分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
URL win7-sp1-x64-shaapp03-1 2020-11-26 10:14:47 2020-11-26 10:16:50 123 秒

魔盾分数

0.425

正常的

URL详细信息

URL
URL专业沙箱检测 -> http://ad.twoshadow.cn
登录查看威胁特征

运行截图

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
ad.twoshadow.cn CNAME ad.twoshadow.cn.cdn.dnsv1.com
A 180.96.32.88
CNAME 3s63h1np.slt.cdntip.com
A 180.96.32.89
www.bsrkt.com 未知 A 140.143.135.97
test.doumaibiji.cn A 123.206.5.93
bsrkt.com 未知 A 59.63.235.236
A 125.78.252.115
A 59.63.235.194
A 59.63.235.122
CNAME bsrkt.com.cdn.dnsv1.com
CNAME 1185166.p23.tc.cdntip.com
mini.eastday.com A 101.227.98.71
CNAME mini.eastday.com.cdn20.com
tt-img.7654.com CNAME tt-img.7654.com.cdn.dnsv1.com
CNAME 1285743.p23.tc.cdntip.com
show.g.mediav.com CNAME max.mdvdns.qhcdn.com
A 180.163.247.134
acroipm.adobe.com CNAME acroipm.adobe.com.edgesuite.net
A 23.218.94.163
CNAME a1983.dscd.akamai.net
A 23.218.94.155
02imgmini.eastday.com A 58.216.107.116
CNAME cdn-e57n62s8.sched.s2.tdnsv5.com
A 221.228.219.98
CNAME 02imgmini.eastday.com.cdn.dnsv1.com
A 58.216.106.215
A 222.186.49.111
A 58.216.107.214
A 58.220.28.104
A 221.228.219.62
07imgmini.eastday.com CNAME 07imgmini.eastday.com.cdn.dnsv1.com
CNAME cdn-hdua9ats.sched.s2.tdnsv5.com
09imgmini.eastday.com CNAME cdn-gksx5hzk.sched.s2.tdnsv5.com
CNAME 09imgmini.eastday.com.cdn.dnsv1.com
05imgmini.eastday.com CNAME 05imgmini.eastday.com.cdn.dnsv1.com
CNAME cdn-1orxuk74.sched.s2.tdnsv5.com
ttpcstatic.dftoutiao.com 未知 CNAME ttpcstatic.dftoutiao.com.cdn.dnsv1.com
CNAME 2121167.p23.tc.cdntip.com
dup.baidustatic.com CNAME ecomcbjs.jomodns.com
A 180.163.198.49
unionstatis.dftoutiao.com A 117.50.0.67
position.dftoutiao.com A 123.59.74.13
cidzxpc.dfxwdc.com 未知 A 106.75.57.236
imgmini.eastday.com CNAME imgmini.eastday.com.cdn20.com
minipc.eastday.com CNAME minipc.eastday.com.cdn.dnsv1.com
A 117.34.34.78
A 58.49.224.62
A 42.202.141.119
CNAME 1529636.sched.sma.tdnsv5.com
A 122.246.3.114
A 58.220.28.112
A 221.233.41.191
A 113.96.156.254
A 114.98.176.203
A 117.34.34.125
ttpcssp.dftoutiao.com CNAME 2023088.p23.tc.cdntip.com
CNAME ttpcssp.dftoutiao.com.cdn.dnsv1.com
hm.baidu.com CNAME hm.e.shifen.com
A 106.120.159.126
pos.baidu.com A 180.101.49.206
CNAME cb.e.shifen.com
ad.xwdsp.com 未知 A 106.75.97.110
nativematerialpc.ssp.eastdaymedia.com.cn 未知 A 49.233.239.251
cpro.baidustatic.com CNAME cpro.baidustatic.com.a.bdydns.com
A 114.80.30.35
CNAME opencdnbdwm.jomodns.com
pcunionreportlog.dftoutiao.com 未知 A 106.75.100.126
feed-image.baidu.com 未知 CNAME feed-image.baidu.com.a.bdydns.com
CNAME opencdn.jomodns.com
miniapp-ad.cdn.bcebos.com 未知 CNAME miniapp-ad.cdn.bcebos.com.a.bdydns.com
wn.pos.baidu.com A 180.101.49.203
CNAME wn.pos.e.shifen.com
als.baidu.com 未知 CNAME als.e.shifen.com
eclick.baidu.com A 220.181.107.131
CNAME eclick.e.shifen.com
show-3.mediav.com
t11.baidu.com 未知 CNAME opencdnbdsimage.jomodns.com
A 114.80.30.36
CNAME t11.baidu.com.a.bdydns.com
t12.baidu.com CNAME t12.baidu.com.a.bdydns.com
f11.baidu.com CNAME f11.baidu.com.a.bdydns.com
t10.baidu.com CNAME t10.baidu.com.a.bdydns.com
f12.baidu.com CNAME f12.baidu.com.a.bdydns.com
f10.baidu.com CNAME f10.baidu.com.a.bdydns.com
pcunionreportlog.shaqm.com A 106.75.108.118
lupic.cdn.bcebos.com CNAME lupic.cdn.bcebos.com.a.bdydns.com
A 122.228.115.35
CNAME opencdnssl.jomodns.com
A 183.131.118.35

摘要

登录查看详细行为信息

WHOIS 信息

Name: None
Country: None
State: None
City: None
ZIP Code: None
Address: None

Orginization: None
Domain Name(s):
    twoshadow.cn
Creation Date:
    None
Updated Date:
    None
Expiration Date:
    None
Email(s):
    wf@quxiu.com

Registrar(s):
    阿里云计算有限公司（万网）
Name Server(s):
    dns7.hichina.com
    dns8.hichina.com
Referral URL(s):
    None
没有防病毒引擎扫描信息!

进程树

iexplore.exe, PID: 2404, 上一级进程 PID: 2164
下载PCAP包

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49168 101.227.98.71 mini.eastday.com 80
192.168.122.201 49184 101.227.98.71 mini.eastday.com 443
192.168.122.201 49185 101.227.98.71 mini.eastday.com 443
192.168.122.201 49186 101.227.98.71 mini.eastday.com 443
192.168.122.201 49187 101.227.98.71 mini.eastday.com 443
192.168.122.201 49188 101.227.98.71 mini.eastday.com 443
192.168.122.201 49200 101.227.98.71 mini.eastday.com 443
192.168.122.201 49202 101.227.98.71 mini.eastday.com 443
192.168.122.201 49203 101.227.98.71 mini.eastday.com 443
192.168.122.201 49207 101.227.98.71 mini.eastday.com 443
192.168.122.201 49225 101.227.98.71 mini.eastday.com 443
192.168.122.201 49220 106.120.159.126 hm.baidu.com 443
192.168.122.201 49223 106.120.159.126 hm.baidu.com 443
192.168.122.201 49239 106.75.100.126 pcunionreportlog.dftoutiao.com 443
192.168.122.201 49262 106.75.108.118 pcunionreportlog.shaqm.com 443
192.168.122.201 49263 106.75.108.118 pcunionreportlog.shaqm.com 443
192.168.122.201 49264 106.75.108.118 pcunionreportlog.shaqm.com 443
192.168.122.201 49204 106.75.57.236 cidzxpc.dfxwdc.com 443
192.168.122.201 49229 106.75.97.110 ad.xwdsp.com 443
192.168.122.201 49230 106.75.97.110 ad.xwdsp.com 443
192.168.122.201 49233 106.75.97.110 ad.xwdsp.com 443
192.168.122.201 49237 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49238 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49240 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49241 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49242 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49250 114.80.30.36 t11.baidu.com 443
192.168.122.201 49251 114.80.30.36 t11.baidu.com 443
192.168.122.201 49252 114.80.30.36 t11.baidu.com 443
192.168.122.201 49253 114.80.30.36 t11.baidu.com 443
192.168.122.201 49254 114.80.30.36 t11.baidu.com 443
192.168.122.201 49255 114.80.30.36 t11.baidu.com 443
192.168.122.201 49256 114.80.30.36 t11.baidu.com 443
192.168.122.201 49257 114.80.30.36 t11.baidu.com 443
192.168.122.201 49259 114.80.30.36 t11.baidu.com 443
192.168.122.201 49260 114.80.30.36 t11.baidu.com 443
192.168.122.201 49261 114.80.30.36 t11.baidu.com 443
192.168.122.201 49199 117.50.0.67 unionstatis.dftoutiao.com 443
192.168.122.201 49265 122.228.115.35 lupic.cdn.bcebos.com 443
192.168.122.201 49266 122.228.115.35 lupic.cdn.bcebos.com 443
192.168.122.201 49267 122.228.115.35 lupic.cdn.bcebos.com 443
192.168.122.201 49212 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49213 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49214 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49215 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49216 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49217 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49166 123.206.5.93 test.doumaibiji.cn 80
192.168.122.201 49201 123.59.74.13 position.dftoutiao.com 443
192.168.122.201 49218 125.78.252.115 bsrkt.com 443
192.168.122.201 49219 125.78.252.115 bsrkt.com 443
192.168.122.201 49221 125.78.252.115 bsrkt.com 443
192.168.122.201 49222 125.78.252.115 bsrkt.com 443
192.168.122.201 49224 125.78.252.115 bsrkt.com 443
192.168.122.201 49228 125.78.252.115 bsrkt.com 443
192.168.122.201 49160 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49161 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49162 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49163 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49164 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49165 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49243 180.101.49.203 wn.pos.baidu.com 443
192.168.122.201 49244 180.101.49.203 wn.pos.baidu.com 443
192.168.122.201 49226 180.101.49.206 pos.baidu.com 443
192.168.122.201 49227 180.101.49.206 pos.baidu.com 443
192.168.122.201 49234 180.101.49.206 pos.baidu.com 443
192.168.122.201 49189 180.163.198.49 dup.baidustatic.com 443
192.168.122.201 49231 180.163.198.49 dup.baidustatic.com 443
192.168.122.201 49232 180.163.198.49 dup.baidustatic.com 443
192.168.122.201 49174 180.163.247.134 show.g.mediav.com 80
192.168.122.201 49175 180.163.247.134 show.g.mediav.com 80
192.168.122.201 49247 180.163.247.134 show.g.mediav.com 443
192.168.122.201 49248 180.163.247.134 show.g.mediav.com 443
192.168.122.201 49249 180.163.247.134 show.g.mediav.com 443
192.168.122.201 49159 180.96.32.89 ad.twoshadow.cn 80
192.168.122.201 49245 220.181.107.131 eclick.baidu.com 443
192.168.122.201 49246 220.181.107.131 eclick.baidu.com 443
192.168.122.201 49258 220.181.107.131 eclick.baidu.com 443
192.168.122.201 49176 222.186.49.111 02imgmini.eastday.com 80
192.168.122.201 49177 222.186.49.111 02imgmini.eastday.com 80
192.168.122.201 49178 23.218.94.163 acroipm.adobe.com 80
192.168.122.201 49235 49.233.239.251 nativematerialpc.ssp.eastdaymedia.com.cn 443
192.168.122.201 49236 49.233.239.251 nativematerialpc.ssp.eastdaymedia.com.cn 443
192.168.122.201 49182 58.216.107.214 02imgmini.eastday.com 80
192.168.122.201 49179 58.220.28.104 02imgmini.eastday.com 80
192.168.122.201 49180 58.220.28.104 02imgmini.eastday.com 80
192.168.122.201 49181 58.220.28.104 02imgmini.eastday.com 80
192.168.122.201 49167 59.63.235.194 bsrkt.com 80
192.168.122.201 49169 59.63.235.194 bsrkt.com 80
192.168.122.201 49170 59.63.235.194 bsrkt.com 80
192.168.122.201 49171 59.63.235.194 bsrkt.com 80
192.168.122.201 49172 59.63.235.194 bsrkt.com 80
192.168.122.201 49173 59.63.235.194 bsrkt.com 80
192.168.122.201 49190 59.63.235.236 bsrkt.com 443
192.168.122.201 49191 59.63.235.236 bsrkt.com 443
192.168.122.201 49192 59.63.235.236 bsrkt.com 443
192.168.122.201 49193 59.63.235.236 bsrkt.com 443
192.168.122.201 49194 59.63.235.236 bsrkt.com 443
192.168.122.201 49195 59.63.235.236 bsrkt.com 443
192.168.122.201 49205 59.63.235.236 bsrkt.com 443
192.168.122.201 49206 59.63.235.236 bsrkt.com 443
192.168.122.201 49208 59.63.235.236 bsrkt.com 443
192.168.122.201 49209 59.63.235.236 bsrkt.com 443
192.168.122.201 49210 59.63.235.236 bsrkt.com 443
192.168.122.201 49211 59.63.235.236 bsrkt.com 443

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 49532 192.168.122.1 53
192.168.122.201 50123 192.168.122.1 53
192.168.122.201 50224 192.168.122.1 53
192.168.122.201 50433 192.168.122.1 53
192.168.122.201 52179 192.168.122.1 53
192.168.122.201 52207 192.168.122.1 53
192.168.122.201 52564 192.168.122.1 53
192.168.122.201 52936 192.168.122.1 53
192.168.122.201 53125 192.168.122.1 53
192.168.122.201 54135 192.168.122.1 53
192.168.122.201 54168 192.168.122.1 53
192.168.122.201 56270 192.168.122.1 53
192.168.122.201 56449 192.168.122.1 53
192.168.122.201 56960 192.168.122.1 53
192.168.122.201 57769 192.168.122.1 53
192.168.122.201 59227 192.168.122.1 53
192.168.122.201 59401 192.168.122.1 53
192.168.122.201 59906 192.168.122.1 53
192.168.122.201 60120 192.168.122.1 53
192.168.122.201 60220 192.168.122.1 53
192.168.122.201 60318 192.168.122.1 53
192.168.122.201 60465 192.168.122.1 53
192.168.122.201 60794 192.168.122.1 53
192.168.122.201 60919 192.168.122.1 53
192.168.122.201 61329 192.168.122.1 53
192.168.122.201 61500 192.168.122.1 53
192.168.122.201 61663 192.168.122.1 53
192.168.122.201 61890 192.168.122.1 53
192.168.122.201 62169 192.168.122.1 53
192.168.122.201 62671 192.168.122.1 53
192.168.122.201 63953 192.168.122.1 53
192.168.122.201 63995 192.168.122.1 53
192.168.122.201 64191 192.168.122.1 53
192.168.122.201 64363 192.168.122.1 53
192.168.122.201 64712 192.168.122.1 53
192.168.122.201 64833 192.168.122.1 53
192.168.122.201 65178 192.168.122.1 53
192.168.122.201 65179 192.168.122.1 53
192.168.122.201 65259 192.168.122.1 53
192.168.122.201 65529 192.168.122.1 53

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
ad.twoshadow.cn CNAME ad.twoshadow.cn.cdn.dnsv1.com
A 180.96.32.88
CNAME 3s63h1np.slt.cdntip.com
A 180.96.32.89
www.bsrkt.com 未知 A 140.143.135.97
test.doumaibiji.cn A 123.206.5.93
bsrkt.com 未知 A 59.63.235.236
A 125.78.252.115
A 59.63.235.194
A 59.63.235.122
CNAME bsrkt.com.cdn.dnsv1.com
CNAME 1185166.p23.tc.cdntip.com
mini.eastday.com A 101.227.98.71
CNAME mini.eastday.com.cdn20.com
tt-img.7654.com CNAME tt-img.7654.com.cdn.dnsv1.com
CNAME 1285743.p23.tc.cdntip.com
show.g.mediav.com CNAME max.mdvdns.qhcdn.com
A 180.163.247.134
acroipm.adobe.com CNAME acroipm.adobe.com.edgesuite.net
A 23.218.94.163
CNAME a1983.dscd.akamai.net
A 23.218.94.155
02imgmini.eastday.com A 58.216.107.116
CNAME cdn-e57n62s8.sched.s2.tdnsv5.com
A 221.228.219.98
CNAME 02imgmini.eastday.com.cdn.dnsv1.com
A 58.216.106.215
A 222.186.49.111
A 58.216.107.214
A 58.220.28.104
A 221.228.219.62
07imgmini.eastday.com CNAME 07imgmini.eastday.com.cdn.dnsv1.com
CNAME cdn-hdua9ats.sched.s2.tdnsv5.com
09imgmini.eastday.com CNAME cdn-gksx5hzk.sched.s2.tdnsv5.com
CNAME 09imgmini.eastday.com.cdn.dnsv1.com
05imgmini.eastday.com CNAME 05imgmini.eastday.com.cdn.dnsv1.com
CNAME cdn-1orxuk74.sched.s2.tdnsv5.com
ttpcstatic.dftoutiao.com 未知 CNAME ttpcstatic.dftoutiao.com.cdn.dnsv1.com
CNAME 2121167.p23.tc.cdntip.com
dup.baidustatic.com CNAME ecomcbjs.jomodns.com
A 180.163.198.49
unionstatis.dftoutiao.com A 117.50.0.67
position.dftoutiao.com A 123.59.74.13
cidzxpc.dfxwdc.com 未知 A 106.75.57.236
imgmini.eastday.com CNAME imgmini.eastday.com.cdn20.com
minipc.eastday.com CNAME minipc.eastday.com.cdn.dnsv1.com
A 117.34.34.78
A 58.49.224.62
A 42.202.141.119
CNAME 1529636.sched.sma.tdnsv5.com
A 122.246.3.114
A 58.220.28.112
A 221.233.41.191
A 113.96.156.254
A 114.98.176.203
A 117.34.34.125
ttpcssp.dftoutiao.com CNAME 2023088.p23.tc.cdntip.com
CNAME ttpcssp.dftoutiao.com.cdn.dnsv1.com
hm.baidu.com CNAME hm.e.shifen.com
A 106.120.159.126
pos.baidu.com A 180.101.49.206
CNAME cb.e.shifen.com
ad.xwdsp.com 未知 A 106.75.97.110
nativematerialpc.ssp.eastdaymedia.com.cn 未知 A 49.233.239.251
cpro.baidustatic.com CNAME cpro.baidustatic.com.a.bdydns.com
A 114.80.30.35
CNAME opencdnbdwm.jomodns.com
pcunionreportlog.dftoutiao.com 未知 A 106.75.100.126
feed-image.baidu.com 未知 CNAME feed-image.baidu.com.a.bdydns.com
CNAME opencdn.jomodns.com
miniapp-ad.cdn.bcebos.com 未知 CNAME miniapp-ad.cdn.bcebos.com.a.bdydns.com
wn.pos.baidu.com A 180.101.49.203
CNAME wn.pos.e.shifen.com
als.baidu.com 未知 CNAME als.e.shifen.com
eclick.baidu.com A 220.181.107.131
CNAME eclick.e.shifen.com
show-3.mediav.com
t11.baidu.com 未知 CNAME opencdnbdsimage.jomodns.com
A 114.80.30.36
CNAME t11.baidu.com.a.bdydns.com
t12.baidu.com CNAME t12.baidu.com.a.bdydns.com
f11.baidu.com CNAME f11.baidu.com.a.bdydns.com
t10.baidu.com CNAME t10.baidu.com.a.bdydns.com
f12.baidu.com CNAME f12.baidu.com.a.bdydns.com
f10.baidu.com CNAME f10.baidu.com.a.bdydns.com
pcunionreportlog.shaqm.com A 106.75.108.118
lupic.cdn.bcebos.com CNAME lupic.cdn.bcebos.com.a.bdydns.com
A 122.228.115.35
CNAME opencdnssl.jomodns.com
A 183.131.118.35

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49168 101.227.98.71 mini.eastday.com 80
192.168.122.201 49184 101.227.98.71 mini.eastday.com 443
192.168.122.201 49185 101.227.98.71 mini.eastday.com 443
192.168.122.201 49186 101.227.98.71 mini.eastday.com 443
192.168.122.201 49187 101.227.98.71 mini.eastday.com 443
192.168.122.201 49188 101.227.98.71 mini.eastday.com 443
192.168.122.201 49200 101.227.98.71 mini.eastday.com 443
192.168.122.201 49202 101.227.98.71 mini.eastday.com 443
192.168.122.201 49203 101.227.98.71 mini.eastday.com 443
192.168.122.201 49207 101.227.98.71 mini.eastday.com 443
192.168.122.201 49225 101.227.98.71 mini.eastday.com 443
192.168.122.201 49220 106.120.159.126 hm.baidu.com 443
192.168.122.201 49223 106.120.159.126 hm.baidu.com 443
192.168.122.201 49239 106.75.100.126 pcunionreportlog.dftoutiao.com 443
192.168.122.201 49262 106.75.108.118 pcunionreportlog.shaqm.com 443
192.168.122.201 49263 106.75.108.118 pcunionreportlog.shaqm.com 443
192.168.122.201 49264 106.75.108.118 pcunionreportlog.shaqm.com 443
192.168.122.201 49204 106.75.57.236 cidzxpc.dfxwdc.com 443
192.168.122.201 49229 106.75.97.110 ad.xwdsp.com 443
192.168.122.201 49230 106.75.97.110 ad.xwdsp.com 443
192.168.122.201 49233 106.75.97.110 ad.xwdsp.com 443
192.168.122.201 49237 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49238 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49240 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49241 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49242 114.80.30.35 cpro.baidustatic.com 443
192.168.122.201 49250 114.80.30.36 t11.baidu.com 443
192.168.122.201 49251 114.80.30.36 t11.baidu.com 443
192.168.122.201 49252 114.80.30.36 t11.baidu.com 443
192.168.122.201 49253 114.80.30.36 t11.baidu.com 443
192.168.122.201 49254 114.80.30.36 t11.baidu.com 443
192.168.122.201 49255 114.80.30.36 t11.baidu.com 443
192.168.122.201 49256 114.80.30.36 t11.baidu.com 443
192.168.122.201 49257 114.80.30.36 t11.baidu.com 443
192.168.122.201 49259 114.80.30.36 t11.baidu.com 443
192.168.122.201 49260 114.80.30.36 t11.baidu.com 443
192.168.122.201 49261 114.80.30.36 t11.baidu.com 443
192.168.122.201 49199 117.50.0.67 unionstatis.dftoutiao.com 443
192.168.122.201 49265 122.228.115.35 lupic.cdn.bcebos.com 443
192.168.122.201 49266 122.228.115.35 lupic.cdn.bcebos.com 443
192.168.122.201 49267 122.228.115.35 lupic.cdn.bcebos.com 443
192.168.122.201 49212 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49213 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49214 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49215 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49216 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49217 122.246.3.114 minipc.eastday.com 443
192.168.122.201 49166 123.206.5.93 test.doumaibiji.cn 80
192.168.122.201 49201 123.59.74.13 position.dftoutiao.com 443
192.168.122.201 49218 125.78.252.115 bsrkt.com 443
192.168.122.201 49219 125.78.252.115 bsrkt.com 443
192.168.122.201 49221 125.78.252.115 bsrkt.com 443
192.168.122.201 49222 125.78.252.115 bsrkt.com 443
192.168.122.201 49224 125.78.252.115 bsrkt.com 443
192.168.122.201 49228 125.78.252.115 bsrkt.com 443
192.168.122.201 49160 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49161 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49162 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49163 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49164 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49165 140.143.135.97 www.bsrkt.com 80
192.168.122.201 49243 180.101.49.203 wn.pos.baidu.com 443
192.168.122.201 49244 180.101.49.203 wn.pos.baidu.com 443
192.168.122.201 49226 180.101.49.206 pos.baidu.com 443
192.168.122.201 49227 180.101.49.206 pos.baidu.com 443
192.168.122.201 49234 180.101.49.206 pos.baidu.com 443
192.168.122.201 49189 180.163.198.49 dup.baidustatic.com 443
192.168.122.201 49231 180.163.198.49 dup.baidustatic.com 443
192.168.122.201 49232 180.163.198.49 dup.baidustatic.com 443
192.168.122.201 49174 180.163.247.134 show.g.mediav.com 80
192.168.122.201 49175 180.163.247.134 show.g.mediav.com 80
192.168.122.201 49247 180.163.247.134 show.g.mediav.com 443
192.168.122.201 49248 180.163.247.134 show.g.mediav.com 443
192.168.122.201 49249 180.163.247.134 show.g.mediav.com 443
192.168.122.201 49159 180.96.32.89 ad.twoshadow.cn 80
192.168.122.201 49245 220.181.107.131 eclick.baidu.com 443
192.168.122.201 49246 220.181.107.131 eclick.baidu.com 443
192.168.122.201 49258 220.181.107.131 eclick.baidu.com 443
192.168.122.201 49176 222.186.49.111 02imgmini.eastday.com 80
192.168.122.201 49177 222.186.49.111 02imgmini.eastday.com 80
192.168.122.201 49178 23.218.94.163 acroipm.adobe.com 80
192.168.122.201 49235 49.233.239.251 nativematerialpc.ssp.eastdaymedia.com.cn 443
192.168.122.201 49236 49.233.239.251 nativematerialpc.ssp.eastdaymedia.com.cn 443
192.168.122.201 49182 58.216.107.214 02imgmini.eastday.com 80
192.168.122.201 49179 58.220.28.104 02imgmini.eastday.com 80
192.168.122.201 49180 58.220.28.104 02imgmini.eastday.com 80
192.168.122.201 49181 58.220.28.104 02imgmini.eastday.com 80
192.168.122.201 49167 59.63.235.194 bsrkt.com 80
192.168.122.201 49169 59.63.235.194 bsrkt.com 80
192.168.122.201 49170 59.63.235.194 bsrkt.com 80
192.168.122.201 49171 59.63.235.194 bsrkt.com 80
192.168.122.201 49172 59.63.235.194 bsrkt.com 80
192.168.122.201 49173 59.63.235.194 bsrkt.com 80
192.168.122.201 49190 59.63.235.236 bsrkt.com 443
192.168.122.201 49191 59.63.235.236 bsrkt.com 443
192.168.122.201 49192 59.63.235.236 bsrkt.com 443
192.168.122.201 49193 59.63.235.236 bsrkt.com 443
192.168.122.201 49194 59.63.235.236 bsrkt.com 443
192.168.122.201 49195 59.63.235.236 bsrkt.com 443
192.168.122.201 49205 59.63.235.236 bsrkt.com 443
192.168.122.201 49206 59.63.235.236 bsrkt.com 443
192.168.122.201 49208 59.63.235.236 bsrkt.com 443
192.168.122.201 49209 59.63.235.236 bsrkt.com 443
192.168.122.201 49210 59.63.235.236 bsrkt.com 443
192.168.122.201 49211 59.63.235.236 bsrkt.com 443

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 49532 192.168.122.1 53
192.168.122.201 50123 192.168.122.1 53
192.168.122.201 50224 192.168.122.1 53
192.168.122.201 50433 192.168.122.1 53
192.168.122.201 52179 192.168.122.1 53
192.168.122.201 52207 192.168.122.1 53
192.168.122.201 52564 192.168.122.1 53
192.168.122.201 52936 192.168.122.1 53
192.168.122.201 53125 192.168.122.1 53
192.168.122.201 54135 192.168.122.1 53
192.168.122.201 54168 192.168.122.1 53
192.168.122.201 56270 192.168.122.1 53
192.168.122.201 56449 192.168.122.1 53
192.168.122.201 56960 192.168.122.1 53
192.168.122.201 57769 192.168.122.1 53
192.168.122.201 59227 192.168.122.1 53
192.168.122.201 59401 192.168.122.1 53
192.168.122.201 59906 192.168.122.1 53
192.168.122.201 60120 192.168.122.1 53
192.168.122.201 60220 192.168.122.1 53
192.168.122.201 60318 192.168.122.1 53
192.168.122.201 60465 192.168.122.1 53
192.168.122.201 60794 192.168.122.1 53
192.168.122.201 60919 192.168.122.1 53
192.168.122.201 61329 192.168.122.1 53
192.168.122.201 61500 192.168.122.1 53
192.168.122.201 61663 192.168.122.1 53
192.168.122.201 61890 192.168.122.1 53
192.168.122.201 62169 192.168.122.1 53
192.168.122.201 62671 192.168.122.1 53
192.168.122.201 63953 192.168.122.1 53
192.168.122.201 63995 192.168.122.1 53
192.168.122.201 64191 192.168.122.1 53
192.168.122.201 64363 192.168.122.1 53
192.168.122.201 64712 192.168.122.1 53
192.168.122.201 64833 192.168.122.1 53
192.168.122.201 65178 192.168.122.1 53
192.168.122.201 65179 192.168.122.1 53
192.168.122.201 65259 192.168.122.1 53
192.168.122.201 65529 192.168.122.1 53

HTTP 请求

URI HTTP数据
URL专业沙箱检测 -> http://ad.twoshadow.cn/ 
GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: ad.twoshadow.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/index.html 
GET /html/mini/index.html HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/jquery.js 
GET /html/mini/jquery.js HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/jquery.cookie.js 
GET /html/mini/jquery.cookie.js HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/jquery.SuperSlide.js 
GET /html/mini/jquery.SuperSlide.js HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/scroll.css?v070323 
GET /html/mini/scroll.css?v070323 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/jquery.lazyload.js 
GET /html/mini/jquery.lazyload.js HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/mini.js?v070327 
GET /html/mini/mini.js?v070327 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.bsrkt.com/html/mini/mini.css?v070323 
GET /html/mini/mini.css?v070323 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://test.doumaibiji.cn/c/js?id=doumainote_mini 
GET /c/js?id=doumainote_mini HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: test.doumaibiji.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://bsrkt.com/data/news/3.jsonp?callback=top50data 
GET /data/news/3.jsonp?callback=top50data HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://mini.eastday.com/apidata/top20shehuijsonp.json?callback=shehui 
GET /apidata/top20shehuijsonp.json?callback=shehui HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: mini.eastday.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://tt-img.7654.com/image/bcc96eb29933b885c9b71e0a7e563e15?imageMogr2/crop/320x240/cgif/30 
GET /image/bcc96eb29933b885c9b71e0a7e563e15?imageMogr2/crop/320x240/cgif/30 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tt-img.7654.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://tt-img.7654.com/image/b50975e056ddf3393ec97e64bfa6ce61?imageMogr2/crop/320x240/cgif/30 
GET /image/b50975e056ddf3393ec97e64bfa6ce61?imageMogr2/crop/320x240/cgif/30 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tt-img.7654.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://tt-img.7654.com/image/9fdb51dcad389aa378f1d0f85c1bf2d5?imageMogr2/crop/320x240/cgif/30 
GET /image/9fdb51dcad389aa378f1d0f85c1bf2d5?imageMogr2/crop/320x240/cgif/30 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tt-img.7654.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://tt-img.7654.com/image/e9faddaceabcdcf21217ced6d7b7d4ed?imageMogr2/crop/320x240/cgif/30 
GET /image/e9faddaceabcdcf21217ced6d7b7d4ed?imageMogr2/crop/320x240/cgif/30 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tt-img.7654.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://tt-img.7654.com/image/5f763d6098409c22614e94bbfff27714?imageMogr2/crop/320x240/cgif/30 
GET /image/5f763d6098409c22614e94bbfff27714?imageMogr2/crop/320x240/cgif/30 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tt-img.7654.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://show.g.mediav.com/s?jsonp=jQuery18306475686093587466_1606356891364&type=1&of=4&newf=1&showid=YJ8QNh&uid=b1644b5a-1a7e-4dea-8376-aa8340e5c2dc&reqtimes=1&impct=13&scheme=http&_=1606356892160 
GET /s?jsonp=jQuery18306475686093587466_1606356891364&type=1&of=4&newf=1&showid=YJ8QNh&uid=b1644b5a-1a7e-4dea-8376-aa8340e5c2dc&reqtimes=1&impct=13&scheme=http&_=1606356892160 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: show.g.mediav.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://show.g.mediav.com/s?jsonp=jQuery18306475686093587466_1606356891365&type=1&of=4&newf=1&showid=xNxqJa&uid=b1644b5a-1a7e-4dea-8376-aa8340e5c2dc&reqtimes=1&impct=4&scheme=http&_=1606356892176 
GET /s?jsonp=jQuery18306475686093587466_1606356891365&type=1&of=4&newf=1&showid=xNxqJa&uid=b1644b5a-1a7e-4dea-8376-aa8340e5c2dc&reqtimes=1&impct=4&scheme=http&_=1606356892176 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: show.g.mediav.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://tt-img.7654.com/image/ecc396a44d6b4e00e1f4c42ddab4ce08?imageMogr2/crop/320x240/cgif/30 
GET /image/ecc396a44d6b4e00e1f4c42ddab4ce08?imageMogr2/crop/320x240/cgif/30 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tt-img.7654.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://show.g.mediav.com/s?jsonp=jQuery18306475686093587466_1606356891366&type=1&of=4&newf=1&showid=YJ8QNh&uid=b1644b5a-1a7e-4dea-8376-aa8340e5c2dc&reqtimes=1&impct=13&scheme=http&_=1606356892425 
GET /s?jsonp=jQuery18306475686093587466_1606356891366&type=1&of=4&newf=1&showid=YJ8QNh&uid=b1644b5a-1a7e-4dea-8376-aa8340e5c2dc&reqtimes=1&impct=13&scheme=http&_=1606356892425 HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: show.g.mediav.com
Connection: Keep-Alive
Cookie: v=e[1q?([!K+9'w@A8RS`S
URL专业沙箱检测 -> http://www.bsrkt.com/favicon.ico 
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: www.bsrkt.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://02imgmini.eastday.com/mobile/20201126/20201126052821_32c18419a7cd19d35933534c3fc042e3_1_mwpm_03200403.jpg 
GET /mobile/20201126/20201126052821_32c18419a7cd19d35933534c3fc042e3_1_mwpm_03200403.jpg HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 02imgmini.eastday.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://02imgmini.eastday.com/mobile/20201126/20201126071201_0f9ab9303f212aa948a4d3e99ce73b60_1_mwpm_03200403.jpg 
GET /mobile/20201126/20201126071201_0f9ab9303f212aa948a4d3e99ce73b60_1_mwpm_03200403.jpg HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 02imgmini.eastday.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://07imgmini.eastday.com/mobile/20201125/20201125062408_d733011b33e091c9c65a44c615f13d02_2_mwpm_03200403.jpg 
GET /mobile/20201125/20201125062408_d733011b33e091c9c65a44c615f13d02_2_mwpm_03200403.jpg HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 07imgmini.eastday.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://07imgmini.eastday.com/mobile/20201125/20201125213541_3eb5c7fcf097ed9196c91247ba0f50ad_1_mwpm_03200403.jpg 
GET /mobile/20201125/20201125213541_3eb5c7fcf097ed9196c91247ba0f50ad_1_mwpm_03200403.jpg HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 07imgmini.eastday.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://05imgmini.eastday.com/mobile/20201126/20201126074900_faead016667a6ad2d42a5b143b4f3774_5_mwpm_03200403.jpg 
GET /mobile/20201126/20201126074900_faead016667a6ad2d42a5b143b4f3774_5_mwpm_03200403.jpg HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 05imgmini.eastday.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://acroipm.adobe.com/11/rdr/CHS/win/nooem/none/message.zip 
GET /11/rdr/CHS/win/nooem/none/message.zip HTTP/1.1
Accept: */*
If-Modified-Since: Mon, 08 Nov 2017 08:44:36 GMT
User-Agent: IPM
Host: acroipm.adobe.com
Connection: Keep-Alive
Cache-Control: no-cache
URL专业沙箱检测 -> http://09imgmini.eastday.com/mobile/20201126/20201126053407_0e5cedb19b279ba816599b8760fb395a_1_mwpm_03200403.jpg 
GET /mobile/20201126/20201126053407_0e5cedb19b279ba816599b8760fb395a_1_mwpm_03200403.jpg HTTP/1.1
Accept: */*
Referer: http://www.bsrkt.com/html/mini/index.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 09imgmini.eastday.com
Connection: Keep-Alive

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

Timestamp Source IP Source Port Destination IP Destination Port Version Issuer Subject Fingerprint
2020-11-26 10:15:22.953536+0800 192.168.122.201 49189 180.163.198.49 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:15:23.230713+0800 192.168.122.201 49195 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:15:23.073008+0800 192.168.122.201 49190 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:15:23.088390+0800 192.168.122.201 49192 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:15:23.075741+0800 192.168.122.201 49193 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:41.456482+0800 192.168.122.201 49206 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:41.509960+0800 192.168.122.201 49216 122.246.3.114 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=Shanghai, L=Shanghai, OU=IT, O=上海东方网股份有限公司, CN=*.eastday.com dc:8d:f8:69:58:6c:f4:12:15:30:0e:eb:0d:54:76:9c:e3:bc:16:0e
2020-11-26 10:16:41.515802+0800 192.168.122.201 49209 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:15:23.049392+0800 192.168.122.201 49191 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:15:22.698087+0800 192.168.122.201 49184 101.227.98.71 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=Shanghai, L=Shanghai, OU=IT, O=上海东方网股份有限公司, CN=*.eastday.com dc:8d:f8:69:58:6c:f4:12:15:30:0e:eb:0d:54:76:9c:e3:bc:16:0e
2020-11-26 10:16:40.895912+0800 192.168.122.201 49201 123.59.74.13 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:42.042820+0800 192.168.122.201 49220 106.120.159.126 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:42.044912+0800 192.168.122.201 49223 106.120.159.126 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:41.463175+0800 192.168.122.201 49213 122.246.3.114 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=Shanghai, L=Shanghai, OU=IT, O=上海东方网股份有限公司, CN=*.eastday.com dc:8d:f8:69:58:6c:f4:12:15:30:0e:eb:0d:54:76:9c:e3:bc:16:0e
2020-11-26 10:16:40.781868+0800 192.168.122.201 49199 117.50.0.67 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:42.145636+0800 192.168.122.201 49219 125.78.252.115 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:42.868444+0800 192.168.122.201 49232 180.163.198.49 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:42.146617+0800 192.168.122.201 49218 125.78.252.115 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:43.165114+0800 192.168.122.201 49235 49.233.239.251 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA DV SSL CA 2018 OU=Domain Control Validated, CN=*.ssp.eastdaymedia.com.cn 96:c8:17:91:fd:48:fb:0d:89:6d:39:71:7f:4b:2c:ef:08:a6:b9:97
2020-11-26 10:16:42.897052+0800 192.168.122.201 49230 106.75.97.110 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV Server CA [Run by the Issuer] CN=*.xwdsp.com d3:cf:6e:9f:f9:51:fa:90:b9:e9:64:51:e7:c3:ee:03:f9:d9:0c:52
2020-11-26 10:16:42.153920+0800 192.168.122.201 49224 125.78.252.115 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:43.199300+0800 192.168.122.201 49240 114.80.30.35 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:42.914397+0800 192.168.122.201 49229 106.75.97.110 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV Server CA [Run by the Issuer] CN=*.xwdsp.com d3:cf:6e:9f:f9:51:fa:90:b9:e9:64:51:e7:c3:ee:03:f9:d9:0c:52
2020-11-26 10:16:42.161441+0800 192.168.122.201 49221 125.78.252.115 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:41.470631+0800 192.168.122.201 49212 122.246.3.114 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=Shanghai, L=Shanghai, OU=IT, O=上海东方网股份有限公司, CN=*.eastday.com dc:8d:f8:69:58:6c:f4:12:15:30:0e:eb:0d:54:76:9c:e3:bc:16:0e
2020-11-26 10:16:41.471382+0800 192.168.122.201 49215 122.246.3.114 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=Shanghai, L=Shanghai, OU=IT, O=上海东方网股份有限公司, CN=*.eastday.com dc:8d:f8:69:58:6c:f4:12:15:30:0e:eb:0d:54:76:9c:e3:bc:16:0e
2020-11-26 10:16:40.947426+0800 192.168.122.201 49204 106.75.57.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV Server CA [Run by the Issuer] CN=*.dfxwdc.com 35:61:84:3c:af:60:b8:f7:78:1a:0a:c9:bd:4b:ae:91:08:b4:e7:30
2020-11-26 10:16:41.473116+0800 192.168.122.201 49214 122.246.3.114 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=Shanghai, L=Shanghai, OU=IT, O=上海东方网股份有限公司, CN=*.eastday.com dc:8d:f8:69:58:6c:f4:12:15:30:0e:eb:0d:54:76:9c:e3:bc:16:0e
2020-11-26 10:16:42.198162+0800 192.168.122.201 49222 125.78.252.115 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:43.143428+0800 192.168.122.201 49238 114.80.30.35 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:41.417411+0800 192.168.122.201 49207 101.227.98.71 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=Shanghai, L=Shanghai, OU=IT, O=上海东方网股份有限公司, CN=*.eastday.com dc:8d:f8:69:58:6c:f4:12:15:30:0e:eb:0d:54:76:9c:e3:bc:16:0e
2020-11-26 10:16:43.144629+0800 192.168.122.201 49237 114.80.30.35 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:41.451261+0800 192.168.122.201 49205 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:43.164907+0800 192.168.122.201 49236 49.233.239.251 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA DV SSL CA 2018 OU=Domain Control Validated, CN=*.ssp.eastdaymedia.com.cn 96:c8:17:91:fd:48:fb:0d:89:6d:39:71:7f:4b:2c:ef:08:a6:b9:97
2020-11-26 10:16:43.197234+0800 192.168.122.201 49239 106.75.100.126 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:42.867697+0800 192.168.122.201 49231 180.163.198.49 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:41.516006+0800 192.168.122.201 49210 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:41.556387+0800 192.168.122.201 49211 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:41.552838+0800 192.168.122.201 49208 59.63.235.236 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:43.272189+0800 192.168.122.201 49241 114.80.30.35 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.068825+0800 192.168.122.201 49248 180.163.247.134 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus OV SSL CA C=CN, ST=北京市, L=北京市, O=北京奇虎科技有限公司, CN=*.mediav.com fe:ef:9c:d2:88:1c:c9:55:7d:98:f4:e1:6c:7d:79:9a:17:b0:90:8d
2020-11-26 10:16:44.036385+0800 192.168.122.201 49247 180.163.247.134 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus OV SSL CA C=CN, ST=北京市, L=北京市, O=北京奇虎科技有限公司, CN=*.mediav.com fe:ef:9c:d2:88:1c:c9:55:7d:98:f4:e1:6c:7d:79:9a:17:b0:90:8d
2020-11-26 10:16:42.177049+0800 192.168.122.201 49226 180.101.49.206 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:44.080381+0800 192.168.122.201 49245 220.181.107.131 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:42.177864+0800 192.168.122.201 49227 180.101.49.206 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:44.268339+0800 192.168.122.201 49255 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.174140+0800 192.168.122.201 49250 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.150460+0800 192.168.122.201 49249 180.163.247.134 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus OV SSL CA C=CN, ST=北京市, L=北京市, O=北京奇虎科技有限公司, CN=*.mediav.com fe:ef:9c:d2:88:1c:c9:55:7d:98:f4:e1:6c:7d:79:9a:17:b0:90:8d
2020-11-26 10:16:43.307918+0800 192.168.122.201 49242 114.80.30.35 443 TLS 1.2 C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA C=CN, ST=Beijing, O=BeiJing Baidu Netcom Science Technology Co., Ltd, OU=service operation department, CN=*.cdn.bcebos.com 82:64:f3:28:d3:32:6f:b9:6e:06:d3:d5:72:6e:48:d0:04:f7:80:dc
2020-11-26 10:16:44.270166+0800 192.168.122.201 49256 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.082183+0800 192.168.122.201 49246 220.181.107.131 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:42.436331+0800 192.168.122.201 49228 125.78.252.115 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV SSL CA C=CN, CN=*.dftoutiao.com 4a:39:84:87:fe:fe:81:f3:a6:11:4d:93:3d:b8:78:2c:9e:4b:ca:de
2020-11-26 10:16:44.310799+0800 192.168.122.201 49257 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.172696+0800 192.168.122.201 49251 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.176068+0800 192.168.122.201 49252 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.176775+0800 192.168.122.201 49253 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:43.404086+0800 192.168.122.201 49243 180.101.49.203 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:43.404552+0800 192.168.122.201 49244 180.101.49.203 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com 1a:fd:44:9a:f4:5b:3e:9d:58:95:e7:5d:0b:e4:ea:a3:54:5d:85:b7
2020-11-26 10:16:44.227026+0800 192.168.122.201 49254 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.479503+0800 192.168.122.201 49260 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.481879+0800 192.168.122.201 49261 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:44.480357+0800 192.168.122.201 49259 114.80.30.36 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fc:b4:0a:45:f2:7e:b3:91:ad:b1:3f:34:a6:25:96:87:35:ce:dd:cb
2020-11-26 10:16:45.211628+0800 192.168.122.201 49266 122.228.115.35 443 TLS 1.2 C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA C=CN, ST=Beijing, O=BeiJing Baidu Netcom Science Technology Co., Ltd, OU=service operation department, CN=*.cdn.bcebos.com 82:64:f3:28:d3:32:6f:b9:6e:06:d3:d5:72:6e:48:d0:04:f7:80:dc
2020-11-26 10:16:45.230374+0800 192.168.122.201 49265 122.228.115.35 443 TLS 1.2 C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA C=CN, ST=Beijing, O=BeiJing Baidu Netcom Science Technology Co., Ltd, OU=service operation department, CN=*.cdn.bcebos.com 82:64:f3:28:d3:32:6f:b9:6e:06:d3:d5:72:6e:48:d0:04:f7:80:dc
2020-11-26 10:16:44.901840+0800 192.168.122.201 49262 106.75.108.118 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV Server CA [Run by the Issuer] CN=*.shaqm.com 56:d6:6b:b2:b7:a2:2d:af:f0:33:f9:8b:d0:db:54:27:c4:47:3d:db
2020-11-26 10:16:44.906099+0800 192.168.122.201 49263 106.75.108.118 443 TLS 1.2 C=CN, O=WoTrus CA Limited, CN=WoTrus DV Server CA [Run by the Issuer] CN=*.shaqm.com 56:d6:6b:b2:b7:a2:2d:af:f0:33:f9:8b:d0:db:54:27:c4:47:3d:db
2020-11-26 10:16:45.344796+0800 192.168.122.201 49267 122.228.115.35 443 TLS 1.2 C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA C=CN, ST=Beijing, O=BeiJing Baidu Netcom Science Technology Co., Ltd, OU=service operation department, CN=*.cdn.bcebos.com 82:64:f3:28:d3:32:6f:b9:6e:06:d3:d5:72:6e:48:d0:04:f7:80:dc

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
抱歉! 没有任何文件投放。
HTML 总结报告
(需15-60分钟同步)		 下载

Processing ( 28.427 seconds )

  • 16.91 NetworkAnalysis
  • 11.392 Suricata
  • 0.099 Static
  • 0.017 AnalysisInfo
  • 0.006 BehaviorAnalysis
  • 0.003 Memory

Signatures ( 2.268 seconds )

  • 2.096 md_url_bl
  • 0.088 md_domain_bl
  • 0.012 antiav_detectreg
  • 0.009 anomaly_persistence_autorun
  • 0.006 antiav_detectfile
  • 0.005 infostealer_ftp
  • 0.005 network_torgateway
  • 0.004 tinba_behavior
  • 0.004 geodo_banking_trojan
  • 0.004 ransomware_extensions
  • 0.004 ransomware_files
  • 0.003 infostealer_bitcoin
  • 0.003 infostealer_im
  • 0.002 rat_nanocore
  • 0.002 cerber_behavior
  • 0.002 antianalysis_detectreg
  • 0.002 antivm_vbox_files
  • 0.002 disables_browser_warn
  • 0.002 infostealer_mail
  • 0.001 network_tor
  • 0.001 betabot_behavior
  • 0.001 ursnif_behavior
  • 0.001 kibex_behavior
  • 0.001 shifu_behavior
  • 0.001 banker_zeus_mutex
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_security
  • 0.001 maldun_malicious_drop_executable_file_to_temp_folder
  • 0.001 ie_martian_children
  • 0.001 md_bad_drop
  • 0.001 recon_checkip

Reporting ( 0.512 seconds )

  • 0.512 ReportHTMLSummary
Task ID 591607
Mongo ID 5fbf10367e769a09e4a4a84a
Cuckoo release 1.4-Maldun