Report - baidu.longfeng1.cc/

Report Overview

Visited public
2024-12-21 12:04:24
Tags
URL
baidu.longfeng1.cc/
Finishing URL
1.longfengc.top/
IP / ASN
23.224.182.78
#40065 CNSERVERS
Title
像我这样孤单的人！

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
baidu.longfeng1.cc	unknown	unknown	No data	No data	916 B	1.0 kB	23.224.182.78
longfenga.top	unknown	2024-11-30	2024-12-01	2024-12-09	438 B	286 B	38.46.15.58
longfengb.top	unknown	2024-11-30	2024-12-01	2024-12-01	501 B	14 kB	38.46.15.62
1.longfengc.top	unknown	unknown	No data	No data	4.0 kB	1.7 MB	23.224.182.78
i.piantu.cn	unknown	2022-09-22	2024-12-01	2024-12-10	436 B	149 kB	122.228.8.171
node11.aizhantj.com	unknown	2024-07-29	2024-11-16	2024-12-16	421 B	36 kB	163.171.134.109

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-21	medium	longfenga.top	Sinkholed
2024-12-21	medium	longfengb.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed
2024-12-21	medium	longfengc.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	1.longfengc.top/	ScriptElement	243 B	2024-12-03	2025-03-16
Pretty URL 1.longfengc.top/ IP 23.224.182.78 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-03 20:22 Last Seen2025-03-16 04:27 Times Seen6 Hash 6a6fc80f432dad607537635a630bf299 7ca6fe14517ce81ac02299c5394891ed6e602ff1 d01e6e00f44011ad000384cd00644e98caef8694be1a44e76ef2c04f76670d32 Loading...

	1.longfengc.top/	ScriptElement	1.0 kB	2024-12-21	2024-12-21
Pretty URL 1.longfengc.top/ IP 23.224.182.78 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-21 12:04 Last Seen2024-12-21 12:04 Times Seen1 Hash c079712e9fa285ada945f681d6ca0e84 ef2537a077752f6d46dd88875a0ea20d36d65086 ce6f83fccd1da04908155410db414f77e36d23b793adc57360df7a09c80812ed Loading...

	1.longfengc.top/	ScriptElement	1.7 kB	2024-12-03	2025-06-07
Pretty URL 1.longfengc.top/ IP 23.224.182.78 ASN #40065 CNSERVERS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-03 20:22 Last Seen2025-06-07 17:06 Times Seen8 Hash 9210d5cfa6da046add3fc8e82dca467f e0b1b4c8ced27eb3f0a8c07724a9f1c50f856c0c a66b1aba66f62d8e3f92b179206b3e7220d86dfa6775d2fe63594226b030c296 Loading...

HTTP Transactions (15)

URL IP Response Size

baidu.longfeng1.cc/

23.224.182.78

200 OK

71 B

URL
baidu.longfeng1.cc/
IP
23.224.182.78:0
ASN
#40065 CNSERVERS

File type
ASCII text, with no line terminators
Size
71 B (71 bytes)
Hash
5a00dccfac7b25eef02547d60b91b2fa
7e86c4fe7efc0332d11c8de0fe52fbfa5f40142c
e6d9d2125b1275e7d7521da748ab7d541f27b6c5136718a68dfe6c9050d8d475

HTTP Headers

GET / HTTP/1.1
Host: baidu.longfeng1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:03:58 GMT
content-type: text/html
content-length: 71
last-modified: Sun, 01 Dec 2024 05:07:40 GMT
etag: "674bef1c-47"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

baidu.longfeng1.cc/favicon.ico

23.224.182.78

404 Not Found

568 B

URL
baidu.longfeng1.cc/favicon.ico
IP
23.224.182.78:0
ASN
#40065 CNSERVERS

File type
HTML document, ASCII text, with CRLF line terminators
Size
568 B (568 bytes)
Hash
02a37f1762681d3489e379d7b9c4d777
9ca0ac0a88b585cc601f0f2b550db7db979912d1
0febefc2a6f119fa2d30d5356737596309d8a452a59e317519f8154bd2542fad

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: baidu.longfeng1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baidu.longfeng1.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: Tengine
date: Sat, 21 Dec 2024 12:03:58 GMT
content-type: text/html
content-length: 568
X-Firefox-Spdy: h2

longfenga.top/favicon.ico

38.46.15.58

404 Not Found

146 B

URL
longfenga.top/favicon.ico
IP
38.46.15.58:0
ASN
#9294 GNET INC.

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: longfenga.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://longfenga.top/?tiao
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Sat, 21 Dec 2024 12:04:02 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

longfengb.top/

38.46.15.62

200 OK

13 kB

URL
longfengb.top/
IP
38.46.15.62:0
ASN
#9294 GNET INC.

File type
gzip compressed data, from Unix
Size
13 kB (13291 bytes)
Hash
29556c1dbe9e7ca59de5c60022586d30
2ee021bc6b615f4bb354da39408ebe724e2e6421
0ade1397db859d31bc11f0e127dc42652a06833db876ee30d801df1e9e83403c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: longfengb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://longfenga.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 21 Dec 2024 12:04:06 GMT
content-type: text/html
last-modified: Tue, 17 Dec 2024 04:06:38 GMT
vary: Accept-Encoding
etag: W/"6760f8ce-e07"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2

GET 1.longfengc.top/title.png

23.224.182.78

200 OK

58 kB

URL GET HTTP/2
1.longfengc.top/title.png
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
PNG image data, 767 x 192, 8-bit/color RGBA, non-interlaced
Size
58 kB (58144 bytes)
Hash
dc4f37d7d3df5f9ea320a368fb9d2d6b
0f77f470e48ac21a918a6f4075d38d02cd8b7815
8b3215b7f63475095a965166633237233655bd236c64dbacbe6248f1d4d688dd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /title.png HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: image/png
content-length: 58144
last-modified: Sun, 30 Jun 2024 05:25:18 GMT
etag: "6680ec3e-e320"
expires: Mon, 20 Jan 2025 12:04:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/slice1.png

23.224.182.78

200 OK

2.1 kB

URL GET HTTP/2
1.longfengc.top/slice1.png
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
PNG image data, 177 x 24, 8-bit/color RGBA, non-interlaced
Size
2.1 kB (2080 bytes)
Hash
aec2f3397ef422d44f420e0326ebd57a
f27ecd3f6f092b0b5286d275ceb107b39d9a3a9a
d93d7484f0834f23fad7fdf24c86a02b39b30046cafe1b7682e9bc123aa73e28

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /slice1.png HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: image/png
content-length: 2080
last-modified: Wed, 05 Jun 2024 14:58:58 GMT
etag: "66607d32-820"
expires: Mon, 20 Jan 2025 12:04:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/slice2.png

23.224.182.78

200 OK

1.6 kB

URL GET HTTP/2
1.longfengc.top/slice2.png
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
PNG image data, 33 x 33, 8-bit colormap, non-interlaced
Size
1.6 kB (1585 bytes)
Hash
5cc095d2d2c6135cd61158e37fb27120
edb3be707fe4dfd71e1131956907d7b74e686705
cf540e89c199e214f74f2576fab30f5e3e1156a9de193812605b41e67ac3be4b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /slice2.png HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: image/png
content-length: 1585
last-modified: Wed, 05 Jun 2024 14:57:08 GMT
etag: "66607cc4-631"
expires: Mon, 20 Jan 2025 12:04:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/slice5.png

23.224.182.78

200 OK

841 B

URL GET HTTP/2
1.longfengc.top/slice5.png
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
841 B (841 bytes)
Hash
ca01546560eb21f084fd176c504042c4
9bd5cd5ebb1eab9e9502b8ec4f744e1f8702eca4
e483036b1a3cdc21de832f6bd4d229f57c5251144e45617539e01e64ad50207c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /slice5.png HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: image/png
content-length: 841
last-modified: Wed, 05 Jun 2024 14:58:46 GMT
etag: "66607d26-349"
expires: Mon, 20 Jan 2025 12:04:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/slice9.png

23.224.182.78

200 OK

4.3 kB

URL GET HTTP/2
1.longfengc.top/slice9.png
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
PNG image data, 141 x 45, 8-bit/color RGBA, non-interlaced
Size
4.3 kB (4263 bytes)
Hash
abb736d876e4bb0fa07bd12e6cf1b71d
8739ed1d3158cbb96b3c5bb62be883421b2ae460
389401dd2900df0fe73f540bfbc2ce9d7fff8140acf6b45a44acf84b07974b69

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /slice9.png HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: image/png
content-length: 4263
last-modified: Wed, 05 Jun 2024 14:57:52 GMT
etag: "66607cf0-10a7"
expires: Mon, 20 Jan 2025 12:04:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/group38.png

23.224.182.78

200 OK

820 B

URL GET HTTP/2
1.longfengc.top/group38.png
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
PNG image data, 180 x 73, 8-bit colormap, non-interlaced
Size
820 B (820 bytes)
Hash
31fda144cd668f47fdaf6cf1f43dd25f
bc575d40771a2208351577e67a5edd457e2907a0
de7c9c0b6badc4e3e7ed483ec429cb06cc17ad3a8beb193cf8726ad00ad8790a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /group38.png HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: image/png
content-length: 820
last-modified: Wed, 05 Jun 2024 14:58:08 GMT
etag: "66607d00-334"
expires: Mon, 20 Jan 2025 12:04:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/finger.gif

23.224.182.78

200 OK

1.6 MB

URL GET HTTP/2
1.longfengc.top/finger.gif
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
GIF image data, version 89a, 2000 x 2000
Size
1.6 MB (1613282 bytes)
Hash
189dcccd8100bb8330906e63d32e8d27
56135f60d779802a7c5b0bc064f77febeda31acb
12ecac306d34ff8bef5ea76b848a8da1d3d55172f7d543023e33adb9620042e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /finger.gif HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: image/gif
content-length: 1613282
last-modified: Wed, 05 Jun 2024 15:00:06 GMT
etag: "66607d76-189de2"
expires: Mon, 20 Jan 2025 12:04:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/favicon.ico

23.224.182.78

404 Not Found

565 B

URL GET HTTP/2
1.longfengc.top/favicon.ico
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
565 B (565 bytes)
Hash
64edbf2a5b47a647f64e1e61d70f7d1a
12281b572d79975f78e2838e6a323db0215544d1
b785712abd4f7ff44a0eacf97dcf6846b6a33bc333facaa96e75f739499869e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: Tengine
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: text/html
content-length: 565
X-Firefox-Spdy: h2

GET i.piantu.cn/i/0/2024/11/67415bb2a6d6c.png

122.228.8.171

200 OK

149 kB

URL GET HTTP/2
i.piantu.cn/i/0/2024/11/67415bb2a6d6c.png
IP
122.228.8.171:443
ASN
#134771 WENZHOU, ZHEJIANG Province, P.R.China.

Requested by
https://1.longfengc.top/
Certificate
IssuerLet's Encrypt
Subjecti.piantu.cn
Fingerprint33:AD:DA:A4:C3:AC:22:09:EC:DE:ED:BF:02:0A:58:C1:0A:7F:40:89
ValidityTue, 17 Dec 2024 00:13:50 GMT - Mon, 17 Mar 2025 00:13:49 GMT

File type
PNG image data, 1440 x 980, 8-bit colormap, non-interlaced
Size
149 kB (148889 bytes)
Hash
e52b54b46a313b83ec7f2ff5c5d8e7af
f31759af6dd138e90b115d817f45d0c48072c10e
8b48d78718b1e46d5fb8e440bc51cd9448d7b340c5da51bb525f880eca0d4cd2

HTTP Headers

GET /i/0/2024/11/67415bb2a6d6c.png HTTP/1.1
Host: i.piantu.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 21 Dec 2024 12:04:20 GMT
content-type: image/png
content-length: 148889
last-modified: Sat, 23 Nov 2024 04:36:02 GMT
etag: "67415bb2-24599"
expires: Mon, 20 Jan 2025 12:04:20 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET 1.longfengc.top/

23.224.182.78

200 OK

14 kB

URL User Request GET HTTP/2
1.longfengc.top/
IP
23.224.182.78:443
ASN
#40065 CNSERVERS

Certificate
IssuerLet's Encrypt
Subject1.longfengc.top
FingerprintCB:A1:CF:FF:6A:8A:54:AE:5F:94:E2:CE:6D:22:FA:ED:C5:C1:1E:B2
ValidityTue, 17 Dec 2024 03:07:40 GMT - Mon, 17 Mar 2025 03:07:39 GMT

File type

Size
14 kB (13674 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 1.longfengc.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://longfengb.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
date: Sat, 21 Dec 2024 12:04:09 GMT
content-type: text/html
last-modified: Tue, 17 Dec 2024 04:18:03 GMT
vary: Accept-Encoding
etag: W/"6760fb7b-356a"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

GET node11.aizhantj.com:21233/tjjs/?k=gamgvlxicf5

163.171.134.109

200 OK

35 kB

URL GET HTTP/2
node11.aizhantj.com:21233/tjjs/?k=gamgvlxicf5
IP
163.171.134.109:21233
ASN
#54994 ML-1432-54994

Requested by
https://1.longfengc.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.aizhantj.com
Fingerprint26:01:F1:1E:2C:43:7E:B9:25:67:E6:CA:E6:61:29:78:06:5C:77:41
ValiditySat, 07 Sep 2024 08:00:09 GMT - Thu, 09 Oct 2025 08:00:08 GMT

File type
JavaScript source, ASCII text
Size
35 kB (35224 bytes)
Hash
f3ea77cea95cc4c56fe63edfa7d13eff
b34bed6c87c0419b9240ec847863db73a2e5e2de
059e8e9a24d2731cb556c4a067b7cd32259458960b3c78a663337ba036418174

HTTP Headers

GET /tjjs/?k=gamgvlxicf5 HTTP/1.1
Host: node11.aizhantj.com:21233
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.longfengc.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 21 Dec 2024 12:04:10 GMT
content-type: application/javascript; charset=UTF-8
expires: Sat, 21 Dec 2024 12:34:10 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
cache-control: max-age=1800, public
content-encoding: gzip
server: Aztj(w-01)
x-via: 1.1 PS-000-01U4I88:2 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1bc200:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-016FX94:13 (Cdn Cache Server V2.0)
x-ws-request-id: 6766aeba_PSrdsdgemSTO1sw92_11232-35594
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type