Report - ehkdhf.asia/

Report Overview

Visited public
2025-07-12 19:54:42
Tags
Submit Tags
URL
ehkdhf.asia/
Finishing URL
ehkdhf.asia/
IP / ASN
101.33.46.108
#132203 Tencent Building, Kejizhongyi Avenue
Title
域名已过期 - DNSPod-免费智能DNS解析服务商-电信_网通_教育网,智能DNS

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cloudcache.tencentcs.cn	unknown	2018-01-03	2021-08-27	2025-07-05	1.7 kB	503 kB	43.152.140.79
dscache.tencent-cloud.cn	unknown	2012-06-01	2022-07-29	2025-07-12	503 B	230 kB	43.152.140.107
beaconcdn.qq.com	250925	1995-05-04	2020-01-14	2025-07-08	427 B	58 kB	119.188.150.238
oth.eve.mdt.qq.com	7200	1995-05-04	2017-01-30	2025-07-05	3.7 kB	2.1 kB	101.33.47.68
ehkdhf.asia	unknown	2024-07-05	2025-07-12	2025-07-12	1.3 kB	27 kB	43.153.249.96

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-07-12 19:54:22	medium	Client IP	43.153.249.96	ET INFO HTTP Request to a *.asia domain
2025-07-12 19:54:24	medium	Client IP	43.153.249.96	ET INFO HTTP Request to a *.asia domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	ehkdhf.asia/	ScriptElement	973 B	2024-08-01	2025-07-24
Pretty URL ehkdhf.asia/ IP 43.153.249.96 ASN #132203 Tencent Building, Kejizhongyi Avenue Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-01 15:03 Last Seen2025-07-24 04:00 Times Seen39 Hash 6f35d699b672df8f68ac533319ccdf80 bdd635fe91edc772c7d88d3958bf836ac3ef2b78 5b37f5cdbf811d194b68b8a59a1c149f93cbbdbe4d165fc96e9e19f68aeacf7e Loading...

	beaconcdn.qq.com/sdk/3.2.0/beacon_web.min.js	ScriptElement	58 kB	2023-03-07	2025-07-24
Pretty URL beaconcdn.qq.com/sdk/3.2.0/beacon_web.min.js IP 119.188.150.238 ASN #4837 CHINA UNICOM China169 Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:21 Last Seen2025-07-24 04:00 Times Seen62 Hash 1128f60bcbebeda54ce659bde21cf480 1f5703853355517c5761cc126e330e6de09245ac 50753394db6b7fce619e6bfe8b8966948f76e818036707e1bd15cd3031e9f6d7 Loading...

HTTP Transactions (16)

URL IP Response Size

POST oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL POST
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

POST /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=utf-8
Content-Length: 446
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:27 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

POST oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL POST
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

POST /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=utf-8
Content-Length: 464
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:28 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

GET ehkdhf.asia/

43.153.249.96

200 OK

26 kB

URL User Request GET
ehkdhf.asia/
IP
43.153.249.96:80
ASN
#132203 Tencent Building, Kejizhongyi Avenue

File type
HTML document, Unicode text, UTF-8 text, with very long lines (25244), with no line terminators
Size
26 kB (25606 bytes)
Hash
0da8b906a659c0c20fe63049c181aea2
d490e0637ea579e491231eb4fe9a89dff18a216f
48106054065073b0ff1a2443ccd6123a0aa660cda1543a3ffce03cac9149f2ea

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.asia domain

HTTP Headers

GET / HTTP/1.1
Host: ehkdhf.asia
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 12 Jul 2025 19:54:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 25606
Connection: keep-alive
X-Request-Id: cb2f2436458675ac1bc1832a6a2adc68
Set-Cookie: sid=114es64470ba1d54a63a395de71873edaddbe; path=/; expires=Mon, 11 Aug 2025 19:54:22 GMT; domain=ehkdhf.asia; samesite=strict; httponly
language=zh; path=/; expires=Mon, 11 Aug 2025 19:54:22 GMT; domain=ehkdhf.asia
dp.sess=c2d766715a23131ca8651ec3942efe5e27d81c29b868a18c; path=/; httponly
Vary: Origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-DNS-Prefetch-Control: on
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

GET cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/tea-202211161720.css

43.152.140.79

200 OK

260 kB

URL GET
cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/tea-202211161720.css
IP
43.152.140.79:443
ASN
#139341 ACE

Requested by
http://ehkdhf.asia/
Certificate
IssuerDigiCert, Inc.
Subjectcloudcache.tencentcs.cn
FingerprintD8:88:D5:1B:E4:A9:7D:BD:5F:8E:BB:E3:A2:59:F4:3D:DD:2D:DF:11
ValidityMon, 07 Jul 2025 00:00:00 GMT - Sat, 01 Aug 2026 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
260 kB (259698 bytes)
Hash
735f00e4e5af014aabbfbefb5997cd0d
407548a747f02c69dd1200d96aff383d527a4264
12f8441b865a79c63a1c0f70c9fb4404b1eb8731ea91cfa2c4cee9b3443008ac

HTTP Headers

GET /qcloud/ui/dnspod/build/console/tea-style/dist/css/tea-202211161720.css HTTP/1.1
Host: cloudcache.tencentcs.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Tue, 09 Jul 2024 16:00:15 GMT
content-encoding: gzip
etag: "9f1eefca20ec531900f2aa4fb7f0c8c6-1"
content-type: text/css
date: Fri, 30 May 2025 21:05:10 GMT
server: tencent-cos
x-cos-hash-crc64ecma: 4986249487316733956
x-cos-meta-md5: 735f00e4e5af014aabbfbefb5997cd0d
x-cos-replication-status: Complete
x-cos-request-id: NjgzYTFkODZfYTkyZTJjMGJfMTIxZDlfNDFlNTQ2NQ==
x-cos-storage-class: MAZ_STANDARD
x-cos-version-id: MTg0NDUwMjM1MzI4OTQ1MzA2Njg
x-cosindex-replication-status: Complete
content-length: 39310
accept-ranges: bytes
x-nws-log-uuid: 15467999892380452063
x-cache-lookup: Cache Refresh Hit
access-control-expose-headers: Content-Length, Content-Type, server_ip, x-nws-log-uuid
cache-control: max-age=86400
X-Firefox-Spdy: h2

OPTIONS oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL OPTIONS
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

OPTIONS /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ehkdhf.asia/
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:27 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

OPTIONS oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL OPTIONS
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

OPTIONS /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ehkdhf.asia/
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:27 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

POST oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL POST
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

POST /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=utf-8
Content-Length: 464
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:27 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

GET dscache.tencent-cloud.cn/upload/uploader/Frame%2016@2x-4bf59f5d179884e2729c20972e57ca2fedb7643f.png

43.152.140.107

200 OK

230 kB

URL GET
dscache.tencent-cloud.cn/upload/uploader/Frame%2016@2x-4bf59f5d179884e2729c20972e57ca2fedb7643f.png
IP
43.152.140.107:443
ASN
#139341 ACE

Requested by
http://ehkdhf.asia/
Certificate
IssuerDigiCert, Inc.
Subjectdscache.tencent-cloud.cn
Fingerprint8E:54:93:90:8C:48:42:A9:C3:94:7B:E0:13:DA:C1:05:CA:25:13:1E
ValidityMon, 07 Jul 2025 00:00:00 GMT - Fri, 07 Aug 2026 23:59:59 GMT

File type
PNG image data, 888 x 888, 8-bit/color RGBA, non-interlaced
Size
230 kB (230026 bytes)
Hash
e4e4751860b577cfa22ca9f3ea008686
4bf59f5d179884e2729c20972e57ca2fedb7643f
4990ddf5ef84aef5b9f6ec12de31adec5dd8e0898e48e530441c14524e4d97a2

HTTP Headers

GET /upload/uploader/Frame%2016@2x-4bf59f5d179884e2729c20972e57ca2fedb7643f.png HTTP/1.1
Host: dscache.tencent-cloud.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Mon, 22 Aug 2022 03:45:27 GMT
etag: "e4e4751860b577cfa22ca9f3ea008686"
content-type: image/png
date: Tue, 11 Jul 2023 15:29:55 GMT
server: tencent-cos
x-cos-hash-crc64ecma: 2113690012785018400
x-cos-request-id: NjRhZDc1NzNfM2UzNTQwMGJfMWUwMjVfZjk3OGYw
x-cos-version-id: MTg0NDUwODI5MzM3ODIxMjA0MDA
content-length: 230026
accept-ranges: bytes
x-nws-log-uuid: 5334625607508095563
x-cache-lookup: Cache Hit
cache-control: max-age=2592000
vary: Origin
X-Firefox-Spdy: h2

GET cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/images/cloud-logo-new_026.svg

43.152.140.79

200 OK

3.0 kB

URL GET
cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/images/cloud-logo-new_026.svg
IP
43.152.140.79:443
ASN
#139341 ACE

Requested by
http://ehkdhf.asia/
Certificate
IssuerDigiCert, Inc.
Subjectcloudcache.tencentcs.cn
FingerprintD8:88:D5:1B:E4:A9:7D:BD:5F:8E:BB:E3:A2:59:F4:3D:DD:2D:DF:11
ValidityMon, 07 Jul 2025 00:00:00 GMT - Sat, 01 Aug 2026 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
3.0 kB (2984 bytes)
Hash
02687ff09bbb111ba5e9aeb3c1179d72
c56f0b57ca25ccf9359795b3e16561b1ca285a60
615cb4737d840c3b45cfbfd4a07fa675e7513036a46684e5f653df448480fcb3

HTTP Headers

GET /qcloud/ui/dnspod/build/console/tea-style/dist/css/images/cloud-logo-new_026.svg HTTP/1.1
Host: cloudcache.tencentcs.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/tea-202211161720.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Tue, 09 Jul 2024 15:48:47 GMT
etag: "7d09f0873ef1b7afb194331c8a8fff5f-1"
content-type: image/svg+xml
date: Tue, 24 Sep 2024 06:29:11 GMT
server: tencent-cos
x-cos-hash-crc64ecma: 14524815053532359300
x-cos-meta-md5: 02687ff09bbb111ba5e9aeb3c1179d72
x-cos-replication-status: Complete
x-cos-request-id: NjZmMjVjMzdfOTE4ZDIwMDlfMTZkZDFfMmEzNTViNw==
x-cos-storage-class: MAZ_STANDARD
x-cos-version-id: MTg0NDUwMjM1MzM1ODI0Nzk5Mjc
x-cosindex-replication-status: Complete
content-length: 2984
accept-ranges: bytes
x-nws-log-uuid: 8101183020239458682
x-cache-lookup: Cache Refresh Hit
access-control-expose-headers: Content-Length, Content-Type, server_ip, x-nws-log-uuid
cache-control: max-age=86400
X-Firefox-Spdy: h2

GET ehkdhf.asia/favicon.ico

43.153.249.96

200 OK

0 B

URL GET
ehkdhf.asia/favicon.ico
IP
43.153.249.96:80
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.asia domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ehkdhf.asia
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Cookie: sid=114es64470ba1d54a63a395de71873edaddbe; language=zh; dp.sess=c2d766715a23131ca8651ec3942efe5e27d81c29b868a18c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 12 Jul 2025 19:54:24 GMT
Content-Type: image/png
Content-Length: 0
Connection: keep-alive
X-Request-Id: e891dc3a940953c701dbeefa298d2978
Set-Cookie: sid=114es64470ba1d54a63a395de71873edaddbe; path=/; expires=Mon, 11 Aug 2025 19:54:24 GMT; domain=ehkdhf.asia; samesite=strict; httponly
Vary: Origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-DNS-Prefetch-Control: on
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

GET cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/images/sprite.tea-202211161720.svg

43.152.140.79

200 OK

238 kB

URL GET
cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/images/sprite.tea-202211161720.svg
IP
43.152.140.79:443
ASN
#139341 ACE

Requested by
http://ehkdhf.asia/
Certificate
IssuerDigiCert, Inc.
Subjectcloudcache.tencentcs.cn
FingerprintD8:88:D5:1B:E4:A9:7D:BD:5F:8E:BB:E3:A2:59:F4:3D:DD:2D:DF:11
ValidityMon, 07 Jul 2025 00:00:00 GMT - Sat, 01 Aug 2026 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
238 kB (238437 bytes)
Hash
a36b7e3c994d924b5371c5ae7fd65495
fa82214bfb92a53c561a5041e1216cb50f2278f2
538d1282675bb80d46f666545308c2e58e3d2af860e949c4bc75ff62a8f815d7

HTTP Headers

GET /qcloud/ui/dnspod/build/console/tea-style/dist/css/images/sprite.tea-202211161720.svg HTTP/1.1
Host: cloudcache.tencentcs.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudcache.tencentcs.cn/qcloud/ui/dnspod/build/console/tea-style/dist/css/tea-202211161720.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Tue, 09 Jul 2024 16:00:15 GMT
etag: "3eb9697a0354b4307b16a50c05136044-1"
content-type: image/svg+xml
date: Tue, 09 Jul 2024 16:02:12 GMT
server: tencent-cos
x-cos-hash-crc64ecma: 8428285231017135132
x-cos-meta-md5: a36b7e3c994d924b5371c5ae7fd65495
x-cos-request-id: NjY4ZDVmMDRfZGE5MDFiMDlfMTA3OTNfNGZlZmM4Mg==
x-cos-storage-class: MAZ_STANDARD
x-cos-version-id: MTg0NDUwMjM1MzI4OTQwMzE0NDM
content-length: 238437
accept-ranges: bytes
x-nws-log-uuid: 5117839536163807968
x-cache-lookup: Cache Refresh Hit
access-control-expose-headers: Content-Length, Content-Type, server_ip, x-nws-log-uuid
cache-control: max-age=86400
X-Firefox-Spdy: h2

OPTIONS oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL OPTIONS
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

OPTIONS /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ehkdhf.asia/
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:27 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

OPTIONS oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL OPTIONS
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

OPTIONS /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ehkdhf.asia/
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:29 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

GET ehkdhf.asia/

0.0.0.0

0 B

URL User Request GET
ehkdhf.asia/
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.asia domain

HTTP Headers

GET / HTTP/1.1
Host: ehkdhf.asia
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET beaconcdn.qq.com/sdk/3.2.0/beacon_web.min.js

119.188.150.238

200 OK

58 kB

URL GET
beaconcdn.qq.com/sdk/3.2.0/beacon_web.min.js
IP
119.188.150.238:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
http://ehkdhf.asia/
Certificate
IssuerDigiCert, Inc.
Subject*.beaconcdn.qq.com
Fingerprint8B:2E:41:55:3C:95:2D:A0:CD:37:69:B7:1B:E5:9C:C4:DD:F2:20:94
ValidityFri, 27 Sep 2024 00:00:00 GMT - Tue, 14 Oct 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (57450)
Size
58 kB (57560 bytes)
Hash
1128f60bcbebeda54ce659bde21cf480
1f5703853355517c5761cc126e330e6de09245ac
50753394db6b7fce619e6bfe8b8966948f76e818036707e1bd15cd3031e9f6d7

HTTP Headers

GET /sdk/3.2.0/beacon_web.min.js HTTP/1.1
Host: beaconcdn.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 31 Dec 2020 08:58:05 GMT
content-encoding: gzip
date: Thu, 21 Nov 2024 15:31:36 GMT
content-type: application/javascript
server: nws_static_mid
expires: Thu, 21 Nov 2024 15:41:36 GMT
x-verify-code: 2871bd7acf67c7e298e9c8d8c865e27d
x-daa-tunnel: hop_count=2
cache-control: max-age=600
age: 443
content-length: 17612
accept-ranges: bytes
x-nws-log-uuid: 6123111606055748469
x-cache-lookup: Cache Hit
access-control-allow-origin: *
X-Firefox-Spdy: h2

POST oth.eve.mdt.qq.com:8080/analytics/upload?tp=js

101.33.47.68

200 OK

20 B

URL POST
oth.eve.mdt.qq.com:8080/analytics/upload?tp=js
IP
101.33.47.68:8080
ASN
#132203 Tencent Building, Kejizhongyi Avenue

Requested by
http://ehkdhf.asia/

File type
JSON text data
Size
20 B (20 bytes)
Hash
25dcccbf1db0d4bfaa67ffd829a1dc56
aeaf62ba94a48a9a1c8b516b1af5fbc3190d142c
02c045b5a38b1e9a01bf15ab6d48d526dc60a726bf041fe32d153b4ffd71e761

HTTP Headers

POST /analytics/upload?tp=js HTTP/1.1
Host: oth.eve.mdt.qq.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=utf-8
Content-Length: 464
Origin: http://ehkdhf.asia
DNT: 1
Connection: keep-alive
Referer: http://ehkdhf.asia/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 20
Date: 12 Jul 2025 19:54:30 GMT
Connection: Close
Content-Type: text/plain
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: x-requested-with,content-type

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL POST

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL POST

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL OPTIONS

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL OPTIONS

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL POST

IP

ASN

Requested by