Report - download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697

Report Overview

Visited public
2025-02-19 00:30:34
Tags
URL
download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697
Finishing URL
download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697
IP / ASN
180.163.146.99
#4812 China Telecom Group
Title
405

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.i-tax.cn	unknown	2017-09-25	2018-03-03	2025-01-15	978 B	6.7 kB	180.163.146.103
errors.aliyun.com	788351	2007-09-28	2017-02-02	2025-02-15	472 B	4.5 kB	203.119.145.38
g.alicdn.com	6787	2008-06-25	2014-10-06	2025-02-14	455 B	24 kB	163.181.131.244

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-19 00:30:05	medium	180.163.146.103	Client IP	ET INFO TLS Handshake Failure
2025-02-19 00:30:05	medium	180.163.146.103	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697	ScriptElement	1.5 kB	2025-01-26	2025-02-26
Pretty URL download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697 IP 180.163.146.103 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2025-01-26 18:23 Last Seen2025-02-26 20:08 Times Seen16 Hash ad13c7e17230940a27431fe9d8a78a1e 23ee723ea01fd4e55b4909fe4f51fc1b04a67a12 7e17161900a8e3256198f848ade1a6dfef201833d0105ad93126c84e5768872d Loading...

HTTP Transactions (4)

	URL	IP	Response	Size
	download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697	180.163.146.103	405 Not Allowed	2.7 kB
URL User Request GET HTTP/1.1 download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697 IP 180.163.146.103:80 ASN #4812 China Telecom Group File type HTML document, Unicode text, UTF-8 text, with very long lines (2569), with no line terminators Size 2.7 kB (2657 bytes) Hash a871383b736a063da11e40865385d2b1 85350a5bcb793cb0a1a1d43aa094ba4986394449 cf692df0ae4da3ecd568b182f5bec32c67fb7c03a6d56001c12bef170e2de66f HTTP Headers `GET /upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697 HTTP/1.1 Host: download.i-tax.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 405 Not Allowed Server: Tengine Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Date: Wed, 19 Feb 2025 00:30:06 GMT Set-Cookie: acw_tc=0b32974617399250060201829e642b9f0e69b8b785afbc0bd09c1c557c6f3b;path=/;HttpOnly;Max-Age=1800 Cache-Control: no-cache, no-store Pragma: no-cache Punish-Loc: keepper Punish-Cache: hit Via: cache34.l2eu95-2[66,66,405-1280,M], cache15.l2eu95-2[67,0], kunlun6.cn7174[79,78,405-1280,M], kunlun8.cn7174[80,0] Ali-Swift-Global-Savetime: 1739925005 X-Cache: MISS TCP_MISS dirn:-2:-2 Skyeye-Span-Id: 75De28utKLcsdbh4 X-Swift-Error: orig response 4XX error X-Swift-SaveTime: Wed, 19 Feb 2025 00:30:06 GMT X-Swift-CacheTime: 0 Timing-Allow-Origin: * EagleId: b4a3921c17399250036981471e

	download.i-tax.cn/favicon.ico	180.163.146.103	405 Not Allowed	2.7 kB
URL GET HTTP/1.1 download.i-tax.cn/favicon.ico IP 180.163.146.103:80 ASN #4812 China Telecom Group Requested by http://download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697 File type HTML document, Unicode text, UTF-8 text, with very long lines (2569), with no line terminators Size 2.7 kB (2657 bytes) Hash 7d5d670cc2ee793160f60bfc4563b7d0 d79c3b441b98656fe1901af447bc7b1db352a588 ef0a62073cba75fc8e6dde93995e19ff27261f09ec2e4d7088543a7c94677093 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: download.i-tax.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697 Cookie: acw_tc=0b32974617399250060201829e642b9f0e69b8b785afbc0bd09c1c557c6f3b Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 405 Not Allowed Server: Tengine Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Date: Wed, 19 Feb 2025 00:30:06 GMT Cache-Control: no-cache, no-store Pragma: no-cache Punish-Loc: keepper Via: cache22.l2eu95-2[68,67,405-1280,M], cache35.l2eu95-2[69,0], kunlun5.cn7174[78,128,405-1280,C], kunlun8.cn7174[131,0] Ali-Swift-Global-Savetime: 1739925006 X-Cache: MISS TCP_MISS dirn:-2:-2 Skyeye-Span-Id: mEf52gHF92212pEA X-Swift-Error: orig response 4XX error X-Swift-SaveTime: Wed, 19 Feb 2025 00:30:06 GMT X-Swift-CacheTime: 0 Timing-Allow-Origin: * EagleId: b4a3921c17399250042322986e

	errors.aliyun.com/images/TB1TpamHpXXXXaJXXXXeB7nYVXX-104-162.png	203.119.145.38	200 OK	4.1 kB
URL GET HTTP/2 errors.aliyun.com/images/TB1TpamHpXXXXaJXXXXeB7nYVXX-104-162.png IP 203.119.145.38:443 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Requested by http://download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697 Certificate IssuerGlobalSign nv-sa Subject.aliyun.com Fingerprint4F:4F:5B:09:9A:CC:BD:F5:8F:C5:38:4A:E4:46:CB:7A:1D:BA:A2:D4 ValidityWed, 20 Nov 2024 10:52:01 GMT - Thu, 04 Sep 2025 00:00:00 GMT File type PNG image data, 104 x 162, 8-bit/color RGBA, non-interlaced Size 4.1 kB (4140 bytes) Hash 2aaa498900dd185e1860ce9418a4e1ea c73f7049940919342f6659021e11b02552ba1e97 08df2f443c6de78a6e519b126255112eae1ad02e09d81445eaa2b9c4d7a1450d HTTP Headers `GET /images/TB1TpamHpXXXXaJXXXXeB7nYVXX-104-162.png HTTP/1.1 Host: errors.aliyun.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://download.i-tax.cn/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Wed, 19 Feb 2025 00:30:07 GMT content-type: image/png content-length: 4140 last-modified: Thu, 21 Dec 2023 06:49:25 GMT etag: "6583dff5-102c" accept-ranges: bytes server: Tengine/Aserver eagleeye-traceid: 2150433017399250076694555e41cc strict-transport-security: max-age=31536000 timing-allow-origin: * X-Firefox-Spdy: h2`

	g.alicdn.com/sd-base/static/1.0.5/image/405.png	163.181.131.244	200 OK	23 kB
URL GET HTTP/2 g.alicdn.com/sd-base/static/1.0.5/image/405.png IP 163.181.131.244:443 ASN #24429 Zhejiang Taobao Network Co.,Ltd Requested by http://download.i-tax.cn/upload/AXNWEB/V3.6.0.240926/AXNWEB-WIN7%5CC51CefBrowser.exe?srand=22697 Certificate IssuerGlobalSign nv-sa Subject.tbcdn.cn FingerprintC8:28:74:DB:88:66:17:4F:5C:A5:AB:AD:F0:E1:14:74:AC:F8:FE:8F ValidityWed, 19 Jun 2024 09:06:02 GMT - Mon, 21 Jul 2025 09:06:01 GMT File type PNG image data, 951 x 156, 8-bit colormap, non-interlaced Size 23 kB (22970 bytes) Hash 6cf82742fe79049f0d7a74c7804c1a09 76a52d7bde2821d0699547599050afac1810fd5f 896cc5f55a81ab20db90b2274d95220d9a10b0ebca5727b2677e7484199174ed HTTP Headers `GET /sd-base/static/1.0.5/image/405.png HTTP/1.1 Host: g.alicdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://download.i-tax.cn/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: Tengine content-type: image/png content-length: 22970 date: Tue, 18 Feb 2025 23:36:04 GMT x-oss-request-id: 67B5196452C73C3530DBB65B accept-ranges: bytes x-oss-object-type: Normal x-oss-hash-crc64ecma: 7855397576932987876 x-oss-storage-class: Standard content-md5: bPgnQv55BJ8NenTHgEwaCQ== x-oss-server-time: 15 cache-control: max-age=2592000,s-maxage=3600 access-control-allow-origin: * x-bucket-code: 3 via: ens-cache4.l2de3[0,0,200-0,H], ens-cache8.l2de3[1,0], ens-cache8.l2de3[2,0], ens-cache4.de7[0,0,200-0,H], ens-cache6.de7[1,0] age: 3244 ali-swift-global-savetime: 1739921764 x-cache: HIT TCP_MEM_HIT dirn:-2:-2 x-swift-savetime: Tue, 18 Feb 2025 23:38:23 GMT x-swift-cachetime: 3461 timing-allow-origin: * eagleid: a3b5839a17399250084476984e X-Firefox-Spdy: h2