Report - lyrysor.com/login.php/fonts/montserrat-bold/montserrat-bold.ttf

Report Overview

Visited public
2024-11-27 22:21:13
Tags
URL
lyrysor.com/login.php/fonts/montserrat-bold/montserrat-bold.ttf
Finishing URL
h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625#/
IP / ASN
103.150.10.48
#137702 Nanjing, Jiangsu Province, P.R.China.
Title
在线影视

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
h18.xn--tfrt10a2lr38y.cn	unknown	unknown	2024-11-27	2024-11-27	22 kB	758 kB	119.23.85.122
as8899.xn--detz6h92b.net	unknown	unknown	2024-11-20	2024-11-27	884 B	28 kB	163.181.131.168
as996.xn--7stv4oc3evv7b.com	unknown	unknown	2024-10-21	2024-11-21	4.9 kB	985 kB	116.142.249.98
lyrysor.com	unknown	2023-06-29	2012-09-08	2024-11-20	433 B	402 B	103.150.10.48
47.102.192.161	unknown	unknown	No data	No data	3.5 kB	1.4 MB	47.102.192.161
dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc	unknown	unknown	2024-11-27	2024-11-27	2.2 kB	34 kB	119.23.85.122

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-11-27 22:20:55	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:55	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:58	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:58	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:59	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:59	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:59	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:59	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:59	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:20:59	low	119.23.85.122	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	116.142.249.98	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	116.142.249.98	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	116.142.249.98	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	36.248.54.85	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	36.248.54.85	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	36.248.54.85	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	36.248.54.85	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:07	low	36.248.54.85	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:08	low	116.142.249.98	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-11-27 22:21:08	low	116.142.249.98	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed
2024-11-27	medium	47.102.192.161	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	h18.xn--tfrt10a2lr38y.cn/static/jquery.min.js	ScriptElement	84 kB	2023-03-07	2025-05-06
Pretty URL h18.xn--tfrt10a2lr38y.cn/static/jquery.min.js IP 119.23.85.122 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30 Last Seen2025-05-06 15:11 Times Seen2130 Hash 9a094379d98c6458d480ad5a51c4aa27 3fe9d8acaaec99fc8a3f0e90ed66d5057da2de4e b2ce8462d173fc92b60f98701f45443710e423af1b11525a762008ff2c1a0204 Loading...

	h18.xn--tfrt10a2lr38y.cn/static/js/chunk-vendors.undefined.1732074209726.js	ScriptElement	1.8 MB	2024-04-30	2025-01-26
Pretty URL h18.xn--tfrt10a2lr38y.cn/static/js/chunk-vendors.undefined.1732074209726.js IP 119.23.85.122 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-30 11:45 Last Seen2025-01-26 05:13 Times Seen446 Hash 8118f3d5302326393a5c0d479e116a62 c34c4b368420ba8c8704e3de8699485e182f0877 b0808775452791be9126f3f0b61fa7318b0544cd414ebeb54749584ba80bdbca Loading...

	h18.xn--tfrt10a2lr38y.cn/static/js/app.undefined.1732074209726.js	ScriptElement	285 kB	2024-11-20	2025-01-26
Pretty URL h18.xn--tfrt10a2lr38y.cn/static/js/app.undefined.1732074209726.js IP 119.23.85.122 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-11-20 06:00 Last Seen2025-01-26 05:13 Times Seen233 Hash 4bbd91cc9ce16a24099b7d8d1994facd 469a48340438d061e2f9d0564209fd5955e048cd 2f891ac77fcf1ec9d2f09bad5d1acbc1c3ea0a9648a8df279e6fc7ab7c1e2677 Loading...

HTTP Transactions (50)

URL IP Response Size

lyrysor.com/login.php/fonts/montserrat-bold/montserrat-bold.ttf

103.150.10.48

302 Moved Temporarily

151 B

URL
lyrysor.com/login.php/fonts/montserrat-bold/montserrat-bold.ttf
IP
103.150.10.48:0
ASN
#137702 Nanjing, Jiangsu Province, P.R.China.

File type
HTML document, ASCII text, with CRLF line terminators
Size
151 B (151 bytes)
Hash
9e24588fefb4b186af984c526b32e9f8
cf7570e9ae55cd21e9df1d684b157f094ea877a1
6cdc6460bdda46156dfb6a63ac7996fa0b8d7cd847b23bd2e1a9d57be7318009

HTTP Headers

GET /login.php/fonts/montserrat-bold/montserrat-bold.ttf HTTP/1.1
Host: lyrysor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: openresty/1.15.8.1
Date: Wed, 27 Nov 2024 22:20:47 GMT
Content-Type: text/html
Content-Length: 151
Connection: keep-alive
Location: http://47.102.192.161:8000/dh/147287063_699880.html#index8?d=lyrysor.com

47.102.192.161:8000/dh/147287063_699880.html

47.102.192.161

200 OK

796 B

URL
47.102.192.161:8000/dh/147287063_699880.html
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
HTML document, Unicode text, UTF-8 text, with very long lines (434)
Size
796 B (796 bytes)
Hash
220b866165f77aa40d71326a833ccc37
66de417da30edff3c1bd90873bb345d228a24951
6519e9310f95d19321fb0d04060d30c476a21666afc8ed23e01f543f5eb34859

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/147287063_699880.html HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

47.102.192.161:8000/dh/static/js/app.1732745939986.js

47.102.192.161

200 OK

28 kB

URL
47.102.192.161:8000/dh/static/js/app.1732745939986.js
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (28356), with no line terminators
Size
28 kB (28428 bytes)
Hash
f04ab62adc55b68273bd38d15915ff4a
62bc3955395c74caf5424a38eda0e1e42d7e80e2
14e136b4f4f04159d04571dc03167841dcd0e5baa8e90cd522cc189f940103e7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/static/js/app.1732745939986.js HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:48 GMT
Content-Type: application/javascript
Content-Length: 28428
Last-Modified: Wed, 27 Nov 2024 22:19:17 GMT
Connection: keep-alive
ETag: "67479ae5-6f0c"
Accept-Ranges: bytes

47.102.192.161:8000/dh/css/app.ebdf5d20.css

47.102.192.161

200 OK

74 B

URL
47.102.192.161:8000/dh/css/app.ebdf5d20.css
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
ASCII text, with no line terminators
Size
74 B (74 bytes)
Hash
d3809fe0eac4631db220124e5ded3e3d
a2d1ad1278b7a75941163845d2b01371e54f82d3
2c8edf912a38d8b23846a0371426f3b47dab3c2db0cd5e7a5b82a9bcd7123fd3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/css/app.ebdf5d20.css HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:48 GMT
Content-Type: text/css
Content-Length: 74
Last-Modified: Wed, 27 Nov 2024 22:19:17 GMT
Connection: keep-alive
ETag: "67479ae5-4a"
Accept-Ranges: bytes

47.102.192.161:8000/dh/static/js/chunk-vendors.1732745939986.js

47.102.192.161

200 OK

464 kB

URL
47.102.192.161:8000/dh/static/js/chunk-vendors.1732745939986.js
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size
464 kB (463984 bytes)
Hash
c94f7455da246c78c8d65a45568ef2fe
3823445752d4dbe1b7bdfc3fdd9802437d5402d0
e59d0f0714564992f578f28bc6252edaa43b96e8bbed13ce80d484e2b19ac1d4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/static/js/chunk-vendors.1732745939986.js HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:48 GMT
Content-Type: application/javascript
Content-Length: 463984
Last-Modified: Wed, 27 Nov 2024 22:19:17 GMT
Connection: keep-alive
ETag: "67479ae5-71470"
Accept-Ranges: bytes

47.102.192.161:8000/dh/static/js/395.1732745939986.js

47.102.192.161

200 OK

328 kB

URL
47.102.192.161:8000/dh/static/js/395.1732745939986.js
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
328 kB (327591 bytes)
Hash
c1279fe741cf456dd6562c9b8e7f5b3c
c25c8fd5e676e9fb70892a7f2f4b039ea23290ca
15f26090c652833806a6304a3f2ec54cca564f718e7c43740cbdc5840443b4e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/static/js/395.1732745939986.js HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:50 GMT
Content-Type: application/javascript
Content-Length: 327591
Last-Modified: Wed, 27 Nov 2024 22:19:17 GMT
Connection: keep-alive
ETag: "67479ae5-4ffa7"
Accept-Ranges: bytes

47.102.192.161:8000/dh/static/js/984.1732745939986.js

47.102.192.161

200 OK

171 kB

URL
47.102.192.161:8000/dh/static/js/984.1732745939986.js
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Size
171 kB (171108 bytes)
Hash
b72c829cb3bed44b3788c2713bcf8495
b6b171f475893720a10061a171d8949b9d347dc2
b76ebd8a4e6bdbee48ae061eb94bae64d34d0950a06be6c9f6c214156b51359f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/static/js/984.1732745939986.js HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:50 GMT
Content-Type: application/javascript
Content-Length: 171108
Last-Modified: Wed, 27 Nov 2024 22:19:17 GMT
Connection: keep-alive
ETag: "67479ae5-29c64"
Accept-Ranges: bytes

47.102.192.161:8000/dh/css/984.573a2eff.css

47.102.192.161

200 OK

377 kB

URL
47.102.192.161:8000/dh/css/984.573a2eff.css
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
ASCII text, with very long lines (65536), with no line terminators
Size
377 kB (376964 bytes)
Hash
45fa523f0ad0cc38a6d22e937d5b3f56
78699114d885641271e7225c667270b979ce646b
822aad6879ce2a64953a8be249e0cfc46ef69adc9cf493ecdbc0e7da90b9e672

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/css/984.573a2eff.css HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:50 GMT
Content-Type: text/css
Content-Length: 376964
Last-Modified: Wed, 27 Nov 2024 22:19:17 GMT
Connection: keep-alive
ETag: "67479ae5-5c084"
Accept-Ranges: bytes

47.102.192.161:8000/dh/favicon.ico

47.102.192.161

404 Not Found

120 B

URL
47.102.192.161:8000/dh/favicon.ico
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
HTML document, ASCII text, with CRLF line terminators
Size
120 B (120 bytes)
Hash
5c1d51bc1252fcd23eefe7e9743ccd74
e85d29dc9b20cfc1a841c38684a519d0a3087993
5e52b889194bfd97c3d4e922663e7339a91cefbb1718f8dc85b5236492bbe27a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dh/favicon.ico HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

47.102.192.161:8000/agent/mgent/newldy

47.102.192.161

200 OK

639 B

URL
47.102.192.161:8000/agent/mgent/newldy
IP
47.102.192.161:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
JSON text data
Size
639 B (639 bytes)
Hash
7f4433aa909be19abc130eb457460d66
3cde82df7e9fce600b799d3c4a9d899bc1f0b31f
759b1abe450dfb119592bd4fd3a1720c87754462cf23c573e70107569611c23e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /agent/mgent/newldy HTTP/1.1
Host: 47.102.192.161:8000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 89
Origin: http://47.102.192.161:8000
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/dh/147287063_699880.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Wed, 27 Nov 2024 22:20:53 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Expires: Wed, 27 Nov 2024 22:20:53 GMT
Cache-Control: max-age=0

dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/?id=147287063&ishn=0&d=https://h18.xn--tfrt10a2lr38y.cn

119.23.85.122

200 OK

3.2 kB

URL
dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/?id=147287063&ishn=0&d=https://h18.xn--tfrt10a2lr38y.cn
IP
119.23.85.122:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4196), with CRLF line terminators
Size
3.2 kB (3163 bytes)
Hash
c728f458931604b83aea72117fdad05d
1b3a87d6fb732cb1d0a62f7caa94df3808ef5e2e
38a65b27dd2e134872a754c357ea3ddb648bd5d749d8ec45f01bdbaa0e09cfec

HTTP Headers

GET /?id=147287063&ishn=0&d=https://h18.xn--tfrt10a2lr38y.cn HTTP/1.1
Host: dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://47.102.192.161:8000/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:55 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: acw_tc=2f6a1fe517327460552282846ecbda56054e0d7b35a3fe9d1a358b6be92929;path=/;HttpOnly;Max-Age=1800
Server: openresty/1.21.4.3
Last-Modified: Wed, 27 Nov 2024 06:06:40 GMT
Vary: Accept-Encoding
ETag: W/"6746b6f0-2753"
Expires: Wed, 27 Nov 2024 22:20:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/static/jquery.min.js

119.23.85.122

200 OK

30 kB

URL
dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/static/jquery.min.js
IP
119.23.85.122:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators
Size
30 kB (29492 bytes)
Hash
9a094379d98c6458d480ad5a51c4aa27
3fe9d8acaaec99fc8a3f0e90ed66d5057da2de4e
b2ce8462d173fc92b60f98701f45443710e423af1b11525a762008ff2c1a0204

HTTP Headers

GET /static/jquery.min.js HTTP/1.1
Host: dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/?id=147287063&ishn=0&d=https://h18.xn--tfrt10a2lr38y.cn
Cookie: acw_tc=2f6a1fe517327460552282846ecbda56054e0d7b35a3fe9d1a358b6be92929
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:55 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Thu, 16 May 2024 02:19:41 GMT
Vary: Accept-Encoding
ETag: W/"66456d3d-14919"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/apix/app/init_userinfo

119.23.85.122

200 OK

174 B

URL
dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/apix/app/init_userinfo
IP
119.23.85.122:0
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
ASCII text, with no line terminators
Size
174 B (174 bytes)
Hash
86a57bb35860b4aca9d5be65889a512e
605e2f0f515fab8085cc4fa1f0494a4dfb6bd76b
d4d7f3832a287d7c6588763767326e01ab7e0c3040b5c1a680824044f9bc8c89

HTTP Headers

POST /apix/app/init_userinfo HTTP/1.1
Host: dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
device_id: 0476767e-6e9e-48ff-914d-4df5e348c251
X-Requested-With: XMLHttpRequest
Content-Length: 67
Origin: https://dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc
DNT: 1
Connection: keep-alive
Referer: https://dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/?id=147287063&ishn=0&d=https://h18.xn--tfrt10a2lr38y.cn
Cookie: acw_tc=2f6a1fe517327460552282846ecbda56054e0d7b35a3fe9d1a358b6be92929; device_id=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expires: Wed, 27 Nov 2024 22:20:56 GMT
Cache-Control: max-age=0
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625

119.23.85.122

200 OK

626 B

URL User Request GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1613), with no line terminators
Size
626 B (626 bytes)
Hash
b20bc061e4a6abc99c6427fc82c0df0f
bd800ee4791ffb3d8b36d8f32fc3bd439d9f542d
edb575a30abaa50c1461660eb65a2fb2c3bb9aaac7c8fa6da75f5bcfa97f7ca4

HTTP Headers

GET /?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625 HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dd147287063b2d22573e8cdcbfb.xn--b0t011aljiq5af1frrbs93ahgrpha168g.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:58 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59;path=/;HttpOnly;Max-Age=1800
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-64d"
Expires: Wed, 27 Nov 2024 22:20:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/jquery.min.js

119.23.85.122

200 OK

30 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/jquery.min.js
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators
Size
30 kB (29492 bytes)
Hash
9a094379d98c6458d480ad5a51c4aa27
3fe9d8acaaec99fc8a3f0e90ed66d5057da2de4e
b2ce8462d173fc92b60f98701f45443710e423af1b11525a762008ff2c1a0204

HTTP Headers

GET /static/jquery.min.js HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:58 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-14919"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/css/app.c3c733f8.css

119.23.85.122

200 OK

17 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/css/app.c3c733f8.css
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65496), with no line terminators
Size
17 kB (17275 bytes)
Hash
a41bba94ddba624819f5f4500e2558ae
48edb187f3657d0800540c8ca2564514da8a1c03
55deb3e319b98ead1385b3beb0ec5352fb50f83e017d8b912b436a59e30dac50

HTTP Headers

GET /css/app.c3c733f8.css HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:58 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-11bcd"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/css/chunk-vendors.d8364846.css

119.23.85.122

200 OK

27 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/css/chunk-vendors.d8364846.css
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
27 kB (27305 bytes)
Hash
bf980a438dfee753e09b15093eeacd05
474c76b330b0a1b44a6e17ca6c917bc219b6dd77
7087881b83ec0742f8ea06e06f6516317e7305aab75e3189cd0019ab2868ed54

HTTP Headers

GET /css/chunk-vendors.d8364846.css HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:59 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-23bf1"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/js/app.undefined.1732074209726.js

119.23.85.122

200 OK

85 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/js/app.undefined.1732074209726.js
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (63556), with no line terminators
Size
85 kB (84894 bytes)
Hash
4bbd91cc9ce16a24099b7d8d1994facd
469a48340438d061e2f9d0564209fd5955e048cd
2f891ac77fcf1ec9d2f09bad5d1acbc1c3ea0a9648a8df279e6fc7ab7c1e2677

HTTP Headers

GET /static/js/app.undefined.1732074209726.js HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:59 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-45a68"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/js/chunk-vendors.undefined.1732074209726.js

119.23.85.122

200 OK

526 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/js/chunk-vendors.undefined.1732074209726.js
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (52504)
Size
526 kB (526136 bytes)
Hash
8118f3d5302326393a5c0d479e116a62
c34c4b368420ba8c8704e3de8699485e182f0877
b0808775452791be9126f3f0b61fa7318b0544cd414ebeb54749584ba80bdbca

HTTP Headers

GET /static/js/chunk-vendors.undefined.1732074209726.js HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:20:59 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-1b79ae"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/favicon.ico

119.23.85.122

200 OK

4.3 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/favicon.ico
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
1ba2ae710d927f13d483fd5d1e548c9b
c0605efed936ee2600284e6480521d06fa64f872
db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:02 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-10be"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/4.png

119.23.85.122

200 OK

743 B

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/4.png
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
PNG image data, 44 x 31, 8-bit gray+alpha, non-interlaced
Size
743 B (743 bytes)
Hash
a623c752db1c4caa7ff0b66b95ef11a3
23ea25596a2b2a1b6ed34fb542152847b6e0557e
1a1ae0877d7ba0a02c5cfa4203efd58a31105ff48940292a59f13978c5c42cba

HTTP Headers

GET /static/images/icon_footer/4.png HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: image/png
Content-Length: 743
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-2e7"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/1curr.png

119.23.85.122

200 OK

1.6 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/1curr.png
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
PNG image data, 42 x 28, 8-bit colormap, non-interlaced
Size
1.6 kB (1572 bytes)
Hash
69fee49fcc44637eeb6abc0b08994ab7
b09486a345110a5c89b440d6f3e9b2385d0a8ab0
2c621da4d7e5e8dd0df53b3ce941456be6636c9a7cf16483c3f3a2cb8dbb092d

HTTP Headers

GET /static/images/icon_footer/1curr.png HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: image/png
Content-Length: 1572
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-624"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/2.png

119.23.85.122

200 OK

651 B

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/2.png
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
PNG image data, 32 x 37, 8-bit gray+alpha, non-interlaced
Size
651 B (651 bytes)
Hash
b84428cf1b60ba6ed1a8905770440ffe
9a231c1e1b17b51c7383b3a72eeeb43f39d30ff6
f54fdb22866d3c3ee24a292849c88cd747b8e8bcdfe2cd698b8d7aec9899a0e3

HTTP Headers

GET /static/images/icon_footer/2.png HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: image/png
Content-Length: 651
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-28b"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/3.png

119.23.85.122

200 OK

569 B

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/3.png
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
PNG image data, 37 x 33, 8-bit gray+alpha, non-interlaced
Size
569 B (569 bytes)
Hash
0dc404d27d31cc92edca71941df8ee32
7cdbf7d3d8004ef3a57b3c0a8ac62721c0172fe6
7532961ae74413d82caf4a007fc57b8985ff7affc52166a51a88366f2f1dd883

HTTP Headers

GET /static/images/icon_footer/3.png HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: image/png
Content-Length: 569
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-239"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/5.png

119.23.85.122

200 OK

513 B

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/5.png
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
PNG image data, 33 x 32, 8-bit gray+alpha, non-interlaced
Size
513 B (513 bytes)
Hash
2c9f30a5860cdfc374781eb9c69cf23d
e366616f7e43a9cdca5eaf0297a13f279ad759d3
1d6aaf3aada80ef4abd9df9d475015622bf2297899cd83c4fa6eb74f29bf490c

HTTP Headers

GET /static/images/icon_footer/5.png HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: image/png
Content-Length: 513
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-201"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/icon_game_normal.webp

119.23.85.122

200 OK

758 B

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/images/icon_footer/icon_game_normal.webp
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
758 B (758 bytes)
Hash
7594aa0febb63de3e03eae14d0b70e13
7e2b6eb31d04534af78aedc4b46bd3fad9caadf7
f1e2595e6cf3a442ddc59876df2ba89902b8be3a2a1dd9aeaa5007d20ecce6af

HTTP Headers

GET /static/images/icon_footer/icon_game_normal.webp HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: image/webp
Content-Length: 758
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-2f6"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/apix/member/index

119.23.85.122

200 OK

1.5 kB

URL POST HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/apix/member/index
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (2376), with no line terminators
Size
1.5 kB (1476 bytes)
Hash
72e68ac6596b1ec9cbdc3611460a2ba0
077c57031b87c53fbac6851a5f3272376cff636b
112dc19118f19a7792d2cd644405761f79fb5e40e67729bc4a1484e2382dbb97

HTTP Headers

POST /apix/member/index HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
token: EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5
device_id: 0476767e-6e9e-48ff-914d-4df5e348c251
user_id: 195522083
channel_id: vue
loadimgtype: 2
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://h18.xn--tfrt10a2lr38y.cn
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expires: Wed, 27 Nov 2024 22:21:03 GMT
Cache-Control: max-age=0
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/apix/movie/index

119.23.85.122

200 OK

3.8 kB

URL POST HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/apix/movie/index
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (10912), with no line terminators
Size
3.8 kB (3778 bytes)
Hash
138bb82f66a7b2ca40b903ee9cd1310d
c36d6eb50b46a872b883a51948007d6817c3b2df
bc96890b7b8bcf7a08f03c9c0f3d99e1a02f887583a1d49dbd0eb6becfcbb04a

HTTP Headers

POST /apix/movie/index HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
token: EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5
device_id: 0476767e-6e9e-48ff-914d-4df5e348c251
user_id: 195522083
channel_id: vue
loadimgtype: 2
Content-Type: application/x-www-form-urlencoded
Content-Length: 13
Origin: https://h18.xn--tfrt10a2lr38y.cn
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expires: Wed, 27 Nov 2024 22:21:03 GMT
Cache-Control: max-age=0
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/apix/home/banner

119.23.85.122

200 OK

325 B

URL POST HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/apix/home/banner
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (416), with no line terminators
Size
325 B (325 bytes)
Hash
377ca948f3bfa53e519494afc2e719a5
bc84ff26853bbb2e447239a99713500ddfc965bf
981a42750278b61e951aad62b80a281bb4a49b87b6afc28cb87e2a3dd4dfdfa3

HTTP Headers

POST /apix/home/banner HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
token: EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5
device_id: 0476767e-6e9e-48ff-914d-4df5e348c251
user_id: 195522083
channel_id: vue
loadimgtype: 2
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://h18.xn--tfrt10a2lr38y.cn
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expires: Wed, 27 Nov 2024 22:21:03 GMT
Cache-Control: max-age=0
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/apix/app/check

119.23.85.122

200 OK

4.7 kB

URL POST HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/apix/app/check
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (23376), with no line terminators
Size
4.7 kB (4707 bytes)
Hash
387eeca4e5c04020a3e814829b64bbd0
fe81365c731ca731a765290b2d1ce5f3fdd95294
44514c715653b88e6944fff4fb05f3dd43d47db5ccf039990a640de73a99c7e1

HTTP Headers

POST /apix/app/check HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
token: EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5
device_id: 0476767e-6e9e-48ff-914d-4df5e348c251
user_id: 195522083
channel_id: vue
loadimgtype: 2
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://h18.xn--tfrt10a2lr38y.cn
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expires: Wed, 27 Nov 2024 22:21:03 GMT
Cache-Control: max-age=0
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/apix/app/start_page

119.23.85.122

200 OK

103 B

URL POST HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/apix/app/start_page
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
103 B (103 bytes)
Hash
b982cae3119c4a2c11056314358aa6b8
ef78a709024384b9f33c0d0f1e41e48e7b148386
96e512d3a587e1583e0243383601aea35113fd238ee04b528d31b2ca38ee2965

HTTP Headers

POST /apix/app/start_page HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
token: EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5
device_id: 0476767e-6e9e-48ff-914d-4df5e348c251
user_id: 195522083
channel_id: vue
loadimgtype: 2
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://h18.xn--tfrt10a2lr38y.cn
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expires: Wed, 27 Nov 2024 22:21:03 GMT
Cache-Control: max-age=0
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/fonts/iconfont.0ffe8b1a.woff

119.23.85.122

200 OK

27 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/fonts/iconfont.0ffe8b1a.woff
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 26728, version 1.0
Size
27 kB (26728 bytes)
Hash
0ffe8b1aaaba42fefb829d89c339bcd9
97d8b5d52fdce5060b00aaeca15e3378f61f18ef
ad713ae431233f70aae83b0f22df2a19b501879bf4fffc5a0b7b747d55944eca

HTTP Headers

GET /fonts/iconfont.0ffe8b1a.woff HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/css/app.c3c733f8.css
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:03 GMT
Content-Type: font/woff
Content-Length: 26728
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-6868"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/js/chunk-1e383974.undefined.1732074209726.js

119.23.85.122

200 OK

1.5 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/js/chunk-1e383974.undefined.1732074209726.js
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (3423), with no line terminators
Size
1.5 kB (1458 bytes)
Hash
8a3e4d1e0d16952c081e6fa23a8bd4c5
5f4fe09477d2481098bb6c21c80a13f73cdee904
6d981ddbe597869cc062fafd5e3a69617a9e5e32f569f74b9ed8986575f09a2f

HTTP Headers

GET /static/js/chunk-1e383974.undefined.1732074209726.js HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:04 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-e01"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/css/chunk-1e383974.7898cb85.css

119.23.85.122

200 OK

480 B

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/css/chunk-1e383974.7898cb85.css
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (480), with no line terminators
Size
480 B (480 bytes)
Hash
5897b2aefafbb4f6142931a85918f416
cc22b11e822522e674d1f65baf03ea8c6ab6deb4
2939aee50975389390351f02c15d6b3f1019270180edb0fc49d414f6db92b3c5

HTTP Headers

GET /css/chunk-1e383974.7898cb85.css HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:04 GMT
Content-Type: text/css
Content-Length: 480
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-1e0"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/css/chunk-16183511.dd836709.css

119.23.85.122

200 OK

134 B

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/css/chunk-16183511.dd836709.css
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
134 B (134 bytes)
Hash
e3c67189383a7b28bd674db3192650f5
76762c34e442103d8aab0c06483929053cd1c203
622dae62faa9f79aecfbde5fb84cfa27c4e45dec3e76bc1da3d9115e239568a0

HTTP Headers

GET /css/chunk-16183511.dd836709.css HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:04 GMT
Content-Type: text/css
Content-Length: 134
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-86"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/js/chunk-16183511.undefined.1732074209726.js

119.23.85.122

200 OK

5.3 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/js/chunk-16183511.undefined.1732074209726.js
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (7301), with no line terminators
Size
5.3 kB (5270 bytes)
Hash
7b4ddae1f5b7ad60440c382073532ed4
269c70e62b1053b8e3c5d522129623fe79ec8f58
ddaf4b924d984108850a018bc3b3deaeb544eef32c06badec5302f7c2e60c424

HTTP Headers

GET /static/js/chunk-16183511.undefined.1732074209726.js HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:04 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
Vary: Accept-Encoding
ETag: W/"673d5af4-1d23"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

h18.xn--tfrt10a2lr38y.cn/static/images/movie-load.png

119.23.85.122

200 OK

11 kB

URL GET HTTP/1.1
h18.xn--tfrt10a2lr38y.cn/static/images/movie-load.png
IP
119.23.85.122:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--tfrt10a2lr38y.cn
Fingerprint50:9F:99:C5:8A:D2:CD:D3:C3:34:C0:ED:43:0B:AF:01:FA:62:C1:45
ValiditySat, 23 Nov 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT

File type
PNG image data, 258 x 150, 8-bit/color RGBA, non-interlaced
Size
11 kB (10916 bytes)
Hash
5435f4102aa802ff93d6a3272edee578
eb87210ca4ff26810847dd43fe096ec92f4307ad
aaef50cb8d720998b127741605b33f9270cc62da27a86b35f9a3b24afe17c4a1

HTTP Headers

GET /static/images/movie-load.png HTTP/1.1
Host: h18.xn--tfrt10a2lr38y.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Cookie: acw_tc=2f6a1fe717327460583364324ec1e962c25fe2a8631abc38681af45bef8a59; oLoginInfo={%22user_id%22:%22195522083%22%2C%22murmur%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22%2C%22token%22:%22EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5%22%2C%22device_id%22:%220476767e-6e9e-48ff-914d-4df5e348c251%22}; murmur=0476767e-6e9e-48ff-914d-4df5e348c251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 22:21:04 GMT
Content-Type: image/png
Content-Length: 10916
Connection: keep-alive
Server: openresty/1.21.4.3
Last-Modified: Wed, 20 Nov 2024 03:43:48 GMT
ETag: "673d5af4-2aa4"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000

as8899.xn--detz6h92b.net/uploads/cover/ourstv/1fc9c6b6339e9234e02957b6e2e336ec.abb

163.181.131.168

200 OK

12 kB

URL GET HTTP/1.1
as8899.xn--detz6h92b.net/uploads/cover/ourstv/1fc9c6b6339e9234e02957b6e2e336ec.abb
IP
163.181.131.168:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--detz6h92b.net
FingerprintEF:C5:65:64:01:11:7D:7A:9A:0D:43:1F:65:36:73:B6:D1:54:BC:BD
ValidityWed, 20 Nov 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3
Size
12 kB (11721 bytes)
Hash
b6c410046a1e5e293818a6f3fa30f2b3
58bca9670d251d0f139f2191c64b6ebf8d0b2066
3a670258ddcf8200593e4c276ac7f3f72976e7e6b151937a49550a94602a946e

HTTP Headers

GET /uploads/cover/ourstv/1fc9c6b6339e9234e02957b6e2e336ec.abb HTTP/1.1
Host: as8899.xn--detz6h92b.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/octet-stream
Content-Length: 11721
Connection: keep-alive
Date: Wed, 20 Nov 2024 03:45:30 GMT
Last-Modified: Tue, 18 Apr 2023 05:34:28 GMT
ETag: "643e2be4-2dc9"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: ens-cache6.l2de3[1453,1452,200-0,M], ens-cache4.l2de3[1455,0], ens-cache7.de7[0,0,200-0,H], ens-cache6.de7[4,0]
Age: 671736
Ali-Swift-Global-Savetime: 1732074330
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Wed, 20 Nov 2024 03:45:30 GMT
X-Swift-CacheTime: 2592000
Timing-Allow-Origin: *
EagleId: a3b5839a17327460661637405e

as8899.xn--detz6h92b.net/uploads/cover/ourstv/e6e981c773f2365f8702b68ec4f6ae46.abb

163.181.131.168

200 OK

15 kB

URL GET HTTP/1.1
as8899.xn--detz6h92b.net/uploads/cover/ourstv/e6e981c773f2365f8702b68ec4f6ae46.abb
IP
163.181.131.168:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--detz6h92b.net
FingerprintEF:C5:65:64:01:11:7D:7A:9A:0D:43:1F:65:36:73:B6:D1:54:BC:BD
ValidityWed, 20 Nov 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3
Size
15 kB (14870 bytes)
Hash
ab4dfac4c032e0ca1a91e4b655a51e98
7e7e8f50c15ba287f2d2383f70880aac2e1de9d7
5c3e82ca6def8eb09a4d320b34a05609e53ce8f1cbdc4c9fee9c6ece303e0ba6

HTTP Headers

GET /uploads/cover/ourstv/e6e981c773f2365f8702b68ec4f6ae46.abb HTTP/1.1
Host: as8899.xn--detz6h92b.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/octet-stream
Content-Length: 14870
Connection: keep-alive
Date: Wed, 20 Nov 2024 03:45:29 GMT
Last-Modified: Mon, 24 Jul 2023 03:37:20 GMT
ETag: "64bdf1f0-3a16"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: ens-cache4.l2de3[1084,1084,200-0,M], ens-cache5.l2de3[1086,0], ens-cache7.de7[0,0,200-0,H], ens-cache3.de7[1,0]
Age: 671737
Ali-Swift-Global-Savetime: 1732074329
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Wed, 20 Nov 2024 03:45:29 GMT
X-Swift-CacheTime: 2592000
Timing-Allow-Origin: *
EagleId: a3b5839717327460662645328e

as996.xn--7stv4oc3evv7b.com/uploads/cover/javhd/14913/cover.abb

116.142.249.98

200 OK

6.4 kB

URL GET HTTP/1.1
as996.xn--7stv4oc3evv7b.com/uploads/cover/javhd/14913/cover.abb
IP
116.142.249.98:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 306x171, Scaling: [none]x[none], YUV color, decoders should clamp
Size
6.4 kB (6404 bytes)
Hash
952a99551a4a5472e4686dbb830032ce
4db1bd7e2d22b4c78e0592dd2c20fb8f35029427
a5035b8e67448350f1f0a3b6586da97e8a98fa3f34896d9461b83bf11a0f21a5

HTTP Headers

GET /uploads/cover/javhd/14913/cover.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Wed, 26 Oct 2022 02:09:48 GMT
Etag: "635896ec-1904"
Server: openresty/1.15.8.1
Date: Mon, 04 Nov 2024 06:41:22 GMT
Content-Type: application/octet-stream
Expires: Wed, 04 Dec 2024 06:41:22 GMT
Cache-Control: max-age=2592000
Age: 2036504
Content-Length: 6404
Accept-Ranges: bytes
X-NWS-LOG-UUID: 14553959989908190081
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/2022/08/30/e6b0b1354c5f5bb34691bb9de7ee79fc.abb

116.142.249.98

200 OK

13 kB

URL GET HTTP/1.1
as996.xn--7stv4oc3evv7b.com/uploads/cover/2022/08/30/e6b0b1354c5f5bb34691bb9de7ee79fc.abb
IP
116.142.249.98:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1377, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 510x320, components 3
Size
13 kB (13323 bytes)
Hash
67d2cb893ee07a2efbbef0a8ab10a310
9e28d441297ab46eeda7c4e538a396af2f3a934e
3154125cc9387f87a2ecde5bb286a3d15c9c4c664625322fde65461f91a21105

HTTP Headers

GET /uploads/cover/2022/08/30/e6b0b1354c5f5bb34691bb9de7ee79fc.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Wed, 26 Oct 2022 02:11:00 GMT
Etag: "63589734-340b"
Server: openresty/1.15.8.1
Date: Thu, 31 Oct 2024 04:15:21 GMT
Content-Type: application/octet-stream
Expires: Sat, 30 Nov 2024 04:15:21 GMT
Cache-Control: max-age=2592000
Age: 2036504
Content-Length: 13323
Accept-Ranges: bytes
X-NWS-LOG-UUID: 3217759326461765565
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/2023/01/26/3e8aebed322eaec02f8173f361184e10.abb

116.142.249.98

200 OK

15 kB

URL GET HTTP/1.1
as996.xn--7stv4oc3evv7b.com/uploads/cover/2023/01/26/3e8aebed322eaec02f8173f361184e10.abb
IP
116.142.249.98:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 6624x5933, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 510x320, components 3
Size
15 kB (15310 bytes)
Hash
dbd971cd081baa5285cb8703d7cd90d7
73385bf74c4f0ff601438059d6f36241bf65597b
074195524d7c897f4e5b019de7a5324fb261faf258fef8fa2b804dc00cee091a

HTTP Headers

GET /uploads/cover/2023/01/26/3e8aebed322eaec02f8173f361184e10.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Thu, 26 Jan 2023 10:51:12 GMT
Etag: "63d25b20-3bce"
Server: openresty/1.15.8.1
Date: Sat, 02 Nov 2024 07:37:54 GMT
Content-Type: application/octet-stream
Expires: Mon, 02 Dec 2024 07:37:54 GMT
Cache-Control: max-age=2592000
Age: 2036504
Content-Length: 15310
Accept-Ranges: bytes
X-NWS-LOG-UUID: 13002609622785059270
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/app_adv/2022/08/15/cd35c406f0bc5802fe5fbced4e8c7ace.abb

116.142.249.98

200 OK

130 kB

URL GET HTTP/1.1
as996.xn--7stv4oc3evv7b.com/uploads/app_adv/2022/08/15/cd35c406f0bc5802fe5fbced4e8c7ace.abb
IP
116.142.249.98:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 710x360, components 3
Size
130 kB (130264 bytes)
Hash
fa426341e93c05a036bb44ebeeaf3b8c
1dc70538ba47970cf0ea1746c8a386104ae35f82
9e0980bb314d23b10ebbca7cf097b9ae0f4fc1c43e1844fc0964835b66ec748b

HTTP Headers

GET /uploads/app_adv/2022/08/15/cd35c406f0bc5802fe5fbced4e8c7ace.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Wed, 26 Oct 2022 02:15:01 GMT
Etag: "63589825-1fcd8"
Server: openresty/1.15.8.1
Date: Fri, 01 Nov 2024 14:48:10 GMT
Content-Type: application/octet-stream
Expires: Sun, 01 Dec 2024 14:48:10 GMT
Cache-Control: max-age=2592000
Age: 2036779
Content-Length: 130264
Accept-Ranges: bytes
X-NWS-LOG-UUID: 7195765830108296003
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/2021/12/03/b721ccd92ff1838f1ce7684204abfbc8.abb

116.142.249.98

200 OK

294 kB

URL GET
as996.xn--7stv4oc3evv7b.com/uploads/cover/2021/12/03/b721ccd92ff1838f1ce7684204abfbc8.abb
IP
116.142.249.98:0
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
PNG image data, 745 x 463, 8-bit/color RGBA, non-interlaced
Size
294 kB (294255 bytes)
Hash
c65393a329ffc3626c457c37c056efcc
301271e457684f207197c889d45e69970d1b8813
ec12fe88a6da85d82511fd129da266a0797cef362b7dda36b9fb7300d9c05e2c

HTTP Headers

GET /uploads/cover/2021/12/03/b721ccd92ff1838f1ce7684204abfbc8.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Wed, 26 Oct 2022 02:10:38 GMT
Etag: "6358971e-47d6f"
Server: openresty/1.15.8.1
Date: Fri, 01 Nov 2024 12:51:24 GMT
Content-Type: application/octet-stream
Expires: Sun, 01 Dec 2024 12:51:24 GMT
Cache-Control: max-age=2592000
Age: 2036504
Content-Length: 294255
Accept-Ranges: bytes
X-NWS-LOG-UUID: 8635119380343398207
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/e6e981c773f2365f8702b68ec4f6ae46.abb

116.142.249.98

200 OK

15 kB

URL GET HTTP/1.1
as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/e6e981c773f2365f8702b68ec4f6ae46.abb
IP
116.142.249.98:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3
Size
15 kB (14870 bytes)
Hash
ab4dfac4c032e0ca1a91e4b655a51e98
7e7e8f50c15ba287f2d2383f70880aac2e1de9d7
5c3e82ca6def8eb09a4d320b34a05609e53ce8f1cbdc4c9fee9c6ece303e0ba6

HTTP Headers

GET /uploads/cover/ourstv/e6e981c773f2365f8702b68ec4f6ae46.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Mon, 24 Jul 2023 03:37:20 GMT
Etag: "64bdf1f0-3a16"
Server: openresty/1.15.8.1
Date: Thu, 31 Oct 2024 15:46:31 GMT
Content-Type: application/octet-stream
Expires: Sat, 30 Nov 2024 15:46:31 GMT
Cache-Control: max-age=2592000
Age: 2036505
Content-Length: 14870
Accept-Ranges: bytes
X-NWS-LOG-UUID: 18159508529865064594
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/6fdd5dfcd11e235683bae83640cac90e.abb

116.142.249.98

200 OK

12 kB

URL GET
as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/6fdd5dfcd11e235683bae83640cac90e.abb
IP
116.142.249.98:0
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3
Size
12 kB (11832 bytes)
Hash
015680e86ed7adb86456f2d6bbd3d1fc
7755e3e0e4f52d365b132df54670ff7b2486859e
e55f457741ed54388335750825ff1f7468ac815bc9a91e52623502b8c94960f8

HTTP Headers

GET /uploads/cover/ourstv/6fdd5dfcd11e235683bae83640cac90e.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Wed, 26 Oct 2022 02:10:50 GMT
Etag: "6358972a-2e38"
Server: openresty/1.15.8.1
Date: Wed, 30 Oct 2024 13:00:45 GMT
Content-Type: application/octet-stream
Expires: Fri, 29 Nov 2024 13:00:45 GMT
Cache-Control: max-age=2592000
Age: 2036505
Content-Length: 11832
Accept-Ranges: bytes
X-NWS-LOG-UUID: 12157798024374800477
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/15de73d0ca7ae740f793fdbdc6541e8d.abb

116.142.249.98

200 OK

16 kB

URL GET HTTP/1.1
as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/15de73d0ca7ae740f793fdbdc6541e8d.abb
IP
116.142.249.98:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3
Size
16 kB (16001 bytes)
Hash
fc0cade6fc9b1162482e186cc2e05e1c
f78d3274f6f227936295e0771455cf97dca1cb92
adcd61cd335f67c408a335683751c230d655f4a08b6d67adf22676e936d5aa6f

HTTP Headers

GET /uploads/cover/ourstv/15de73d0ca7ae740f793fdbdc6541e8d.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Wed, 26 Oct 2022 02:10:44 GMT
Etag: "63589724-3e81"
Server: openresty/1.15.8.1
Date: Thu, 31 Oct 2024 12:39:14 GMT
Content-Type: application/octet-stream
Expires: Sat, 30 Nov 2024 12:39:14 GMT
Cache-Control: max-age=2592000
Age: 2036505
Content-Length: 16001
Accept-Ranges: bytes
X-NWS-LOG-UUID: 7563436120837587662
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/2022/09/22/5d6362fd0312f99e04992364458baa43.abb

116.142.249.98

200 OK

479 kB

URL GET
as996.xn--7stv4oc3evv7b.com/uploads/cover/2022/09/22/5d6362fd0312f99e04992364458baa43.abb
IP
116.142.249.98:0
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type
PNG image data, 800 x 540, 8-bit/color RGBA, non-interlaced
Size
479 kB (478800 bytes)
Hash
d0bfb672ed8f96cf67cba6418191d6a0
3e13d9e8a4a7c7b83f530d301c1b6a66e85aedf4
1b034b58c702853b429cc5432a420062f8f27861f928dd44317b3ac274f587e6

HTTP Headers

GET /uploads/cover/2022/09/22/5d6362fd0312f99e04992364458baa43.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Wed, 26 Oct 2022 02:10:59 GMT
Etag: "63589733-74e50"
Server: openresty/1.15.8.1
Date: Fri, 01 Nov 2024 02:24:14 GMT
Content-Type: application/octet-stream
Expires: Sun, 01 Dec 2024 02:24:14 GMT
Cache-Control: max-age=2592000
Age: 2036504
Content-Length: 478800
Accept-Ranges: bytes
X-NWS-LOG-UUID: 1766000338863248811
Connection: keep-alive
X-Cache-Lookup: Cache Hit

as996.xn--7stv4oc3evv7b.com/uploads/cover/2023/03/22/f0e83440edbe3d2dfdcf0f7652bc4177.abb

0.0.0.0

0 B

URL GET
as996.xn--7stv4oc3evv7b.com/uploads/cover/2023/03/22/f0e83440edbe3d2dfdcf0f7652bc4177.abb
IP
0.0.0.0:0
ASN
#0

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uploads/cover/2023/03/22/f0e83440edbe3d2dfdcf0f7652bc4177.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/4119f34b7c992da19be2bcb252a516cc.abb

0.0.0.0

0 B

URL GET
as996.xn--7stv4oc3evv7b.com/uploads/cover/ourstv/4119f34b7c992da19be2bcb252a516cc.abb
IP
0.0.0.0:0
ASN
#0

Requested by
https://h18.xn--tfrt10a2lr38y.cn/?user_id=195522083&token=EOOLpj4iTfJ5vHPAPDNRiU2HJH9AipU5&device_id=0476767e-6e9e-48ff-914d-4df5e348c251&domiantype=1&olddomain=1&=ishn=0&r=0.40889591240316625
Certificate
IssuerZeroSSL
Subjectxn--7stv4oc3evv7b.com
FingerprintCD:17:0D:EE:A8:CA:7B:45:E8:82:14:6A:11:61:9D:4B:0C:E7:18:46
ValiditySun, 10 Nov 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uploads/cover/ourstv/4119f34b7c992da19be2bcb252a516cc.abb HTTP/1.1
Host: as996.xn--7stv4oc3evv7b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (50)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash