Report - nomura-co-jp.bjshulan.com/dBkBiJ/

Report Overview

Visited public
2025-07-18 13:26:12
Tags
Submit Tags
URL
nomura-co-jp.bjshulan.com/dBkBiJ/
Finishing URL
www.google.com/
IP / ASN
109.248.30.239
#139646 HONG KONG Megalayer Technology Co.,Limited
Title
Google

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.google.com	7	1997-09-15	2015-05-10	2025-07-16	5.4 kB	555 kB	142.250.74.68
clients1.google.com	415	1997-09-15	2013-02-01	2025-07-14	875 B	202 B	142.250.178.110
ssl.gstatic.com	unknown	2008-02-11	2012-05-23	2025-07-17	458 B	20 kB	142.250.178.67
nomura-co-jp.bjshulan.com	unknown	2024-07-28	2025-07-18	2025-07-18	1.6 kB	7.4 kB	109.248.30.239
openfpcdn.io	238589	2021-11-10	2021-11-11	2025-07-11	467 B	16 kB	54.240.174.127
google.com	1	1997-09-15	2013-10-02	2025-07-16	602 B	33 kB	142.250.178.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-07-18 13:25:37	low	Client IP	54.240.174.127	ET INFO Observed FingerprintJS Domain (openfpcdn .io in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	nomura-co-jp.bjshulan.com/v1/check	ScriptElement	3.2 kB	2025-07-17	2025-07-20
Pretty URL nomura-co-jp.bjshulan.com/v1/check IP 109.248.30.239 ASN #139646 HONG KONG Megalayer Technology Co.,Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2025-07-17 17:32 Last Seen2025-07-20 21:24 Times Seen19 Hash 4ca7c2a5910bfb91df9000536f4834bb 4f01253da1d537db4d95de3af89b5abc845b7907 e1b7453786083b89a03a392e02e3a79dfb85827608ccbe9d3c73819ef1a810ba Loading...

	openfpcdn.io/botd/v1	ScriptElement	15 kB	2024-04-04	2025-07-21
Pretty URL openfpcdn.io/botd/v1 IP 54.240.174.127 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-04 09:37 Last Seen2025-07-21 05:00 Times Seen2160 Hash 234a8c1c15df9b03c65e9e14c82fc872 e5ca36727846aede7dfbc07e88b2b025eb0cae90 29cb26e06f2a4a877f1134a46480d9b78f8b6e0e6f9b0fe67e34307c312b5a89 Loading...

	www.google.com/	ScriptElement	4.7 kB	2025-07-18	2025-07-18
Pretty URL www.google.com/ IP 142.250.74.68 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-07-18 13:26 Last Seen2025-07-18 13:26 Times Seen1 Hash aeb13720cc7abf24cad7ebe2228bfdb2 53d184b4226377e7249abb91ec5c8923836b38a9 a24bc2dcfdecf2804d51bdbf8c107f0cc1f8fafeb3ec7c585a4d78001c3fa74e Loading...

	www.google.com/	ScriptElement	20 kB	2025-07-18	2025-07-18
Pretty URL www.google.com/ IP 142.250.74.68 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-07-18 13:26 Last Seen2025-07-18 13:26 Times Seen1 Hash 2a91fc299ba677de7da1c8f34cd0f1db d5dbd81658722199848dc5e4faaef822744df3d3 631cb7e8b3daf0709f92f820bb7a8750af802c2cde41231c37aa6cd713529f70 Loading...

	www.google.com/xjs/_/js/k=xjs.mhp.en.r1fcIe58N0w.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAACAAAAAAAAEAIAAACAAAAAAAAAAgAHAgAAAAAAAAAOAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAA4AAAAAAZAABgQAAAAcBAKAAIAAAAQjw/d=1/ed=1/dg=3/br=1/rs=ACT90oHwN_0Tag3qsmexR56MNoDgifjHGA/m=sb_mobh,hjsa,d,csi	ScriptElement	496 kB	2025-07-18	2025-07-19
Pretty URL www.google.com/xjs/_/js/k=xjs.mhp.en.r1fcIe58N0w.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAACAAAAAAAAEAIAAACAAAAAAAAAAgAHAgAAAAAAAAAOAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAA4AAAAAAZAABgQAAAAcBAKAAIAAAAQjw/d=1/ed=1/dg=3/br=1/rs=ACT90oHwN_0Tag3qsmexR56MNoDgifjHGA/m=sb_mobh,hjsa,d,csi IP 142.250.74.68 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-07-18 10:38 Last Seen2025-07-19 01:12 Times Seen31 Hash 61ea35df496b1172597ed1c34952b0a0 1c3688e7275e3d2ab384a4b9c9df6e53ed8ba099 591105ccb50b70509bf4ddd566cf584a385d7aebf5a2b247bb57ee855c1b81eb Loading...

HTTP Transactions (13)

	URL	IP	Response	Size
	GET www.google.com/	142.250.74.68	200 OK	32 kB
URL User Request GET www.google.com/ IP 142.250.74.68:443 ASN #15169 GOOGLE Certificate IssuerGoogle Trust Services Subjectwww.google.com Fingerprint18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73 ValidityMon, 23 Jun 2025 08:42:14 GMT - Mon, 15 Sep 2025 08:42:13 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (16551) Size 32 kB (32302 bytes) Hash 32c0d1f9113471f64ae937ccb7b036e6 16f54ea823706d1c70e1a27d6714e46e738252be 461037f8ff4965559519e9eb159b405456dc4e3ae2c2e11793ab4f367b3a6a56 HTTP Headers GET / HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://nomura-co-jp.bjshulan.com/ DNT: 1 Connection: keep-alive Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/html; charset=UTF-8 content-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-R1U6O3yMogdh3sNHHWtWvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-encoding: gzip date: Fri, 18 Jul 2025 13:25:38 GMT server: gws content-length: 10540 x-xss-protection: 0 x-frame-options: SAMEORIGIN expires: Fri, 18 Jul 2025 13:25:38 GMT cache-control: private set-cookie: AEC=AVh_V2h6hnOob8xymTqlXEuUzA13FFLjllqxgvA3coRLvSdKgosYM5buaw; expires=Wed, 14-Jan-2026 13:25:38 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax __Secure-ENID=28.SE=c229jVCBB3QSMbh3mPwk5MTOtIwN1NK8LlTpwvjh_ovSmhjty8kshlPuNB6jU0B24G5lTRGQF1fhmLrQZAWvTYn-uP_XIuLuRUioJvGf_ho-N8S34SIC5rQ7dHTKg4kTx_oAma194HZniMldmXxSbXDBuXzZTe6xyextOpa0pN85vbB0ZSiROH9qEUHiFCLYRTkAQs0JH7et44pAEXCcRfucZkBPsNt2Upt5zlq8erLQ616HPQcT34LIqYJAlpWU38Mfnc9nFeXCmydf; expires=Tue, 18-Aug-2026 05:43:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET www.google.com/xjs/_/js/k=xjs.mhp.en.r1fcIe58N0w.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAACAAAAAAAAEAIAAACAAAAAAAAAAgAHAgAAAAAAAAAOAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAA4AAAAAAZAABgQAAAAcBAKAAIAAAAQjw/d=1/ed=1/dg=3/br=1/rs=ACT90oHwN_0Tag3qsmexR56MNoDgifjHGA/m=sb_mobh,hjsa,d,csi	142.250.74.68	200 OK	496 kB
URL GET www.google.com/xjs/_/js/k=xjs.mhp.en.r1fcIe58N0w.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAACAAAAAAAAEAIAAACAAAAAAAAAAgAHAgAAAAAAAAAOAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAA4AAAAAAZAABgQAAAAcBAKAAIAAAAQjw/d=1/ed=1/dg=3/br=1/rs=ACT90oHwN_0Tag3qsmexR56MNoDgifjHGA/m=sb_mobh,hjsa,d,csi IP 142.250.74.68:443 ASN #15169 GOOGLE Requested by https://www.google.com/ Certificate IssuerGoogle Trust Services Subject.google.com FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32 ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT File type JavaScript source, ASCII text, with very long lines (567) Size 496 kB (496049 bytes) Hash 61ea35df496b1172597ed1c34952b0a0 1c3688e7275e3d2ab384a4b9c9df6e53ed8ba099 591105ccb50b70509bf4ddd566cf584a385d7aebf5a2b247bb57ee855c1b81eb HTTP Headers GET /xjs/_/js/k=xjs.mhp.en.r1fcIe58N0w.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAACAAAAAAAAEAIAAACAAAAAAAAAAgAHAgAAAAAAAAAOAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAA4AAAAAAZAABgQAAAAcBAKAAIAAAAQjw/d=1/ed=1/dg=3/br=1/rs=ACT90oHwN_0Tag3qsmexR56MNoDgifjHGA/m=sb_mobh,hjsa,d,csi HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.google.com/ Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2h6hnOob8xymTqlXEuUzA13FFLjllqxgvA3coRLvSdKgosYM5buaw; __Secure-ENID=28.SE=c229jVCBB3QSMbh3mPwk5MTOtIwN1NK8LlTpwvjh_ovSmhjty8kshlPuNB6jU0B24G5lTRGQF1fhmLrQZAWvTYn-uP_XIuLuRUioJvGf_ho-N8S34SIC5rQ7dHTKg4kTx_oAma194HZniMldmXxSbXDBuXzZTe6xyextOpa0pN85vbB0ZSiROH9qEUHiFCLYRTkAQs0JH7et44pAEXCcRfucZkBPsNt2Upt5zlq8erLQ616HPQcT34LIqYJAlpWU38Mfnc9nFeXCmydf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK accept-ranges: bytes content-encoding: br content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="gws-team" report-to: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} content-length: 161485 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Fri, 18 Jul 2025 09:10:44 GMT expires: Sat, 18 Jul 2026 09:10:44 GMT cache-control: public, immutable, max-age=31536000 last-modified: Fri, 18 Jul 2025 04:58:13 GMT content-type: text/javascript; charset=UTF-8 vary: Accept-Encoding, Origin age: 15295 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	GET clients1.google.com/generate_204	142.250.178.110	204 No Content	0 B
URL GET clients1.google.com/generate_204 IP 142.250.178.110:443 ASN #15169 GOOGLE Requested by https://www.google.com/ Certificate IssuerGoogle Trust Services Subject.google.com FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32 ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /generate_204 HTTP/1.1 Host: clients1.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.google.com/ Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2h6hnOob8xymTqlXEuUzA13FFLjllqxgvA3coRLvSdKgosYM5buaw; __Secure-ENID=28.SE=c229jVCBB3QSMbh3mPwk5MTOtIwN1NK8LlTpwvjh_ovSmhjty8kshlPuNB6jU0B24G5lTRGQF1fhmLrQZAWvTYn-uP_XIuLuRUioJvGf_ho-N8S34SIC5rQ7dHTKg4kTx_oAma194HZniMldmXxSbXDBuXzZTe6xyextOpa0pN85vbB0ZSiROH9qEUHiFCLYRTkAQs0JH7et44pAEXCcRfucZkBPsNt2Upt5zlq8erLQ616HPQcT34LIqYJAlpWU38Mfnc9nFeXCmydf Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 204 No Content content-length: 0 cross-origin-resource-policy: cross-origin date: Fri, 18 Jul 2025 13:25:39 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	GET ssl.gstatic.com/gb/images/m1_122c1d73.png	142.250.178.67	200 OK	19 kB
URL GET ssl.gstatic.com/gb/images/m1_122c1d73.png IP 142.250.178.67:443 ASN #15169 GOOGLE Requested by https://www.google.com/ Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT File type PNG image data, 128 x 242, 8-bit/color RGBA, non-interlaced Size 19 kB (19316 bytes) Hash 122c1d733aad37942ec924c9df11ffd7 1cea3ac06e15ee30e016554e85bf11c01cc7886f 347be8cb14509ddd404d9e996ca3740fef5ab048da929484d26f9d1710c27070 HTTP Headers `GET /gb/images/m1_122c1d73.png HTTP/1.1 Host: ssl.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.google.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} content-length: 19316 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 17 Jul 2025 20:41:18 GMT expires: Fri, 17 Jul 2026 20:41:18 GMT cache-control: public, max-age=31536000 age: 60261 last-modified: Thu, 02 Nov 2023 22:48:00 GMT content-type: image/png vary: Origin alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET nomura-co-jp.bjshulan.com/dBkBiJ/	109.248.30.239	302 Found	3.3 kB
URL User Request GET nomura-co-jp.bjshulan.com/dBkBiJ/ IP 109.248.30.239:443 ASN #139646 HONG KONG Megalayer Technology Co.,Limited Certificate IssuerLet's Encrypt Subjectnomura-co-jp.bjshulan.com Fingerprint35:89:35:B3:6F:6A:E7:29:03:63:4C:71:7B:97:04:B9:E4:73:45:EE ValidityTue, 15 Jul 2025 15:17:03 GMT - Mon, 13 Oct 2025 15:17:02 GMT File type Size 3.3 kB (3291 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /dBkBiJ/ HTTP/1.1 Host: nomura-co-jp.bjshulan.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx/1.26.3 date: Fri, 18 Jul 2025 13:25:37 GMT content-type: text/html content-length: 145 location: /v1/check strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	GET nomura-co-jp.bjshulan.com/v1/check	109.248.30.239	200 OK	3.3 kB
URL User Request GET nomura-co-jp.bjshulan.com/v1/check IP 109.248.30.239:443 ASN #139646 HONG KONG Megalayer Technology Co.,Limited Certificate IssuerLet's Encrypt Subjectnomura-co-jp.bjshulan.com Fingerprint35:89:35:B3:6F:6A:E7:29:03:63:4C:71:7B:97:04:B9:E4:73:45:EE ValidityTue, 15 Jul 2025 15:17:03 GMT - Mon, 13 Oct 2025 15:17:02 GMT File type JavaScript source, ASCII text, with very long lines (3116) Size 3.3 kB (3291 bytes) Hash 0fc62f22a4000a8a15b04af338660977 3ed957c0b5e27582f38e8f55a715c23406e78cc7 283fd6e66c77c66b3d72189362a3cc4a98dd9a826c4adf943072358cfe97848c HTTP Headers `GET /v1/check HTTP/1.1 Host: nomura-co-jp.bjshulan.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.26.3 date: Fri, 18 Jul 2025 13:25:37 GMT content-type: text/html vary: Accept-Encoding set-cookie: client_token=MTc1Mjg0NTEzNy4zMjY1MDA5MDU; Path=/; Max-Age=604800; HttpOnly verified_sig=52f5ffb9fa412aa2c4bb3da3395e34bd; Path=/; Max-Age=604800; HttpOnly strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2`

	GET openfpcdn.io/botd/v1	54.240.174.127	200 OK	15 kB
URL GET openfpcdn.io/botd/v1 IP 54.240.174.127:443 ASN #16509 AMAZON-02 Requested by https://nomura-co-jp.bjshulan.com/v1/check Certificate IssuerAmazon Subjectopenfpcdn.io FingerprintDB:8B:1E:08:FC:EE:6F:56:28:0B:74:80:37:E0:DE:69:D3:59:96:8D ValidityWed, 27 Nov 2024 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (15005) Size 15 kB (15196 bytes) Hash 234a8c1c15df9b03c65e9e14c82fc872 e5ca36727846aede7dfbc07e88b2b025eb0cae90 29cb26e06f2a4a877f1134a46480d9b78f8b6e0e6f9b0fe67e34307c312b5a89 HTTP Headers `GET /botd/v1 HTTP/1.1 Host: openfpcdn.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://nomura-co-jp.bjshulan.com DNT: 1 Connection: keep-alive Referer: https://nomura-co-jp.bjshulan.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/javascript; charset=utf-8 server: CloudFront access-control-allow-origin: * cross-origin-resource-policy: cross-origin strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff content-encoding: gzip date: Fri, 18 Jul 2025 12:52:02 GMT cache-control: public, max-age=633978, s-maxage=10583 etag: W/"5co2cnhGrt59+8B+iLKwJesMrpA" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: WKJSqpYBOkP5xKwJHLdksyg_Ur_oAzYiWdCZnn1DTRpNWoEddfM-4g== age: 2018 X-Firefox-Spdy: h2

	GET nomura-co-jp.bjshulan.com/favicon.ico	109.248.30.239	404 Not Found	74 B
URL GET nomura-co-jp.bjshulan.com/favicon.ico IP 109.248.30.239:443 ASN #139646 HONG KONG Megalayer Technology Co.,Limited Requested by https://nomura-co-jp.bjshulan.com/v1/check Certificate IssuerLet's Encrypt Subjectnomura-co-jp.bjshulan.com Fingerprint35:89:35:B3:6F:6A:E7:29:03:63:4C:71:7B:97:04:B9:E4:73:45:EE ValidityTue, 15 Jul 2025 15:17:03 GMT - Mon, 13 Oct 2025 15:17:02 GMT File type ASCII text, with no line terminators Size 74 B (74 bytes) Hash 49b6a4d9fbfdd7f28d6aab0ca47d4f3c ba7776bd78ba330bf7f9282e7ba9f66eecab4f6e f72742bd9209fab9279417668bc31ca875c31e0fd2706264f11b7caeae7737ce HTTP Headers GET /favicon.ico HTTP/1.1 Host: nomura-co-jp.bjshulan.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://nomura-co-jp.bjshulan.com/v1/check Cookie: client_token=MTc1Mjg0NTEzNy4zMjY1MDA5MDU; verified_sig=52f5ffb9fa412aa2c4bb3da3395e34bd Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 404 Not Found server: nginx/1.26.3 date: Fri, 18 Jul 2025 13:25:38 GMT content-type: text/html content-length: 74 etag: "6836fc70-4a" X-Firefox-Spdy: h2`

	GET google.com/	142.250.178.78	301 Moved Permanently	32 kB
URL User Request GET google.com/ IP 142.250.178.78:443 ASN #15169 GOOGLE Certificate IssuerGoogle Trust Services Subject.google.com FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32 ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT File type Size 32 kB (32302 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://nomura-co-jp.bjshulan.com/ Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 301 Moved Permanently location: https://www.google.com/ content-type: text/html; charset=UTF-8 content-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-kdprW5SpcMKwjVqcmOKB8Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp date: Fri, 18 Jul 2025 13:25:38 GMT expires: Sun, 17 Aug 2025 13:25:38 GMT cache-control: public, max-age=2592000 server: gws content-length: 220 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET www.google.com/images/branding/searchlogo/1x/googlelogo_tablet_tier1_hp_color_183x64dp.png	142.250.74.68	200 OK	4.2 kB
URL GET www.google.com/images/branding/searchlogo/1x/googlelogo_tablet_tier1_hp_color_183x64dp.png IP 142.250.74.68:443 ASN #15169 GOOGLE Requested by https://www.google.com/ Certificate IssuerGoogle Trust Services Subject.google.com FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32 ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT File type PNG image data, 183 x 64, 8-bit/color RGBA, non-interlaced Size 4.2 kB (4204 bytes) Hash 1ba03736f07cda98c5f553e1cec29888 186866b33fbc15a68a7967ddd4f7435653f00c63 7ef811fa3a2a8c4ad70de52a6c42438bfa9e68a1f9e324a10dfa4f576c6ab72c HTTP Headers GET /images/branding/searchlogo/1x/googlelogo_tablet_tier1_hp_color_183x64dp.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.google.com/ Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2h6hnOob8xymTqlXEuUzA13FFLjllqxgvA3coRLvSdKgosYM5buaw; __Secure-ENID=28.SE=c229jVCBB3QSMbh3mPwk5MTOtIwN1NK8LlTpwvjh_ovSmhjty8kshlPuNB6jU0B24G5lTRGQF1fhmLrQZAWvTYn-uP_XIuLuRUioJvGf_ho-N8S34SIC5rQ7dHTKg4kTx_oAma194HZniMldmXxSbXDBuXzZTe6xyextOpa0pN85vbB0ZSiROH9qEUHiFCLYRTkAQs0JH7et44pAEXCcRfucZkBPsNt2Upt5zlq8erLQ616HPQcT34LIqYJAlpWU38Mfnc9nFeXCmydf Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK accept-ranges: bytes content-type: image/png cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} content-length: 4204 date: Fri, 18 Jul 2025 13:25:39 GMT expires: Fri, 18 Jul 2025 13:25:39 GMT cache-control: private, max-age=31536000 last-modified: Tue, 22 Oct 2019 18:30:00 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	GET www.google.com/images/nav_logo229.png	142.250.74.68	200 OK	12 kB
URL GET www.google.com/images/nav_logo229.png IP 142.250.74.68:443 ASN #15169 GOOGLE Requested by https://www.google.com/ Certificate IssuerGoogle Trust Services Subject.google.com FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32 ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT File type PNG image data, 167 x 305, 8-bit/color RGBA, non-interlaced Size 12 kB (12263 bytes) Hash 1b12cab0347f8728af450fe2457e79c3 af13a78470385e8e483c58ddc1a9c21386ea8a03 ca858453ce21cabdf9911c6fa3291aa630df344244bc183a4d5ae9972e59f675 HTTP Headers GET /images/nav_logo229.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.google.com/ Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2h6hnOob8xymTqlXEuUzA13FFLjllqxgvA3coRLvSdKgosYM5buaw; __Secure-ENID=28.SE=c229jVCBB3QSMbh3mPwk5MTOtIwN1NK8LlTpwvjh_ovSmhjty8kshlPuNB6jU0B24G5lTRGQF1fhmLrQZAWvTYn-uP_XIuLuRUioJvGf_ho-N8S34SIC5rQ7dHTKg4kTx_oAma194HZniMldmXxSbXDBuXzZTe6xyextOpa0pN85vbB0ZSiROH9qEUHiFCLYRTkAQs0JH7et44pAEXCcRfucZkBPsNt2Upt5zlq8erLQ616HPQcT34LIqYJAlpWU38Mfnc9nFeXCmydf Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK accept-ranges: bytes content-type: image/png cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} content-length: 12263 date: Fri, 18 Jul 2025 13:25:39 GMT expires: Fri, 18 Jul 2025 13:25:39 GMT cache-control: private, max-age=31536000 last-modified: Tue, 22 Oct 2019 18:30:00 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	GET www.google.com/favicon.ico	142.250.74.68	200 OK	5.4 kB
URL GET www.google.com/favicon.ico IP 142.250.74.68:443 ASN #15169 GOOGLE Requested by https://www.google.com/ Certificate IssuerGoogle Trust Services Subject.google.com FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32 ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Size 5.4 kB (5430 bytes) Hash f3418a443e7d841097c714d69ec4bcb8 49263695f6b0cdd72f45cf1b775e660fdc36c606 6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770 HTTP Headers GET /favicon.ico HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.google.com/ Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2h6hnOob8xymTqlXEuUzA13FFLjllqxgvA3coRLvSdKgosYM5buaw; __Secure-ENID=28.SE=c229jVCBB3QSMbh3mPwk5MTOtIwN1NK8LlTpwvjh_ovSmhjty8kshlPuNB6jU0B24G5lTRGQF1fhmLrQZAWvTYn-uP_XIuLuRUioJvGf_ho-N8S34SIC5rQ7dHTKg4kTx_oAma194HZniMldmXxSbXDBuXzZTe6xyextOpa0pN85vbB0ZSiROH9qEUHiFCLYRTkAQs0JH7et44pAEXCcRfucZkBPsNt2Upt5zlq8erLQ616HPQcT34LIqYJAlpWU38Mfnc9nFeXCmydf Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK accept-ranges: bytes content-encoding: gzip cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} content-length: 1494 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 17 Jul 2025 10:32:56 GMT expires: Fri, 25 Jul 2025 10:32:56 GMT cache-control: public, max-age=691200 age: 96763 last-modified: Tue, 22 Oct 2019 18:30:00 GMT content-type: image/x-icon vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	GET www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=Ukt6aI6VKMzLwPAP0Z_YkQs&zx=1752845139664&opi=89978449	142.250.74.68	204 No Content	0 B
URL GET www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=Ukt6aI6VKMzLwPAP0Z_YkQs&zx=1752845139664&opi=89978449 IP 142.250.74.68:443 ASN #15169 GOOGLE Requested by https://www.google.com/ Certificate IssuerGoogle Trust Services Subject.google.com FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32 ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=Ukt6aI6VKMzLwPAP0Z_YkQs&zx=1752845139664&opi=89978449 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.google.com/ Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2h6hnOob8xymTqlXEuUzA13FFLjllqxgvA3coRLvSdKgosYM5buaw; __Secure-ENID=28.SE=c229jVCBB3QSMbh3mPwk5MTOtIwN1NK8LlTpwvjh_ovSmhjty8kshlPuNB6jU0B24G5lTRGQF1fhmLrQZAWvTYn-uP_XIuLuRUioJvGf_ho-N8S34SIC5rQ7dHTKg4kTx_oAma194HZniMldmXxSbXDBuXzZTe6xyextOpa0pN85vbB0ZSiROH9qEUHiFCLYRTkAQs0JH7et44pAEXCcRfucZkBPsNt2Upt5zlq8erLQ616HPQcT34LIqYJAlpWU38Mfnc9nFeXCmydf Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/3 204 No Content content-type: text/html; charset=UTF-8 content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-dkqv_gqUuTzlF-b65HjCsw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other date: Fri, 18 Jul 2025 13:25:39 GMT server: gws content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type