Report - hjrwq.cn/OYvPuYOk/

Report Overview

Visited public
2025-04-09 11:28:45
Tags
URL
hjrwq.cn/OYvPuYOk/
Finishing URL
hjrwq.cn/OYvPuYOk/
IP / ASN
172.67.173.163
#13335 CLOUDFLARENET
Title
hjrwq.cn/OYvPuYOk/

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
hjrwq.cn	unknown	2024-09-11	2025-04-09	2025-04-09	2.3 kB	244 kB	172.67.173.163

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	hjrwq.cn/OYvPuYOk/assets/index-CpBOXP30.js	ScriptElement	233 kB	2025-04-06	2025-04-22
Pretty URL hjrwq.cn/OYvPuYOk/assets/index-CpBOXP30.js IP 172.67.173.163 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-06 10:07 Last Seen2025-04-22 12:56 Times Seen49 Hash 4c29f322e3bd36a1919bafbb0c3e0a61 eacd57a28be1ac620d101c317fad13c22c49c301 d95429b33adfb7ac6dcee9a5890bbdc9579b47865ae83d89356abc58b085f913 Loading...

HTTP Transactions (5)

	URL	IP	Response	Size
	hjrwq.cn/open/visitors/info/createOrGetUserInfo	172.67.173.163	404 Not Found	9 B
URL POST hjrwq.cn/open/visitors/info/createOrGetUserInfo IP 172.67.173.163:443 ASN #13335 CLOUDFLARENET Requested by https://hjrwq.cn/OYvPuYOk/ Certificate IssuerGoogle Trust Services Subjecthjrwq.cn Fingerprint45:C4:A7:49:8A:93:CF:FC:65:42:5D:7C:A3:CC:54:74:82:63:BD:60 ValiditySat, 05 Apr 2025 16:34:58 GMT - Fri, 04 Jul 2025 17:24:42 GMT File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 9d1ead73e678fa2f51a70a933b0bf017 d205cbd6783332a212c5ae92d73c77178c2d2f28 0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5 HTTP Headers POST /open/visitors/info/createOrGetUserInfo HTTP/1.1 Host: hjrwq.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 403 Origin: https://hjrwq.cn DNT: 1 Connection: keep-alive Referer: https://hjrwq.cn/OYvPuYOk/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 404 Not Found date: Wed, 09 Apr 2025 11:28:26 GMT content-type: text/plain; charset=utf-8 content-length: 9 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKucRNgoqvJ9G%2BESwz5Fmy0d0yfUKCqNJIh5D3m8jSeTGDI1u2rvX4WbV6jl0YBK0A5dJObkDPvEyaEWdl9FIcGM8ASDlSJYkPZ0SUz8QN7x918QDL8TiXe%2BeA%3D%3D"}],"group":"cf-nel","max_age":604800} vary: Origin access-control-allow-origin: https://hjrwq.cn set-cookie: locale=en-us; path=/; max-age=31557600; expires=Thu, 09 Apr 2026 17:28:26 GMT cf-cache-status: DYNAMIC cf-ray: 92d9a9326eeb6a61-HAM server: cloudflare nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=18440&min_rtt=16997&rtt_var=7059&sent=25&recv=30&lost=0&retrans=0&sent_bytes=4415&recv_bytes=2990&delivery_rate=1491&cwnd=12000&unsent_bytes=0&cid=35f3b3321a208504&ts=1620&x=16"

	hjrwq.cn/OYvPuYOk/favicon.ico	172.67.173.163	200 OK	2.2 kB
URL GET hjrwq.cn/OYvPuYOk/favicon.ico IP 172.67.173.163:443 ASN #13335 CLOUDFLARENET Requested by https://hjrwq.cn/OYvPuYOk/ Certificate IssuerGoogle Trust Services Subjecthjrwq.cn Fingerprint45:C4:A7:49:8A:93:CF:FC:65:42:5D:7C:A3:CC:54:74:82:63:BD:60 ValiditySat, 05 Apr 2025 16:34:58 GMT - Fri, 04 Jul 2025 17:24:42 GMT File type MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel Size 2.2 kB (2238 bytes) Hash 5f3738713c52a3abeca1177ca0387e30 bf7cb4870c2e8058d9398026eeca93aa5573281c 611ab8574979f616be1f80273541050a5fd63a8eb4ffdbe46408cba1bfbee638 HTTP Headers `GET /OYvPuYOk/favicon.ico HTTP/1.1 Host: hjrwq.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hjrwq.cn/OYvPuYOk/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 09 Apr 2025 11:28:26 GMT content-type: image/x-icon nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e9gEJ5WqwyrewTKs%2BQFoYA1lRPS7i15EM0lFhsKSCnJ%2Flx2dL%2FrVqlZHWoexu%2BR9A5om%2BdVqFQZctlxuXgo2XFq%2FcnaAKzAZ9r9OLQS3%2FUusoYj8q3bqYJm6Nw%3D%3D"}],"group":"cf-nel","max_age":604800} last-modified: Sat, 15 Mar 2025 12:18:26 GMT etag: W/"67d57012-8be" expires: Fri, 09 May 2025 11:28:26 GMT cache-control: public, max-age=2592000 cf-cache-status: MISS content-encoding: br cf-ray: 92d9a9331efe6a61-HAM server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=18440&min_rtt=16997&rtt_var=7059&sent=25&recv=30&lost=0&retrans=0&sent_bytes=4415&recv_bytes=2990&delivery_rate=1491&cwnd=12000&unsent_bytes=0&cid=35f3b3321a208504&ts=1663&x=16"

	hjrwq.cn/OYvPuYOk/	172.67.173.163	200 OK	492 B
URL User Request GET hjrwq.cn/OYvPuYOk/ IP 172.67.173.163:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjecthjrwq.cn Fingerprint45:C4:A7:49:8A:93:CF:FC:65:42:5D:7C:A3:CC:54:74:82:63:BD:60 ValiditySat, 05 Apr 2025 16:34:58 GMT - Fri, 04 Jul 2025 17:24:42 GMT File type HTML document, ASCII text, with CRLF, CR, LF line terminators Size 492 B (492 bytes) Hash daaf2ad830e3cfa6cd0027fd7e3ca0d8 1e528c3e2ea46273af40004bcc4b1b0be28e5a13 c4fe230a23379fbc723d4d33d6d02ed4e39f66e9e9a75c58adbe2ea24ffa35ec HTTP Headers `GET /OYvPuYOk/ HTTP/1.1 Host: hjrwq.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 09 Apr 2025 11:28:24 GMT content-type: text/html last-modified: Sat, 05 Apr 2025 12:06:10 GMT vary: Accept-Encoding cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fpW1wRNE7o%2FXJylkyDUejsoV76xhpYTT3SIVSGTwwytgo%2Bjmck8Kg0sAhZsYeRuFT5Ra7JhG5CKW69rT9zKwOutxK%2FVcR6khr6gTWxoSyWsJdBqf0J06JmmPiQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 92d9a928bc69414a-HAM content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=14337&min_rtt=14280&rtt_var=2350&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3167&recv_bytes=1121&delivery_rate=302359&cwnd=253&unsent_bytes=0&cid=610e7d21460d18f2&ts=429&x=0" X-Firefox-Spdy: h2

	hjrwq.cn/OYvPuYOk/assets/index-CpBOXP30.js	172.67.173.163	200 OK	233 kB
URL GET hjrwq.cn/OYvPuYOk/assets/index-CpBOXP30.js IP 172.67.173.163:443 ASN #13335 CLOUDFLARENET Requested by https://hjrwq.cn/OYvPuYOk/ Certificate IssuerGoogle Trust Services Subjecthjrwq.cn Fingerprint45:C4:A7:49:8A:93:CF:FC:65:42:5D:7C:A3:CC:54:74:82:63:BD:60 ValiditySat, 05 Apr 2025 16:34:58 GMT - Fri, 04 Jul 2025 17:24:42 GMT File type JavaScript source, ASCII text, with very long lines (35591) Size 233 kB (232581 bytes) Hash 4c29f322e3bd36a1919bafbb0c3e0a61 eacd57a28be1ac620d101c317fad13c22c49c301 d95429b33adfb7ac6dcee9a5890bbdc9579b47865ae83d89356abc58b085f913 HTTP Headers `GET /OYvPuYOk/assets/index-CpBOXP30.js HTTP/1.1 Host: hjrwq.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hjrwq.cn/OYvPuYOk/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 09 Apr 2025 11:28:25 GMT content-type: application/javascript last-modified: Sat, 05 Apr 2025 12:06:10 GMT vary: Accept-Encoding etag: W/"67f11cb2-38c85" expires: Fri, 09 May 2025 11:28:25 GMT cache-control: public, max-age=2592000 content-encoding: gzip cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2BocQQBRi0GJw%2FXhb3qcA%2BF5MoimBbf8s2xwBWYLJrC1BL9otKKPdSLC8l%2BVlkJttSlz33Zz99tXdAu1%2FBmUbbMqtcpWsZftTI%2Bx9sIE%2Bo1azYGl4zm7baNgwQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 92d9a92c99c9414a-HAM alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=14410&min_rtt=14201&rtt_var=1156&sent=16&recv=15&lost=0&retrans=0&sent_bytes=5894&recv_bytes=1377&delivery_rate=393291&cwnd=256&unsent_bytes=0&cid=610e7d21460d18f2&ts=1083&x=0" X-Firefox-Spdy: h2

	hjrwq.cn/OYvPuYOk/assets/index-754JfH0G.css	172.67.173.163	403 Forbidden	4.5 kB
URL GET hjrwq.cn/OYvPuYOk/assets/index-754JfH0G.css IP 172.67.173.163:443 ASN #13335 CLOUDFLARENET Requested by https://hjrwq.cn/OYvPuYOk/ Certificate IssuerGoogle Trust Services Subjecthjrwq.cn Fingerprint45:C4:A7:49:8A:93:CF:FC:65:42:5D:7C:A3:CC:54:74:82:63:BD:60 ValiditySat, 05 Apr 2025 16:34:58 GMT - Fri, 04 Jul 2025 17:24:42 GMT File type HTML document, ASCII text, with very long lines (396) Size 4.5 kB (4501 bytes) Hash 43ac00f001f2393789a718fac2262113 92df3c0324586e4467137a6ad3ece82b75c4a606 35ee6838388119e354661545999007551b10c48d0f4da4458318e0010d66ee62 HTTP Headers `GET /OYvPuYOk/assets/index-754JfH0G.css HTTP/1.1 Host: hjrwq.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hjrwq.cn/OYvPuYOk/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden date: Wed, 09 Apr 2025 11:28:25 GMT content-type: text/html; charset=utf-8 content-encoding: br server: cloudflare cf-ray: 92d9a92c99cd414a-HAM X-Firefox-Spdy: h2`