Edit tour

Windows Analysis Report
https://new.aj848310310.workers.dev/

Overview

General Information

Sample URL:	https://new.aj848310310.workers.dev/
Analysis ID:	1446872
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML page contains hidden URLs or javascript code

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2672 --field-trial-handle=2544,i,728762149725907679,15943124602895297035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://new.aj848310310.workers.dev/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://new.aj848310310.workers.dev/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://new.aj848310310.workers.dev/favicon.ico

Avira URL Cloud: Label: phishing

Source: https://global.cctv.com/trending/index.shtml

HTTP Parser: Base64 decoded: A7C,EAAmD;AAC/CM,iBAASC,sBAAT,CAAgC,mBAAhC,EAAqD,CAArD,EAAwDC,KAAxD,CAA8DC,OAA9D,GAAwE,MAAxE;AACH;;AAGDC,kBAAcb,kBAAd;AACH","file":"Inline Babel script","sourcesContent":["\n var show_menu_interval = setInterval(show_menu, 1000);\n ...

Source: https://new.aj848310310.workers.dev/	HTTP Parser: No favicon
Source: https://new.aj848310310.workers.dev/	HTTP Parser: No favicon
Source: https://new.aj848310310.workers.dev/	HTTP Parser: No favicon
Source: https://new.aj848310310.workers.dev/	HTTP Parser: No favicon
Source: https://global.cctv.com/trending/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/trending/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/trending/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/ipanda/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/ipanda/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/ipanda/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/chineseart/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/chineseart/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/tvplay/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/tvplay/index.shtml	HTTP Parser: No favicon
Source: https://global.cctv.com/tvplay/index.shtml	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.7:49753 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_337.2.dr, chromecache_697.2.dr	String found in binary or memory: <li class="language-item"><a href="https://www.facebook.com/cctv.cn" target="_blank"><img src="//p3.img.cctvpic.com/photoAlbum/page/performance/img/2021/12/27/1640578397052_827.png"></a></li> equals www.facebook.com (Facebook)
Source: chromecache_337.2.dr, chromecache_697.2.dr	String found in binary or memory: <li class="language-item"><a href="https://www.youtube.com/channel/UCnAsZ46UTeFEgwOEwMezngQ " target="_blank"><img src="//p5.img.cctvpic.com/photoAlbum/page/performance/img/2021/12/27/1640578423094_12.png"></a></li> equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: new.aj848310310.workers.dev
Source: global traffic	DNS traffic detected: DNS query: r.img.cctvpic.com
Source: global traffic	DNS traffic detected: DNS query: ip.apps.cntv.cn
Source: global traffic	DNS traffic detected: DNS query: js.data.cctv.com
Source: global traffic	DNS traffic detected: DNS query: p2.img.cctvpic.com
Source: global traffic	DNS traffic detected: DNS query: p5.img.cctvpic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: g.alicdn.com
Source: global traffic	DNS traffic detected: DNS query: p3.img.cctvpic.com
Source: global traffic	DNS traffic detected: DNS query: p4.img.cctvpic.com
Source: global traffic	DNS traffic detected: DNS query: p1.img.cctvpic.com
Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: p.data.cctv.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: api.cntv.cn
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: global.cctv.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2672 --field-trial-handle=2544,i,728762149725907679,15943124602895297035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://new.aj848310310.workers.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2672 --field-trial-handle=2544,i,728762149725907679,15943124602895297035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://s2.go-mpulse.net/boomerang/	0%	URL Reputation	safe
https://global.cctv.com/ipanda/pandatroupe/index.shtml	0%	Avira URL Cloud	safe
https://p5.img.cctvpic.com/photoworkspace/2023/12/26/2023122617371612989.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2023/04/20/VIDAxuIyiyt7QMapiIDJGMMl230420.shtml	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/fmspic/2022/08/05/c057341b60de4e8687e2508618d932c5-39142431-0.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/05/21/2024052115272460075.jpg	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/fmspic/2024/03/12/16cf9df4cbc0bc00815174e35b0fb0a4-47926461-0.jpg	0%	Avira URL Cloud	safe
https://new.aj848310310.workers.dev/favicon.ico	100%	Avira URL Cloud	phishing
https://global.cctv.com/2023/12/25/ARTIPAHrV7k9WwD6hAKi6eKO231225.shtml	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/photoworkspace/2024/04/12/2024041217092846255.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/01/17/VIDEpD9hG0nswUh1uQof1rTN240117.shtml	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/fmspic/2024/04/02/8fc646ed2a5d4b8d8e99e9789c70323d-1.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2021/12/28/2021122817473068998.jpg	0%	Avira URL Cloud	safe
https://english.cctv.com/video/globalview/index.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/05/21/VIDEr9o2GnNKFlcscsNdjr8Z240521.shtml	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/fmspic/2024/04/02/5f83215d84148fa5db4a44265fcdce5f-48181935-0.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoAlbum/vms/standard/img/2022/5/24/CHANRGf5JSUjYdxME82Ip95y220524.jpg	0%	Avira URL Cloud	safe
https://p.data.cctv.com/sns.1.1?gmkey=&gokey=%20snsScene%3Dzq%26product%3Dtv%26flashInfo%3D0.0.0%26colorDepth%3D24%26timeZone%3D-4%26unixts%3D1716508937325%26jsver%3Daplus_u%26lver%3D8.10.5%26pver%3Dundefined%26cache%3Dc97ba8d&cna=tq%2FWHjdKEAMCAQgue69jV91J&spm-cnt=0.0.0.0.7a107510LHucOo&logtype=2	0%	Avira URL Cloud	safe
https://global.cctv.com/wehk/index.shtml	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/fmspic/2022/04/29/9b528e50e8db036148b683763e935872-37289385-0.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/fmspic/2022/08/05/c057341b60de4e8687e2508618d932c5-39142431-2.jpg	0%	Avira URL Cloud	safe
https://p3.img.cctvpic.com/fmspic/2022/08/06/8cd22a2cbd084db28b4b74a0ff174876-39156701-0.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/04/02/VIDEo9Y3nUzXnaG6pR3raI56240402.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/05/06/VIDEEn3nIFpB9u9HNPMrHnFP240506.shtml	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/photoworkspace/2024/01/17/2024011717134494609.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2021/12/22/2021122217445963715.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/05/04/VIDE28twbkadHG8MU8TjI3RZ240504.shtml	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/fmspic/2024/01/05/6a89e3822497a02bd8ffa8e80411ab2e-47149875-0.jpg	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/photoworkspace/2024/04/25/2024042517285251075.jpg	0%	Avira URL Cloud	safe
https://p.data.cctv.com/sns.1.1?gmkey=&gokey=%20snsScene%3Dzq%26product%3Dtv%26flashInfo%3D0.0.0%26colorDepth%3D24%26timeZone%3D-4%26jsver%3Daplus_u%26lver%3D8.10.5%26pver%3Dundefined%26cache%3Dec95899&cna=&spm-cnt=undefined&logtype=2	0%	Avira URL Cloud	safe
https://p3.img.cctvpic.com/fmspic/2024/05/13/241a5860dad94059827dd818a1720f09-300.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/cmsdatainterface/guowai/new/page/PAGEZ8HZ8JSmzO1F6GiAYTi9211130_1.jsonp	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2021/12/22/2021122217390911215.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/04/11/VIDE3TMPYkusvOilxwyl7Oiw240411.shtml	0%	Avira URL Cloud	safe
https://tv.cctv.com/cctv4asia/	0%	Avira URL Cloud	safe
https://p5.img.cctvpic.com/photoworkspace/2024/05/15/2024051517530410112.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/04/24/2024042417223463693.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/03/29/VIDEc2K54nLkVyqgfIoZTUcx240329.shtml	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2024/04/30/2024043017005531784.jpg	0%	Avira URL Cloud	safe
https://www.cctv.com	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoAlbum/page/performance/img/2024/5/16/1715852415970_283.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/fmspic/2024/01/23/acf7f77e731445598e19b5cf1303ba81-300.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/fmspic/2024/04/23/1753a2b43cc2e86df0e6a8c03c11fdfd-48445709-2.jpg	0%	Avira URL Cloud	safe
https://p5.img.cctvpic.com/photoworkspace/2024/04/09/2024040917140958896.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoAlbum/vms/standard/img/2022/1/5/VSETKUVzVYGlzKZiOTl49AmU220105.jpg	0%	Avira URL Cloud	safe
https://p5.img.cctvpic.com/fmspic/2024/05/16/472975ddabc5117b67d7866ca21b4c39-48722823-2.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2023/09/05/ARTI4KtC8spNw8I1CtnW8w0U230905.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/04/02/VIDEhqpbiRO8V2JdjHfdjht9240402.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2023/10/31/ARTILN7w2kxW4ahvrRh9QDGe231031.shtml	0%	Avira URL Cloud	safe
https://p3.img.cctvpic.com/photoworkspace/2024/05/08/2024050817522856882.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2022/05/24/VIDAGyhr0ik6vae1Xc7keg5F220524.shtml	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/fmspic/2024/03/07/60b048eb81d6ce9ff4c9ef718aed611b-47870479-0.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/fmspic/2024/02/07/f39d33951d92460c9ef54060da2abe42-1.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2023/12/29/VIDEHHwUJP59d8InCf1i6Xim231229.shtml	0%	Avira URL Cloud	safe
https://english.cctv.com/video/chinaqa/index.shtml	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/03/27/2024032711211557133.jpg	0%	Avira URL Cloud	safe
https://p3.img.cctvpic.com/fmspic/2024/04/16/9771d3d6054a4552b2c3695cb07e1c69-1.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/04/26/2024042617104960345.jpg	0%	Avira URL Cloud	safe
https://p5.img.cctvpic.com/photoworkspace/2023/12/29/2023122916374482729.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/fmspic/2024/05/17/9eddaa7d732c49f38c297648109130fd-1.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2024/05/22/2024052210125535078.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2023/09/05/ARTIpJ4J2pvXIrWVJsaN71e1230905.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/ipanda/pandastories/index.shtml	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2021/12/28/2021122816381157224.jpg	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/photoworkspace/2024/03/07/2024030717053588555.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2024/05/16/2024051617372282098.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/fmspic/2024/05/20/a7f30a1dc32842aba0090418e5deaaf9-1.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2024/01/30/2024013016195350878.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/crossstrait/index.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/zgmk/index.shtml	0%	Avira URL Cloud	safe
https://p3.img.cctvpic.com/photoworkspace/2024/04/02/2024040211345410400.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2023/09/05/VIDAwicmgfLWTyM7l8J1krrM230905.shtml	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2024/03/05/2024030518273331149.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2024/04/11/2024041117290917838.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2022/06/09/VIDEJ1AnjlsMsn61leYcYTLC220609.shtml	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/03/12/2024031217375413883.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/05/11/2024051117253591294.jpg	0%	Avira URL Cloud	safe
https://p3.img.cctvpic.com/fmspic/2021/02/10/deda41ec6fdd538b8ce6ec7de3938ed4-31903519-2.jpg	0%	Avira URL Cloud	safe
https://p5.img.cctvpic.com/fmspic/2024/03/27/fd05f8b0672543969dfe35def3e066ab-1.jpg	0%	Avira URL Cloud	safe
https://english.cctv.com	0%	Avira URL Cloud	safe
https://p5.img.cctvpic.com/photoworkspace/2024/04/15/2024041517380644520.jpg	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/photoworkspace/2024/02/07/2024020711363569930.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/fmspic/2024/01/17/6d69dbf2e48866041c550d8f8c70a793-47297677-0.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoAlbum/page/performance/img/2021/12/16/1639642349883_416.png	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/05/22/VIDEAiBUWnXveGzLMi6q0yLJ240522.shtml	0%	Avira URL Cloud	safe
https://english.cctv.com/2024/05/22/VIDE5na0sYqb4Gh4jCC0lIWi240522.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/02/07/VIDEj9ByOZYACxoG4uOhCqAt240207.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/04/28/VIDEJYsLZg7f9oAcMfh7MXWE240428.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2023/10/31/ARTIswrGcyiPDlLRNyTDXxlp231031.shtml	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/02/01/VIDEidKRV2bBlbCnt87PtG0P240201.shtml	0%	Avira URL Cloud	safe
https://p4.img.cctvpic.com/photoworkspace/2024/04/02/2024040217231729582.jpg	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/04/19/2024041917463078304.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/04/16/VIDExdOUgj5Z2Og3yteEBPYz240416.shtml	0%	Avira URL Cloud	safe
https://p2.img.cctvpic.com/photoworkspace/2024/05/06/2024050618341420997.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2021/12/22/2021122217424593634.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2022/02/24/VIDA3zs6lcqv8Zr0KCPHLahS220224.shtml	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/fmspic/2022/08/13/85551ae94e9644179999536d4061a39d-39277761-2.jpg	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/photoworkspace/2024/04/09/2024040917284475414.jpg	0%	Avira URL Cloud	safe
https://global.cctv.com/2024/05/09/VIDEJC1ilIn1vn7tNjH6rL0g240509.shtml	0%	Avira URL Cloud	safe
https://p1.img.cctvpic.com/fmspic/2024/02/28/e450b489c68a1cc7625ee50e25663ae3-47778621-2.jpg	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
p2.img.cctvpic.com.wscdns.com	163.171.147.15	true	false	unknown
g.alicdn.com.danuoyi.alicdn.com	163.181.56.190	true	false	unknown
p.data.cctv.com	39.107.0.244	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
p1.img.cctvpic.com.wscdns.com	163.171.147.15	true	false	unknown
new.aj848310310.workers.dev	188.114.96.3	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
windowsupdatebg.s.llnwi.net	178.79.208.1	true	false	unknown
js.data.cctv.com	unknown	unknown	false	unknown
p3.img.cctvpic.com	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
p4.img.cctvpic.com	unknown	unknown	false	unknown
ip.apps.cntv.cn	unknown	unknown	false	unknown
time.windows.com	unknown	unknown	false	unknown
p1.img.cctvpic.com	unknown	unknown	false	unknown
r.img.cctvpic.com	unknown	unknown	false	unknown
p2.img.cctvpic.com	unknown	unknown	false	unknown
g.alicdn.com	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown
p5.img.cctvpic.com	unknown	unknown	false	unknown
global.cctv.com	unknown	unknown	false	unknown
api.cntv.cn	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://new.aj848310310.workers.dev/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/05/21/2024052115272460075.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2021/12/28/2021122817473068998.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoAlbum/vms/standard/img/2022/5/24/CHANRGf5JSUjYdxME82Ip95y220524.jpg	false	Avira URL Cloud: safe	unknown
https://p.data.cctv.com/sns.1.1?gmkey=&gokey=%20snsScene%3Dzq%26product%3Dtv%26flashInfo%3D0.0.0%26colorDepth%3D24%26timeZone%3D-4%26unixts%3D1716508937325%26jsver%3Daplus_u%26lver%3D8.10.5%26pver%3Dundefined%26cache%3Dc97ba8d&cna=tq%2FWHjdKEAMCAQgue69jV91J&spm-cnt=0.0.0.0.7a107510LHucOo&logtype=2	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2021/12/22/2021122217445963715.jpg	false	Avira URL Cloud: safe	unknown
https://p.data.cctv.com/sns.1.1?gmkey=&gokey=%20snsScene%3Dzq%26product%3Dtv%26flashInfo%3D0.0.0%26colorDepth%3D24%26timeZone%3D-4%26jsver%3Daplus_u%26lver%3D8.10.5%26pver%3Dundefined%26cache%3Dec95899&cna=&spm-cnt=undefined&logtype=2	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2021/12/22/2021122217390911215.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2024/04/30/2024043017005531784.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoAlbum/page/performance/img/2024/5/16/1715852415970_283.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoAlbum/vms/standard/img/2022/1/5/VSETKUVzVYGlzKZiOTl49AmU220105.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/03/27/2024032711211557133.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/fmspic/2024/05/17/9eddaa7d732c49f38c297648109130fd-1.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2021/12/28/2021122816381157224.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2024/05/22/2024052210125535078.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2024/05/16/2024051617372282098.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/fmspic/2024/05/20/a7f30a1dc32842aba0090418e5deaaf9-1.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2024/01/30/2024013016195350878.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/03/12/2024031217375413883.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2024/03/05/2024030518273331149.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/05/11/2024051117253591294.jpg	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoAlbum/page/performance/img/2021/12/16/1639642349883_416.png	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/05/06/2024050618341420997.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2021/12/22/2021122217424593634.jpg	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2024/04/09/2024040917284475414.jpg	false	Avira URL Cloud: safe	unknown

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: new.aj848310310.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2023/2/9/1675908806957_283.jpeg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2021/12/16/1639647978733_722.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2021/12/16/1639647987066_668.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/5/16/1715852523327_201.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dingding/open-develop/1.9.0/dingtalk.js HTTP/1.1Host: g.alicdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/more_block.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/5/11/1715413785495_157.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/more_white.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoworkspace/2024/04/17/2024041716582311144.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoworkspace/2024/05/06/2024050618341420997.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2023/2/9/1675908806957_283.jpeg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2021/12/16/1639647978733_722.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/4/29/1714384358205_528.jpg HTTP/1.1Host: p1.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/1/5/1704444622973_15.jpg HTTP/1.1Host: p1.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/u301.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/u309.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/headerDown.png?a HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://r.img.cctvpic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/5/16/1715852415970_283.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/4/9/1712655231625_491.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/4/17/1713341021013_626.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2022/10/28/1666941831543_1.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2021/12/16/1639647987066_668.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoworkspace/2024/05/22/2024052210120068335.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/5/16/1715852523327_201.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoworkspace/2024/05/22/2024052210125535078.jpg HTTP/1.1Host: p1.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/1/5/1704444622973_15.jpg HTTP/1.1Host: p1.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/4/29/1714384358205_528.jpg HTTP/1.1Host: p1.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoworkspace/2024/05/21/2024052110592369702.jpg HTTP/1.1Host: p1.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoworkspace/2024/05/21/2024052115272460075.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/more_block.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/more_white.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2024/5/11/1715413785495_157.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/u309.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/u301.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/qrCode.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/videoTime.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoworkspace/2024/04/17/2024041716582311144.jpg HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photoAlbum/page/performance/img/2021/12/16/1639642349883_416.png HTTP/1.1Host: p2.img.cctvpic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.aj848310310.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

IP	Domain	Country	ASN	ASN Name	Malicious
163.171.147.15	p2.img.cctvpic.com.wscdns.com	European Union	54994	QUANTILNETWORKSUS	false
115.182.9.46	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
163.171.132.42	unknown	European Union	54994	QUANTILNETWORKSUS	false
39.107.0.195	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
163.181.56.190	g.alicdn.com.danuoyi.alicdn.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
39.107.0.244	p.data.cctv.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
188.114.96.3	new.aj848310310.workers.dev	European Union	13335	CLOUDFLARENETUS	false
163.171.131.248	unknown	European Union	54994	QUANTILNETWORKSUS	false

IP
192.168.2.7
192.168.2.4

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1446872
Start date and time:	2024-05-24 00:21:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://new.aj848310310.workers.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@20/729@103/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://global.cctv.com/trending/index.shtml Browse: https://global.cctv.com/ipanda/index.shtml Browse: https://global.cctv.com/chineseart/index.shtml Browse: https://global.cctv.com/tvplay/index.shtml

Name	Source	Malicious	Antivirus Detection	Reputation
https://global.cctv.com/2023/04/20/VIDAxuIyiyt7QMapiIDJGMMl230420.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/fmspic/2022/08/05/c057341b60de4e8687e2508618d932c5-39142431-0.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/01/17/VIDEpD9hG0nswUh1uQof1rTN240117.shtml	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/ipanda/pandatroupe/index.shtml	chromecache_697.2.dr	false	Avira URL Cloud: safe	unknown
https://p5.img.cctvpic.com/photoworkspace/2023/12/26/2023122617371612989.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://s2.go-mpulse.net/boomerang/	chromecache_337.2.dr, chromecache_697.2.dr	false	URL Reputation: safe	unknown
https://p4.img.cctvpic.com/photoworkspace/2024/04/12/2024041217092846255.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/fmspic/2024/03/12/16cf9df4cbc0bc00815174e35b0fb0a4-47926461-0.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2023/12/25/ARTIPAHrV7k9WwD6hAKi6eKO231225.shtml	chromecache_487.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/fmspic/2024/04/02/8fc646ed2a5d4b8d8e99e9789c70323d-1.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/05/21/VIDEr9o2GnNKFlcscsNdjr8Z240521.shtml	chromecache_697.2.dr	false	Avira URL Cloud: safe	unknown
https://english.cctv.com/video/globalview/index.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/fmspic/2024/04/02/5f83215d84148fa5db4a44265fcdce5f-48181935-0.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/wehk/index.shtml	chromecache_337.2.dr, chromecache_697.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/fmspic/2022/04/29/9b528e50e8db036148b683763e935872-37289385-0.jpg	chromecache_412.2.dr, chromecache_544.2.dr	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/fmspic/2022/08/05/c057341b60de4e8687e2508618d932c5-39142431-2.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/05/04/VIDE28twbkadHG8MU8TjI3RZ240504.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/photoworkspace/2024/01/17/2024011717134494609.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/05/06/VIDEEn3nIFpB9u9HNPMrHnFP240506.shtml	chromecache_697.2.dr, chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p3.img.cctvpic.com/fmspic/2022/08/06/8cd22a2cbd084db28b4b74a0ff174876-39156701-0.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/fmspic/2024/01/05/6a89e3822497a02bd8ffa8e80411ab2e-47149875-0.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/04/02/VIDEo9Y3nUzXnaG6pR3raI56240402.shtml	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/photoworkspace/2024/04/25/2024042517285251075.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://p3.img.cctvpic.com/fmspic/2024/05/13/241a5860dad94059827dd818a1720f09-300.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/cmsdatainterface/guowai/new/page/PAGEZ8HZ8JSmzO1F6GiAYTi9211130_1.jsonp	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/04/11/VIDE3TMPYkusvOilxwyl7Oiw240411.shtml	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://tv.cctv.com/cctv4asia/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/04/24/2024042417223463693.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://p5.img.cctvpic.com/photoworkspace/2024/05/15/2024051517530410112.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/fmspic/2024/01/23/acf7f77e731445598e19b5cf1303ba81-300.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/03/29/VIDEc2K54nLkVyqgfIoZTUcx240329.shtml	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://www.cctv.com	chromecache_337.2.dr, chromecache_697.2.dr	false	Avira URL Cloud: safe	unknown
https://p5.img.cctvpic.com/photoworkspace/2024/04/09/2024040917140958896.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/fmspic/2024/04/23/1753a2b43cc2e86df0e6a8c03c11fdfd-48445709-2.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2023/09/05/ARTI4KtC8spNw8I1CtnW8w0U230905.shtml	chromecache_487.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2023/10/31/ARTILN7w2kxW4ahvrRh9QDGe231031.shtml	chromecache_487.2.dr	false	Avira URL Cloud: safe	unknown
https://p5.img.cctvpic.com/fmspic/2024/05/16/472975ddabc5117b67d7866ca21b4c39-48722823-2.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/04/02/VIDEhqpbiRO8V2JdjHfdjht9240402.shtml	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://p3.img.cctvpic.com/photoworkspace/2024/05/08/2024050817522856882.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2022/05/24/VIDAGyhr0ik6vae1Xc7keg5F220524.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/fmspic/2024/02/07/f39d33951d92460c9ef54060da2abe42-1.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/fmspic/2024/03/07/60b048eb81d6ce9ff4c9ef718aed611b-47870479-0.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://english.cctv.com/video/chinaqa/index.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2023/12/29/VIDEHHwUJP59d8InCf1i6Xim231229.shtml	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/04/26/2024042617104960345.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://p3.img.cctvpic.com/fmspic/2024/04/16/9771d3d6054a4552b2c3695cb07e1c69-1.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p5.img.cctvpic.com/photoworkspace/2023/12/29/2023122916374482729.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2023/09/05/ARTIpJ4J2pvXIrWVJsaN71e1230905.shtml	chromecache_487.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/ipanda/pandastories/index.shtml	chromecache_697.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/photoworkspace/2024/03/07/2024030717053588555.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/crossstrait/index.shtml	chromecache_697.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/zgmk/index.shtml	chromecache_337.2.dr, chromecache_697.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2022/06/09/VIDEJ1AnjlsMsn61leYcYTLC220609.shtml	chromecache_412.2.dr, chromecache_544.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2023/09/05/VIDAwicmgfLWTyM7l8J1krrM230905.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p3.img.cctvpic.com/photoworkspace/2024/04/02/2024040211345410400.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/photoworkspace/2024/04/11/2024041117290917838.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://p3.img.cctvpic.com/fmspic/2021/02/10/deda41ec6fdd538b8ce6ec7de3938ed4-31903519-2.jpg	chromecache_412.2.dr, chromecache_544.2.dr	false	Avira URL Cloud: safe	unknown
https://p5.img.cctvpic.com/fmspic/2024/03/27/fd05f8b0672543969dfe35def3e066ab-1.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://english.cctv.com	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/photoworkspace/2024/02/07/2024020711363569930.jpg	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/fmspic/2024/01/17/6d69dbf2e48866041c550d8f8c70a793-47297677-0.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://p5.img.cctvpic.com/photoworkspace/2024/04/15/2024041517380644520.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/05/22/VIDEAiBUWnXveGzLMi6q0yLJ240522.shtml	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://english.cctv.com/2024/05/22/VIDE5na0sYqb4Gh4jCC0lIWi240522.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/04/28/VIDEJYsLZg7f9oAcMfh7MXWE240428.shtml	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/02/07/VIDEj9ByOZYACxoG4uOhCqAt240207.shtml	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2023/10/31/ARTIswrGcyiPDlLRNyTDXxlp231031.shtml	chromecache_487.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/02/01/VIDEidKRV2bBlbCnt87PtG0P240201.shtml	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://p4.img.cctvpic.com/photoworkspace/2024/04/02/2024040217231729582.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/04/16/VIDExdOUgj5Z2Og3yteEBPYz240416.shtml	chromecache_337.2.dr, chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://p2.img.cctvpic.com/photoworkspace/2024/04/19/2024041917463078304.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2022/02/24/VIDA3zs6lcqv8Zr0KCPHLahS220224.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/fmspic/2022/08/13/85551ae94e9644179999536d4061a39d-39277761-2.jpg	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://global.cctv.com/2024/05/09/VIDEJC1ilIn1vn7tNjH6rL0g240509.shtml	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
https://p1.img.cctvpic.com/fmspic/2024/02/28/e450b489c68a1cc7625ee50e25663ae3-47778621-2.jpg	chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 460x560, components 3
Category:	downloaded
Size (bytes):	167460
Entropy (8bit):	7.979162626295513
Encrypted:	false
SSDEEP:	3072:FwwgrxXmMhVR7I8bQGZIZjylY+a4vQTTnWHANd5h2TtepCt0qZA5WHXx671B:2f9XmMhVpxeAa0QuHg5h2TtaqZFHKB
MD5:	5C14AF5C2F016ABC44D3B036FCCBAAD9
SHA1:	F3B49EE2CF5686E7ED3EEF31023F37F7295C07C7
SHA-256:	442D9C91565B5FE96F28096C7BA54C0B44B9632B164C9563525231953F5052D7
SHA-512:	CC05C0926CB3C5ECF47A212C54BD53434829CF339D22D7BBF1A81172348723663E222B7A7B0760E5E3520ECC9E56764F24CA3E4E0603B5F3D3219ADC27DB5F8D
Malicious:	false
Reputation:	low
URL:	https://p4.img.cctvpic.com/photoAlbum/vms/standard/img/2022/1/28/VSETfa5vvvD74OgqRvL4ufW3220128.jpg
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:d9560547-3429-734b-bd7c-f926206be432" xmpMM:DocumentID="xmp.did:E9BB0C567F5311ECB3C9AA3C093844C1" xmpMM:InstanceID="xmp.iid:E9BB0C557F5311ECB3C9AA3C093844C1" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6790b691-215d-a74e-9d30-a39013397865" stRef:documentID="adobe:docid:photoshop:5349f8a1-ae59-0447-a277-39d36b4c21a1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 24, 2024 00:22:08.066781998 CEST	192.168.2.7	1.1.1.1	0xa22b	Standard query (0)	new.aj848310310.workers.dev	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:08.067259073 CEST	192.168.2.7	1.1.1.1	0x8cc5	Standard query (0)	new.aj848310310.workers.dev	65	IN (0x0001)	false
May 24, 2024 00:22:08.810615063 CEST	192.168.2.7	1.1.1.1	0x8d3	Standard query (0)	r.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:08.810859919 CEST	192.168.2.7	1.1.1.1	0x2dca	Standard query (0)	r.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:08.811908960 CEST	192.168.2.7	1.1.1.1	0xf394	Standard query (0)	ip.apps.cntv.cn	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:08.812242031 CEST	192.168.2.7	1.1.1.1	0x6049	Standard query (0)	ip.apps.cntv.cn	65	IN (0x0001)	false
May 24, 2024 00:22:08.818594933 CEST	192.168.2.7	1.1.1.1	0xe6e4	Standard query (0)	js.data.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:08.818773031 CEST	192.168.2.7	1.1.1.1	0x1747	Standard query (0)	js.data.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:22:09.135951042 CEST	192.168.2.7	1.1.1.1	0xc1c1	Standard query (0)	p2.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:09.136018038 CEST	192.168.2.7	1.1.1.1	0xbab2	Standard query (0)	p2.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:10.489268064 CEST	192.168.2.7	1.1.1.1	0x6346	Standard query (0)	p5.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:10.489726067 CEST	192.168.2.7	1.1.1.1	0x6a27	Standard query (0)	p5.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:10.645409107 CEST	192.168.2.7	1.1.1.1	0x447e	Standard query (0)	p2.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:10.645524025 CEST	192.168.2.7	1.1.1.1	0x43ab	Standard query (0)	p2.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:11.369251013 CEST	192.168.2.7	1.1.1.1	0x8f0b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:11.369380951 CEST	192.168.2.7	1.1.1.1	0xda93	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 00:22:12.413216114 CEST	192.168.2.7	1.1.1.1	0x8f07	Standard query (0)	g.alicdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:12.413350105 CEST	192.168.2.7	1.1.1.1	0x4edc	Standard query (0)	g.alicdn.com	65	IN (0x0001)	false
May 24, 2024 00:22:12.417098999 CEST	192.168.2.7	1.1.1.1	0x5a9c	Standard query (0)	p3.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:12.417236090 CEST	192.168.2.7	1.1.1.1	0x1c69	Standard query (0)	p3.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:12.423871040 CEST	192.168.2.7	1.1.1.1	0x550b	Standard query (0)	p4.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:12.425143957 CEST	192.168.2.7	1.1.1.1	0x477a	Standard query (0)	p4.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:13.051515102 CEST	192.168.2.7	1.1.1.1	0xcb26	Standard query (0)	p1.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:13.051654100 CEST	192.168.2.7	1.1.1.1	0x9eb6	Standard query (0)	p1.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:13.342546940 CEST	192.168.2.7	1.1.1.1	0xc127	Standard query (0)	p5.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:13.343111992 CEST	192.168.2.7	1.1.1.1	0x2462	Standard query (0)	p5.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:17.172930956 CEST	192.168.2.7	1.1.1.1	0xd913	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:17.294033051 CEST	192.168.2.7	1.1.1.1	0x2c0f	Standard query (0)	p3.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:17.294194937 CEST	192.168.2.7	1.1.1.1	0x2b80	Standard query (0)	p3.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:17.296478987 CEST	192.168.2.7	1.1.1.1	0x6314	Standard query (0)	p4.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:17.296603918 CEST	192.168.2.7	1.1.1.1	0x6a05	Standard query (0)	p4.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:17.594846010 CEST	192.168.2.7	1.1.1.1	0x4d54	Standard query (0)	p1.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:17.594968081 CEST	192.168.2.7	1.1.1.1	0xc59c	Standard query (0)	p1.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:21.113862038 CEST	192.168.2.7	1.1.1.1	0x5a33	Standard query (0)	p.data.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:21.114518881 CEST	192.168.2.7	1.1.1.1	0x9796	Standard query (0)	p.data.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:22:21.142059088 CEST	192.168.2.7	1.1.1.1	0x9df6	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:21.142899036 CEST	192.168.2.7	1.1.1.1	0xd687	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
May 24, 2024 00:22:23.157624960 CEST	192.168.2.7	1.1.1.1	0xc7a9	Standard query (0)	api.cntv.cn	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:23.157804966 CEST	192.168.2.7	1.1.1.1	0x4e73	Standard query (0)	api.cntv.cn	65	IN (0x0001)	false
May 24, 2024 00:22:23.158658028 CEST	192.168.2.7	1.1.1.1	0xa349	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:23.159104109 CEST	192.168.2.7	1.1.1.1	0xa25e	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
May 24, 2024 00:22:23.959264040 CEST	192.168.2.7	1.1.1.1	0xc6e1	Standard query (0)	global.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:23.959445000 CEST	192.168.2.7	1.1.1.1	0xca4	Standard query (0)	global.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:22:29.453489065 CEST	192.168.2.7	1.1.1.1	0x6c14	Standard query (0)	new.aj848310310.workers.dev	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:29.453886032 CEST	192.168.2.7	1.1.1.1	0x39e9	Standard query (0)	new.aj848310310.workers.dev	65	IN (0x0001)	false
May 24, 2024 00:22:36.831034899 CEST	192.168.2.7	1.1.1.1	0x70e4	Standard query (0)	global.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:36.831450939 CEST	192.168.2.7	1.1.1.1	0xbce	Standard query (0)	global.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:22:39.387849092 CEST	192.168.2.7	1.1.1.1	0x476a	Standard query (0)	r.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:39.388340950 CEST	192.168.2.7	1.1.1.1	0x5ed6	Standard query (0)	r.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:39.392571926 CEST	192.168.2.7	1.1.1.1	0x1ae2	Standard query (0)	ip.apps.cntv.cn	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:39.392971039 CEST	192.168.2.7	1.1.1.1	0x7130	Standard query (0)	ip.apps.cntv.cn	65	IN (0x0001)	false
May 24, 2024 00:22:39.404632092 CEST	192.168.2.7	1.1.1.1	0x5997	Standard query (0)	js.data.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:39.404952049 CEST	192.168.2.7	1.1.1.1	0x385	Standard query (0)	js.data.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:22:41.055105925 CEST	192.168.2.7	1.1.1.1	0x56df	Standard query (0)	p2.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:41.055418968 CEST	192.168.2.7	1.1.1.1	0xe317	Standard query (0)	p2.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:41.808376074 CEST	192.168.2.7	1.1.1.1	0x6acb	Standard query (0)	g.alicdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:41.808854103 CEST	192.168.2.7	1.1.1.1	0x1b20	Standard query (0)	g.alicdn.com	65	IN (0x0001)	false
May 24, 2024 00:22:41.809257030 CEST	192.168.2.7	1.1.1.1	0x10ab	Standard query (0)	p3.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:41.809376955 CEST	192.168.2.7	1.1.1.1	0xf769	Standard query (0)	p3.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:41.810051918 CEST	192.168.2.7	1.1.1.1	0x4a53	Standard query (0)	p5.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:41.810403109 CEST	192.168.2.7	1.1.1.1	0xa31e	Standard query (0)	p5.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:43.349849939 CEST	192.168.2.7	1.1.1.1	0x4d04	Standard query (0)	p4.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:43.351279974 CEST	192.168.2.7	1.1.1.1	0x398d	Standard query (0)	p4.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:44.374550104 CEST	192.168.2.7	1.1.1.1	0xe277	Standard query (0)	p.data.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:44.374742031 CEST	192.168.2.7	1.1.1.1	0xfde5	Standard query (0)	p.data.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:22:44.375267982 CEST	192.168.2.7	1.1.1.1	0xd3c5	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:44.375448942 CEST	192.168.2.7	1.1.1.1	0x70b1	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
May 24, 2024 00:22:44.719383001 CEST	192.168.2.7	1.1.1.1	0x5ae6	Standard query (0)	api.cntv.cn	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:44.719908953 CEST	192.168.2.7	1.1.1.1	0xc979	Standard query (0)	api.cntv.cn	65	IN (0x0001)	false
May 24, 2024 00:22:45.995578051 CEST	192.168.2.7	1.1.1.1	0xd56b	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:45.995928049 CEST	192.168.2.7	1.1.1.1	0x6d5f	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
May 24, 2024 00:22:46.527307987 CEST	192.168.2.7	1.1.1.1	0x331b	Standard query (0)	p.data.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:46.527553082 CEST	192.168.2.7	1.1.1.1	0xbe23	Standard query (0)	p.data.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:22:47.405652046 CEST	192.168.2.7	1.1.1.1	0x8095	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:47.405916929 CEST	192.168.2.7	1.1.1.1	0xf8f4	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
May 24, 2024 00:22:48.113867998 CEST	192.168.2.7	1.1.1.1	0xd2d3	Standard query (0)	p1.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:48.114053965 CEST	192.168.2.7	1.1.1.1	0x1893	Standard query (0)	p1.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:22:48.127374887 CEST	192.168.2.7	1.1.1.1	0x8eef	Standard query (0)	global.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:22:48.127561092 CEST	192.168.2.7	1.1.1.1	0x9aaa	Standard query (0)	global.cctv.com	65	IN (0x0001)	false
May 24, 2024 00:23:13.256709099 CEST	192.168.2.7	1.1.1.1	0x2373	Standard query (0)	p2.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:13.256877899 CEST	192.168.2.7	1.1.1.1	0x19bc	Standard query (0)	p2.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:32.026289940 CEST	192.168.2.7	1.1.1.1	0xdeac	Standard query (0)	p4.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:32.026448965 CEST	192.168.2.7	1.1.1.1	0x7688	Standard query (0)	p4.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:32.033020020 CEST	192.168.2.7	1.1.1.1	0x6bea	Standard query (0)	p3.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:32.033324957 CEST	192.168.2.7	1.1.1.1	0x3e57	Standard query (0)	p3.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:32.039769888 CEST	192.168.2.7	1.1.1.1	0x31a0	Standard query (0)	p1.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:32.040091991 CEST	192.168.2.7	1.1.1.1	0xc945	Standard query (0)	p1.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:32.079029083 CEST	192.168.2.7	1.1.1.1	0x1ca8	Standard query (0)	p5.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:32.079173088 CEST	192.168.2.7	1.1.1.1	0x5628	Standard query (0)	p5.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:48.442349911 CEST	192.168.2.7	1.1.1.1	0xcffd	Standard query (0)	api.cntv.cn	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:48.442498922 CEST	192.168.2.7	1.1.1.1	0xfb2	Standard query (0)	api.cntv.cn	65	IN (0x0001)	false
May 24, 2024 00:23:51.290205956 CEST	192.168.2.7	1.1.1.1	0x5a74	Standard query (0)	p1.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:51.290710926 CEST	192.168.2.7	1.1.1.1	0xc240	Standard query (0)	p1.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:51.291583061 CEST	192.168.2.7	1.1.1.1	0xadda	Standard query (0)	p5.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:51.292172909 CEST	192.168.2.7	1.1.1.1	0xb501	Standard query (0)	p5.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:51.292702913 CEST	192.168.2.7	1.1.1.1	0x3349	Standard query (0)	p2.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:51.293256044 CEST	192.168.2.7	1.1.1.1	0x9496	Standard query (0)	p2.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:51.293991089 CEST	192.168.2.7	1.1.1.1	0x5615	Standard query (0)	p4.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:51.294631958 CEST	192.168.2.7	1.1.1.1	0x6709	Standard query (0)	p4.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:52.720978975 CEST	192.168.2.7	1.1.1.1	0x6f01	Standard query (0)	p3.img.cctvpic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:52.721419096 CEST	192.168.2.7	1.1.1.1	0xe75d	Standard query (0)	p3.img.cctvpic.com	65	IN (0x0001)	false
May 24, 2024 00:23:53.516362906 CEST	192.168.2.7	1.1.1.1	0xc284	Standard query (0)	global.cctv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:23:53.516731977 CEST	192.168.2.7	1.1.1.1	0xc06f	Standard query (0)	global.cctv.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:08 UTC	670	OUT	GET / HTTP/1.1 Host: new.aj848310310.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:08 UTC	988	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 888871684b8e0f98-EWR CF-Cache-Status: DYNAMIC Cache-Control: max-age=180 Expires: Thu, 23 May 2024 22:25:08 GMT Vary: Accept-Encoding cdncip: 8.46.123.175 cdnsip: 23.48.224.115 server-timing: cdn-cache; desc=HIT server-timing: edge; dur=1 server-timing: ak_p; desc="1716502928708_398664787_426811935_25_616_0_3_15";dur=1 x-ak-request-id: 0.5324c317.1716502928.1970a21f x-akamai-transformed: 9 - 0 pmb=mRUM,1 x-ua-compatible: IE=Edge,chrome=1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vjqK9EvRoZxSpXSNdGC3xXNqcVWx7yzcen0fDrp%2BVQ9uaAo%2FvJqvRwdYbC8%2FNDHQ3fUCgE%2Fm8g4HZyGtsD9cMbE7hsFyVrG%2FXfaxL%2BRLoeCgHpdfOo0RY24RIqcQxnkIESgZUSItvsXHqTAr3y4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-23 22:22:08 UTC	381	IN	Data Raw: 37 62 64 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 0a 20 3c 68 65 61 64 3e 20 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 61 67 65 2d 69 64 22 20 69 64 3d 22 70 61 67 65 2d 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 50 41 47 45 4f 54 66 74 4d 7a 4b 63 36 50 75 57 46 42 41 32 36 42 6f 70 32 31 31 32 31 36 22 3e 20 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 6e 64 65 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 6b 69 74 22 3e 20 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 20 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 Data Ascii: 7bd5<!doctype html><html lang="en"> <head> <meta name="page-id" id="page-id" content="PAGEOTftMzKc6PuWFBA26Bop211216"> <meta name="renderer" content="webkit"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <meta charset="U
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 20 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 e5 a4 ae e8 a7 86 e7 bd 91 e6 b5 b7 e5 a4 96 e9 a2 91 e9 81 93 20 e4 b8 ad e5 9b bd e4 bc a0 e7 bb 9f e6 96 87 e5 8c 96 20 e8 89 ba e6 9c af 20 e7 be 8e e9 a3 9f 20 e7 94 9f e6 80 81 e4 bf 9d e6 8a a4 22 3e 20 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 e5 a4 ae e8 a7 86 e7 bd 91 e6 b5 b7 e5 a4 96 e9 a2 91 e9 81 93 ef bc 88 67 6c 6f 62 61 6c 2e 63 63 74 76 2e 63 6f 6d ef bc 89 e6 98 af e5 a4 ae e8 a7 86 e7 bd 91 e6 97 97 e4 b8 8b e4 bb a5 e9 9d a2 e5 90 91 e6 b5 b7 e5 a4 96 e7 94 a8 e6 88 b7 e4 b8 ba e4 b8 bb ef bc 8c e5 af b9 e5 a4 96 e5 b1 95 e7 a4 ba e6 96 b0 e6 97 b6 Data Ascii: itle> <meta name="keywords" content=" "> <meta name="description" content="global.cctv.com
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 57 69 64 74 68 20 3d 20 64 6f 63 45 6c 2e 63 6c 69 65 6e 74 57 69 64 74 68 20 3e 20 37 35 30 20 3f 20 37 35 30 20 3a 20 64 6f 63 45 6c 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 63 6c 69 65 6e 74 57 69 64 74 68 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 45 6c 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 20 3d 20 35 30 20 2a 20 28 63 6c 69 65 6e 74 57 69 64 74 68 20 2f 20 37 35 30 29 20 2b 20 27 70 78 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: function () { var clientWidth = docEl.clientWidth > 750 ? 750 : docEl.clientWidth; if (!clientWidth) return; docEl.style.fontSize = 50 * (clientWidth / 750) + 'px'; };
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 65 72 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 6f 29 3b 74 72 79 7b 5f 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 4f 29 7b 69 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2c 72 2e 73 72 63 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 6f 70 65 6e 28 29 3b 64 2e 64 6f 6d 61 69 6e 3d 27 22 2b 69 2b 22 27 3b 76 6f 69 64 28 30 29 3b 22 2c 5f 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7d 5f 2e 6f 70 65 6e 28 Data Ascii: er:0;display:none;",o=document.getElementsByTagName("script")[0],o.parentNode.insertBefore(r,o);try{_=r.contentWindow.document}catch(O){i=document.domain,r.src="javascript:var d=document.open();d.domain='"+i+"';void(0);",_=r.contentWindow.document}_.open(
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 42 65 64 71 6e 4c 79 67 36 57 71 55 77 55 4b 57 50 52 6e 78 61 6e 54 56 32 31 58 6a 45 50 6d 76 6c 44 72 4b 36 77 35 74 71 76 64 64 34 75 61 72 4a 45 4f 6e 47 74 59 37 65 38 34 48 78 4e 62 43 6f 58 59 30 54 6e 4d 32 78 4a 2f 61 39 36 54 7a 4d 41 49 53 61 56 52 78 4b 75 63 74 79 6b 44 66 4d 31 72 67 77 51 54 5a 4f 6c 4f 31 61 4c 4b 58 65 46 66 49 71 59 66 45 4e 41 64 30 78 32 37 50 6e 6a 51 79 49 4c 37 4b 32 54 68 33 7a 32 4c 50 4e 6d 58 74 48 6d 6c 45 73 2f 34 2f 4d 76 4c 61 46 66 2f 39 74 41 52 45 4a 6e 39 6f 4d 64 31 7a 64 38 41 53 69 79 7a 6c 66 6b 55 61 42 62 64 75 39 67 63 43 75 39 30 6c 75 61 79 5a 78 53 4e 50 38 69 38 35 71 4c 46 4d 4a 70 67 38 53 2b 2f 6c 70 75 47 49 66 37 77 35 52 30 2f 51 78 51 2b 49 32 6d 66 30 6e 38 4e 62 59 52 59 72 47 6e 67 Data Ascii: BedqnLyg6WqUwUKWPRnxanTV21XjEPmvlDrK6w5tqvdd4uarJEOnGtY7e84HxNbCoXY0TnM2xJ/a96TzMAISaVRxKuctykDfM1rgwQTZOlO1aLKXeFfIqYfENAd0x27PnjQyIL7K2Th3z2LPNmXtHmlEs/4/MvLaFf/9tAREJn9oMd1zd8ASiyzlfkUaBbdu9gcCu90luayZxSNP8i85qLFMJpg8S+/lpuGIf7w5R0/QxQ+I2mf0n8NbYRYrGng
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 72 2e 69 6d 67 2e 63 63 74 76 70 69 63 2e 63 6f 6d 2f 6e 65 77 63 63 74 76 2f 67 6c 6f 62 61 6c 2f 74 6f 70 63 6f 6e 74 61 69 6e 2f 73 74 79 6c 65 2f 73 74 79 6c 65 2e 63 73 73 3f 33 61 64 39 66 32 31 64 32 34 66 36 61 31 62 65 35 36 37 39 66 31 34 38 34 33 63 33 34 63 33 34 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 20 6d 6f 64 75 6c 65 2d 69 64 3d 22 54 50 4d 54 4a 6a 35 6a 4b 6d 76 4f 30 4c 6d 79 47 53 77 63 35 59 6b 54 32 33 30 35 31 35 22 3e 20 0a 20 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 30 70 78 3b 20 68 Data Ascii: <link rel="stylesheet" type="text/css" href="//r.img.cctvpic.com/newcctv/global/topcontain/style/style.css?3ad9f21d24f6a1be5679f14843c34c34"><div class="header-container" module-id="TPMTJj5jKmvO0LmyGSwc5YkT230515"> <img style="display:none;width:0px; h
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 2f 6c 69 3e 20 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 2d 73 75 62 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6c 6f 62 61 6c 2e 63 63 74 76 2e 63 6f 6d 2f 69 70 61 6e 64 61 2f 70 61 6e 64 61 74 72 6f 75 70 65 2f 69 6e 64 65 78 2e 73 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 73 75 62 2d 74 69 70 73 22 3e 3c 2f 73 70 61 6e 3e e7 86 8a e7 8c ab e6 98 9f e5 9b a2 3c 2f 61 3e 3c 2f 6c 69 3e 20 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 2d 73 75 62 33 22 3e 3c 61 20 68 72 65 66 Data Ascii: /li> <li class="sub-menu-item menu-item-2-sub2"><a href="https://global.cctv.com/ipanda/pandatroupe/index.shtml" target="_blank"><span class="menu-item-sub-tips"></span></a></li> <li class="sub-menu-item menu-item-2-sub3"><a href
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 65 6e 75 2d 69 74 65 6d 2d 73 75 62 2d 74 69 70 73 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 20 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 2d 73 75 62 35 22 3e 3c 61 20 68 72 65 66 3d 22 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 73 75 62 2d 74 69 70 73 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 20 0a 20 20 20 20 20 3c 2f 75 6c 3e 20 3c 2f 6c 69 3e 20 0a 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 34 22 3e 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6c 6f 62 61 6c 2e 63 63 74 76 2e 63 6f 6d 2f 74 Data Ascii: enu-item-sub-tips"></span></a></li> <li class="sub-menu-item menu-item-3-sub5"><a href="" target="_blank"><span class="menu-item-sub-tips"></span></a></li> </ul> </li> <li class="menu-item menu-item-4"> <a href="https://global.cctv.com/t
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 6f 6d 2f 63 72 6f 73 73 73 74 72 61 69 74 2f 69 6e 64 65 78 2e 73 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 73 75 62 2d 74 69 70 73 22 3e 3c 2f 73 70 61 6e 3e e7 9c 8b e4 b8 a4 e5 b2 b8 3c 2f 61 3e 3c 2f 6c 69 3e 20 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 37 2d 73 75 62 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6c 6f 62 61 6c 2e 63 63 74 76 2e 63 6f 6d 2f 77 65 68 6b 2f 69 6e 64 65 78 2e 73 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 73 75 62 2d 74 69 70 73 22 3e 3c 2f Data Ascii: om/crossstrait/index.shtml" target="_blank"><span class="menu-item-sub-tips"></span></a></li> <li class="sub-menu-item menu-item-7-sub2"><a href="https://global.cctv.com/wehk/index.shtml" target="_blank"><span class="menu-item-sub-tips"></
2024-05-23 22:22:08 UTC	1369	IN	Data Raw: 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 20 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 31 30 2d 73 75 62 31 22 3e 20 3c 66 6a 74 69 67 6e 6f 72 65 75 72 6c 3e 20 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 69 67 35 2e 63 63 74 76 2e 63 6f 6d 2f 67 61 74 65 2f 62 69 67 35 2f 67 6c 6f 62 61 6c 2e 63 63 74 76 2e 63 6f 6d 2f 69 6e 64 65 78 2e 73 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 73 75 62 2d 74 69 70 73 22 3e 3c 2f 73 70 61 6e 3e e7 b9 81 e4 bd 93 3c 2f 61 3e 20 0a 20 20 20 20 20 20 20 3c 2f 66 6a 74 69 67 6e 6f 72 Data Ascii: <ul class="sub-menu"> <li class="sub-menu-item menu-item-10-sub1"> <fjtignoreurl> <a href="https://big5.cctv.com/gate/big5/global.cctv.com/index.shtml" target="_blank"><span class="menu-item-sub-tips"></span></a> </fjtignor

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:10 UTC	652	OUT	GET /photoAlbum/page/performance/img/2023/2/9/1675908806957_283.jpeg HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:10 UTC	732	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:10 GMT Content-Type: image/jpeg Content-Length: 6897 Connection: close Expires: Fri, 24 May 2024 09:59:36 GMT Accept-Ranges: bytes ETag: "a2ea88dec0cc1a5667ac0650c19a871c" Last-Modified: Mon, 20 Nov 2023 07:21:15 GMT x-amz-meta-srctag: "a2ea88dec0cc1a5667ac0650c19a871c" x-amz-meta-fihhda9srctag: "a2ea88dec0cc1a5667ac0650c19a871c" x-amz-tagging-count: 0 Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Server: elb Age: 1 X-Via: 1.1 PSjsczBGPhq161:3 (Cdn Cache Server V2.0), 1.1 PSxgHK5dz198:4 (Cdn Cache Server V2.0), 1.1 kf148:9 (Cdn Cache Server V2.0), 1.1 PS-VIE-01aIr81:13 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc192_PS-VIE-01aIr81_15672-51735
2024-05-23 22:22:10 UTC	6897	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:11 UTC	653	OUT	GET /photoAlbum/page/performance/img/2021/12/16/1639647987066_668.png HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:11 UTC	541	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:11 GMT Content-Type: image/png Content-Length: 2688 Connection: close Expires: Fri, 24 May 2024 12:17:00 GMT Accept-Ranges: bytes ETag: "136730FC39E3B1A1C2B2335F6DB7229B" Last-Modified: Thu, 16 Dec 2021 09:46:35 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun97:3 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1iy111:4 (Cdn Cache Server V2.0), 1.1 PS-VIE-01Lw182:11 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc193_PS-VIE-01aIr81_15031-47109
2024-05-23 22:22:11 UTC	2315	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 06 00 00 00 cf 6b be ba 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 22 a0 03 00 04 00 00 00 01 00 00 00 1d 00 00 00 00 21 0b 8e 03 00 00 09 ea 49 44 41 54 48 c7 ad 57 0b 34 96 e9 16 7e 73 eb 42 9a 90 84 11 12 b1 54 12 0d 15 7e 97 10 95 6a ba 99 50 e3 52 a9 64 ba 49 4d 17 45 48 a5 a4 42 a6 24 19 8a 32 ab 08 49 45 e8 94 2e e8 46 19 b9 54 67 55 fc a1 f8 8b 9f e7 ec ef 4f 0d 47 75 ce 3a 73 de b5 f6 fa 7e 9f ef fb f6 b3 f7 fb ec bd 9f 97 b1 bf bf fa 90 49 91 0d 24 53 21 b3 22 f3 25 db a7 a5 a5 55 e0 e0 e0 c0 37 32 32 Data Ascii: PNGIHDR"ksRGBDeXIfMM*i"!IDATHW4~sBT~jPRdIMEHB$2IE.FTgUOGu:s~I$S!"%U722
2024-05-23 22:22:11 UTC	373	IN	Data Raw: 94 98 14 6c 5a b9 a9 63 be c3 fc 57 bc 71 bc bb c3 95 87 27 f6 53 ec b7 83 06 3f 27 c6 0d 39 71 04 86 3e 44 d4 49 6c 15 35 33 37 36 b9 a7 84 97 94 1c 4f 2a aa e4 c4 89 13 b8 71 e3 06 9e 3d 7b f6 c5 68 b9 1e c3 71 84 3b b3 a4 a6 a6 22 28 28 a8 d1 cd c5 ad da 72 aa 65 a5 f2 04 e5 aa 7e 3a fd 6a 28 ca bb cc 98 25 11 0f 02 a9 61 2d a4 99 62 4d 94 1c 4f 95 a2 4f 7a 84 23 e9 28 9a 31 be a2 f6 ee c3 f4 fe 5d 24 a9 9a 99 99 5d e2 78 f1 69 71 64 e5 00 71 c0 52 52 52 b8 c3 d2 5b 6a 7a d5 34 10 cb c6 8c 19 73 81 14 5e ac 94 84 94 1f bd 3b 87 ce 03 d3 d9 34 36 8b a8 c7 e9 8c 85 14 ad 2b 45 ed 4d d7 8d 74 2f 90 48 19 42 ae f7 88 6c 19 3b 4c d5 92 4c 13 d8 95 ee f7 d2 b1 fd 68 7b f6 04 06 06 b6 65 66 66 22 26 26 a6 99 44 d3 53 27 27 a7 7b 94 a9 1c 45 45 c5 78 9a d2 5c Data Ascii: lZcWq'S?'9q>DIl5376O*q={hq;"((re~:j(%a-bMOOz#(1]$]xiqdqRRR[jz4s^;46+EMt/HBl;LLh{eff"&&DS''{EEx\

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:13 UTC	652	OUT	GET /photoAlbum/page/performance/img/2024/5/16/1715852523327_201.png HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:13 UTC	543	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:13 GMT Content-Type: image/png Content-Length: 531696 Connection: close Expires: Fri, 24 May 2024 11:19:40 GMT Accept-Ranges: bytes ETag: "DA54973DF38EE532AD121721A62B429F" Last-Modified: Thu, 16 May 2024 09:42:08 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun97:6 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1bm110:7 (Cdn Cache Server V2.0), 1.1 PS-VIE-01aIr81:12 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc195_PS-VIE-01aIr81_15672-51783
2024-05-23 22:22:13 UTC	15165	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 02 0c 08 06 00 00 00 2d ba 7f f1 00 00 20 00 49 44 41 54 78 9c 8c bd fb af b5 df 56 1f 34 e6 e5 b9 ad b5 f7 7e df ef 39 1c e0 d0 72 00 0b b6 81 4a c0 9a a2 2d 85 02 b5 35 1a 95 d6 60 44 12 1b 9a d8 44 fb ab ff 49 c5 c4 86 18 63 68 8d b5 35 92 92 50 cb 0f 8d 05 13 d4 56 45 a8 d5 7a 28 da d2 73 fd be 97 bd f7 5a eb b9 ce 39 cd e7 33 c6 7c f6 da fb 7d 4f e2 22 9b f3 7e f7 65 ad e7 79 e6 9c e3 f2 19 9f f1 19 ee 3f fa db bf 56 9a 18 a5 eb 3a 09 b1 91 cb 3c cb 9a 92 34 de 8b 0b 51 42 0c e2 9c f0 e5 9c 93 65 59 e4 7c b9 48 db b6 f2 ea f6 56 d6 6d 93 9c 33 7f a6 3f 9f 64 dd 8a 1c 8e af 24 a5 2c 39 6f d2 b6 8d a4 94 e4 7c 39 f3 77 f1 b7 7d df f2 bd 4b ce b2 ac ab ac 5b 92 22 45 72 2e e2 bd 97 36 46 Data Ascii: PNGIHDR- IDATxV4~9rJ-5`DDIch5PVEz(sZ93\|}O"~ey?V:<4QBeY\|HVm3?d$,9o\|9w}K["Er.6F
2024-05-23 22:22:13 UTC	16384	IN	Data Raw: 56 19 1f 4e 32 be 7f a4 1e 01 3e 13 02 15 fe 2e 52 47 00 2a 55 18 f6 e0 4d b1 0d b0 32 8b 0d ad 6a b9 53 f2 97 13 d6 40 42 1b a8 35 b1 5c 26 aa 95 4d f7 67 59 de 3f 90 05 7d 2c 5e 5e b9 c8 09 7c 0d d5 1a b5 1f 9d 4c fa 38 ca 09 d2 92 08 34 31 50 04 e7 c3 3a 5e 58 1e 9b 6c 4f cf c2 7a 74 89 1b 7b b0 f1 4c 7b fc ef dd 1d 27 1c a1 9d 8f 67 2d 42 f1 aa 63 cc 7c 19 cf f2 98 37 b9 80 5d 8f 6c 1d ca 87 e9 22 e3 e5 c2 79 c5 40 98 38 e4 23 bc 20 84 a4 5c e7 a6 aa c1 8f 84 fc c0 14 d5 83 89 a8 79 5e ce 8c fa 30 f1 21 90 d1 ac a3 95 1a ce 03 4d 7c b8 d9 ea 95 b5 ee c6 03 e7 dd de 96 52 6c 5a 10 0c 0f 49 3d 5b 66 14 54 05 2c aa c1 a9 03 c2 ab f1 d4 11 79 1f 92 ad ae b3 e6 8f 7d bf 1a de ed ca 10 5f 6b e0 56 c7 5e 61 4f bc 74 6e a6 0e 8c a8 23 17 6b e6 5e db a8 74 90 Data Ascii: VN2>.RG*UM2jS@B5\&MgY?},^^\|L841P:^XlOzt{L{'g-Bc\|7]l"y@8# \y^0!M\|RlZI=[fT,y}_kV^aOtn#k^t
2024-05-23 22:22:13 UTC	633	IN	Data Raw: 8d 08 56 6b 1f 4a c5 61 5d 4e f5 f0 a7 be d9 c8 89 d9 e0 19 61 43 32 12 a5 f1 64 c8 30 95 47 2f d9 95 61 b5 8a b0 3a 13 49 ef 05 ed 19 97 3b a7 63 9c 95 78 61 e3 18 56 56 fb 98 a4 05 5e 7c e1 65 9c 76 ca 69 f8 d4 a7 7f 09 ff cb ff fc c7 f8 fe ad cf e2 e7 3f 78 21 a6 b3 97 31 dd 3a 8c eb de 71 08 e7 1e e8 60 73 2b c7 a9 87 4e c5 9e bd 6b a8 ab 29 86 93 31 1e 7c f4 65 7c e3 6f 1f 42 1c f4 71 c7 4d cf 63 63 f0 b8 60 b8 ab df ff 01 fc da 27 7f 07 7f f7 97 9f 47 3d 0b f1 73 ef fd 00 5a 9d 21 e6 de 61 78 d5 7e 1c 5c da 8f 59 5a 62 48 1d 2b 06 68 f5 7c 74 92 25 3c fc d8 3a be f6 f9 1f 62 fb d9 31 7e b2 bf 85 af 7e f7 4e ac 9d 72 08 51 40 93 95 0c 7b 97 ba a6 c5 24 7b 9c 41 df c5 1c 31 9d 10 28 db 8c 3d 35 59 24 66 b0 20 05 32 99 08 d0 80 a3 b5 06 09 a7 ed 26 2b Data Ascii: VkJa]NaC2d0G/a:I;cxaVV^\|evi?x!1:q`s+Nk)1\|e\|oBqMcc`'G=sZ!ax~\YZbH+h\|t%<:b1~~NrQ@{${A1(=5Y$f 2&+
2024-05-23 22:22:13 UTC	16384	IN	Data Raw: c2 51 a5 53 aa e2 b3 d1 0a 50 c5 2d 4c ea 48 dc 8c 2e 5f 3d d7 66 9e db ed 2b 79 cd 57 63 dc d2 d0 e3 29 f8 81 ff 6d 2b 9e 20 ed cb 3a 43 3e d8 39 f7 b6 59 89 76 d8 c6 a4 f6 b0 39 cf 05 d1 d2 87 fe b5 3c 10 23 3a 6a 85 c8 da 6d b4 92 1e bc 4e 0f e8 ba ac 70 df 9d a7 b2 0b 2e 4d 19 41 84 a7 db 41 3b 2f 31 dc 9a 88 19 1e c1 47 47 03 9c 6f 46 4c 4c 98 a3 49 05 3d bc 79 d6 d2 b5 85 9a e5 5e a2 d5 5e ea 16 bf 2b fc 5e 51 22 88 b9 6e 27 e8 2c 77 90 4f 46 98 4e c9 b3 a0 7c 28 43 a6 1d ac a7 82 59 d3 54 27 cd 05 5d 33 54 a1 dc d8 42 d2 8e b1 bc d2 c7 64 f3 98 1a d2 72 7b 13 b3 c1 40 c5 7f 52 40 b2 a8 62 7b 88 d9 d1 6d 9b b6 95 44 e6 2f 48 84 5c c7 ae 74 bb 58 ee 76 d0 eb 46 2a a0 93 d9 04 9b 61 21 39 d8 24 28 15 7d 59 53 62 c5 04 a6 d1 08 d3 19 61 6b ae 2b 45 1f Data Ascii: QSP-LH._=f+yWc)m+ :C>9Yv9<#:jmNp.MAA;/1GGoFLLI=y^^+^Q"n',wOFN\|(CYT']3TBdr{@R@b{mD/H\tXvF*a!9$(}YSbak+E
2024-05-23 22:22:13 UTC	15160	IN	Data Raw: 5c 2d 1d 1d cf d0 0a 63 0f a4 79 06 f2 e3 7b 1b ed 04 2d 5c c1 86 07 1c ec 66 53 1a 66 9c 05 91 d9 3d 33 33 c9 50 eb 45 3d a4 88 59 c8 a4 98 48 09 6d 6d b5 e1 01 9a 67 aa 92 60 b1 87 71 44 a1 cf 86 76 a6 5b ae db 9a 7b 42 e0 b5 68 ad 19 23 97 04 49 5c d0 c0 43 a7 5f 29 09 d1 9b 44 92 59 f4 4e 9b c9 84 a4 c2 84 fb 7e 57 97 8a 4a f8 44 89 89 86 7a 10 6d e2 d8 43 f7 19 67 19 da 91 77 71 be 19 90 73 e6 f3 77 f5 20 d8 db 9b 86 62 d8 0d ed 30 ff 97 c6 cc c5 d8 49 02 ca d9 62 06 d6 29 84 48 8a bd d3 85 89 6a 10 27 3e 3a 02 3c 00 67 ab b5 86 f6 83 50 81 4e 08 f3 bd 56 fd 33 f1 3c 2a e6 df 72 13 23 83 f6 c2 66 d9 31 ff b6 65 05 0a f8 83 30 1c a1 63 9d ef 61 73 42 05 d6 5b 22 8b 37 d9 d2 28 cb 86 4e 41 a1 7f 67 b1 ae 96 92 13 8b 43 76 3b 8d 14 a3 9e 32 9e 3e 24 72 Data Ascii: \-cy{-\fSf=33PE=YHmmg`qDv[{Bh#I\C_)DYN~WJDzmCgwqsw b0Ib)Hj'>:<gPNV3<*r#f1e0casB["7(NAgCv;2>$r
2024-05-23 22:22:13 UTC	16384	IN	Data Raw: 95 0f 68 15 8f 47 9a 8d c8 ee 46 34 e3 c1 ec 48 7e f8 e2 89 fc de 6f fd 81 ac 5f 7a 5d 16 37 5b f9 d9 9f ff 4f 65 7e 30 91 0e de 94 10 9f 77 b8 ef bd 14 2e 93 05 38 0d 06 5f a9 55 a4 52 7d 40 56 54 99 8e 1a a8 04 c0 a0 c1 99 c9 bb 3a e5 90 a4 68 b2 1d f8 c0 76 21 12 3b 3a 16 b9 2a a7 e9 94 19 1d a2 63 55 e0 da 61 0a 90 1d 24 bd 6d 56 31 ee 90 9a 61 a7 da 7b 66 38 8f 45 ce 6e 9f 49 d7 54 24 18 4e a7 13 39 bb 79 5b 56 cb 0d 47 40 6b 1c ac de cb d1 f1 25 8e 6b 36 e4 69 f4 0c 50 19 a7 e8 cc 73 59 c2 af 79 b3 a5 5b 5d ca 43 24 19 34 9a 12 2d f9 3a 2d 16 82 32 07 95 0b 6b e4 17 3d 70 03 d1 03 a4 63 d6 e5 9a 4c 7b ac 41 e6 67 97 0d 37 66 3e de 74 ed f2 2c 01 3b b3 86 dc 5f bb b8 50 1c 41 0d 08 90 76 51 94 46 75 c6 5e 75 c3 51 34 f0 1b 9c d9 0d f6 61 c0 bb 78 0f Data Ascii: hGF4H~o_z]7[Oe~0w.8_UR}@VT:hv!;:*cUa$mV1a{f8EnIT$N9y[VG@k%k6iPsYy[]C$4-:-2k=pcL{Ag7f>t,;_PAvQFu^uQ4ax
2024-05-23 22:22:13 UTC	15160	IN	Data Raw: 37 02 fb ac 45 a8 8b 1a 13 07 46 bd 09 b6 e7 67 4e 2b 52 97 03 f1 ef d0 a0 24 6c 82 38 ca 46 42 64 99 b9 a5 ed e3 a2 58 99 c9 0c 56 4f e8 ef 1d b7 50 8a ec 12 99 73 12 42 0c 19 2f 28 4f 6a 3b 1c 48 88 11 c3 41 69 36 15 36 a6 13 39 64 55 49 84 3c 0a 14 b5 b7 7e ec a4 ad 2a 92 44 51 a1 b5 64 8e 4d c6 64 64 a1 fc 3c 50 da 6a 3e 03 11 00 83 b2 4e d1 32 c3 7e 91 af 3c bc 40 da 74 41 a9 16 f5 28 3d 7e 66 a9 4b 36 41 16 fa 9a a8 0f b5 da 63 7c 36 c5 64 38 d2 a4 d4 f8 f0 86 ce 8a 75 42 a5 69 85 4b b1 f9 c3 a7 f6 56 f0 b3 ba c1 ae 5c d1 60 a4 a7 2c 37 e6 69 21 9f 6a d3 bd f3 f9 ad 13 a7 02 2f 18 64 9e 97 ee e9 2c cb 49 12 25 23 63 b8 13 26 a4 a6 9b ca 8b dd 2b 8b b8 60 ff f9 d8 b5 d4 c3 8e e5 05 0c 16 57 44 e2 a1 5c 4e 7b 55 5e 27 4a ed a8 d9 55 f6 79 2a 43 9c 40 Data Ascii: 7EFgN+R$l8FBdXVOPsB/(Oj;HAi669dUI<~DQdMdd<Pj>N2~<@tA(=~fK6Ac\|6d8uBiKV\`,7i!j/d,I%#c&+`WD\N{U^'JUyC@
2024-05-23 22:22:13 UTC	16384	IN	Data Raw: 3a e2 7c 50 c9 34 fe b9 1b f7 49 cd 33 db fc 2a 76 2a 83 91 72 94 84 dc 5b 0e 70 ec b0 09 0f f0 2c 9e a1 49 33 e9 49 d9 09 e6 c5 cc d8 c7 64 fa b9 2c 8a 5d 03 5f 93 30 57 bd ab dc 2f 34 56 76 a8 92 53 1c 52 ef 7d e3 54 a7 16 59 51 31 3c d4 ed 9a ac e7 32 14 f2 f0 af c1 e7 16 06 f7 5a 25 99 58 22 ce d0 e9 60 a8 bc 23 9b cd 17 7a 05 1d d0 43 f0 43 70 fb bc fe cf ee 84 cd 36 b6 b7 70 fb c4 7e 4e 97 59 c4 a1 bc 15 86 68 cc df ad 49 c0 60 e5 1a 07 1d 6f ef 85 84 91 8c 14 c5 97 d3 9b 23 b7 68 b9 40 fc 0a be b0 61 b6 ff 6f 7b 43 63 f7 07 9f df db 61 c4 83 93 9b 95 66 4c 45 66 ec 46 47 33 d4 2d c4 c6 5e 5f 6f 36 3e c7 ed b4 8e 32 9f f3 2a 50 dc 8d 57 38 47 54 22 12 51 8e 2c 73 44 7d 18 67 fc a9 8a b7 42 70 bc fe 8d 1f c2 49 b2 37 c5 1f f9 0a b1 c5 1f 6a 13 55 6a Data Ascii: :\|P4I3vr[p,I3Id,]_0W/4VvSR}TYQ1<2Z%X"`#zCCp6p~NYhI`o#h@ao{CcafLEfFG3-^_o6>2*PW8GT"Q,sD}gBpI7jUj
2024-05-23 22:22:13 UTC	15160	IN	Data Raw: 44 93 42 69 44 c5 95 ab 98 dc bc 81 cd fa 1c 0f 5e b8 83 49 3a c3 52 64 a7 16 6f f8 92 2f c1 53 af 7f 13 9e 7e fa 79 9c 9d 9d e0 f6 ad 5b b8 75 eb b6 cd d2 b9 96 7a 4b cf 82 87 67 88 df a2 ae 73 22 85 09 e5 71 33 12 bc 68 20 41 82 2b a1 77 2f 82 cc 4b 3e f1 e0 8e dc 0a 2d 79 c9 f7 e2 dd 29 01 2a 8c b8 bc 29 88 d4 84 04 2b 64 47 79 68 fe 12 b3 bb 2f e5 10 c6 99 2e 3b c0 12 03 ca 6d a9 83 fc 70 31 c5 23 37 8f 71 f5 ca 12 cb 79 21 63 95 8c 26 4e b9 e9 b5 01 43 1c bb 59 8f e3 a3 a5 ba 6c b9 40 25 46 a0 a2 b3 1b 17 87 42 4a 22 60 3e 2d b0 98 4f dc 3f 60 2b d8 9c d7 b3 ac 99 5b 90 d8 2c 36 89 7c 54 97 aa d3 0d 89 5b 42 70 7c 5f d5 81 47 48 9a 67 96 fb 7a 2b 89 ae 35 c8 5c f3 7c 1a 68 24 c1 17 dc cf 27 8d a4 3a 3b 94 63 1b cd 05 3d f5 b8 bf ba c4 33 a4 20 59 d3 Data Ascii: DBiD^I:Rdo/S~y[uzKgs"q3h A+w/K>-y)*)+dGyh/.;mp1#7qy!c&NCYl@%FBJ"`>-O?`+[,6\|T[Bp\|_GHgz+5\\|h$':;c=3 Y
2024-05-23 22:22:13 UTC	16384	IN	Data Raw: f9 18 9b 93 73 35 50 2c ae 34 bb a1 dc a8 a1 47 b5 7c 95 5b 3b b6 28 6b e1 88 c9 5d 5e 14 63 be 3b 07 ba 11 36 4c a2 e9 ed 50 ca 25 b7 4b cd 50 42 e9 4e 1c 49 23 99 9f d0 50 5f 93 ea c8 92 71 22 92 14 49 4e 22 44 dd 26 28 69 eb 58 d5 43 4c 5f 9a 76 22 a6 14 49 a1 26 b5 18 67 da 3b 87 89 39 53 c1 32 64 c9 b9 2b 76 18 5d 68 f0 42 39 0d c6 56 5d 3f f0 27 4d ad 4f 39 95 73 43 3a f7 f7 55 5e ba 4f 9f da d1 f1 fd 97 c6 a5 28 a3 c4 d6 24 a5 a9 26 6a 32 7a 79 46 c4 8c 1d ec 75 de 90 5d bf a8 0c e1 a1 2e 34 d2 bf f1 b5 09 91 9b 38 58 16 9a b4 8f 87 22 a1 51 31 b9 53 8b 7b 8c fa d8 35 f0 ad f9 2a 0b 3c 88 25 e7 31 28 3c 15 aa 93 15 33 c4 0d f7 ce b5 b2 7d 93 d1 04 13 c6 fa 15 13 cc 77 f7 b0 39 5f 63 b5 5e 60 cc f8 c8 45 89 f3 4d 63 ea 82 24 c5 f5 f3 53 3c bc 78 08 Data Ascii: s5P,4G\|[;(k]^c;6LP%KPBNI#P_q"IN"D&(iXCL_v"I&g;9S2d+v]hB9V]?'MO9sC:U^O($&j2zyFu].48X"Q1S{5*<%1(<3}w9_c^`EMc$S<x

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:13 UTC	562	OUT	GET /dingding/open-develop/1.9.0/dingtalk.js HTTP/1.1 Host: g.alicdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:13 UTC	873	IN	HTTP/1.1 200 OK Server: Tengine Content-Type: application/javascript Content-Length: 41727 Connection: close Date: Thu, 23 May 2024 22:07:55 GMT Vary: Accept-Encoding Vary: Accept-Encoding x-oss-request-id: 664FBE3BCDAAFE3530736385 Accept-Ranges: bytes x-oss-object-type: Normal x-oss-hash-crc64ecma: 784279744081961369 x-oss-storage-class: Standard Content-MD5: meAephEu3vH5TpgRA+pErg== x-oss-server-time: 17 Cache-Control: max-age=2592000,s-maxage=3600 Access-Control-Allow-Origin: * x-bucket-code: 3 Ali-Swift-Global-Savetime: 1716502075 Via: cache23.l2de2[25,25,200-0,M], cache26.l2de2[28,0], cache26.l2de2[30,0], ens-cache1.de4[0,0,200-0,H], ens-cache1.de4[1,0] Age: 858 X-Cache: HIT TCP_HIT dirn:9:411017793 X-Swift-SaveTime: Thu, 23 May 2024 22:07:55 GMT X-Swift-CacheTime: 3600 Timing-Allow-Origin: * EagleId: 2ff62b1917165029333708713e
2024-05-23 22:22:13 UTC	15511	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 61 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 6e 3d 61 2e 6d 61 74 63 68 28 2f 41 6c 69 41 70 70 5c 28 5c 77 2b 5c 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 2e 2d 5d 2b 29 5c 29 2f 29 3b 6e 75 6c 6c 3d 3d 3d 6e 26 26 28 6e 3d 61 2e 6d 61 74 63 68 28 2f 44 69 6e 67 54 61 6c 6b 5c 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 2e 2d 5d 2b 29 2f 29 29 3b 76 61 72 20 69 3d 6e 26 26 6e 5b 31 5d 3b 65 2e 69 6f 73 3d 2f 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 2f 69 2e 74 65 73 74 28 61 29 2c 65 2e 61 6e 64 72 6f 69 64 3d 2f 41 6e 64 72 6f 69 64 2f 69 2e 74 65 73 74 28 61 29 2c 65 2e 76 65 72 73 69 6f 6e 3d 69 2c 65 2e 63 66 67 3d 7b 7d 2c 65 2e 65 78 Data Ascii: (function(){"use strict";var e={},a=navigator.userAgent,n=a.match(/AliApp\(\w+\/([a-zA-Z0-9.-]+)\)/);null===n&&(n=a.match(/DingTalk\/([a-zA-Z0-9.-]+)/));var i=n&&n[1];e.ios=/iPhone\|iPad\|iPod/i.test(a),e.android=/Android/i.test(a),e.version=i,e.cfg={},e.ex
2024-05-23 22:22:13 UTC	16273	IN	Data Raw: 64 3a 22 32 2e 31 31 22 2c 72 65 6c 65 61 73 65 3a 21 31 7d 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 22 62 69 7a 2e 6d 61 70 2e 73 65 61 72 63 68 52 6f 75 74 65 22 2c 6e 61 6d 65 3a 22 e6 9f a5 e8 af a2 e8 b7 af e7 ba bf 22 2c 69 6f 73 3a 22 32 2e 31 31 22 2c 61 6e 64 72 6f 69 64 3a 22 32 2e 31 31 22 2c 72 65 6c 65 61 73 65 3a 21 31 7d 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 22 62 69 7a 2e 63 6f 6e 74 61 63 74 2e 73 65 74 52 75 6c 65 22 2c 6e 61 6d 65 3a 22 e8 ae be e7 bd ae e8 a7 84 e5 88 99 22 2c 69 6f 73 3a 22 32 2e 31 35 22 2c 61 6e 64 72 6f 69 64 3a 22 32 2e 31 35 22 2c 72 65 6c 65 61 73 65 3a 21 31 7d 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 22 62 69 7a 2e 61 75 74 68 2e 72 65 71 75 65 73 74 41 75 74 68 43 6f 64 65 22 2c 6e 61 6d 65 3a 22 4a 53 e5 85 8d e7 99 bb Data Ascii: d:"2.11",release:!1},{namespace:"biz.map.searchRoute",name:"",ios:"2.11",android:"2.11",release:!1},{namespace:"biz.contact.setRule",name:"",ios:"2.15",android:"2.15",release:!1},{namespace:"biz.auth.requestAuthCode",name:"JS
2024-05-23 22:22:13 UTC	9943	IN	Data Raw: 65 3a 21 31 2c 64 65 66 61 75 6c 74 50 61 72 61 6d 73 3a 7b 7d 7d 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 22 69 6e 74 65 72 6e 61 6c 2e 66 61 63 65 53 63 61 6e 2e 73 63 61 6e 22 2c 6e 61 6d 65 3a 22 e4 ba ba e8 84 b8 e8 af 86 e5 88 ab 22 2c 69 6f 73 3a 22 33 2e 34 2e 36 22 2c 61 6e 64 72 6f 69 64 3a 22 33 2e 34 2e 36 22 2c 72 65 6c 65 61 73 65 3a 21 31 2c 64 65 66 61 75 6c 74 50 61 72 61 6d 73 3a 7b 7d 7d 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 22 69 6e 74 65 72 6e 61 6c 2e 6c 6f 67 2e 75 70 6c 6f 61 64 45 78 63 65 70 74 69 6f 6e 22 2c 6e 61 6d 65 3a 22 e4 b8 8a e6 8a a5 e5 bc 82 e5 b8 b8 e6 97 a5 e5 bf 97 e5 88 b0 e6 9c 8d e5 8a a1 e7 ab af 22 2c 69 6f 73 3a 22 33 2e 34 2e 38 22 2c 61 6e 64 72 6f 69 64 3a 22 33 2e 34 2e 38 22 2c 72 65 6c 65 61 73 65 3a 21 31 7d Data Ascii: e:!1,defaultParams:{}},{namespace:"internal.faceScan.scan",name:"",ios:"3.4.6",android:"3.4.6",release:!1,defaultParams:{}},{namespace:"internal.log.uploadException",name:"",ios:"3.4.8",android:"3.4.8",release:!1}

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:13 UTC	660	OUT	GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/more_block.png HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:14 UTC	541	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:14 GMT Content-Type: image/png Content-Length: 609 Connection: close Expires: Fri, 24 May 2024 10:04:28 GMT Accept-Ranges: bytes ETag: "81ADCEB1BDAA41E239C607C54EF20335" Last-Modified: Thu, 16 Dec 2021 07:57:12 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun231:11 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1mi112:1 (Cdn Cache Server V2.0), 1.1 PS-VIE-01Lw182:6 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc196_PS-VIE-01aIr81_14433-55452
2024-05-23 22:22:14 UTC	609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4e 00 00 00 14 08 03 00 00 00 14 61 fb be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 4e a0 03 00 04 00 00 00 01 00 00 00 14 00 00 00 00 ca e6 d3 2d 00 00 00 a2 50 4c 54 45 00 00 00 00 00 00 40 40 40 33 33 66 24 24 6d 20 40 60 1a 33 66 24 37 5b 1c 2b 63 28 36 5e 24 31 61 24 2e 5b 22 33 5e 27 2e 5d 20 33 60 25 32 5d 22 31 5d 23 2f 5e 24 2f 5f 22 30 5f 23 30 5c 23 30 5e 23 32 5f 23 31 5f 24 30 5e 23 31 5e 22 30 5e 23 31 5e 23 30 5f 23 32 5e 23 31 5f 23 30 5d 23 31 5e 24 32 5d 23 32 5f 22 31 5e 23 32 5f 23 31 5e 22 32 5e 23 31 5e 23 Data Ascii: PNGIHDRNasRGBDeXIfMM*iN-PLTE@@@33f$$m @`3f$7[+c(6^$1a$.["3^'.] 3`%2]"1]#/^$/_"0_#0\#0^#2_#1_$0^#1^"0^#1^#0_#2^#1_#0]#1^$2]#2_"1^#2_#1^"2^#1^#

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:13 UTC	638	OUT	GET /photoworkspace/2024/04/17/2024041716582311144.jpg HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:14 UTC	535	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:13 GMT Content-Type: image/jpeg Content-Length: 1347785 Connection: close Expires: Fri, 24 May 2024 09:54:11 GMT Accept-Ranges: bytes ETag: "19AB892F7EF572C0D75B21AB01770906" Last-Modified: Wed, 17 Apr 2024 08:59:22 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 PSxgHK5yp199:11 (Cdn Cache Server V2.0), 1.1 kf148:6 (Cdn Cache Server V2.0), 1.1 PS-VIE-01Lw182:9 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc195_PS-VIE-01aIr81_14433-55451
2024-05-23 22:22:14 UTC	2321	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff e1 00 36 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 32 00 02 00 00 00 14 00 00 00 1a 00 00 00 00 32 30 32 34 3a 30 34 3a 31 32 20 31 35 3a 33 30 3a 30 36 00 ff e1 0f af 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 33 20 37 39 2e 31 36 34 35 32 37 2c 20 32 30 32 30 2f 31 30 2f 31 35 2d 31 Data Ascii: JFIF6ExifMM*22024:04:12 15:30:06http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-1
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 16 3f 31 96 ad 33 db cc 73 e5 a4 44 9e 47 76 4a b4 cb 94 3f 4d ca 4f 18 01 ce 0e 17 20 ec d1 d9 0c df e5 03 9c bc f9 a6 1e 9d 35 d9 cb 31 2a 9c 72 cd 79 c5 10 7e 3a 79 61 57 b3 e3 88 ba 9b 2a ad ad 74 55 53 1c f9 04 44 23 53 97 4d d2 61 c9 20 fa a5 0d c8 4b b8 f5 27 13 72 fb 74 a9 47 32 25 76 a2 e9 91 14 c4 f9 a3 27 c3 5d 6f 9e 24 e5 66 52 11 f7 aa 5c 91 99 a5 2e c5 34 db 24 e4 52 00 3f d4 8b 14 90 d8 08 a0 1c bd 7e 5e bb f5 d1 2e 83 1d 6c e5 ea b4 69 9d b4 f6 27 f8 1d d6 16 bd b2 17 cf df b6 4d 6a f4 8a 84 2e c7 64 ec 0c 07 0e 22 23 c4 47 88 74 dc 74 3c e1 81 95 15 49 a3 39 a8 b0 31 94 89 0b 8e 29 b4 9d 66 cf 19 15 03 a0 87 6c 78 2e 43 18 fc 4c 1c fa 74 d5 70 7e 60 b8 d2 f2 3b 74 6a 0f 8d 6a d9 d4 6d 35 55 5a 06 61 32 25 f4 08 ac 1c c2 5c 78 8e e7 21 b9 Data Ascii: ?13sDGvJ?MO 51ry~:yaWtUSD#SMa K'rtG2%v']o$fR\.4$R?~^.li'Mj.d"#Gtt<I91)flx.CLtp~`;tjjm5UZa2%\x!
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 2d b8 15 47 00 51 00 d8 c6 f4 db 41 c6 d3 23 ea 65 9d 88 af 28 b1 4e 41 c5 f9 07 2d f8 cb 5d 86 aa c5 a8 c4 e8 d8 e3 ca 1f 55 61 28 b7 21 ca d4 cd 45 aa 8e 4c 54 93 dc fc 53 44 80 3d 7d 03 45 42 c2 b9 26 cc 95 f0 ff 00 08 cf 5b 25 6c b3 e4 c6 32 79 76 4e 51 c9 d1 ac 42 c7 a6 2e 51 24 e0 2a a1 bb ee 94 59 a2 66 0d c4 df 30 ad b0 8e dd 07 a6 8c a2 4b 27 21 50 f3 55 bf 6d eb 3c ee 5c ad e7 0f 37 ec d5 ec 77 5e c6 ca a8 a5 4b 1e a3 32 9b a7 4f 55 4c 86 4c 82 ab 06 20 70 3a 3b 1c 47 a8 80 89 80 a3 ed a3 55 cd 22 b5 5e 24 13 f1 16 25 f1 53 26 f9 29 73 67 0c 6b 4e 64 9e 7a e9 c3 4b 0d ce 61 06 2d 29 f0 cd de a6 98 fd 32 48 0f 50 4f 66 e1 c4 0c 5e 9d 7e 23 aa bb 8e 2a 9e 62 59 32 66 14 c1 74 4a 8e 47 c8 ee 3f 4f 94 92 60 92 e8 37 8a 86 66 54 0c 67 a6 0e 20 08 a0 Data Ascii: -GQA#e(NA-]Ua(!ELTSD=}EB&[%l2yvNQB.Q$Yf0K'!PUm<\7w^K2OULL p:;GU"^$%S&)sgkNdzKa-)2HPOf^~#bY2ftJG?O`7fTg
2024-05-23 22:22:14 UTC	9613	IN	Data Raw: 15 03 6d 84 4e 3e 9e 83 ac cd 92 cd af 04 75 ed 59 19 5a c4 2b 7b fb 89 08 ac 1f 88 51 67 2b 0a 41 0b a1 da 59 57 49 18 a5 84 00 78 8a 51 22 63 19 63 06 e2 42 0a 3f c7 4e 28 f2 23 44 a6 bd 32 d0 6f 18 ab 33 a5 52 0a 67 32 b9 a1 5f 9c 26 75 65 29 67 91 74 57 0a 74 dc 00 ea 28 26 37 b7 42 ef a3 2a 92 7c 89 fb 79 86 2f c6 dc 35 e3 d4 8d 0e 0a df 91 52 17 57 85 4e ab 69 86 aa ce 3c 6c e8 56 6c 60 2e ca 22 2a ee 6f 5f 87 5d 51 7f 32 1f ea eb a7 1c 8d 72 ac 3c 6a 87 21 48 d3 13 b7 40 cd 83 e5 93 ee 2f cb ef e4 61 e4 03 f0 eb a1 fa 06 f4 8a 06 f6 49 ba 2b b0 3b 7a 5b 27 91 ee 96 01 28 20 59 39 3d cf b8 6d d0 a2 6d b5 d5 58 1d fd 70 cc af f2 5b c7 69 39 0a 34 8c 16 46 bb 9e 9b 8f fe ad da b1 f7 27 f1 e7 4d 38 d4 cf c4 4c 52 89 80 80 a0 8f f8 b9 06 fa 22 2b 28 cd Data Ascii: mN>uYZ+{Qg+AYWIxQ"ccB?N(#D2o3Rg2_&ue)gtWt(&7B\|y/5RWNi<lVl`."o_]Q2r<j!H@/aI+;z['( Y9=mmXp[i94F'M8LR"+(
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 6d a1 e5 21 bb b5 38 90 d0 32 50 e4 98 fd 4a 1d d3 f6 d2 8c ba bf 68 ac 42 e9 36 01 f7 0e f7 a0 eb c8 cd 6e c3 2c eb cb 35 bb 5d ad f1 13 10 d5 66 53 71 30 4a 80 ac dc ee 8c 29 18 03 d4 45 23 a6 5f e1 a9 c2 39 12 59 57 03 df 5d 19 08 aa 6b 5b 1c 35 55 b3 b9 7f af e2 0c dd 10 0c a3 61 2f e2 28 09 77 ea 3a 32 1a a8 17 5e bc 48 cd ec c7 61 b1 a1 96 e7 e5 de 3a 30 4a dc c0 a9 a8 a1 c8 1b a0 9a 3b ec 42 7d 81 c8 74 43 ad a3 5d 4c b1 03 a9 57 f2 17 29 63 59 34 e0 ea 52 ad 94 24 b6 c2 e9 17 2d 7e a4 a5 d8 76 e5 b7 f1 d5 d5 41 80 59 6b 4c db ac 60 fe 4e f7 87 6a af 24 59 a4 95 8a 48 81 fa 84 90 f1 2a 2a 1c 4a 1d 48 91 34 6c 0f 39 70 53 73 2e 4c c7 78 16 80 56 a8 d8 88 ad aa ce 8a 8d d0 3b 62 28 22 d1 c1 40 39 8a 9f 60 f2 0f ec d5 8e 21 54 cf ca 22 cc 2c a4 97 95 Data Ascii: m!82PJhB6n,5]fSq0J)E#_9YW]k[5Ua/(w:2^Ha:0J;B}tC]LW)cY4R$-~vAYkL`Nj$YH**JH4l9pSs.LxV;b("@9`!T",
2024-05-23 22:22:14 UTC	8436	IN	Data Raw: 93 32 43 5c 95 35 51 84 b5 35 9a a6 d6 df 39 31 5c 7d 4b a9 79 98 e4 54 22 2a 22 87 19 05 b7 0e ee c7 f4 47 70 f8 6b 53 af 25 d4 94 a1 83 49 70 df 94 3f a5 61 03 cd bc aa 46 47 d1 ec 86 28 3e 8e 96 66 ed a4 8f d2 a3 b9 4b f9 45 0f a6 38 1c 0c 3c 0e 05 11 d0 37 5a b0 76 b5 96 37 3e 33 db 71 34 05 71 d4 87 89 f2 34 3f 1d 18 db 5d 98 ef 8c fe 41 fd 86 dd 28 e4 fb ec 51 1b 31 a2 93 66 5e 46 10 21 13 32 89 8e fd 03 a0 69 35 d7 65 8c 2a 8f 07 ee 76 cd 39 a6 af 82 1f 57 e3 f1 3d c2 b9 9c ab 66 76 26 b8 aa 1f ae 8a cc 40 c0 3f 58 45 10 4d 64 96 50 00 39 02 4a 94 00 37 d8 00 c1 a1 a3 6c a3 c9 39 ea e5 0a c6 2e f3 c5 0c fd 8c dd 62 fc ef 1e fe d6 e2 d0 9a ad ab 37 d8 e7 2c e1 a5 63 db 98 04 0a 2e 7f 46 51 11 13 b7 10 1d ca 9a 65 30 ef f3 10 75 3a ff 00 e9 12 f2 b0 Data Ascii: 2C\5Q591\}KyT""GpkS%Ip?aFG(>fKE8<7Zv7>3q4q4?]A(Q1f^F!2i5ev9W=fv&@?XEMdP9J7l9.b7,c.FQe0u:
2024-05-23 22:22:14 UTC	16060	IN	Data Raw: db 15 25 56 41 45 8e 22 24 1d fa 80 80 86 fe ba cc dd b5 28 cd 8c 69 b7 d4 58 97 c8 2c 46 e7 6b dc 18 ac 85 9b 1b 36 98 80 6c 4d d4 c8 f0 4f 40 cc 81 31 0d c0 ca 32 76 05 51 2d c3 d7 63 9b 43 fe f2 58 02 b7 5f 32 f1 e0 5d 33 96 5f a0 65 5a bc 8d 22 dc cc e9 56 24 7e 66 6f 93 21 05 56 ee 7f 94 e5 f5 e3 c4 7a eb 39 74 e4 ec 0b 55 ac 09 6a 9e 56 64 1c 41 5b 0a 1e 4b 8b 6f 6c 4e b0 06 25 5e de ec c7 4d 47 11 e1 fe 5e e0 80 7c c2 00 1f c7 46 51 7c 94 cb bd 25 e9 88 2e 51 fd dd e4 24 9c bd a5 06 2f 96 b6 d2 50 37 fe a1 1c d6 3d 45 58 a8 74 c7 e4 dc 16 ea 3b 75 d8 75 a2 aa ff 00 29 5d 31 e4 15 b3 f3 d9 95 f1 c2 ce 8d 43 b2 c3 9c 9b 22 d1 a1 ca 64 1b 06 db f1 02 24 7e 9d 34 16 c5 8d 8c 1b 48 bd 53 b3 1e 6c c8 90 ce d2 51 d3 7c 79 5a 15 4c 46 0e c0 01 c3 95 c0 bf Data Ascii: %VAE"$(iX,Fk6lMO@12vQ-cCX_2]3_eZ"V$~fo!Vz9tUjVdA[KolN%^MG^\|FQ\|%.Q$/P7=EXt;uu)]1C"d$~4HSlQ\|yZLF
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: b1 a7 2c a2 4a ba 64 46 8d d4 57 a9 77 31 44 db ac 00 23 eb f6 68 8f dc 27 13 ca 05 7e 81 8c e0 60 13 f2 4b 27 db 5d 47 4f 21 99 25 d4 94 a4 b6 73 f4 46 3a b0 91 0c 92 6c 77 4a a0 60 01 55 23 08 81 93 54 43 8e c3 a8 5b 72 9b 8a ff 00 f8 7e df b7 f9 7c 32 c9 2c a5 f1 fe 00 0d 3a d0 8e 58 5e 84 fd 82 6b a7 2d 1a d4 f2 0b 7a f1 29 80 41 36 c6 f9 ba 18 9b 18 dc 75 a2 aa c3 91 8e 06 73 f7 03 c4 d6 18 8c 37 86 25 a7 1d 1d 49 7a 2c 35 65 84 78 28 90 09 d7 5d 63 28 8a a2 02 5f 43 08 6d b8 7b 68 96 96 02 a0 65 3e 13 3a 45 bd b9 7c 89 f7 45 55 11 22 eb 87 41 05 48 61 11 29 83 e2 5d 09 b3 1e 02 53 08 9e 63 19 09 aa ee 43 b1 c5 38 e6 8b d5 60 fe 85 6d fa f3 4d 73 80 80 7d e2 21 a5 94 c7 f5 16 79 3c fc 0b f9 b1 de 4e 65 47 c4 aa 20 82 8c 66 2c 26 49 36 8a 95 41 00 4d Data Ascii: ,JdFWw1D#h'~`K']GO!%sF:lwJ`U#TC[r~\|2,:X^k-z)A6us7%Iz,5ex(]c(_Cm{he>:E\|EU"AHa)]ScC8`mMs}!y<NeG f,&I6AM
2024-05-23 22:22:14 UTC	6976	IN	Data Raw: 3e 05 2f c9 7c 81 77 ca 34 3b fe 04 94 6a 9b f6 d7 f4 bb 2c 0a 0a 95 31 4c 0e 43 07 22 ac 98 88 80 86 ff 00 e2 d5 96 6c 45 23 33 b1 09 67 22 61 e3 6d ee af 8e f0 ae 4b c1 57 f7 ab c9 d9 db 9c 5b 58 1a 71 31 d3 7a dc 39 83 70 51 c3 93 14 ca 0f 1e 40 1c 3e dd 21 db bd 11 a6 c6 2e 0a 79 0e ce 0a 77 fa 2a 91 05 33 17 12 c0 80 29 9d c9 14 48 89 ec 23 b9 7a 98 e3 b7 c0 44 74 04 36 be 41 8f b3 40 c2 f1 59 bb e4 96 12 77 c5 67 d7 8c 55 24 88 65 04 ae 54 40 e7 44 bc b6 db 89 80 4d eb ed a6 da ad c9 80 5d db 00 de 46 01 a4 3e 43 f1 3b 14 be 7e ab c9 2b 94 f1 9d cd aa b3 b7 67 05 d1 60 d4 cb 86 fc 8c 3c 44 86 30 0e fa d1 c6 a7 e9 b1 73 7c 8e 3b 4b 8e 1b 8c c8 f5 7a ad 8a e8 d2 f3 7e b3 ca a6 d1 b5 56 21 fa 8b 2a 41 75 c8 4a a3 87 ab 01 44 0a 42 a2 6d c3 df d3 59 68 Data Ascii: >/\|w4;j,1LC"lE#3g"amKW[Xq1z9pQ@>!.yw3)H#zDt6A@YwgU$eT@DM]F>C;~+g`<D0s\|;Kz~V!AuJDBmYh

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://new.aj848310310.workers.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Windows Analysis Report
https://new.aj848310310.workers.dev/

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:13 UTC	638	OUT	GET /photoworkspace/2024/05/06/2024050618341420997.jpg HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:14 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:13 GMT Content-Type: image/jpeg Content-Length: 250958 Connection: close Expires: Fri, 24 May 2024 12:57:51 GMT Accept-Ranges: bytes Cache-Control: max-age=86400 ETag: "6638b2db-3d44e" Last-Modified: Mon, 06 May 2024 10:37:15 GMT Server: CCTV_WebServer X-Ua-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 PSxgHK5yp199:12 (Cdn Cache Server V2.0), 1.1 kf148:9 (Cdn Cache Server V2.0), 1.1 PS-VIE-01Lw182:9 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc195_PS-VIE-01aIr81_14573-51920
2024-05-23 22:22:14 UTC	15844	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 56 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyV1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-05-23 22:22:14 UTC	16320	IN	Data Raw: 74 1d ab 11 da 5e d4 26 83 a8 eb df 47 1d 24 5a 8b 3b 43 eb 4a 90 70 39 8c 0c ff 00 13 ca 39 2a ef 77 b9 48 b7 de db 67 63 0a 16 29 93 82 22 ed 09 01 6f 94 b2 76 a9 5b bb f5 d6 6d ef 0a 78 30 75 db 65 38 22 76 63 d1 2f f1 b3 5b 77 15 ca b6 c1 90 fc f6 e3 34 b9 ab 78 b8 88 ad 50 bc bd cb 1f 9d 69 6d 15 db e9 a8 b2 8b 06 63 2d 7d 4f dc 10 73 d2 72 cd 79 87 90 7f c0 92 da 64 48 97 6d 97 2e 43 d1 66 4f 09 d8 a4 b2 b2 d2 7c 43 ba 50 10 9e c3 50 a3 45 4d 80 f4 13 9b 36 04 b3 02 29 31 4c fb 3d ba d9 84 1c 1d af b5 bc 49 79 41 d9 8c 0f 13 a5 5b bf 2b 7b fb 24 83 d7 4d ae a6 ba f9 f4 82 ba 0c f7 c6 fd 9b 83 af b6 eb 7a 51 c9 77 f2 d5 8e 64 1d a2 d0 85 25 11 7c af 7f 3e d4 f7 50 3d 4e 94 dd be a1 81 45 e9 03 ab 6e d1 77 53 88 30 b1 72 e1 eb 74 c9 38 8c 88 13 2e 6b Data Ascii: t^&G$Z;CJp99*wHgc)"ov[mx0ue8"vc/[w4xPimc-}OsrydHm.CfO\|CPPEM6)1L=IyA[+{$MzQwd%\|>P=NEnwS0rt8.k
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 97 e4 38 a4 2e be e4 50 25 21 5d 7a d6 9a 2c 9e d1 03 61 93 99 2a e1 fb ab 89 59 b4 4c 6d 89 8c c8 46 3d 6a 76 38 68 4a 4c 36 1f 4c 89 6e 3a ba 14 a5 2e 3a 14 15 fe 90 1d 46 aa e2 11 d0 45 94 f4 db ee 57 77 a2 be b5 99 09 94 a7 de 65 dd db 9e de e3 8e 24 95 b6 00 1d 42 6a 91 f8 57 a6 8b 52 60 b6 7d 64 1c 8f 26 45 8d 57 04 48 73 cd 7f 67 74 f4 ca 5b bb 9c f6 a5 2c a0 0a 7a d5 54 00 fa 6a e5 1c c1 bd 67 09 56 e9 78 ce 12 62 be ca 1a bb 5d 66 89 0e 10 90 80 86 d3 47 5c 58 29 eb fc a3 a5 3b eb c7 af 13 84 c8 5c 83 6b 89 73 9c ee 22 60 c9 79 98 f6 25 2d 53 50 53 b1 87 5c 26 41 5a d4 92 2a e2 89 a5 07 a7 7d 75 78 e4 cb 25 73 73 e5 4c c3 53 71 bb 95 21 d7 1a 82 94 1d c5 44 a5 b6 e8 ee e0 9e 9b 50 a1 d0 0f ae aa 3f aa 78 67 1c cb 2b a2 5e 4e 3f 02 cd 11 b2 a7 24 Data Ascii: 8.P%!]z,aYLmF=jv8hJL6Ln:.:FEWwe$BjWR`}d&EWHsgt[,zTjgVxb]fG\X);\ks"`y%-SPS\&AZ}ux%ssLSq!DP?xg+^N?$
2024-05-23 22:22:14 UTC	9947	IN	Data Raw: da ab 54 ee 57 51 d4 f6 1a af 6d d2 aa f0 04 17 62 df 8f 81 25 67 f8 a4 9b 56 49 2e 34 c7 d8 79 61 df 28 7c 10 12 b5 95 75 ef 4a d4 fa 68 4a 2f ee 48 b9 5f 3c c7 37 1e 62 b1 79 6a 3d ba fa cb db 2f 16 f8 5f ae d2 96 3c 6b 56 c2 d9 4f 8c 1e 88 5a 46 91 6c 59 d8 cc 71 38 6f b3 32 ba d1 c2 2c e4 b6 8b b4 4b 1d 9e 6c 27 90 f2 e2 f9 a3 b4 bf 12 dc 51 a8 d8 49 f7 0a fe 1a 1c f9 30 85 73 d2 78 5e f9 e4 c8 56 4f 84 59 fb a1 52 b2 1b 6c 27 9c 8e bf 7a 1d 7b 6a dc a5 09 4a 42 41 25 44 76 1f 5d 35 7f 2a 84 0c 4e b5 85 a6 99 f8 45 f1 63 fc 7d cb b8 ef 13 67 e6 14 3b 74 4b c3 17 e3 6a 96 e0 76 73 31 98 3b 90 d9 61 b0 a0 d9 24 75 de a0 40 f4 d2 d3 b4 ce fc 46 be 1f 4d 9a ee e2 7a 4f 4d da 55 d3 2d 95 3e 4b 6b 92 23 5d 24 45 b6 db 6d 08 40 42 dc 8e 89 21 2a 1b 8d 09 4a Data Ascii: TWQmb%gVI.4ya(\|uJhJ/H_<7byj=/_<kVOZFlYq8o2,Kl'QI0sx^VOYRl'z{jJBA%Dv]5NEc}g;tKjvs1;a$u@FMzOMU->Kk#]$Em@B!J
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 99 06 a7 1d 26 2e b0 4d 96 1c 75 c6 d7 b5 a4 a4 fe a0 a9 52 94 4f 44 a4 0e e4 9e fa 7c 65 04 46 97 c5 2c 76 7f 20 67 32 f1 d5 dd 62 42 b4 29 05 89 13 25 b9 e3 65 3e 6f 60 a9 35 24 82 49 fc 34 8f cb 31 2a 30 3d 64 49 39 e2 69 0f e9 bd f1 bb 81 de e6 eb df 29 f2 97 26 bf 68 e4 7e 37 cb 51 1e d1 6b 82 94 29 cb 8c 66 5a 50 44 f0 e3 a9 21 e6 94 b3 44 84 8a fd 74 9b 6f 6d 6b a4 16 97 f7 fd 66 c6 f9 35 f2 3f 8e f8 e7 86 ee 1c a4 c3 97 1b fd c9 e7 d5 06 4c 4b 93 ce 3b ee 98 82 ca 1f 61 20 78 d0 da 77 d5 40 f5 f4 1a 4b 4e ff 00 ce 3d b2 36 f0 9c 4c 5d c0 d7 5b f5 86 e1 3d 8c 16 6d cd 8b 1d ec 29 4e 2a d6 f2 52 d7 94 36 40 52 d0 3d df 94 f7 f4 d0 7b 1b 2f 59 89 7e 6b 49 e2 57 43 e1 96 a2 67 4f dc 85 e3 74 d4 dc 1b b8 bb 09 e5 95 3f fa 62 aa a6 fa 54 ab af 53 aa f6 Data Ascii: &.MuROD\|eF,v g2bB)%e>o`5$I410=dI9i)&h~7Qk)fZPD!Dtomkf5?LK;a xw@KN=6L][=m)NR6@R={/Y~kIWCgOt?bTS
2024-05-23 22:22:14 UTC	5516	IN	Data Raw: 11 39 31 a3 8f d7 65 c5 fb ca 92 af 40 6b d4 68 bf 1d 71 65 23 d0 49 25 45 f9 8f ec 53 fa 96 f1 e4 8b 33 d6 fc e6 3d e6 76 36 98 75 54 25 46 0a 42 f7 9a 16 95 52 02 ab eb ab 36 31 08 ad 59 44 41 73 b7 ca 1c e7 e5 ae 5a dd 97 0f 8d 0e db 88 c4 09 46 3d 67 b7 40 40 91 15 2d 27 66 e7 1d 48 dd b8 52 b4 ad 06 bc a8 15 73 2c 57 fa c5 b4 3c db 3d b0 66 89 e3 bc 36 fe f4 6c 96 6a d2 cc d9 ef 80 da 84 82 29 57 54 e0 21 23 f1 d7 0d 00 0e f3 2b 6e b1 8d 84 70 4f 3e 5b f2 38 58 7e 5e d4 cb a3 79 53 ab 5f ef d1 d5 e4 69 2b 40 aa 8a 09 34 49 20 50 93 a1 ce cd 4e 3d bd 44 8a 2a bb 01 3d 83 f8 77 c1 f6 be 0a e1 a7 59 89 15 b6 7c 31 db f3 54 ec 44 99 11 e1 ef 78 d7 d1 b4 92 53 fc 6b a8 d3 d7 33 e8 15 2f 6d 0a 25 e6 33 74 77 1c e1 d4 ae 7a 97 06 e5 70 8a ed c2 f0 f3 8a 52 Data Ascii: 91e@khqe#I%ES3=v6uT%FBR61YDAsZF=g@@-'fHRs,W<=f6lj)WT!#+npO>[8X~^yS_i+@4I PN=D*=wY\|1TDxSk3/m%3twzpR
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 79 52 4c 48 fc 79 63 88 2e a1 e8 c1 0f 44 0f 3d 09 32 22 b2 f3 df 95 bd fb 85 01 ee 41 03 4a cd c9 65 fd ae 71 0d ad 9c 61 9a 3e 67 e5 7c 53 25 9b 8f 15 dc 32 26 71 69 50 e7 2d e8 17 36 fe d0 ad 2e 2d 4a 71 6e ab ca db 80 a2 80 d7 a5 46 ab a6 e5 0c c0 fe 51 8e bd cd 63 0e 32 66 46 f9 79 c6 d8 85 c2 55 c2 e7 c2 37 eb 2d c2 db 2c fe de 6e 89 71 12 12 a9 29 20 07 56 d0 48 1b b7 55 4a 00 01 43 af 5d b8 94 90 4c 3b c8 f9 27 aa bc 10 33 33 07 3b 33 12 df 7e b6 71 be 53 7d 90 24 c3 b1 b4 27 4f 42 02 0b ca 4b fb c1 09 6c 54 24 9f 6a 00 eb f8 69 96 95 82 e4 2d 30 f7 d8 d7 3f 74 d8 7c 51 c9 fc cb c2 df 1f 2d 7c 61 8a e3 b0 2d 10 67 97 b2 16 03 51 50 2e d3 e4 3e d2 9b 6d d9 2e 74 a9 42 14 56 94 2f a8 34 d2 bb 2e 21 88 8e f4 83 a2 67 11 01 cd 7f 3e 39 36 df 95 58 b8 Data Ascii: yRLHyc.D=2"AJeqa>g\|S%2&qiP-6.-JqnFQc2fFyU7-,nq) VHUJC]L;'33;3~qS}$'OBKlT$ji-0?t\|Q-\|a-gQP.>m.tBV/4.!g>96X
2024-05-23 22:22:14 UTC	9896	IN	Data Raw: cb 60 97 72 c7 24 5a f2 26 4f dc 64 d8 fc a8 b7 68 ca 6d 21 68 76 4c 23 e5 68 04 af b1 5a 80 ad 7d 2b 5d 66 f6 e8 35 b8 c7 19 95 d2 f8 6c 89 a4 6c 3f 2f fe 5d 7c 85 bc 46 c3 ae 68 86 61 f2 12 1a b6 5c 61 c5 a3 21 a4 c8 78 32 86 c2 cd 00 50 52 6a 29 f9 41 27 4b c3 5c 7b b9 ca 83 0c 1b 24 f1 33 ef 35 58 7e 4a 71 63 97 49 7c 89 e3 89 63 6b 2a bb e1 d6 f9 83 c5 72 3f ba 59 92 95 cb 8c a0 3a 29 85 25 c4 d1 7f 43 f8 69 96 b5 23 11 9e 9b 92 79 81 5c 63 91 22 fb 6c bc 5c 1a c4 ad f6 55 b7 18 b5 32 e3 15 4a 75 b6 25 38 36 a5 4c 36 be 81 6b 27 bf a6 8c 14 5a 87 b8 b7 b7 e9 1a 76 ab 71 88 41 86 71 35 db 11 c6 18 97 3e e6 c5 d6 ea c4 d5 ba 21 2d b0 fb 6f b0 f2 92 b5 29 45 5e e0 b4 50 a4 8f a1 e9 a5 7b b6 bb 2b 2d 7d 71 0a d3 d7 1d dc 9e 26 ab e1 eb 4e 15 c9 9f 25 31 Data Ascii: `r$Z&Odhm!hvL#hZ}+]f5ll?/]\|Fha\a!x2PRj)A'K\{$35X~JqcI\|ck*r?Y:)%Ci#y\c"l\U2Ju%86L6k'ZvqAq5>!-o)E^P{+-}q&N%1
2024-05-23 22:22:14 UTC	16384	IN	Data Raw: 9b 1a 36 0a bb b1 cc 58 71 6f 2c 73 6e 0d 8b 47 6d 51 59 bb e2 11 de f2 18 93 51 45 a4 84 94 94 a5 69 ea 06 d3 d3 e9 a2 ec 0a dc 08 05 7a cd d4 88 43 7a f9 bf 69 8d 7d 10 5a c5 d7 1e e7 f6 fb d0 5f 75 2e 21 c5 d3 a2 48 02 a0 1f 4d 09 66 8b 30 3c ce 3e d0 ac f6 98 c4 e7 ff 00 92 7c 83 c7 78 7e 04 ec 54 a1 38 2f 20 63 82 eb 63 ba c6 df 56 9c 65 65 a9 31 89 ee 7c 6b f4 3d 40 d2 dd 4a 96 c6 65 6f 48 51 73 80 c3 d6 06 71 95 ff 00 21 c9 2f 22 5d d5 4e 88 ae 7e b3 72 01 3b 4a f6 fb 88 27 fd 21 4a 8e c4 7e 3a 0e f5 00 e0 46 95 1f 6e 4c 60 30 8b 8c 60 55 06 3c 69 51 7c a7 70 0e ab 72 50 ae e0 81 dc 0f c7 51 0b c4 8f c9 cc 30 b2 aa dd 36 2b 11 c3 8f c7 71 3e f6 5a 78 15 25 b5 fa a4 28 50 d0 8f 4d 54 52 4c 59 88 6d 89 4a ba 5a 1d 08 42 d8 75 a7 fa 25 35 43 94 a7 52 Data Ascii: 6Xqo,snGmQYQEizCzi}Z_u.!HMf0<>\|x~T8/ ccVee1\|k=@JeoHQsq!/"]N~r;J'!J~:FnL`0`U<iQ\|prPQ06+q>Zx%(PMTRLYmJZBu%5CR
2024-05-23 22:22:14 UTC	6976	IN	Data Raw: 92 cb 2d 93 e3 8d f4 52 9b e8 41 e9 ac ee f8 a2 d3 de 10 67 eb 89 c2 73 3a b2 93 c6 1c 19 77 fb 4e 2c bc a9 dc 8e fe b5 c7 89 3a ee e2 64 5b ed 71 91 ee 90 e0 92 e8 48 52 da ae c6 db ea b2 a3 4d 13 af f2 ec 57 da 47 02 4b b0 fa 44 ad af e4 37 26 2b 32 97 2b 1d 7f ee 78 b2 3c a7 a4 5e 6d ce 44 00 c8 53 d4 6d 72 9d 51 05 29 7b a0 52 36 d0 0a 6b 41 4f 8d 5f 87 dd d6 5d f1 7b 66 8d 63 37 7b 9f f0 7b 7e 0f 97 5c 2c f1 78 fb ed 0c 47 df 6b cb 26 69 89 45 36 5f 75 b7 ff 00 2b ad 83 b5 09 41 da 09 a9 ae b2 1e 45 ce 9d bd ca 18 e2 0f da c2 0f de b8 4b 01 e3 cc 86 1d 8f 8a a6 7e d3 8c 49 b6 bb 12 2d ad 4c 89 cb 99 35 94 80 4a 1c 79 49 21 d7 50 7a 80 47 5a 53 54 f8 cf 3f b7 b3 dd de 9d dc ff 00 40 9e e6 1b 70 0d 9e d9 60 76 45 fb 9c a6 64 2b 5c 18 72 2e b1 ec d7 18 Data Ascii: -RAgs:wN,:d[qHRMWGKD7&+2+x<^mDSmrQ){R6kAO_]{fc7{{~\,xGk&iE6_u+AEK~I-L5JyI!PzGZST?@p`vEd+\r.

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 22:22:14 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=236857 Date: Thu, 23 May 2024 22:22:14 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:14 UTC	405	OUT	GET /photoAlbum/page/performance/img/2023/2/9/1675908806957_283.jpeg HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:15 UTC	532	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:15 GMT Content-Type: image/jpeg Content-Length: 6897 Connection: close Expires: Fri, 24 May 2024 07:51:52 GMT Accept-Ranges: bytes ETag: "A2EA88DEC0CC1A5667AC0650C19A871C" Last-Modified: Thu, 09 Feb 2023 02:13:30 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 PSxgHK5dz198:4 (Cdn Cache Server V2.0), 1.1 kf148:9 (Cdn Cache Server V2.0), 1.1 VM-FRA-0124V35:12 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc197_VM-FRA-0124V35_39858-15446
2024-05-23 22:22:15 UTC	6897	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 22:22:15 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=236778 Date: Thu, 23 May 2024 22:22:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-23 22:22:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:16 UTC	652	OUT	GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/headerDown.png?a HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://r.img.cctvpic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:16 UTC	541	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:16 GMT Content-Type: image/png Content-Length: 237 Connection: close Expires: Fri, 24 May 2024 12:28:34 GMT Accept-Ranges: bytes ETag: "C04CB3A9901E6887233F380AF0F40E3F" Last-Modified: Thu, 06 Jan 2022 07:49:43 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun97:4 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1bm110:10 (Cdn Cache Server V2.0), 1.1 PS-VIE-01aIr81:14 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc198_PS-VIE-01aIr81_14433-55508
2024-05-23 22:22:16 UTC	237	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 7c 49 44 41 54 28 53 8d d0 b1 0d c2 60 0c 84 d1 ef 24 26 60 8c 34 29 58 20 73 d0 40 45 95 b5 68 92 2a 1b 64 81 34 91 32 05 03 d0 44 3a f4 23 88 8c 48 61 d7 cf f6 d9 22 59 4a 3a 64 bb 01 1e 92 96 bd 26 db 27 e0 59 60 05 74 c0 45 d2 14 b1 ed 1a b8 03 ed 7b f5 1e fe a0 1e b8 49 1a b7 8c 11 03 2b 30 00 d7 82 ca b0 9f 63 02 3e 02 e7 2f fa 83 21 c6 41 d2 1c f3 e6 df 93 fd e3 0b 2f 49 2c 6f dc 12 b2 5c 00 00 00 00 49 45 4e 44 ae 42 60 82 65 f7 6c 7b 00 6c 81 b5 a4 47 db 16 7a 3e 92 ae c3 c8 d5 8b be fd 04 74 a7 3c 10 6f 4a 18 50 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2sRGB\|IDAT(S`$&`4)X s@Eh*d42D:#Ha"YJ:d&'Y`tE{I+0c>/!A/I,o\IENDB`el{lGz>t<oJPIENDB`

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:17 UTC	652	OUT	GET /photoAlbum/page/performance/img/2024/5/16/1715852415970_283.jpg HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:17 UTC	543	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:17 GMT Content-Type: image/jpeg Content-Length: 188910 Connection: close Expires: Fri, 24 May 2024 11:49:17 GMT Accept-Ranges: bytes ETag: "A7AA5D668627AE61C533AB6AD2C77599" Last-Modified: Thu, 16 May 2024 09:40:22 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun97:9 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1bm110:5 (Cdn Cache Server V2.0), 1.1 PS-VIE-01Lw182:4 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc199_PS-VIE-01aIr81_12509-41210
2024-05-23 22:22:17 UTC	2313	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 07 08 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 0a 10 0e 07 08 1a 09 07 07 0e 21 0e 0f 11 1d 1f 1f 1f 07 0b 22 24 22 12 24 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0d 0d 0d 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 15 12 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 09 ff c4 00 64 10 00 02 00 04 03 04 05 07 07 07 09 04 06 08 00 0f 02 03 00 01 04 12 05 13 22 11 32 42 52 06 21 23 62 72 07 14 31 41 82 92 a2 33 51 61 81 b2 Data Ascii: JFIF!"$"$"d"2BR!#br1A3Qa
2024-05-23 22:22:17 UTC	16384	IN	Data Raw: c2 a9 81 e3 4c 11 45 31 26 0d da 7e ec 35 8f 18 db a7 57 0c 1a 5e 19 cb aa 2b 5d 23 0b 1d 0d 17 6c 75 1a 44 5a 04 b2 eb ad d2 3b c3 06 92 c1 b7 76 d2 1d d8 0b 44 e2 bb 4e ec 4a 65 41 11 5d a6 34 15 49 58 76 96 7c d0 dd 45 12 75 5a 22 25 02 53 52 c1 85 f9 c3 0b 8b da 83 b1 4e 97 7c c7 10 a2 ba d8 b0 50 81 0a f5 15 bc b0 0a 91 d6 94 59 29 ea 04 97 0f 13 36 76 ec 91 d0 b1 67 e5 15 97 2e f7 84 a3 e9 8e 8f b8 85 62 3e 18 f9 ef c9 ac c4 ab 5c 3d d1 2f 74 a3 e8 2c 2e 76 ad 7c bf c3 0d 2f 60 a7 ab 11 8e d7 09 16 58 af 30 87 8b 96 02 d6 23 78 b4 dd c3 de 83 f5 14 3b da ad 1e 1b 62 3b a8 0b 24 b9 87 ec c5 49 94 49 6f 60 0a 7a 4b c4 8a df 66 23 8d 09 71 5a 51 66 a0 a7 d3 68 f2 ea 86 ca 8a d1 e1 b7 9a 1b 50 8a 0e 8a c3 29 b8 74 c3 04 9f 0f c5 04 2b 24 5a 87 4c 42 9d Data Ascii: LE1&~5W^+]#luDZ;vDNJeA]4IXv\|EuZ"%SRN\|PY)6vg.b>\=/t,.v\|/`X0#x;b;$IIo`zKf#qZQfhP)t+$ZLB
2024-05-23 22:22:17 UTC	16384	IN	Data Raw: 33 e4 86 a4 d1 a8 2d a2 68 f1 45 63 1a a3 d5 09 c1 b1 6d 22 b2 28 3b 30 16 91 17 76 1f 99 86 09 e2 66 77 52 a2 12 8e 29 a4 bd 42 56 c5 83 1b a2 b6 ef c6 98 af 9a ed 8a da a3 7c 5a 9c 4d 0b 00 c4 56 69 5d df 28 50 6b 0b ad 21 76 9e 1b 63 26 a7 aa 60 6e 91 45 df a3 98 95 c2 b2 de 66 ab a1 b9 9c dc fc 3e 9d cd a3 0f e9 03 89 22 39 97 69 d5 f8 e6 8f 27 1c 62 ca e1 22 1b 4a e8 a0 e0 78 96 ab 78 62 df 21 59 8d dc b6 c0 8d b7 45 18 f2 68 d8 dd 3c 9b 74 d5 6f 5a c4 88 45 9b a4 31 a8 d3 b8 58 37 0c 7c c1 d0 9e 8b 54 b4 86 a5 2c 24 da 57 5a 3c 43 1b d7 44 9a d1 11 16 15 dc 25 74 3e 5c 2d ab ea 16 ed ec 59 8a 11 b6 1d 9e a8 6f 64 65 14 86 d1 bb 51 44 47 01 41 39 8c 30 d0 88 98 92 8d 82 a6 88 69 92 b6 08 b0 07 da 88 ad 0e 21 82 54 e2 0c 39 f7 61 a2 2e ec 12 6a ae 88 Data Ascii: 3-hEcm"(;0vfwR)BV\|ZMVi](Pk!vc&`nEf>"9i'b"Jxxb!YEh<toZE1X7\|T,$WZ<CD%t>\-YodeQDGA90i!T9a.j
2024-05-23 22:22:17 UTC	16384	IN	Data Raw: 6f 7c 51 3d 14 13 02 9c 81 98 2f 4a 98 4b e5 d3 00 b1 fe 90 56 99 5c bb b8 a2 f8 1d 15 48 f2 c3 c1 d1 b4 f2 8c 3a d2 ba 01 b9 33 3b c3 31 3a d2 de 22 82 3d 1a 7a 1f 8f 50 2f 13 a9 62 29 16 4c bb 51 0a c9 8c 5f 62 4c ee c8 ed 8b ab f0 a4 21 6c 73 2d 15 ac 48 8a 31 6c 6e a7 31 cc 67 33 08 87 bb cb fd 91 d7 ec ee 0e 39 75 49 a2 9c 99 1c 4d ab 13 a4 a9 c3 dd 97 52 36 8b 35 2d c3 a9 2f 1f d2 25 83 d4 43 38 72 9f 16 1b b7 a2 8d d0 2f 2a 55 34 29 f3 0c 4d 0b c5 b0 92 de a6 7f ca a7 bc 87 7a 56 5f aa 2f 92 e8 85 16 30 9f 3b e8 9e 22 2e 2b 6e 66 13 56 c1 1a b4 f3 0a 59 f9 cd 9f 4c 72 38 fe ca 9c 24 ce bf 07 da 29 aa 91 3d 0e 16 0e 92 b4 a2 15 63 2a 55 da 23 57 30 f1 45 07 12 af c4 f0 e7 12 2b 50 f4 38 4a dc b7 09 09 7b 3e a2 1f a6 5b 61 23 d2 f7 71 09 47 1f f9 59 Data Ascii: o\|Q=/JKV\H:3;1:"=zP/b)LQ_bL!ls-H1ln1g39uIMR65-/%C8r/U4)MzV_/0;".+nfVYLr8$)=cU#W0E+P8J{>[a#qGY
2024-05-23 22:22:17 UTC	9612	IN	Data Raw: 31 41 38 90 a2 88 83 38 70 4a 00 5c 4b 0e 17 58 5a 46 2c 06 42 42 36 c5 19 0d 83 b8 56 21 a8 6e 82 99 9a 71 68 9b 59 43 c5 6c 00 a9 a6 21 8b 9c 8c 4f 4c 40 c4 68 b4 c1 e6 36 3c bb 53 2a f4 75 04 a6 09 0f 0c 5a 70 8c 4e fd 22 45 77 2c 57 2b 69 6d 84 e1 d5 24 a6 09 72 c2 b4 85 cf 89 35 b1 b1 60 d5 c4 02 3a bf d5 17 2a 6c 5d c6 bd 25 77 88 a3 2d c0 6b c4 d6 2c 12 ee 94 5b 70 aa db 08 6d d4 31 54 95 1c a6 9c 59 91 92 2a 9a 22 0c 12 21 05 f6 4a 65 cd 11 58 75 82 50 2c db 96 32 bb 6c 84 36 4a 5b 67 3e a8 e8 61 4c 21 b9 97 5a 3a ae 61 5b 6f b4 5b 3f be 0f b3 0d 7d b7 3f 11 a6 40 e9 2b 7c e5 62 cb bc 2b 9c c8 4b e8 96 c8 8f 45 49 4c 6e 58 b3 ce 5e 24 5a 98 4b 21 11 ef 5c cd b3 b7 77 d5 09 71 5e 3f 3f a6 df 33 d0 ea b0 72 a8 d2 22 45 98 b6 5b 6e 61 20 59 53 6d c5 Data Ascii: 1A88pJ\KXZF,BB6V!nqhYCl!OL@h6<SuZpN"Ew,W+im$r5`:l]%w-k,[pm1TY*"!JeXuP,2l6J[g>aL!Z:a[o[?}?@+\|b+KEILnX^$ZK!\wq^??3r"E[na YSm
2024-05-23 22:22:17 UTC	16384	IN	Data Raw: 97 57 dd e2 90 3b a3 78 b0 bc 86 af 13 43 f1 2c b6 09 29 2f af 7a d6 5a 48 73 c9 c5 29 9b 1b 29 96 d1 d9 3b 65 b2 72 98 94 a7 b2 0b 74 c3 ca 15 5e 22 bf 32 42 c6 92 80 6e 1f 34 40 a5 6c 75 c5 98 cc e6 2c 06 49 4c d9 af 25 52 11 da 53 9e ce bd 91 73 96 25 48 6f 46 19 4d 85 d2 79 b0 da 9a 25 d5 bd 74 8f 62 d6 96 7c a3 1d 3c b4 ed d4 5d 7d 52 d9 b3 6c e7 18 f5 28 0d c4 3b a2 44 5a 57 a8 ad 22 2f ce 71 7e b9 41 c3 18 cd db 5e 5f d8 76 da 46 f3 fc 99 70 b2 1a da f7 ac 53 53 4d e6 89 5f 9d dc 2b 7d 23 d8 42 c7 50 65 ed ba c9 c8 44 a7 39 8e ce c9 7b 27 1b d6 57 e2 e8 c6 bf 93 6e 1f db e3 15 65 44 b5 3d 65 4d 48 55 28 7f 60 f1 f3 64 34 96 48 bf 60 9c bb 16 df b3 af ce e7 29 4e 7b 23 69 9c cb 97 e2 86 ce 96 b6 79 be 2a 4d e4 7f 9f 9f 01 b9 ac bf 04 51 e9 e6 7f 0e Data Ascii: W;xC,)/zZHs));ert^"2Bn4@lu,IL%RSs%HoFMy%tb\|<]}Rl(;DZW"/q~A^_vFpSSM_+}#BPeD9{'WneD=eMHU(`d4H`)N{#iy*MQ
2024-05-23 22:22:17 UTC	8436	IN	Data Raw: b7 c5 66 91 fa a2 25 27 ca 2f df b7 d4 d3 1e 02 4f da 94 57 96 e6 ea d7 08 fe 71 7c c3 6d c4 45 ec 8c e7 38 68 9e bb 87 30 9c c1 e5 48 88 91 0d bc 37 4e 7a b6 f5 6d 9c 7c df 2f 29 d8 d3 ea 29 85 95 d9 48 2a ba 6c d5 52 29 54 ca 34 93 d7 98 25 6c a6 5d 61 74 b6 dd e8 9c e3 ea 57 da 39 c2 2b 5a c4 58 cc b5 da 2b b8 47 50 88 97 a6 e9 fa ba fd 5f 4c 47 0c 8b b9 7c 5b fb 03 2e 1c 38 6b 56 a9 f9 34 97 ea 52 71 ce 9f e0 b4 66 4a 7b e9 10 d5 15 a4 a6 bd 8f a9 59 5b ba 48 40 4a d6 fd 13 f9 e2 ab 8b 79 68 a1 b4 85 23 58 fb bf 41 4e aa 11 2f 11 1c e6 7f 5e c8 a4 7f 28 cc 08 8b 14 af af a6 11 cc ce 1c d1 1d 39 e2 48 49 0b 3e 7b e5 e8 9e de be a8 c7 d1 88 17 e3 87 d9 8d 30 e0 5e 48 ea 94 a4 fc a9 7d 0b 70 f1 58 23 ec e3 8a f3 df ea 6d 98 8f 95 ea 92 bb 22 82 99 57 0d Data Ascii: f%'/OWq\|mE8h0H7Nzm\|/))H*lR)T4%l]atW9+ZX+GP_LG\|[.8kV4RqfJ{Y[H@Jyh#XAN/^(9HI>{0^H}pX#m"W
2024-05-23 22:22:17 UTC	16060	IN	Data Raw: bb 87 f3 14 94 c4 37 6a b4 76 e9 19 cf af aa 50 46 b6 45 68 dc 4c 2b b5 5b d9 a2 dd 25 f4 6d 18 88 a4 2c 88 ad 2a 62 b4 8b 2c ad 63 ca d2 b6 ed dd 92 eb d3 eb 89 ad a5 5f 9f a0 ba 53 76 06 9c b0 eb 84 5c 48 f3 9c cb b2 d8 55 35 ac 22 21 e1 12 9c e4 9d 9f 36 cd 9d 71 22 4d 59 ee 8b 85 62 59 65 96 b1 a6 1d 3a b4 ac a5 bb f3 75 41 15 0b 07 4d c5 77 e9 16 95 a5 96 db bb 77 a6 d9 e9 f5 fa a3 89 1d 44 3a 59 da 0f ca 33 30 57 a7 88 87 8a 7f 34 4d 7e e2 69 25 a0 50 4b cc 60 da 59 7a b3 d8 c7 5c 23 69 0d a2 bd 97 17 af 6f d1 0c d2 3c 8a e2 5f c9 af 85 14 99 62 5a 74 90 b1 9b 4b e9 9c e1 34 c6 cd dc c1 58 88 a4 44 96 23 75 ba ad b4 76 69 db f3 fa 60 83 d6 43 aa e7 16 91 b7 31 83 97 de d2 3d 5f 54 51 35 eb 16 45 ec 43 3a 76 90 da c6 34 88 ad 22 16 3f 84 7b a3 f2 63 Data Ascii: 7jvPFEhL+[%m,*b,c_Sv\HU5"!6q"MYbYe:uAMwwD:Y30W4M~i%PK`Yz\#io<_bZtK4XD#uvi`C1=_TQ5EC:v4"?{c
2024-05-23 22:22:17 UTC	16384	IN	Data Raw: 0c 74 6d f9 15 62 2c dd 22 65 33 c7 84 84 88 90 c1 bb 87 64 fa fd 9f 4c bd 31 a7 f9 3c c5 89 58 2e 39 81 b0 87 31 15 ab 78 8f 77 3d 2b 22 5f 30 cf f6 68 ea db b6 32 9a c3 cd 14 55 f1 54 a6 d7 5b c3 52 8b 52 d1 d3 b2 43 b4 32 4e 52 ef fa 25 b6 51 70 c2 de 4d 7d 35 6a f4 f9 cd 27 9b 55 8d ba 73 69 2d b4 be b9 0a cb e8 d5 e9 db 38 cd c7 ef c3 4f fd ac ed ff 00 0f 46 fb 4b 87 ff 00 dc 8b f9 a0 f4 68 b8 8f 4e c2 8f a2 dd 1b 46 1e f5 fe 54 c3 f1 67 d6 4d 44 37 e5 08 9d 7c a5 9a 33 e0 98 56 84 bd 53 eb 2d 9e 8e ac ee 10 41 28 f1 1c 3f 13 2c 4d b8 f5 55 f3 4f ec 7e 87 ed 5e c9 c5 da 11 84 72 f2 c7 2d 55 d1 fa ad 53 f0 dc 5e 35 88 d5 e2 35 8f c4 2b 8f 36 a6 a4 ef 32 b6 d1 dd b4 56 03 e8 90 4a 42 23 29 7a a5 29 46 89 d0 df 2c 0f a2 a2 96 17 8a e1 e8 c6 30 d0 11 5a Data Ascii: tmb,"e3dL1<X.91xw=+"_0h2UT[RRC2NR%QpM}5j'Usi-8OFKhNFTgMD7\|3VS-A(?,MUO~^r-US^55+62VJB#)z)F,0Z
2024-05-23 22:22:17 UTC	2596	IN	Data Raw: 5e c0 c6 5b 25 d0 5c 33 f5 13 e9 e7 fd b3 a0 9c e3 4f 15 8f 16 59 26 b2 2e 49 72 7d 17 91 c4 ec 4e 2b b4 38 1c 12 c6 f8 49 cb 54 a7 2f 6e 0b da 93 75 bb e9 64 cf 2c 22 3f f4 27 a2 32 f9 88 3f fa 56 46 48 95 8d b1 ad d7 f9 7a c3 9e 94 d2 bf a1 74 0f a6 a7 f9 04 b6 ad 2c 42 38 7b 25 1d 04 e4 ae ae ae a9 7a e1 aa 0f 2d 78 3a 4a e5 74 27 0e 55 da 48 94 ea 71 2b 7d 9a 19 5d fa a2 71 38 f0 e5 92 7e 91 72 4b 93 e8 ab b8 9d 8d c6 76 8f 03 8e 50 7c 1c a4 e5 39 cb fc c8 2f 6a 4e 55 cf a5 95 2e 81 b5 82 6f 5a c8 47 34 56 b2 d3 a8 ae 2d 22 25 c3 b6 7e 98 d2 31 74 ac 29 96 91 11 b7 b3 48 f7 84 44 ae 2f ae 7d 71 59 c0 71 aa 3c 4b 1c ac c4 29 e8 65 44 89 ad 44 14 f2 21 2d 8d 94 ac 26 5a 12 19 0f 11 6c 97 af af d7 38 b1 63 d2 12 25 2f 4e 91 22 2e 5b 98 5c 3f f8 7e b8 e9 Data Ascii: ^[%\3OY&.Ir}N+8IT/nud,"?'2?VFHzt,B8{%z-x:Jt'UHq+}]q8~rKvP\|9/jNU.oZG4V-"%~1t)HD/}qYq<K)eDD!-&Zl8c%/N".[\?~

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:18 UTC	406	OUT	GET /photoAlbum/page/performance/img/2021/12/16/1639647987066_668.png HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:18 UTC	541	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:18 GMT Content-Type: image/png Content-Length: 2688 Connection: close Expires: Fri, 24 May 2024 19:32:57 GMT Accept-Ranges: bytes ETag: "136730FC39E3B1A1C2B2335F6DB7229B" Last-Modified: Thu, 16 Dec 2021 09:46:35 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun97:3 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1iy111:4 (Cdn Cache Server V2.0), 1.1 VM-FRA-01T6Y27:13 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc19a_VM-FRA-0124V35_38420-42128
2024-05-23 22:22:18 UTC	2688	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 06 00 00 00 cf 6b be ba 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 22 a0 03 00 04 00 00 00 01 00 00 00 1d 00 00 00 00 21 0b 8e 03 00 00 09 ea 49 44 41 54 48 c7 ad 57 0b 34 96 e9 16 7e 73 eb 42 9a 90 84 11 12 b1 54 12 0d 15 7e 97 10 95 6a ba 99 50 e3 52 a9 64 ba 49 4d 17 45 48 a5 a4 42 a6 24 19 8a 32 ab 08 49 45 e8 94 2e e8 46 19 b9 54 67 55 fc a1 f8 8b 9f e7 ec ef 4f 0d 47 75 ce 3a 73 de b5 f6 fa 7e 9f ef fb f6 b3 f7 fb ec bd 9f 97 b1 bf bf fa 90 49 91 0d 24 53 21 b3 22 f3 25 db a7 a5 a5 55 e0 e0 e0 c0 37 32 32 Data Ascii: PNGIHDR"ksRGBDeXIfMM*i"!IDATHW4~sBT~jPRdIMEHB$2IE.FTgUOGu:s~I$S!"%U722

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:18 UTC	638	OUT	GET /photoworkspace/2024/05/22/2024052210120068335.jpg HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:18 UTC	530	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:18 GMT Content-Type: image/jpeg Content-Length: 43804 Connection: close Expires: Fri, 24 May 2024 04:35:53 GMT Accept-Ranges: bytes ETag: "3DB28EFA10AE31E1D3170D583B7E9840" Last-Modified: Wed, 22 May 2024 02:12:24 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun231:1 (Cdn Cache Server V2.0), 1.1 kf160:0 (Cdn Cache Server V2.0), 1.1 PS-VIE-01aIr81:6 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc19a_PS-VIE-01aIr81_14470-59724
2024-05-23 22:22:18 UTC	15000	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 c2 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222 "}!1AQa"q2
2024-05-23 22:22:18 UTC	16384	IN	Data Raw: 99 ae 38 91 ce 0d 30 46 38 18 e9 52 47 09 66 ed c7 ad 3c 0c 13 45 cd 1d 05 62 96 ab 61 26 ae f1 c8 d2 e2 48 97 0b 9f 4a c2 92 ca ea d0 30 54 dd 8e 4e 2b ab 8e 38 e4 95 15 ce 06 7a d6 86 af a1 a4 16 7f 68 81 89 56 5e 45 52 67 0d 5a 09 1c 52 de 1b fd 35 6d 99 ca 77 61 54 2d 5c 40 ce 57 9e d9 ab b3 5a 24 31 16 53 f3 05 25 eb 2f 2c 40 55 07 24 f0 07 7a b4 79 b5 15 8d ad 32 d0 5e 4a 66 63 f2 27 6f 53 5d 05 94 f2 da 8c c4 70 c7 80 05 72 76 57 b7 3a 5b 18 65 8c a9 3f 36 0f 5c 57 5d a0 df 59 fd b5 24 9f 06 33 eb d8 d5 49 9b 61 9a b9 72 5b 9b b9 40 13 b1 0b 8e 86 a0 ef 9a d4 d5 6e e2 bb 90 18 90 2a af 4f 7a ca 63 8e 6b 26 cf 6e 92 56 17 3c f1 4e 3f 72 98 03 60 36 d3 83 d0 d3 9c ed 8c 92 2a 51 b2 68 80 9c 67 9a 5b 8d 1d b5 3d 29 e4 1c 84 a8 1a 4c e4 57 43 e1 fb b8 Data Ascii: 80F8RGf<Eba&HJ0TN+8zhV^ERgZR5mwaT-\@WZ$1S%/,@U$zy2^Jfc'oS]prvW:[e?6\W]Y$3Iar[@nOzck&nV<N?r`6Qhg[=)LWC
2024-05-23 22:22:18 UTC	12420	IN	Data Raw: 18 6c 76 a0 b5 02 1e 5b 8a 61 6a 09 34 da 60 19 a5 cd 25 2e 0e 29 00 e5 34 fc d3 15 4d 3f 6f 7c 50 31 d9 ef 46 7b 54 a3 cb 16 c4 e7 e6 f4 a8 72 38 ed 40 0e 06 9d 9a 66 69 45 00 38 52 d2 62 94 2d 17 1a 4c 91 3e 61 8d bd 2a f0 8a 23 6d b8 8e 47 4a ad 68 ac f2 ed 40 4e 7d 2a 4b d9 e0 b2 75 8e e2 5d ac c7 00 52 e6 48 76 2b 3c 8a 1d 33 dd 80 22 bd 32 04 8a 7d 3a 3b 69 57 31 3a 00 54 fd 2b cc 6f 6d 6e 21 b9 b7 99 48 68 03 82 d8 f4 af 47 b5 b8 49 20 89 e3 39 4d a3 f0 af 33 15 55 df 41 a4 71 fe 22 f0 b2 68 6f f6 eb 75 f3 2d 89 e9 dd 6b 94 b9 d5 4a df 42 a7 3e 56 f1 bf 8e d5 d4 df f8 c0 cb 7d 7b 6b 32 66 14 3b 42 9e f8 35 85 35 c6 9f 73 11 1e 4a a0 3d 4e 3a 52 84 db 8d 8a b1 e9 3a 45 dc 32 58 ab c7 22 b4 61 73 9c f6 ae 7c f8 c6 ce e6 5b db 3b e8 83 c0 09 55 07 bd Data Ascii: lv[aj4`%.)4M?o\|P1F{Tr8@fiE8Rb-L>a#mGJh@N}Ku]RHv+<3"2}:;iW1:T+omn!HhGI 9M3UAq"hou-kJB>V}{k2f;B55sJ=N:R:E2X"as\|[;U

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:20 UTC	638	OUT	GET /photoworkspace/2024/05/21/2024052110592369702.jpg HTTP/1.1 Host: p1.img.cctvpic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.aj848310310.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:20 UTC	546	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:20 GMT Content-Type: image/jpeg Content-Length: 22053 Connection: close Expires: Fri, 24 May 2024 06:42:20 GMT Accept-Ranges: bytes ETag: "2B44019D072F732B9465BC35C89A7EFF" Last-Modified: Tue, 21 May 2024 07:22:35 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 PSxgHK5dz198:3 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1bm110:4 (Cdn Cache Server V2.0), 1.1 PS-VIE-01Lw182:16 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc19c_PS-VIE-01aIr81_14433-55588
2024-05-23 22:22:20 UTC	15814	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 fe 01 c4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-05-23 22:22:20 UTC	6239	IN	Data Raw: 80 c9 f0 e3 c7 6d e2 81 a6 41 fe a6 08 1e 21 9e 7e 6c 65 8f e7 9a 7d be 81 2d 96 ad 1d fd bb a0 86 47 7f 36 33 d7 07 39 ab 5a 2f 87 63 8f 5f 87 57 d3 6e 59 ec e4 c9 9a 39 0e 64 89 9b b1 f5 5c e7 9a d4 f9 8c e2 28 e3 21 01 f9 9d f8 5e 47 41 eb 4a c3 4e c7 11 e2 4d 5f 50 b5 bb b8 b5 5b 82 52 3f b8 4f f7 48 ff 00 0a db f1 1d 8d c5 c7 83 b4 98 54 a1 7f dd 48 17 76 49 1b 4a ff 00 f5 ea 8f 89 f4 c7 bf f1 4d a5 ac 25 51 ef 62 8e 30 f2 1c 2e 72 57 24 fa 57 64 af a5 59 59 59 d9 5b 48 f3 dd c3 17 92 d2 81 94 dd 80 0f 3f 9e 29 c6 29 04 a4 e4 72 f6 7e 1a d4 6e 3e 1f 4b 14 aa 96 ea d3 c8 eb 24 87 00 88 f9 23 eb e9 59 7e 27 77 be f0 fe 91 a9 81 f7 59 a1 72 3a 0c 8c 8f eb 56 be 20 6a 17 82 e6 ca c4 5c 38 b5 f2 04 9e 50 6f 97 71 63 93 8a 66 98 63 d4 3c 1b 75 6d 70 1f 64 Data Ascii: mA!~le}-G639Z/c_WnY9d\(!^GAJNM_P[R?OHTHvIJM%Qb0.rW$WdYYY[H?))r~n>K$#Y~'wYr:V j\8Poqcfc<umpd

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:22:20 UTC	413	OUT	GET /photoAlbum/templet/common/TPTERE93VfAfo34uSEe8veca211216/more_block.png HTTP/1.1 Host: p2.img.cctvpic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:22:21 UTC	541	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:22:20 GMT Content-Type: image/png Content-Length: 609 Connection: close Expires: Fri, 24 May 2024 19:33:29 GMT Accept-Ranges: bytes ETag: "81ADCEB1BDAA41E239C607C54EF20335" Last-Modified: Thu, 16 Dec 2021 07:57:12 GMT Cache-Control: max-age=86400 X-UA-Compatible: IE=EmulateIE7 Age: 1 X-Via: 1.1 dianxun231:11 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1mi112:1 (Cdn Cache Server V2.0), 1.1 VM-FRA-0124V35:5 (Cdn Cache Server V2.0) X-Ws-Request-Id: 664fc19c_VM-FRA-0124V35_39519-39049
2024-05-23 22:22:21 UTC	609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4e 00 00 00 14 08 03 00 00 00 14 61 fb be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 4e a0 03 00 04 00 00 00 01 00 00 00 14 00 00 00 00 ca e6 d3 2d 00 00 00 a2 50 4c 54 45 00 00 00 00 00 00 40 40 40 33 33 66 24 24 6d 20 40 60 1a 33 66 24 37 5b 1c 2b 63 28 36 5e 24 31 61 24 2e 5b 22 33 5e 27 2e 5d 20 33 60 25 32 5d 22 31 5d 23 2f 5e 24 2f 5f 22 30 5f 23 30 5c 23 30 5e 23 32 5f 23 31 5f 24 30 5e 23 31 5e 22 30 5e 23 31 5e 23 30 5f 23 32 5e 23 31 5f 23 30 5d 23 31 5e 24 32 5d 23 32 5f 22 31 5e 23 32 5f 23 31 5e 22 32 5e 23 31 5e 23 Data Ascii: PNGIHDRNasRGBDeXIfMM*iN-PLTE@@@33f$$m @`3f$7[+c(6^$1a$.["3^'.] 3`%2]"1]#/^$/_"0_#0\#0^#2_#1_$0^#1^"0^#1^#0_#2^#1_#0]#1^$2]#2_"1^#2_#1^"2^#1^#