Report - www.hj7480b.top/

Report Overview

Visited public
2023-12-05 16:15:56
Tags
URL
www.hj7480b.top/
Finishing URL
www.hj7480b.top/
IP / ASN
34.149.198.43
#15169 GOOGLE
Title
www.hj7480b.top

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.hj7480b.top	unknown	unknown	No data	No data	815 B	3.1 kB	34.120.55.112
g.alicdn.com	6787	2008-06-25	2014-10-06 10:39:58	2023-12-04 18:12:48	1.4 kB	22 kB	163.181.56.244
ocsp2.globalsign.com	1544	1999-04-19	2012-05-23 20:10:04	2023-12-05 05:11:47	367 B	1.9 kB	104.18.21.226
image.uc.cn	54371	2003-03-17	2014-06-05 07:07:08	2023-12-05 07:42:53	920 B	12 kB	163.181.49.15
track.uc.cn	69223	2003-03-17	2014-06-05 07:09:10	2023-12-05 03:59:57	1.9 kB	506 B	123.182.50.159
px.effirst.com	31137	2019-07-05	2019-09-03 08:09:57	2023-12-04 09:34:01	1.7 kB	1.2 kB	111.63.205.135
hm.baidu.com	8254	1999-10-11	2012-05-26 10:38:45	2023-12-05 06:04:21	1.1 kB	12 kB	103.235.46.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-05 16:15:44	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-12-05 16:15:45	medium	Client IP	34.120.55.112	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	From	Size	First Seen	Last Seen
	image.uc.cn/s/uae/g/3o/berg/static/archer_index.369a663b08a55d305b97.js	ScriptElement	33 kB	2023-10-13	2024-08-21
Pretty URL image.uc.cn/s/uae/g/3o/berg/static/archer_index.369a663b08a55d305b97.js IP 163.181.49.15 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 14:14 Last Seen2024-08-21 04:52 Times Seen300 Hash ddbe4c117d6952e193b94f348a3a2b03 ed432630ead19a1937a22a2fee2aa430aa0a07b3 35a67ea60886e09ccfb84615a7fefb3f5a1220bad7e7a9c720d501d494b42166 Loading...

	g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js	ScriptElement	5.8 kB	2023-04-11	2025-03-30
Pretty URL g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js IP 163.181.56.244 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 23:26 Last Seen2025-03-30 11:15 Times Seen1115 Hash 9f681b53980381f708c2787b4961b8e7 8fa2a66468a3db33ae1b10cdabd9de88c20211b9 ff81aa49e48452dc0d382124bf6277a29977a95743711b268eb7a76849cd225a Loading...

	www.hj7480b.top/	ScriptElement	283 B	2023-10-13	2024-08-21
Pretty URL www.hj7480b.top/ IP 34.120.55.112 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-13 14:14 Last Seen2024-08-21 04:52 Times Seen300 Hash 648c880193d042eb361542a942a02d4f 84d1fc0e9461025dbeb568f9c520651b82a13fc1 c4af9e1fcd614c62e3074a451a7d216ffa177586680b052e37903aa79c6fb30c Loading...

	www.hj7480b.top/	ScriptElement	449 B	2023-04-05	2025-03-02
Pretty URL www.hj7480b.top/ IP 34.120.55.112 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 07:24 Last Seen2025-03-02 00:29 Times Seen587 Hash ab3ca60b682d769e885a3bf4a2ee8ecd e57913130b5789d522b4bae431a84491b305ebd5 d6d517048076dc1da710b3ee5c68f29ca8a3580b38e1f34dd85a6da8a1887990 Loading...

	unknown	Function	37 B	2023-04-11	2025-05-10
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:49 Last Seen2025-05-10 09:56 Times Seen34518 Hash 1c5c9160600df2d96d69a4ea16cec7ed 3cf678c9135cc952ba6970ef545035bb757a443f a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808 Loading...

	unknown	Function	261 B	2024-08-20	2024-08-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-08-20 16:40 Last Seen2024-08-20 16:40 Times Seen1 Hash e47198852d96cf501dd1d0f6764016fa e1180d18e0cba057f1b462ac729150f35f8264b6 7f1ae4dfd69b9d7f8c3bbeee095fd0f11497ae85519799bc0acbee75d1fa45ee Loading...

	hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc	ScriptElement	30 kB	2023-12-05	2023-12-05
Pretty URL hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc IP 103.235.46.191 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 17:16 Last Seen2023-12-05 17:16 Times Seen1 Hash bf0b20bafa91fb8ee25a6ed5e9e6dcc9 20b268c55b8967aef28e68cfa6d153580f774b63 5276f0f3d63cbc0fd159643df93feea76996ffc8b073fb4322668316d6776e41 Loading...

	g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js	ScriptElement	41 kB	2023-10-31	2025-03-30
Pretty URL g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js IP 163.181.56.244 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-31 06:22 Last Seen2025-03-30 11:15 Times Seen959 Hash 995c173aa043d3cc1d774ca298a71b74 65b6edb7a721a8312de14f1dd78df2c6d13658b4 ed55450c5fd25afc4812912061a313704f155a507e302921a9513df81c9e493f Loading...

	www.hj7480b.top/	ScriptElement	2.3 kB	2023-10-13	2025-03-02
Pretty URL www.hj7480b.top/ IP 34.120.55.112 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-13 14:14 Last Seen2025-03-02 00:29 Times Seen513 Hash 2009f8b88f747f0537a9ec85795925e3 0061ae929d4514ee623468467b4f4b46be1b357e 9ba19171a6704fcc9bcc259ecdb250cb2772fa1f7f8a913f3e925f4ded0398a3 Loading...

	www.hj7480b.top/	ScriptElement	677 B	2023-04-05	2025-03-02
Pretty URL www.hj7480b.top/ IP 34.120.55.112 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 07:24 Last Seen2025-03-02 00:29 Times Seen1088 Hash ae122dace4d89339aac7bf0935fa98ac bf26669156d4f51d455cc7480351e40e0e7bdc4e 0d1de7a4d187b4decc1bd1c92787b34c200b00fd20964d5206a7d69f2377e4e1 Loading...

	g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js	ScriptElement	5.3 kB	2023-04-11	2025-03-30
Pretty URL g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js IP 163.181.56.244 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 23:26 Last Seen2025-03-30 11:15 Times Seen1115 Hash 2edd3ece2d4fdebb930c640f8011a567 bd2ff2c0a0e98a7ddb2449e2afe00a68d16ffc12 0be039408b767c620542ae7d66781537712fe8096253922e09fb3082a62730f8 Loading...

	www.hj7480b.top/	ScriptElement	131 B	2023-04-05	2025-03-02
Pretty URL www.hj7480b.top/ IP 34.120.55.112 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 07:24 Last Seen2025-03-02 00:29 Times Seen1088 Hash 082e61361a0fa61cdf282c8599c93c4e 370261194ab560873a389f7759e45e9ed076ef7d 1f917b159803690dbd11d6b1920842e2eacb2f87f1c28ca0ed7fe7cf714d9e12 Loading...

HTTP Transactions (15)

URL IP Response Size

www.hj7480b.top/

34.120.55.112

2.5 kB

URL
www.hj7480b.top/
IP
34.120.55.112:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5032), with no line terminators
Size
2.5 kB (2483 bytes)
Hash
9a2a0e491f1ff73d179bd60ae65170fd
0a2cb2ce2041ca530af67e969a8ff33e0294b63d
10f2c2e0815584a4642d5343ce0f55dc657198e7b71d74493b3e76a00ef52e36

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET / HTTP/1.1
Host: www.hj7480b.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 05 Dec 2023 16:15:39 GMT
Content-Type: text/html
Last-Modified: Wed, 11 Oct 2023 10:00:52 GMT
Vary: Accept-Encoding
ETag: W/"65267254-1458"
Cache-Control: no-cache
Content-Encoding: gzip
Via: 1.1 google
Transfer-Encoding: chunked

g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js

163.181.56.244

2.4 kB

URL
g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js
IP
163.181.56.244:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Unicode text, UTF-8 text, with very long lines (5084), with no line terminators
Size
2.4 kB (2356 bytes)
Hash
2edd3ece2d4fdebb930c640f8011a567
bd2ff2c0a0e98a7ddb2449e2afe00a68d16ffc12
0be039408b767c620542ae7d66781537712fe8096253922e09fb3082a62730f8

HTTP Headers

GET /woodpeckerx/jssdk/plugins/globalerror.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.hj7480b.top
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 2356
date: Tue, 05 Dec 2023 16:09:47 GMT
vary: Accept-Encoding
x-oss-request-id: 656F4B4B0A184B3431A7CFA2
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16649164976846769012
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: Lt0+zi1P3ruTDGQPgBGlZw==
x-oss-server-time: 1
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1701792587
via: cache3.l2de2[0,0,200-0,H], cache4.l2de2[0,0], cache4.l2de2[1,0], ens-cache3.de4[0,0,200-0,H], ens-cache4.de4[3,0]
age: 352
x-cache: HIT TCP_MEM_HIT dirn:9:15953026
x-swift-savetime: Tue, 05 Dec 2023 16:10:24 GMT
x-swift-cachetime: 563
timing-allow-origin: *
eagleid: 2ff62b1c17017929397633602e
X-Firefox-Spdy: h2

g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js

163.181.56.244

2.6 kB

URL
g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js
IP
163.181.56.244:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Unicode text, UTF-8 text, with very long lines (5721), with no line terminators
Size
2.6 kB (2591 bytes)
Hash
9f681b53980381f708c2787b4961b8e7
8fa2a66468a3db33ae1b10cdabd9de88c20211b9
ff81aa49e48452dc0d382124bf6277a29977a95743711b268eb7a76849cd225a

HTTP Headers

GET /woodpeckerx/jssdk/plugins/performance.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.hj7480b.top
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 2591
date: Tue, 05 Dec 2023 16:12:18 GMT
vary: Accept-Encoding
x-oss-request-id: 656F4BE2601F623932B7D64B
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10730233764925966105
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: n2gbU5gDgfcIwnh7SWG45w==
x-oss-server-time: 2
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1701792738
via: cache25.l2de2[0,0,200-0,H], cache19.l2de2[0,0], cache19.l2de2[1,0], ens-cache4.de4[0,0,200-0,H], ens-cache4.de4[3,0]
age: 201
x-cache: HIT TCP_MEM_HIT dirn:10:277714043
x-swift-savetime: Tue, 05 Dec 2023 16:12:31 GMT
x-swift-cachetime: 587
timing-allow-origin: *
eagleid: 2ff62b1c17017929397683635e
X-Firefox-Spdy: h2

g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js

163.181.56.244

15 kB

URL
g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js
IP
163.181.56.244:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Unicode text, UTF-8 text, with very long lines (39989), with no line terminators
Size
15 kB (14747 bytes)
Hash
995c173aa043d3cc1d774ca298a71b74
65b6edb7a721a8312de14f1dd78df2c6d13658b4
ed55450c5fd25afc4812912061a313704f155a507e302921a9513df81c9e493f

HTTP Headers

GET /woodpeckerx/jssdk/wpkReporter.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.hj7480b.top
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 14747
date: Tue, 05 Dec 2023 16:11:29 GMT
vary: Accept-Encoding
x-oss-request-id: 656F4BB1AF49DB39305D0D14
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17575337766638963859
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: mVwXOqBD08wdd0yimKcbdA==
x-oss-server-time: 1
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1701792689
via: cache3.l2de2[0,0,200-0,H], cache21.l2de2[2,0], cache21.l2de2[2,0], ens-cache3.de4[0,0,200-0,H], ens-cache4.de4[6,0]
age: 250
x-cache: HIT TCP_MEM_HIT dirn:9:16994443
x-swift-savetime: Tue, 05 Dec 2023 16:11:34 GMT
x-swift-cachetime: 595
timing-allow-origin: *
eagleid: 2ff62b1c17017929397943752e
X-Firefox-Spdy: h2

ocsp2.globalsign.com/gsorganizationvalsha2g2

104.18.21.226

1.5 kB

URL
ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1459 bytes)
Hash
9a6485822307afd2aa92eae04bcecbba
25202b736595e0a3c40e9c87894a8ce428fba59a
729fe9d5080f7508025b57176903c9d05b9d80530122647c3640e0dd3a41d2f0

HTTP Headers

POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 16:15:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 09 Dec 2023 14:02:46 GMT
ETag: "25202b736595e0a3c40e9c87894a8ce428fba59a"
Last-Modified: Tue, 05 Dec 2023 14:02:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1745
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830d96d57ef10b55-OSL

image.uc.cn/s/uae/g/3o/berg/static/index.442d968fe56a55df4c76.css

163.181.49.15

937 B

URL
image.uc.cn/s/uae/g/3o/berg/static/index.442d968fe56a55df4c76.css
IP
163.181.49.15:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
ASCII text, with very long lines (2179), with no line terminators
Size
937 B (937 bytes)
Hash
09bdfbcc9456faf8a85a94d44ef7734d
e3d00a7df14bc13abb5bd31caa58f1e4be17ede0
05ef687cb9294988df06df1c39cc1e84a26f29f26735c6948978347ed7927fc8

HTTP Headers

GET /s/uae/g/3o/berg/static/index.442d968fe56a55df4c76.css HTTP/1.1
Host: image.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: text/css
content-length: 937
date: Wed, 11 Oct 2023 10:08:59 GMT
vary: Accept-Encoding
expires: Sat, 25 Nov 2023 09:20:05 GMT
cache-control: max-age=8640000
etag: b589311b-883
access-control-allow-origin: *
content-encoding: gzip
ali-swift-global-savetime: 1697019006
via: cache5.l2us1[0,0,200-0,H], cache25.l2us1[0,0], cache1.es3[0,0,200-0,H], cache4.es3[1,0]
age: 66
x-cache: HIT TCP_MEM_HIT dirn:13:170303504
x-swift-savetime: Fri, 27 Oct 2023 12:23:42 GMT
x-swift-cachetime: 7249584
timing-allow-origin: *
eagleid: a3b5319817017929404721198e
X-Firefox-Spdy: h2

image.uc.cn/s/uae/g/3o/berg/static/archer_index.369a663b08a55d305b97.js

163.181.49.15

10 kB

URL
image.uc.cn/s/uae/g/3o/berg/static/archer_index.369a663b08a55d305b97.js
IP
163.181.49.15:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Unicode text, UTF-8 text, with very long lines (24209)
Size
10 kB (10341 bytes)
Hash
ddbe4c117d6952e193b94f348a3a2b03
ed432630ead19a1937a22a2fee2aa430aa0a07b3
35a67ea60886e09ccfb84615a7fefb3f5a1220bad7e7a9c720d501d494b42166

HTTP Headers

GET /s/uae/g/3o/berg/static/archer_index.369a663b08a55d305b97.js HTTP/1.1
Host: image.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: text/javascript
content-length: 10341
date: Wed, 11 Oct 2023 10:09:53 GMT
vary: Accept-Encoding
expires: Sun, 10 Dec 2023 08:23:08 GMT
cache-control: max-age=8640000
etag: ae54e074-7f5e
access-control-allow-origin: *
content-encoding: gzip
ali-swift-global-savetime: 1697019005
via: cache25.l2us1[0,0,200-0,H], cache15.l2us1[1,0], cache4.es3[0,0,200-0,H], cache4.es3[0,0]
age: 66
x-cache: HIT TCP_MEM_HIT dirn:13:75046265
x-swift-savetime: Fri, 13 Oct 2023 13:10:50 GMT
x-swift-cachetime: 8456355
timing-allow-origin: *
eagleid: a3b5319817017929404901221e
X-Firefox-Spdy: h2

www.hj7480b.top/favicon.ico

34.120.55.112

153 B

URL
www.hj7480b.top/favicon.ico
IP
34.120.55.112:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
153 B (153 bytes)
Hash
a53e183b2c571a68b246ad570b76da19
7eac95d26ba1e92a3b4d6fd47ee057f00274ac13
29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.hj7480b.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Cookie: __wpkreporterwid_=47881307-acc7-4ea1-03bd-b2ace5f41284
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.20.2
Date: Tue, 05 Dec 2023 16:15:41 GMT
Content-Type: text/html
Content-Length: 153
Via: 1.1 google

track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first&lt=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=www.hj7480b.top&url=http%3A%2F%2Fwww.hj7480b.top%2F&cookie=__wpkreporterwid_%3D47881307-acc7-4ea1-03bd-b2ace5f41284&time=1701792946172&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv

123.182.50.159

200

33 B

URL GET HTTP/1.1
track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first&lt=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=www.hj7480b.top&url=http%3A%2F%2Fwww.hj7480b.top%2F&cookie=__wpkreporterwid_%3D47881307-acc7-4ea1-03bd-b2ace5f41284&time=1701792946172&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
IP
123.182.50.159:443
ASN
#4134 Chinanet

Requested by
http://www.hj7480b.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.uc.cn
Fingerprint61:39:F6:CE:73:81:DE:72:76:83:A5:D2:EA:76:10:98:DC:C2:47:67
ValidityThu, 05 Jan 2023 06:01:06 GMT - Tue, 06 Feb 2024 06:01:05 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
33 B (33 bytes)
Hash
55199048ae64f13bfc67cd2fec307e1a
0febd20edc3ebbaa60bf312be0e1d977ddd3a319
7c677a0c1ba67a4335c821aa3af6031428be641e33887fc719ce8f52f926898d

HTTP Headers

GET /collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first&lt=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=www.hj7480b.top&url=http%3A%2F%2Fwww.hj7480b.top%2F&cookie=__wpkreporterwid_%3D47881307-acc7-4ea1-03bd-b2ace5f41284&time=1701792946172&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv HTTP/1.1
Host: track.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Tue, 05 Dec 2023 16:15:41 GMT
Content-Type: image/avif;charset=UTF-8
Content-Length: 33
Connection: keep-alive
Server: Tengine/2.1.3_400
Cache-Control: no-cache
Access-Control-Allow-Origin: *

px.effirst.com/api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1701792946%26ud%3Deef9d9ae-7369-4f98-8b89-ca533110bfd7%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce

111.63.205.135

200 OK

130 B

URL GET HTTP/1.1
px.effirst.com/api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1701792946%26ud%3Deef9d9ae-7369-4f98-8b89-ca533110bfd7%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce
IP
111.63.205.135:80
ASN
#24547 Hebei Mobile Communication Company Limited

Requested by
http://www.hj7480b.top/

File type
JSON data\012- , Unicode text, UTF-8 text
Size
130 B (130 bytes)
Hash
448d4fe5a73449c6dcf55277d31498d7
c365eedc52642c297c47f14e0cbb19345630abad
9fc232e55db0bc8a3082ba94c3f2866222bdb4f0deff562fd9078f24a2ad5b5e

HTTP Headers

GET /api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1701792946%26ud%3Deef9d9ae-7369-4f98-8b89-ca533110bfd7%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.hj7480b.top
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Tue, 05 Dec 2023 16:15:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip

hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc

103.235.46.191

11 kB

URL
hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
ASCII text, with very long lines (622)
Size
11 kB (11260 bytes)
Hash
bf0b20bafa91fb8ee25a6ed5e9e6dcc9
20b268c55b8967aef28e68cfa6d153580f774b63
5276f0f3d63cbc0fd159643df93feea76996ffc8b073fb4322668316d6776e41

HTTP Headers

GET /hm.js?42296466acbd6a1e84224ab1433a06cc HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11260
Content-Type: application/javascript
Date: Tue, 05 Dec 2023 16:15:42 GMT
Etag: 01c20452a1f12ded79df80e5a15ac09b
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=3070C225A3204F2D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=www.hj7480b.top&url=http%3A%2F%2Fwww.hj7480b.top%2F&cookie=__wpkreporterwid_%3D47881307-acc7-4ea1-03bd-b2ace5f41284&time=1701792946525&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&lt=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv

123.182.50.159

33 B

URL
track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=www.hj7480b.top&url=http%3A%2F%2Fwww.hj7480b.top%2F&cookie=__wpkreporterwid_%3D47881307-acc7-4ea1-03bd-b2ace5f41284&time=1701792946525&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&lt=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
IP
123.182.50.159:0
ASN
#4134 Chinanet

Certificate
IssuerGlobalSign nv-sa
Subject*.uc.cn
Fingerprint61:39:F6:CE:73:81:DE:72:76:83:A5:D2:EA:76:10:98:DC:C2:47:67
ValidityThu, 05 Jan 2023 06:01:06 GMT - Tue, 06 Feb 2024 06:01:05 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
33 B (33 bytes)
Hash
55199048ae64f13bfc67cd2fec307e1a
0febd20edc3ebbaa60bf312be0e1d977ddd3a319
7c677a0c1ba67a4335c821aa3af6031428be641e33887fc719ce8f52f926898d

HTTP Headers

GET /collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=www.hj7480b.top&url=http%3A%2F%2Fwww.hj7480b.top%2F&cookie=__wpkreporterwid_%3D47881307-acc7-4ea1-03bd-b2ace5f41284&time=1701792946525&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&lt=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv HTTP/1.1
Host: track.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Tue, 05 Dec 2023 16:15:42 GMT
Content-Type: image/avif;charset=UTF-8
Content-Length: 33
Connection: keep-alive
Server: Tengine/2.1.3_400
Cache-Control: no-cache
Access-Control-Allow-Origin: *

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1495544763&si=42296466acbd6a1e84224ab1433a06cc&v=1.3.0&lv=1&sn=45604&r=0&ww=1280&u=http%3A%2F%2Fwww.hj7480b.top%2F&tt=www.hj7480b.top

103.235.46.191

200 OK

43 B

URL GET HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1495544763&si=42296466acbd6a1e84224ab1433a06cc&v=1.3.0&lv=1&sn=45604&r=0&ww=1280&u=http%3A%2F%2Fwww.hj7480b.top%2F&tt=www.hj7480b.top
IP
103.235.46.191:443
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

Requested by
http://www.hj7480b.top/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1495544763&si=42296466acbd6a1e84224ab1433a06cc&v=1.3.0&lv=1&sn=45604&r=0&ww=1280&u=http%3A%2F%2Fwww.hj7480b.top%2F&tt=www.hj7480b.top HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 05 Dec 2023 16:15:43 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=FE676FE749C8D20E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701792949124%26tm%3D1701792949%26ud%3D47881307-acc7-4ea1-03bd-b2ace5f41284%26ver%3D2.42.0%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b

111.63.205.135

20 B

URL
px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701792949124%26tm%3D1701792949%26ud%3D47881307-acc7-4ea1-03bd-b2ace5f41284%26ver%3D2.42.0%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b
IP
111.63.205.135:0
ASN
#24547 Hebei Mobile Communication Company Limited

File type
gzip compressed data, from Unix\012- data
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

HTTP Headers

POST /api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701792949124%26tm%3D1701792949%26ud%3D47881307-acc7-4ea1-03bd-b2ace5f41284%26ver%3D2.42.0%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 909
Origin: http://www.hj7480b.top
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/

HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Tue, 05 Dec 2023 16:15:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip

px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701792949128%26tm%3D1701792949%26ud%3D47881307-acc7-4ea1-03bd-b2ace5f41284%26ver%3D2.42.0%26type%3Djsfsperf%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b

111.63.205.135

200 OK

20 B

URL POST HTTP/1.1
px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701792949128%26tm%3D1701792949%26ud%3D47881307-acc7-4ea1-03bd-b2ace5f41284%26ver%3D2.42.0%26type%3Djsfsperf%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b
IP
111.63.205.135:80
ASN
#24547 Hebei Mobile Communication Company Limited

Requested by
http://www.hj7480b.top/

File type
gzip compressed data, from Unix\012- data
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

HTTP Headers

POST /api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701792949128%26tm%3D1701792949%26ud%3D47881307-acc7-4ea1-03bd-b2ace5f41284%26ver%3D2.42.0%26type%3Djsfsperf%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1576
Origin: http://www.hj7480b.top
DNT: 1
Connection: keep-alive
Referer: http://www.hj7480b.top/

HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Tue, 05 Dec 2023 16:15:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN