a294
ac41b53ec0a0eb0f478961e03a25674936aa7321
d4b669b6090b30ba6946278d65cc494c69342af9b575ac4c2eb255bf21b9e9bd
GET /static/img/nh_cp17.72ddb675.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 8421
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-20e5"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/img-188.85b6cc3a.png
200 OK 41 kB URL GET HTTP/2 4958806.com/static/img/img-188.85b6cc3a.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 360 x 336, 8-bit colormap, non-interlaced\012- data
Hash 85b6cc3a85e16b193b1aa56bbb79aa90
3fdce6e916dec9fe0b6afd0bc72add4609d81bd4
9dcc363ae72fa393f16ca4b3bd63c9a6677a082b871579dca0fdd66000b8e074
GET /static/img/img-188.85b6cc3a.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 40925
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-9fdd"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/img-awc.f20a13e1.png
200 OK 43 kB URL GET HTTP/2 4958806.com/static/img/img-awc.f20a13e1.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 360 x 336, 8-bit colormap, non-interlaced\012- data
Hash f20a13e16e3dc67e74a50c882547b43b
1bd1c994ad0478ca534af95a3268242f6ed7471c
1c15e516befda01d70d3a2b1804118e7a53141334df2105a2baebb37c6cd502a
GET /static/img/img-awc.f20a13e1.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 43318
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-a936"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/img-obsports.556a65cd.png
200 OK 44 kB URL GET HTTP/2 4958806.com/static/img/img-obsports.556a65cd.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 360 x 336, 8-bit colormap, non-interlaced\012- data
Hash 556a65cd13d0e51ef63929c0d833e932
f4b1eb0b91f44b6a4d693ff1a566ecd1a719c053
dd5354010c44844cc3800caabfe50ea75a9300062816f8978b519621a04cdc91
GET /static/img/img-obsports.556a65cd.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 44048
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-ac10"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data
200 OK 942 kB URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/data
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Size 942 kB (942178 bytes)
Hash 0339f5e3802d5aff131f5f4218fe4fd9
b9b2ac8ffaa2f07cb2a646da78696de1dec900a9
0ed286fdfe0211d9315c0312d8c62dbd0bdcf95218df91539d54159a5a67e67d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-DRAWING/noauth/lottery/data HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: application/x-protobuf;charset=UTF-8
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: Set-Cookie
x-protobuf-schema: LotteryData.proto
x-protobuf-message: FullData
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
4958806.com/static/img/img-obgame.2ab87840.png
200 OK 50 kB URL GET HTTP/2 4958806.com/static/img/img-obgame.2ab87840.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 360 x 336, 8-bit colormap, non-interlaced\012- data
Hash 2ab8784053faf41def6ca15d5f1697f6
c00b33880988b405e5823c2231d1658d57b8f1c7
6a1732e0117705c70cbfa611d8a3d7b38f649a698eabffba0a56ecdba1815315
GET /static/img/img-obgame.2ab87840.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 49977
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-c339"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
h5-gateway.chfjvyhchg.com/CPT-ACTIVITY/noauth/activity/checkin/list
200 OK 0 B URL POST HTTP/2 h5-gateway.chfjvyhchg.com/CPT-ACTIVITY/noauth/activity/checkin/list
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-ACTIVITY/noauth/activity/checkin/list HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: POST
access-control-allow-headers: content-type, lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
4958806.com/static/img/home.2c322ceb.png
200 OK 179 kB URL GET HTTP/2 4958806.com/static/img/home.2c322ceb.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 1005 x 852, 8-bit colormap, non-interlaced\012- data
Size 179 kB (179333 bytes)
Hash 2c322cebf06b93782a5cd61faeef10df
d7928753ca695b7a2b0dde000d9c0288cd41001a
ec4d6b649f9e9a3b134cc559e04fe82ef3029fa6d4f5150e27daddf1c71e1209
GET /static/img/home.2c322ceb.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:22 GMT
content-type: image/png
content-length: 179333
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-2bc85"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/btn.dd3d45ba.png
200 OK 4.2 kB URL GET HTTP/2 4958806.com/static/img/btn.dd3d45ba.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 262 x 87, 8-bit colormap, non-interlaced\012- data
Hash dd3d45baf79a25e8c471b6989fda931d
bf4dc6db90f3607201af12acdc53a411d36369fb
2f44a680b80eb99ee82d8168161dd221061e1d5489b23a2a5b352428c7556f18
GET /static/img/btn.dd3d45ba.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:22 GMT
content-type: image/png
content-length: 4157
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-103d"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/bingo/%E5%AE%BE%E6%9E%9C%E6%97%B6%E6%97%B6%E5%BD%A9%402x.png
200 OK 6.1 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/bingo/%E5%AE%BE%E6%9E%9C%E6%97%B6%E6%97%B6%E5%BD%A9%402x.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash c2753d8064b56715ba0461759389a381
1868e93a6f2750a831fac9b99182876b754b2525
ea53bdc70bbf29533a6a72eda847f67072bb1f306f96d93319b0ca5d5638fc6c
GET /image/bingo/%E5%AE%BE%E6%9E%9C%E6%97%B6%E6%97%B6%E5%BD%A9%402x.png HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/png
Content-Length: 6105
Connection: keep-alive
x-oss-request-id: 65667B91A4261F363905F38F
Accept-Ranges: bytes
ETag: "C2753D8064B56715BA0461759389A381"
Last-Modified: Tue, 09 Mar 2021 08:45:38 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2358790355345774186
x-oss-storage-class: Standard
Content-MD5: wnU9gGS1ZxW6BGF1k4mjgQ==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2022-04-04/5740c7be-2a6d-4edc-a541-d2a4600f5aa4.png
200 OK 6.1 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2022-04-04/5740c7be-2a6d-4edc-a541-d2a4600f5aa4.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 1a0f5b2d8bb83978d35b9b3349b6d00c
c156e4b56112f804272a697c0e4b784eae3673e9
fb17a666d4a5747357979f3a6c26aab941f837e71137bbdfd06f346322382a63
GET /image/head/2022-04-04/5740c7be-2a6d-4edc-a541-d2a4600f5aa4.png HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/png
Content-Length: 6114
Connection: keep-alive
x-oss-request-id: 65667B9100D6C33039FDA194
Accept-Ranges: bytes
ETag: "1A0F5B2D8BB83978D35B9B3349B6D00C"
Last-Modified: Mon, 04 Apr 2022 11:23:59 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14911408833118660334
x-oss-storage-class: Standard
Content-MD5: Gg9bLYu4OXjTW5szSbbQDA==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2022-04-04/c328be69-47b8-42ff-8f7a-ca8ba7dfa9f2.png
200 OK 6.6 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2022-04-04/c328be69-47b8-42ff-8f7a-ca8ba7dfa9f2.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 9b1553b232059003b7f0664625281886
5c143239b9e3ec3fe6a9399e05b6b1e29cc1b6d8
dbe3b1b250deace0acd7d38c4f87033ab426adf70f4523ac6fda5c215ab939f7
GET /image/head/2022-04-04/c328be69-47b8-42ff-8f7a-ca8ba7dfa9f2.png HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/png
Content-Length: 6641
Connection: keep-alive
x-oss-request-id: 65667B912A67CA33345D3E4E
Accept-Ranges: bytes
ETag: "9B1553B232059003B7F0664625281886"
Last-Modified: Mon, 04 Apr 2022 11:24:06 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2246029539780826979
x-oss-storage-class: Standard
Content-MD5: mxVTsjIFkAO38GZGJSgYhg==
x-oss-server-time: 1
h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/cpad/list
200 OK 1.3 kB URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-NOTICE/noauth/cpad/list
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 6c1a9e32622b07692c601b38b0f7eea2
cac39610f869f594029dfcf493b9e045b0431742
93a30701a3974ac1bd1ff7707773a34abee588542008f533791c2851ddc028a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-NOTICE/noauth/cpad/list HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:19 GMT
content-type: application/json
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
h5-gateway.u9m08ktz.com/?0.24531757596392267
200 OK 149 B URL GET HTTP/1.1 h5-gateway.u9m08ktz.com/?0.24531757596392267
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.u9m08ktz.com
Fingerprint17:C9:77:D5:EE:BD:04:AF:A2:81:02:2C:12:35:C0:33:CB:96:D8:25
ValiditySun, 24 Sep 2023 10:49:15 GMT - Sat, 23 Dec 2023 10:49:14 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 338d552ef8d5696aa2b9f596a00e8857
43aadca28ed45525db90df97c3fa2114bad713ef
6d94dbe45bd8a9abc4e05f47e5316cbc43f75b125a694ebee258deacf648b8e7
GET /?0.24531757596392267 HTTP/1.1
Host: h5-gateway.u9m08ktz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Vary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin
Access-Control-Allow-Origin: https://4958806.com
Access-Control-Allow-Credentials: true
Content-Type: application/json
X-Cache: MISS from ty8z2-cdnb52-103
Content-Length: 149
h5-gateway.dzc19nj0.com/?0.6221948602478272
200 OK 149 B URL GET HTTP/1.1 h5-gateway.dzc19nj0.com/?0.6221948602478272
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.dzc19nj0.com
Fingerprint9D:9C:47:BA:03:DB:8D:0A:A7:DB:61:7A:F9:72:7B:72:1F:65:56:F2
ValiditySun, 24 Sep 2023 10:49:03 GMT - Sat, 23 Dec 2023 10:49:02 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b8b5081cd8b72e9f523dcb944c0d999
a63181f16e03223b98ba1fd887e235f47847bd5d
660291f076b1f844ac0f316f6981f259063247784442056c7b372e4972327699
GET /?0.6221948602478272 HTTP/1.1
Host: h5-gateway.dzc19nj0.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Vary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin
Access-Control-Allow-Origin: https://4958806.com
Access-Control-Allow-Credentials: true
Content-Type: application/json
X-Cache: MISS from megai-cdn120-058
Content-Length: 149
liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-10-20/a6ba3f6b-495e-4406-94c9-de3b98b0df77.png
200 OK 99 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-10-20/a6ba3f6b-495e-4406-94c9-de3b98b0df77.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 750 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash 5721accaa2b251471fabf830de8bb68a
095a1eaf5331f4c0ae8f09e5756fbe0c991b1470
280725d807dac87ae1f96032eb711cd5c2e4139e31bdc181b36f5ce73fb794c3
GET /image/ad-photo/2023-10-20/a6ba3f6b-495e-4406-94c9-de3b98b0df77.png HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/png
Content-Length: 99087
Connection: keep-alive
x-oss-request-id: 65667B914F7BC431345C3770
Accept-Ranges: bytes
ETag: "5721ACCAA2B251471FABF830DE8BB68A"
Last-Modified: Thu, 19 Oct 2023 16:01:29 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2742046842438036581
x-oss-storage-class: Standard
Content-MD5: VyGsyqKyUUcfq/gw3ou2ig==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-02/9ff61b03-6134-4ff8-b806-e2ad3bc57554.jpg
200 OK 110 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-02/9ff61b03-6134-4ff8-b806-e2ad3bc57554.jpg
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 750x300, components 3\012- data
Size 110 kB (109836 bytes)
Hash 878160a31cc68112358ac1115c9b838d
c3cbf465dda09146e03a42391df9cfcc8e950d17
57e0cf460ed95823d56c4dd95261eb1d0facfde6dd3e6be340706117b7f787ec
GET /image/ad-photo/2023-11-02/9ff61b03-6134-4ff8-b806-e2ad3bc57554.jpg HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/jpeg
Content-Length: 109836
Connection: keep-alive
x-oss-request-id: 65667B9184CC8A393562A67B
Accept-Ranges: bytes
ETag: "878160A31CC68112358AC1115C9B838D"
Last-Modified: Thu, 02 Nov 2023 09:43:55 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2998384454560076074
x-oss-storage-class: Standard
Content-MD5: h4FgoxzGgRI1isERXJuDjQ==
x-oss-server-time: 1
liquidvg.oss-cn-hongkong.aliyuncs.com/image/chat-image/2023-11-27/9b7f6e3c-5737-4032-8128-e791ca1469d0.jpg
200 OK 115 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/chat-image/2023-11-27/9b7f6e3c-5737-4032-8128-e791ca1469d0.jpg
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x720, components 3\012- data
Size 115 kB (114629 bytes)
Hash 43d48705f5db0ee32b65fae59b41df41
6e0e904307675e30de13778e102578b82d95a351
060b66181e4ec2f7bf9817a1b8829876b53adfa3a0014e6511fd20cca07fbbc5
GET /image/chat-image/2023-11-27/9b7f6e3c-5737-4032-8128-e791ca1469d0.jpg HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/jpeg
Content-Length: 114629
Connection: keep-alive
x-oss-request-id: 65667B9161ECA13939FDD458
Accept-Ranges: bytes
ETag: "43D48705F5DB0EE32B65FAE59B41DF41"
Last-Modified: Mon, 27 Nov 2023 08:21:05 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4861576065882465971
x-oss-storage-class: Standard
Content-MD5: Q9SHBfXbDuMrZfrlm0HfQQ==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/else/ad-photo/2023-05-02/0c951df1-d016-41d9-be1b-8645bda51306.gif
200 OK 93 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/else/ad-photo/2023-05-02/0c951df1-d016-41d9-be1b-8645bda51306.gif
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type GIF image data, version 89a, 750 x 300\012- data
Hash cd6c912ad2fbbc52d2d2975c7ac2770c
4d5385c019bb73c50f7bf2e11296f1cedc1f4b8f
dd1534bab805094718f47f76201f6530239f63c8af886c490a31348c9ae9360a
GET /else/ad-photo/2023-05-02/0c951df1-d016-41d9-be1b-8645bda51306.gif HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/gif
Content-Length: 93412
Connection: keep-alive
x-oss-request-id: 65667B914F7BC432373F3770
Accept-Ranges: bytes
ETag: "CD6C912AD2FBBC52D2D2975C7AC2770C"
Last-Modified: Tue, 02 May 2023 05:28:23 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2500513560755879827
x-oss-storage-class: Standard
Content-MD5: zWyRKtL7vFLS0pdcesJ3DA==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/0ad0f54f-0516-4e12-b014-7cc2a92288d5.png
200 OK 4.8 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/0ad0f54f-0516-4e12-b014-7cc2a92288d5.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 2f7faf5c6b589eb9429d3adabc6d517f
3da422b58ee2077ab5dc5e3de56d393eafb6d505
166aa9d0d1885309151d3439f59e10313782d390dc28cbeebbfede5e4d23ce54
GET /image/lh-image/2020-11-23/0ad0f54f-0516-4e12-b014-7cc2a92288d5.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:23 GMT
Content-Type: image/png
Content-Length: 4797
Connection: keep-alive
x-oss-request-id: 65667B934F7BC43234673A70
Accept-Ranges: bytes
ETag: "2F7FAF5C6B589EB9429D3ADABC6D517F"
Last-Modified: Mon, 23 Nov 2020 07:00:20 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16399505773220517076
x-oss-storage-class: Standard
Content-MD5: L3+vXGtYnrlCnTravG1Rfw==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/ceec7467-796e-49cd-a0a2-66f7edf94171.png
200 OK 4.8 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/ceec7467-796e-49cd-a0a2-66f7edf94171.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash cca86fb521d314e76aa0774dd0c61583
2bbf68981a0fae7d1930c7d77d2c31daf6776f30
344d5098db14de7d9610e72a6fd069c739cd498077657a652667e6a7fed2d794
GET /image/lh-image/2020-11-23/ceec7467-796e-49cd-a0a2-66f7edf94171.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:23 GMT
Content-Type: image/png
Content-Length: 4789
Connection: keep-alive
x-oss-request-id: 65667B932A67CA3034CD404E
Accept-Ranges: bytes
ETag: "CCA86FB521D314E76AA0774DD0C61583"
Last-Modified: Mon, 23 Nov 2020 06:52:26 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8817024031820719984
x-oss-storage-class: Standard
Content-MD5: zKhvtSHTFOdqoHdN0MYVgw==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/eee5ca12-0807-44d3-b8c8-9802ad2ed412.png
200 OK 5.1 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/eee5ca12-0807-44d3-b8c8-9802ad2ed412.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 03373a6b4c6d47093cc2618809b062f9
34c1cef34b6d3e5d317c23da4fbb2992528b9998
9400ee03745d36cb76f9e08b7c148705f51d306ae38bdadd69b8bf5a40f3fad2
GET /image/lh-image/2020-07-23/eee5ca12-0807-44d3-b8c8-9802ad2ed412.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:23 GMT
Content-Type: image/png
Content-Length: 5101
Connection: keep-alive
x-oss-request-id: 65667B9384CC8A393746AA7B
Accept-Ranges: bytes
ETag: "03373A6B4C6D47093CC2618809B062F9"
Last-Modified: Thu, 23 Jul 2020 12:11:05 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4170971673009670612
x-oss-storage-class: Standard
Content-MD5: Azc6a0xtRwk8wmGICbBi+Q==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/c0c6d42b-af0d-4ce8-8e1f-adb84f276a4c.png
200 OK 5.7 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/c0c6d42b-af0d-4ce8-8e1f-adb84f276a4c.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash a4770ea719ad6f2d72b6029cd8b48e8e
8885f228a34aab6ae2bca61fbc94eb5999d462a0
819074fbc2976dc06df8842ee5f65b56aedae3eaa21760ed406affd13235be5f
GET /image/lh-image/2020-11-23/c0c6d42b-af0d-4ce8-8e1f-adb84f276a4c.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:23 GMT
Content-Type: image/png
Content-Length: 5679
Connection: keep-alive
x-oss-request-id: 65667B93D7863C313449B7BC
Accept-Ranges: bytes
ETag: "A4770EA719AD6F2D72B6029CD8B48E8E"
Last-Modified: Mon, 23 Nov 2020 07:17:18 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12502995625272303880
x-oss-storage-class: Standard
Content-MD5: pHcOpxmtby1ytgKc2LSOjg==
x-oss-server-time: 1
liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-04-03/604d3ab3-02c1-45a7-abc5-f13d43004893.jpg
200 OK 112 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-04-03/604d3ab3-02c1-45a7-abc5-f13d43004893.jpg
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x300, components 3\012- data
Size 112 kB (111610 bytes)
Hash 0731f59285348aeef5808b32f0f05547
e6f9fcdbe88617c81a78f44f25c09060ce80bc10
1c09ceb5212eb34432fdb19890bad436e2c7659383690c2855db4abc155f7d26
GET /image/ad-photo/2023-04-03/604d3ab3-02c1-45a7-abc5-f13d43004893.jpg HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/jpeg
Content-Length: 111610
Connection: keep-alive
x-oss-request-id: 65667B91D7863C313671B3BC
Accept-Ranges: bytes
ETag: "0731F59285348AEEF5808B32F0F05547"
Last-Modified: Mon, 03 Apr 2023 05:29:26 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 18040707322734812541
x-oss-storage-class: Standard
Content-MD5: BzH1koU0iu71gIsy8PBVRw==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/5614aa26-ed40-46dc-bab8-3e96730429ad.png
200 OK 5.4 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/5614aa26-ed40-46dc-bab8-3e96730429ad.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 6ae66414cad93f97e6cce0884a38f5bb
ca73e66d4cf3df01f9a2218ba8cbcbc35e94cc3c
4a1227cbfb798ef11bffe0b1a3b77edd1f8eb60407cb0e65410c15437bddc908
GET /image/lh-image/2020-07-23/5614aa26-ed40-46dc-bab8-3e96730429ad.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:23 GMT
Content-Type: image/png
Content-Length: 5435
Connection: keep-alive
x-oss-request-id: 65667B93D7863C313457B8BC
Accept-Ranges: bytes
ETag: "6AE66414CAD93F97E6CCE0884A38F5BB"
Last-Modified: Thu, 23 Jul 2020 12:27:59 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4632806848991858137
x-oss-storage-class: Standard
Content-MD5: auZkFMrZP5fmzOCISjj1uw==
x-oss-server-time: 2
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/d06b0cc4-db59-46b9-831a-8b775f269c03.png
200 OK 5.8 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/d06b0cc4-db59-46b9-831a-8b775f269c03.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 33ee45cf8740266a13700ce474de30f6
6bbbe45bb205abf69aadc1a0c808d274a1277fed
e5666e5a72e28ebe81c56e07524c0f9f42234eadc1a5c782f6be04c86a6fb02c
GET /image/lh-image/2020-07-23/d06b0cc4-db59-46b9-831a-8b775f269c03.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:24 GMT
Content-Type: image/png
Content-Length: 5765
Connection: keep-alive
x-oss-request-id: 65667B94D7863C31346AB9BC
Accept-Ranges: bytes
ETag: "33EE45CF8740266A13700CE474DE30F6"
Last-Modified: Thu, 23 Jul 2020 12:23:16 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10278259943585404098
x-oss-storage-class: Standard
Content-MD5: M+5Fz4dAJmoTcAzkdN4w9g==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-09-07/ecbbcc27-9f47-44fd-a367-89d91ac13e61.jpg
200 OK 180 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-09-07/ecbbcc27-9f47-44fd-a367-89d91ac13e61.jpg
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x300, components 3\012- data
Size 180 kB (180535 bytes)
Hash 617a47e03190b9c1f56fa82b3f4907cd
0103eedf18a9be46fb72b5bc81048db37b9f0e93
3e5bbed3ec787153bca8972adff2dc2508a0e4c7ce860bc620a8c90ab4795267
GET /image/ad-photo/2023-09-07/ecbbcc27-9f47-44fd-a367-89d91ac13e61.jpg HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/jpeg
Content-Length: 180535
Connection: keep-alive
x-oss-request-id: 65667B914F7BC43133293770
Accept-Ranges: bytes
ETag: "617A47E03190B9C1F56FA82B3F4907CD"
Last-Modified: Thu, 07 Sep 2023 11:09:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1057508986091276662
x-oss-storage-class: Standard
Content-MD5: YXpH4DGQucH1b6grP0kHzQ==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/2e731c68-f9be-4b99-9b06-f304f5d23b9f.png
200 OK 5.1 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/2e731c68-f9be-4b99-9b06-f304f5d23b9f.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 490d9040062a58848ca384006fbae058
893ebc0e794f5e4fb47a19b1bfab020edb725d18
b67344fe30c34cd27b6ca6891c0af26707c18aaa4ea713429d2f58a64944b4af
GET /image/lh-image/2020-11-23/2e731c68-f9be-4b99-9b06-f304f5d23b9f.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:24 GMT
Content-Type: image/png
Content-Length: 5100
Connection: keep-alive
x-oss-request-id: 65667B9484CC8A393780AC7B
Accept-Ranges: bytes
ETag: "490D9040062A58848CA384006FBAE058"
Last-Modified: Mon, 23 Nov 2020 07:03:42 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8129527879815316292
x-oss-storage-class: Standard
Content-MD5: SQ2QQAYqWISMo4QAb7rgWA==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/45169cce-8d45-4220-af61-85e16c706bd7.png
200 OK 6.1 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-07-23/45169cce-8d45-4220-af61-85e16c706bd7.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 3cd11f2b9a6687c95a3b80ac23f5f22b
ec406026eabfcd4c49c460641489764d5e032151
7d8c9b9349c6d59380464a4dbd1d3dca2a1a02b0e7b5fd0eef406048123b25f9
GET /image/lh-image/2020-07-23/45169cce-8d45-4220-af61-85e16c706bd7.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:24 GMT
Content-Type: image/png
Content-Length: 6130
Connection: keep-alive
x-oss-request-id: 65667B94A4261F3339D9F78F
Accept-Ranges: bytes
ETag: "3CD11F2B9A6687C95A3B80AC23F5F22B"
Last-Modified: Thu, 23 Jul 2020 12:16:32 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8765029923517520629
x-oss-storage-class: Standard
Content-MD5: PNEfK5pmh8laO4CsI/XyKw==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/d96ae76c-eddf-4f18-b00d-f4aa377e4274.png
200 OK 6.7 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-11-23/d96ae76c-eddf-4f18-b00d-f4aa377e4274.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 4a462feab08ab51c103803a942fa2284
0f49320754ae3053d295243042ade55436272cc4
0099936c2c6c78350d34216be73e9c34f920c8df58e2d839cf6b90c6ea53c480
GET /image/lh-image/2020-11-23/d96ae76c-eddf-4f18-b00d-f4aa377e4274.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:24 GMT
Content-Type: image/png
Content-Length: 6717
Connection: keep-alive
x-oss-request-id: 65667B94D7863C313453BABC
Accept-Ranges: bytes
ETag: "4A462FEAB08AB51C103803A942FA2284"
Last-Modified: Mon, 23 Nov 2020 07:01:34 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1448165444345567465
x-oss-storage-class: Standard
Content-MD5: SkYv6rCKtRwQOAOpQvoihA==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-03/4b8af7c5-6333-4c4e-be13-018192490ec4.jpg
200 OK 246 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-03/4b8af7c5-6333-4c4e-be13-018192490ec4.jpg
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 750x300, components 3\012- data
Size 246 kB (245577 bytes)
Hash 512a177a9fab208fcfafe5b13815ff7e
a1a49024698a1fde031d30779ec41f99f63e8b39
1378f6eae69160357606fd8ddffcaa464f1d3656b87c75f87e6b958e4db1902c
GET /image/ad-photo/2023-11-03/4b8af7c5-6333-4c4e-be13-018192490ec4.jpg HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:23 GMT
Content-Type: image/jpeg
Content-Length: 245577
Connection: keep-alive
x-oss-request-id: 65667B9361ECA13939CDD858
Accept-Ranges: bytes
ETag: "512A177A9FAB208FCFAFE5B13815FF7E"
Last-Modified: Fri, 03 Nov 2023 09:42:23 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16852906687123069558
x-oss-storage-class: Standard
Content-MD5: USoXep+rII/Pr+WxOBX/fg==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-27/29fcfc17-76cb-4882-b19c-83f4ec7527db.jpg
230 kB URL GET liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-27/29fcfc17-76cb-4882-b19c-83f4ec7527db.jpg
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x300, components 3\012- data
Size 230 kB (229501 bytes)
Hash 547a855e36ce300abc48aee7b8dd5a6c
d77db6d4c87e8d17eb2e2ace99e9e321630a476c
7ac084dd001c59d30771726af6f1f7a6c9d5c660965a2a131edc7cd361bb90ad
GET /image/ad-photo/2023-11-27/29fcfc17-76cb-4882-b19c-83f4ec7527db.jpg HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:25 GMT
Content-Type: image/jpeg
Content-Length: 229501
Connection: keep-alive
x-oss-request-id: 65667B954F7BC43133683D70
Accept-Ranges: bytes
ETag: "547A855E36CE300ABC48AEE7B8DD5A6C"
Last-Modified: Mon, 27 Nov 2023 08:22:00 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9256150038704772304
x-oss-storage-class: Standard
Content-MD5: VHqFXjbOMAq8SK7nuN1abA==
x-oss-server-time: 1
cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-10-16/9234a597-0bcb-4dbb-bf72-ea336ce7541c.png
200 OK 10 kB URL GET HTTP/1.1 cptuatzx.oss-cn-hongkong.aliyuncs.com/image/lh-image/2020-10-16/9234a597-0bcb-4dbb-bf72-ea336ce7541c.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 165 x 165, 8-bit colormap, non-interlaced\012- data
Hash b0199fa05ada3cfb834ea68c1d85cfd6
2956c24dd446aae99a9e6cedcd34f061f9cdb69f
03a5a0959a4419f32d262e6c0b3ade45741d42b59f36424df2378757b66e0ea9
GET /image/lh-image/2020-10-16/9234a597-0bcb-4dbb-bf72-ea336ce7541c.png HTTP/1.1
Host: cptuatzx.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:25 GMT
Content-Type: image/png
Content-Length: 9961
Connection: keep-alive
x-oss-request-id: 65667B9561ECA1313766DC58
Accept-Ranges: bytes
ETag: "B0199FA05ADA3CFB834EA68C1D85CFD6"
Last-Modified: Fri, 16 Oct 2020 02:47:40 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10799380147783219594
x-oss-storage-class: Standard
Content-MD5: sBmfoFraPPuDTqaMHYXP1g==
x-oss-server-time: 1
4958806.com/favicon/favicon_XGCP.png
1.1 kB URL GET 4958806.com/favicon/favicon_XGCP.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash dd0c794f0fc3f68c612eb915871df4cb
9686aab5c402cb8b32af731386b7e887c338bf98
98410732196d1da13ed4116bc1088bb55926e299199970e082217447d376bed4
GET /favicon/favicon_XGCP.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:26 GMT
content-type: image/png
content-length: 1103
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-44f"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/favicon/144_XGCP.png
81 kB URL GET 4958806.com/favicon/144_XGCP.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 1024x1024, components 3\012- data
Hash 1a0db68624c15c6ea35bfcb2107dd438
b5fdec54fa1d95a74149150f740e262f26128b73
34a02247b5ee527c04d7897096b04fc1c20e32d66f974aa3d6dae2200e9b2bdc
GET /favicon/144_XGCP.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:26 GMT
content-type: image/png
content-length: 81005
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-13c6d"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-02/a229ebfc-78c0-40af-8b42-3f3eec5f7cd8.jpg
200 OK 236 kB URL GET HTTP/1.1 liquidvg.oss-cn-hongkong.aliyuncs.com/image/ad-photo/2023-11-02/a229ebfc-78c0-40af-8b42-3f3eec5f7cd8.jpg
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 750x300, components 3\012- data
Size 236 kB (235511 bytes)
Hash e343f63fa82032da1f8a906a0e646bdc
6e0094bbe998a44556ace0dc62ed092221db1f33
928fc2890c13a0b973fa32f54e06dfc4760ae7cb7a777ce35a5bb0f10ad72ef4
GET /image/ad-photo/2023-11-02/a229ebfc-78c0-40af-8b42-3f3eec5f7cd8.jpg HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:24 GMT
Content-Type: image/jpeg
Content-Length: 235511
Connection: keep-alive
x-oss-request-id: 65667B94D7863C3136EEB8BC
Accept-Ranges: bytes
ETag: "E343F63FA82032DA1F8A906A0E646BDC"
Last-Modified: Thu, 02 Nov 2023 12:51:57 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13119943081339798125
x-oss-storage-class: Standard
Content-MD5: 40P2P6ggMtofipBqDmRr3A==
x-oss-server-time: 1
liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2023-07-11/12b19201-dbc6-451a-a0dc-7f8ae25b5603.png
1.4 MB URL GET liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2023-07-11/12b19201-dbc6-451a-a0dc-7f8ae25b5603.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Size 1.4 MB (1360590 bytes)
Hash 581874ea395a291f54c98cf6c106fb4d
64a2d5607ee64ee7c6f009ea3ec2e9169c53880e
daab5f6bd31bb4910575bd20c42e3d038793173ca20345fd2581393e905f38d7
GET /image/head/2023-07-11/12b19201-dbc6-451a-a0dc-7f8ae25b5603.png HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:22 GMT
Content-Type: image/png
Content-Length: 1360590
Connection: keep-alive
x-oss-request-id: 65667B92A4261F363910F38F
Accept-Ranges: bytes
ETag: "581874EA395A291F54C98CF6C106FB4D"
Last-Modified: Tue, 11 Jul 2023 04:37:05 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16120507033796164558
x-oss-storage-class: Standard
Content-MD5: WBh06jlaKR9UyYz2wQb7TQ==
x-oss-server-time: 2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2023-07-11/d3c3a5fb-822c-4260-ae74-d230a3a80b48.png
1.8 MB URL GET liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2023-07-11/d3c3a5fb-822c-4260-ae74-d230a3a80b48.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
File type PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Size 1.8 MB (1783531 bytes)
Hash dcf424d5bf2dde66d199c86bbd9378f3
4a1b58917fe9049f8b674bc03ed26f9840097565
cbbc04b1e913c7690cdc9c9e7d59a5e1b523c6eb6b969aa24aaa27b9a9662384
GET /image/head/2023-07-11/d3c3a5fb-822c-4260-ae74-d230a3a80b48.png HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/png
Content-Length: 1783531
Connection: keep-alive
x-oss-request-id: 65667B9100D6C33235F4A194
Accept-Ranges: bytes
ETag: "DCF424D5BF2DDE66D199C86BBD9378F3"
Last-Modified: Tue, 11 Jul 2023 04:36:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10436579584221577204
x-oss-storage-class: Standard
Content-MD5: 3PQk1b8t3mbRmchrvZN48w==
x-oss-server-time: 2
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/hot
200 OK 3.9 kB URL GET HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/hot
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (4167), with no line terminators
Hash 03b22daac0536ae9d7529b99c3cf2e9a
d1c12f5cb16b94e8febccde3f4e30df9b05e2e70
800b2d4b9a6c1ef1733a4cdb305fc36077a0d1f514e33527c0a5a9e1f16fac55
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /CPT-DRAWING/noauth/lottery/hot HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-TENANT-CODE: XGCP
X-CLIENT-IP: 127.0.0.1
X-DEVICE-ID: WEB|Firefox|105.0
X-APP-VERSION: 1
X-CHANNEL: H5
X-AUTH-TOKEN:
lang: zh_CN
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: application/json
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: Set-Cookie
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
access-control-allow-origin: https://4958806.com
access-control-allow-credentials: true
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/js/chunk-vendors.3c5f304701ac9f84a3df.20231117041309.js
200 OK 967 kB URL GET HTTP/2 4958806.com/static/js/chunk-vendors.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
Size 967 kB (967044 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/chunk-vendors.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: W/"6556e949-ec184"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2023-07-11/4a52ca86-67de-43a3-baf3-6a2ce786a55f.png
0 B URL GET liquidvg.oss-cn-hongkong.aliyuncs.com/image/head/2023-07-11/4a52ca86-67de-43a3-baf3-6a2ce786a55f.png
IP
Certificate IssuerGlobalSign nv-sa
Subjectoss-cn-hongkong.aliyuncs.com
Fingerprint32:A6:69:33:41:77:2E:5C:88:CD:B7:DB:46:78:1D:EB:AC:46:7D:27
ValidityFri, 07 Jul 2023 10:25:09 GMT - Fri, 24 May 2024 03:01:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image/head/2023-07-11/4a52ca86-67de-43a3-baf3-6a2ce786a55f.png HTTP/1.1
Host: liquidvg.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 23:45:21 GMT
Content-Type: image/png
Content-Length: 2184394
Connection: keep-alive
x-oss-request-id: 65667B9131C32F38300FCAF5
Accept-Ranges: bytes
ETag: "82C603A6DCBCB44C77171B78D7798B8A"
Last-Modified: Tue, 11 Jul 2023 04:36:31 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9325572267037397720
x-oss-storage-class: Standard
Content-MD5: gsYDpty8tEx3Fxt413mLig==
x-oss-server-time: 1
global.captcha.gtimg.com/dy-ele.fac794d4.js
200 OK 167 kB URL GET HTTP/2 global.captcha.gtimg.com/dy-ele.fac794d4.js
IP
Requested by https://global.captcha.gtimg.com/template/drag_ele_global.html
Certificate IssuerDigiCert Inc
Subject*.captcha.gtimg.com
Fingerprint49:0B:E6:49:D9:6C:E0:47:91:48:5B:4C:27:84:00:48:29:BB:D5:6F
ValidityWed, 08 Nov 2023 00:00:00 GMT - Thu, 05 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 167 kB (166989 bytes)
Hash dce521115529c56c2dfbc12ecff529c8
a18c276bed0ed7626c1eb0e4b8816f06a45d0981
8e306ee93097b3853758faf84b071b65242f73d17bb890059d07891ed91ceb61
GET /dy-ele.fac794d4.js HTTP/1.1
Host: global.captcha.gtimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global.captcha.gtimg.com/template/drag_ele_global.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
date: Tue, 24 Oct 2023 12:16:24 GMT
content-type: text/javascript
p3p: CP=CAO PSA OUR
server: Trpc httpd, tencent http server
content-length: 53573
accept-ranges: bytes
x-nws-log-uuid: 7315843451723435416
x-cache-lookup: Cache Hit
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
4958806.com/static/js/chunk-39c629b5.3c5f304701ac9f84a3df.20231117041309.js
200 OK 322 kB URL GET HTTP/2 4958806.com/static/js/chunk-39c629b5.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
Size 322 kB (321713 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/chunk-39c629b5.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: W/"6556e949-4e8b1"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
ia.51.la/go1?id=21593023&rt=1701215122055&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1701215122055&tt=%25E9%25A6%2599%25E6%25B8%25AF%25E5%25BD%25A9&kw=&cu=https%253A%252F%252F4958806.com%252FXGCP&pu=
0 B URL GET ia.51.la/go1?id=21593023&rt=1701215122055&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1701215122055&tt=%25E9%25A6%2599%25E6%25B8%25AF%25E5%25BD%25A9&kw=&cu=https%253A%252F%252F4958806.com%252FXGCP&pu=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21593023&rt=1701215122055&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1701215122055&tt=%25E9%25A6%2599%25E6%25B8%25AF%25E5%25BD%25A9&kw=&cu=https%253A%252F%252F4958806.com%252FXGCP&pu= HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/hot
200 OK 0 B URL OPTIONS HTTP/2 h5-gateway.chfjvyhchg.com/CPT-DRAWING/noauth/lottery/hot
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.chfjvyhchg.com
Fingerprint91:87:01:AC:ED:BF:A7:0E:27:6E:CD:8B:BF:42:1F:2F:2E:BE:22:20
ValidityWed, 22 Nov 2023 08:50:08 GMT - Tue, 20 Feb 2024 08:50:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /CPT-DRAWING/noauth/lottery/hot HTTP/1.1
Host: h5-gateway.chfjvyhchg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: lang,x-app-version,x-auth-token,x-channel,x-client-ip,x-device-id,x-tenant-code
Referer: https://4958806.com/
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://4958806.com
access-control-allow-methods: GET
access-control-allow-headers: lang, x-app-version, x-auth-token, x-channel, x-client-ip, x-device-id, x-tenant-code
access-control-allow-credentials: true
access-control-max-age: 86400
server: cdn-ddos-cc
strict-transport-security: max-age=31536000;
x-cache-status: MISS
X-Firefox-Spdy: h2
h5-gateway.pzia9nbq.com/?0.3357487761251131
200 OK 149 B URL GET HTTP/1.1 h5-gateway.pzia9nbq.com/?0.3357487761251131
IP
Certificate IssuerLet's Encrypt
Subjecth5-gateway.pzia9nbq.com
Fingerprint34:25:CD:37:D4:2D:92:D7:B3:AE:37:D7:27:A9:1C:33:62:FF:78:B5
ValiditySun, 24 Sep 2023 10:49:12 GMT - Sat, 23 Dec 2023 10:49:11 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 56f9820e953ef34dc69b52097230e393
b967bb4d7d28b2d29e82e3ddf3cf539e66d46ccf
67d968df67bac8c61c12d9e91d895b893be3af2418d340b5517f850a137bcd60
GET /?0.3357487761251131 HTTP/1.1
Host: h5-gateway.pzia9nbq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4958806.com
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Vary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin
Access-Control-Allow-Origin: https://4958806.com
Access-Control-Allow-Credentials: true
Content-Type: application/json
X-Cache: MISS from ty8z2-cdnb52-103
Content-Length: 149
4958806.com/static/img/nh_by1.bc6ebd1c.png
200 OK 8.6 kB URL GET HTTP/2 4958806.com/static/img/nh_by1.bc6ebd1c.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 162 x 111, 8-bit colormap, non-interlaced\012- data
Hash bc6ebd1c5bc3dd708f5e2b3a57bb4d4d
6b29479d64588d502dc72bf1450a0704470f4664
c2f14f93c090c0497fbcb0f7bdb722b60c648560236ac2d9958bd8debfb0bdbc
GET /static/img/nh_by1.bc6ebd1c.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 8586
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-218a"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
global.captcha.gtimg.com/dy-jy.js
200 OK 97 kB URL GET HTTP/2 global.captcha.gtimg.com/dy-jy.js
IP
Requested by https://global.captcha.gtimg.com/template/drag_ele_global.html
Certificate IssuerDigiCert Inc
Subject*.captcha.gtimg.com
Fingerprint49:0B:E6:49:D9:6C:E0:47:91:48:5B:4C:27:84:00:48:29:BB:D5:6F
ValidityWed, 08 Nov 2023 00:00:00 GMT - Thu, 05 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (32039)
Hash 303dbb4b8a1e11044ed428151f047b12
40ca3af69b27dc5ee2ced371cb06711a4d5af653
91068663fee39b77cfb4474d80593b810fd77151f9b74758a77b5e1fcbbfa33a
GET /dy-jy.js HTTP/1.1
Host: global.captcha.gtimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global.captcha.gtimg.com/template/drag_ele_global.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
date: Tue, 31 Oct 2023 13:56:53 GMT
content-type: text/javascript
p3p: CP=CAO PSA OUR
server: Trpc httpd, tencent http server
content-length: 33841
accept-ranges: bytes
x-nws-log-uuid: 9851953870930504234
x-cache-lookup: Cache Hit
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
4958806.com/static/js/chunk-def6ea96.3c5f304701ac9f84a3df.20231117041309.js
200 OK 30 kB URL GET HTTP/2 4958806.com/static/js/chunk-def6ea96.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type ASCII text, with very long lines (30207), with no line terminators
Hash 6afb262f5c085ff6c00d801c91f416e4
0f78b8e6abe2b0ed651d71c605643975342edd5e
305fe2c133201b3f68f2470c5ad14c437de5b2dba99e62a6bfcd7c3c8631988b
GET /static/js/chunk-def6ea96.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: W/"6556e949-75ff"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/js/chunk-46fb3df3.3c5f304701ac9f84a3df.20231117041309.js
200 OK 28 kB URL GET HTTP/2 4958806.com/static/js/chunk-46fb3df3.3c5f304701ac9f84a3df.20231117041309.js
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/chunk-46fb3df3.3c5f304701ac9f84a3df.20231117041309.js HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:13 GMT
etag: W/"6556e949-6e27"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/img/nh_cp10.2f6a12a1.png
200 OK 8.3 kB URL GET HTTP/2 4958806.com/static/img/nh_cp10.2f6a12a1.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 132 x 138, 8-bit colormap, non-interlaced\012- data
Hash 2f6a12a1a7c0722ace429f25a860582f
eb7e669eacd04a5aad0bd5f5d0f3e6d06f5e492a
b0045780b65ef93fd10c115ee4669b2b45003aa7d49da5d79bf62735f6cc0ef4
GET /static/img/nh_cp10.2f6a12a1.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:21 GMT
content-type: image/png
content-length: 8320
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-2080"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
200 OK 10 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /XGCP HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:13 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: W/"6556e948-288b"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
4958806.com/static/img/nh_by3.0dedbba7.png
200 OK 8.9 kB URL GET HTTP/2 4958806.com/static/img/nh_by3.0dedbba7.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 154 x 112, 8-bit colormap, non-interlaced\012- data
Hash 0dedbba745e6bc6c1cddcd5c64af17b7
e44bf08fe8bb3ca0800c9f6c0c71cb2210f6cbc6
8474f018b44deaffdf775218818386f01a326d6b3d0eb1b367c0f83218d06744
GET /static/img/nh_by3.0dedbba7.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:18 GMT
content-type: image/png
content-length: 8888
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-22b8"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
4958806.com/static/img/six-lottery.104f5de2.png
200 OK 28 kB URL GET HTTP/2 4958806.com/static/img/six-lottery.104f5de2.png
IP
Certificate IssuerLet's Encrypt
Subject4958806.com
Fingerprint6B:29:E0:4E:E0:84:1B:78:0C:F8:CF:C9:36:A6:02:B8:90:87:39:8F
ValidityThu, 19 Oct 2023 10:02:18 GMT - Wed, 17 Jan 2024 10:02:17 GMT
File type PNG image data, 280 x 280, 8-bit colormap, non-interlaced\012- data
Hash 104f5de2b15460940ebdd4104533d69d
b839e1b6b84db30f395c3c246283b0a0530ddb8b
071d668f99bf4eb34701444f3c48de460f47fa1a78d9db469673b2c1dce1aa95
GET /static/img/six-lottery.104f5de2.png HTTP/1.1
Host: 4958806.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4958806.com/XGCP
Cookie: __tins__21593023=%7B%22sid%22%3A%201701215122055%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201701216922055%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 23:45:19 GMT
content-type: image/png
content-length: 27966
last-modified: Fri, 17 Nov 2023 04:17:12 GMT
etag: "6556e948-6d3e"
server: dns1
strict-transport-security: max-age=31536000;
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
154.197.17.243
47.246.44.205
43.152.140.143
0.0.0.0
211.152.149.37
111.206.23.199