Report - ynmzyyj.com/

Report Overview

Submitted URL
ynmzyyj.com/
IP
104.21.33.171
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 08:55:24
Access
public
Website Title
TP钱包官网下载app最新版本-TP钱包官网下载-TP钱包app官方版/最新版/安卓版下载-tpwallet
Final URL
ynmzyyj.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
42

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sp0.baidu.com	18423	1999-10-11	2014-12-06	2024-04-23	460 B	114 B	103.235.46.40
ynmzyyj.com	unknown	2023-11-24	2023-11-28	2024-04-11	9.1 kB	586 kB	104.21.33.171
www.zgwjyp.com	unknown	2023-04-09	2023-06-09	2024-02-20	390 B	1.0 kB	45.60.197.77
hm.baidu.com	8254	1999-10-11	2012-05-26	2024-04-24	1.3 kB	12 kB	14.215.183.79

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed
2024-04-25	medium	ynmzyyj.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	unknown	37 B	2023-04-11	2024-05-04
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:49:14 Last Seen2024-05-04 22:23:34 Times Seen22234 Hash 1c5c9160600df2d96d69a4ea16cec7ed 3cf678c9135cc952ba6970ef545035bb757a443f a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808 Loading...

	ynmzyyj.com/static/js/jquery.min.js	86 kB	2023-03-07	2024-05-04
Pretty URL ynmzyyj.com/static/js/jquery.min.js IP 104.21.33.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-04 20:29:44 Times Seen388434 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	ynmzyyj.com/static/js/swiper.min.js	128 kB	2023-03-07	2024-05-03
Pretty URL ynmzyyj.com/static/js/swiper.min.js IP 104.21.33.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:30 Last Seen2024-05-03 20:21:34 Times Seen3310 Hash 53fc0155c6c3cb55f34b749325ebb370 a0738b4767a38b90e17792041d648ed621dab2ae b9c90c601bc81ad71ed8be557ff9b095de5aae947926e84011e2728cf65250a6 Loading...

	www.zgwjyp.com/tp.js	225 B	2024-01-27	2024-04-25
Pretty URL www.zgwjyp.com/tp.js IP 45.60.197.77 ASN #19551 INCAPSULA Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-27 06:54:36 Last Seen2024-04-25 10:55:28 Times Seen16 Hash 9ae2a89d53afa105030e2ecbe0c022bf 027486400e254009c92cdba3e8fee8ea625c4597 e7c387b55a085ab9361e3864283cfa7d43e166286d54ce594e4ee8eb7494e479 Loading...

	ynmzyyj.com/ajax1.js	75 B	2024-04-25	2024-04-25
Pretty URL ynmzyyj.com/ajax1.js IP 104.21.33.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 10:55:28 Last Seen2024-04-25 10:55:28 Times Seen1 Hash 4595048af8dba6c500b1e1dbfe8f6a61 d5bfabbf155c93bd7eeeeec1e0a4b2b2176b934a fa749b015a7d9a5cd9d0f1c8db56431c65da34eae3cc0f98ebcfceedd5ffeee8 Loading...

	hm.baidu.com/hm.js?3932781d57bdd2973f966ead68e92cad	30 kB	2024-04-25	2024-04-25
Pretty URL hm.baidu.com/hm.js?3932781d57bdd2973f966ead68e92cad IP 14.215.183.79 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 10:55:28 Last Seen2024-04-25 10:55:28 Times Seen2 Hash 1b6fa53023fe1a61d8b7cc0752b234b8 20a5869883fa0336edeed8d3360fe7715615eb93 7f533a7f4174e1e863c99e6b3ffd2b0e54468f74c401cac86e143deb7b5f3a79 Loading...

	ynmzyyj.com/static/js/wow.min.js	8.4 kB	2023-03-07	2024-05-04
Pretty URL ynmzyyj.com/static/js/wow.min.js IP 104.21.33.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:45 Last Seen2024-05-04 09:54:04 Times Seen3966 Hash 36050285bfeeb7395752f0f9bbc08273 5924f7bbbf1dfa3f0926851d01f782f23a59e805 0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69 Loading...

	ynmzyyj.com/static/js/index.js	2.8 kB	2024-02-16	2024-05-03
Pretty URL ynmzyyj.com/static/js/index.js IP 104.21.33.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-16 09:05:55 Last Seen2024-05-03 15:39:14 Times Seen7 Hash d914ee9f4bb2249fe5ec1aa883217e78 7a9734032ec7e1e6a98a63d25d2805c1c1f16270 c807d03414476e216bfdee65a7c2285033c4a9d25894536983257ab513a41ba3 Loading...

	ynmzyyj.com/	595 B	2024-04-25	2024-04-25
Pretty URL ynmzyyj.com/ IP 104.21.33.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 10:55:28 Last Seen2024-04-25 10:55:28 Times Seen1 Hash 384fcc0a52d27724f6ae16e6d51291a8 5225955006c6b3d805ee1cd7b0e1e534325af6e7 c33845feb596e7878b9283cfabe99b5f6c6cdd6e21f479c58d0dd85b96aae0e3 Loading...

	ynmzyyj.com/	1.1 kB	2024-02-16	2024-04-25
Pretty URL ynmzyyj.com/ IP 104.21.33.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-16 09:05:55 Last Seen2024-04-25 10:55:28 Times Seen3 Hash fccbe2165250d24bf4330772b9bc5101 8bdaa3bb8e03a97a343d515a18ffaad8cf8abef3 e6da20ebcc5d841b8a56853a957d53317522b688b3207b2d9e5e95e6e63ebe52 Loading...

	unknown	533 B	2024-04-25	2024-04-25
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-04-25 10:55:28 Last Seen2024-04-25 10:55:28 Times Seen1 Hash 6f80e6fb398b292947b3a0aeb76b2576 89a096c33780323093b764f804843430e9fae411 7b7fe4c2768fdaf9de5ef1ea34892802cd7a517d73040f47fff67858670ad389 Loading...

		Size	First Seen	Last Seen
	#1 Write - 8eae7f8cb36b35410765b05c9a781e73	52 B	2024-04-25	2024-04-25
Pretty Observations First Seen2024-04-25 10:55:28 Last Seen2024-04-25 10:55:28 Times Seen1 Hash 8eae7f8cb36b35410765b05c9a781e73 3a6fa7c7c592077ca1162496f2c1c49366b65a80 c9e5afc2617327f18649c31c1599794570b7b78f1b6c4fe1ea1ce9785c48edca Loading...

HTTP Transactions (25)

URL IP Response Size

ynmzyyj.com/static/pic/b290x60.jpg

104.21.33.171

200 OK

5.1 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/b290x60.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 90x60, components 3
Size
5.1 kB (5102 bytes)
Hash
e056553834afaf6b3b7b66247bff632c
c72b4900314145b7e9c36bd4fe8eeed41aea227b
00eac7acb31ace63d38de6c3890c31a5a5b6cbde21eef7ba5c6df7b842acf204

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/b290x60.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: image/jpeg
content-length: 5102
last-modified: Mon, 30 Oct 2023 06:54:28 GMT
etag: "653f5324-13ee"
expires: Sat, 25 May 2024 08:55:00 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1098NuvDGORBBSQFHT8InXzUcK8SscyYj8bbH3J2lAkh7yqKXUOthHKIirBV5ulVm9ovh03ucu6ms3FiTg4W3ZjKNxKBnYc4IU0a7EWzhRGAAJ%2Bfse3qR693jvDcpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1c90fd670b55-OSL
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/pic/logo90x60.jpg

104.21.33.171

200 OK

4.4 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/logo90x60.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 93x68, components 3
Size
4.4 kB (4384 bytes)
Hash
b631975de07176845c6b68e21d542644
c0bf89dd1082259d4ef2d907ad6843676459c61f
39bbff490abbf62b7ace39e8ce6719b1c8526eb8182148ef428152aed47ed2d1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/logo90x60.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: image/jpeg
content-length: 4384
last-modified: Sat, 21 Oct 2023 03:41:06 GMT
etag: "65334852-1120"
expires: Sat, 25 May 2024 08:55:00 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y8OhHgUf9PFBywkVHnAF%2B9qwd%2B7nkGrnOEY9SMKGC4%2B6JX%2BBpIjRfcra8NhBGfpcsCnSB6GYqB1n3lvppfNxX0RFJHrqbupTvOdExgTQ9xc6PbPuL%2F9M0dCO%2FMHoJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1c90fd620b55-OSL
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/pic/b190x60.jpg

104.21.33.171

200 OK

3.6 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/b190x60.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 90x60, components 3
Size
3.6 kB (3607 bytes)
Hash
43f1df07342bfd1ba512544713cd498d
3203d93fa59b6d9cb2e129f1f17df48d95fe7abc
42920261f9789fac8f57c0cd25604e053c204b2de0c0db66ef681fcb12ef40a0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/b190x60.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: image/jpeg
content-length: 3607
last-modified: Fri, 27 Oct 2023 02:33:59 GMT
etag: "653b2197-e17"
expires: Sat, 25 May 2024 08:55:00 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wb8RpOyv9lR4IMG5i%2BZctWVa8c%2BiDqzaIHFb164H66spL0elhxwmZ5DLI8GAs66kTychXW9hNQn9cqLmOOzMjHBt4pc%2FEMImHpHLyJv%2FlrbC1NTCDUrDS4oU2R2%2BvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1c90fd650b55-OSL
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/pic/b390x60.jpg

104.21.33.171

200 OK

3.9 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/b390x60.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 90x60, components 3
Size
3.9 kB (3897 bytes)
Hash
0fd15d0d2928bb16b0e671d6bbdd19af
9bdd9c5f693f094b6ee5511815ea5041f0aee588
7c188675b6f7966983387391e39dc5783cc9e0ee1589b0981f7de6c192ba9976

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/b390x60.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: image/jpeg
content-length: 3897
last-modified: Mon, 30 Oct 2023 06:54:28 GMT
etag: "653f5324-f39"
expires: Sat, 25 May 2024 08:55:00 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OsU1PiencHsqW0RtUvbPdhVrbPmK%2BJe7OfZ3TcGRVEf13%2Ffq%2F42G8FH%2Bm8fXhE7vo%2BlfVrTTEBg0HtXE79RjKjQLdV2183lcyp2EYVz1i1Bytn2uXXXAvMZ2dHLpCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1c90fd680b55-OSL
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/pic/d1500x360.jpg

104.21.33.171

200 OK

27 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/d1500x360.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Adobe ImageReady], baseline, precision 8, 500x360, components 3
Size
27 kB (26934 bytes)
Hash
ba1421b2b7661587a16dffe0d73a7bd9
8646426600872c2249df10c125b9a1b80f8a3f6c
a1c860484efa374cf8ed8438814e0245961a72a7c9b5bfd1437513a0b98caef2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/d1500x360.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:01 GMT
content-type: image/jpeg
content-length: 26934
last-modified: Wed, 18 Oct 2023 06:15:20 GMT
etag: "652f77f8-6936"
expires: Sat, 25 May 2024 08:55:00 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F5aSXGoorMrzjyjrjRLpZp3H0PyTrybbahqFHbPSSCoUFoKPCYUeH7bvoLjB93ViR9pBYyi%2FciCcIjrHYfeiwyxBcn0bUsWjFcWVN2DNAsM5BvMjrCC%2FwvYSqhGcqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1c910d690b55-OSL
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/pic/a1435x315.jpg

104.21.33.171

200 OK

21 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/a1435x315.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=3], baseline, precision 8, 435x315, components 3
Size
21 kB (21351 bytes)
Hash
2c93f6d2655d30c046759186d32c7ae4
a01029cfb1058819bedfa97f69a37f6f58d54ee2
ed581b708f3a8cc2b4231dc46d9cf2f1fe390a329c139a75dfa03e40b6bf2191

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/a1435x315.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:01 GMT
content-type: image/jpeg
content-length: 21351
last-modified: Wed, 18 Oct 2023 06:16:26 GMT
etag: "652f783a-5367"
expires: Sat, 25 May 2024 08:55:00 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnNwZ7UVZkp0xlrgVkfS%2BeSGoj5o47ZQq08CGM9vJEncCRL31TDY9aooeaBXTHMGQkIa9ZmmnU57HNlpxQnKOw192XHK%2BT5gWIBdSHzUN2aUG9DOrJAQIb7GeT490A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1c90fd640b55-OSL
alt-svc: h3=":443"; ma=86400

www.zgwjyp.com/tp.js

45.60.197.77

200 OK

195 B

URL GET HTTP/2
www.zgwjyp.com/tp.js
IP
45.60.197.77:443
ASN
#19551 INCAPSULA

Requested by
https://ynmzyyj.com/
Certificate
IssuerSectigo Limited
Subjectfafa.zgwjyp.com
Fingerprint60:A5:66:B2:DD:72:86:0E:C0:EF:1A:67:72:5E:AE:87:93:42:53:24
ValidityFri, 19 May 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with no line terminators
Size
195 B (195 bytes)
Hash
9ae2a89d53afa105030e2ecbe0c022bf
027486400e254009c92cdba3e8fee8ea625c4597
e7c387b55a085ab9361e3864283cfa7d43e166286d54ce594e4ee8eb7494e479

HTTP Headers

GET /tp.js HTTP/1.1
Host: www.zgwjyp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
etag: "655dfe9f-fd"
last-modified: Wed, 22 Nov 2023 13:14:07 GMT
content-type: application/javascript
content-length: 195
content-encoding: gzip
cache-control: max-age=34741, public
expires: Thu, 25 Apr 2024 18:34:04 GMT
date: Thu, 25 Apr 2024 08:55:03 GMT
x-incap-sess-cookie-hdr: 200sAmPHGApoPcvkL8dgZGYaKmYAAAAA7SVyo1O6lqApGGR3lYR3ug==
set-cookie: visid_incap_2925812=vgzmLwZLSzqOveDsltKwv2UaKmYAAAAAQUIPAAAAAACfPtsPb+A/jrA6EDbY/HBn; expires=Fri, 25 Apr 2025 04:45:15 GMT; HttpOnly; path=/; Domain=.zgwjyp.com; Secure; SameSite=None
incap_ses_7233_2925812=6mTodDrUlBloPcvkL8dgZGYaKmYAAAAAan8KLSUn196G4x1OIBBkjQ==; path=/; Domain=.zgwjyp.com; Secure; SameSite=None
strict-transport-security: max-age=31536000
x-cdn: Imperva
x-iinfo: 13-37434096-37433612 3CNN RT(1714035301982 17) q(0 1 1 0) r(10 10) U18
X-Firefox-Spdy: h2

ynmzyyj.com/static/pic/c3400x260.jpg

104.21.33.171

200 OK

17 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/c3400x260.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 400x260, components 3
Size
17 kB (16768 bytes)
Hash
9bd88b1a09391c6a9c6b4b7f3f984dea
9a6ec9c2a0258e45f11668fd84c1c756e6aa4042
cd04e97535467ff9c9cf5ae660d4e120cfb5efb57fd73f043648319b2990c20b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/c3400x260.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:04 GMT
content-type: image/jpeg
content-length: 16768
last-modified: Tue, 05 Dec 2023 05:27:12 GMT
etag: "656eb4b0-4180"
expires: Sat, 25 May 2024 08:55:04 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tOj5Ar4RKMCZMsDzGuiZUHlUrruorxHcLFBR02F3GoMsAyRGHK%2FFUckkw8IzMl%2BDhy8oA0yqyovdPYJvH1qakqMTkHkFjJDt7ri5ujkDEYCYi4%2B1dROKcR8WqN3J3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1ca70bd40b55-OSL
alt-svc: h3=":443"; ma=86400

hm.baidu.com/hm.js?3932781d57bdd2973f966ead68e92cad

14.215.183.79

200 OK

11 kB

URL GET HTTP/1.1
hm.baidu.com/hm.js?3932781d57bdd2973f966ead68e92cad
IP
14.215.183.79:443
ASN
#4134 Chinanet

Requested by
https://ynmzyyj.com/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
JavaScript source, ASCII text, with very long lines (621)
Size
11 kB (11259 bytes)
Hash
1b6fa53023fe1a61d8b7cc0752b234b8
20a5869883fa0336edeed8d3360fe7715615eb93
7f533a7f4174e1e863c99e6b3ffd2b0e54468f74c401cac86e143deb7b5f3a79

HTTP Headers

GET /hm.js?3932781d57bdd2973f966ead68e92cad HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Thu, 25 Apr 2024 08:55:04 GMT
Etag: ae383c76dd31723acaebaf7ea99e79ba
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=C96BEA63F883FF32; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

ynmzyyj.com/static/pic/c2400x260.jpg

104.21.33.171

200 OK

20 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/c2400x260.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 400x260, components 3
Size
20 kB (20161 bytes)
Hash
e0934f06034e9d0c7369f53ba0d6f8a8
731c20fb9724288a17afe30986a15ef89f2d2af3
899d8c87747ae507b0eece2fd70e28d0e407ae91df67e3228afe8871f588e78b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/c2400x260.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:04 GMT
content-type: image/jpeg
content-length: 20161
last-modified: Tue, 05 Dec 2023 05:30:52 GMT
etag: "656eb58c-4ec1"
expires: Sat, 25 May 2024 08:55:04 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J2sfQOquYylFUHB6OLi4cELYPFFxqBYEQUCF6NxFk6VYFObbNistHxjHH7VIodz7JtYABwbBLGUUyGZGR44JcEGVRwnfKi8ndLDj7I2ROKIQCaGys8HI4G3sOSQLFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1ca70bd30b55-OSL
alt-svc: h3=":443"; ma=86400

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=2081506525&si=3932781d57bdd2973f966ead68e92cad&v=1.3.0&lv=1&sn=32915&r=0&ww=1280&u=https%3A%2F%2Fynmzyyj.com%2F&tt=TP%E9%92%B1%E5%8C%85%E5%AE%98%E7%BD%91%E4%B8%8B%E8%BD%BDapp%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-TP%E9%92%B1%E5%8C%85%E5%AE%98%E7%BD%91%E4%B8%8B%E8%BD%BD-TP%E9%92%B1%E5%8C%85app%E5%AE%98%E6%96%B9%E7%89%88%2F%E6%9C%80%E6%96%B0%E7%89%88%2F%E5%AE%89%E5%8D%93%E7%89%88%E4%B8%8B%E8%BD%BD-tpwallet

14.215.183.79

200 OK

43 B

URL GET HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=2081506525&si=3932781d57bdd2973f966ead68e92cad&v=1.3.0&lv=1&sn=32915&r=0&ww=1280&u=https%3A%2F%2Fynmzyyj.com%2F&tt=TP%E9%92%B1%E5%8C%85%E5%AE%98%E7%BD%91%E4%B8%8B%E8%BD%BDapp%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-TP%E9%92%B1%E5%8C%85%E5%AE%98%E7%BD%91%E4%B8%8B%E8%BD%BD-TP%E9%92%B1%E5%8C%85app%E5%AE%98%E6%96%B9%E7%89%88%2F%E6%9C%80%E6%96%B0%E7%89%88%2F%E5%AE%89%E5%8D%93%E7%89%88%E4%B8%8B%E8%BD%BD-tpwallet
IP
14.215.183.79:443
ASN
#4134 Chinanet

Requested by
https://ynmzyyj.com/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=2081506525&si=3932781d57bdd2973f966ead68e92cad&v=1.3.0&lv=1&sn=32915&r=0&ww=1280&u=https%3A%2F%2Fynmzyyj.com%2F&tt=TP%E9%92%B1%E5%8C%85%E5%AE%98%E7%BD%91%E4%B8%8B%E8%BD%BDapp%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-TP%E9%92%B1%E5%8C%85%E5%AE%98%E7%BD%91%E4%B8%8B%E8%BD%BD-TP%E9%92%B1%E5%8C%85app%E5%AE%98%E6%96%B9%E7%89%88%2F%E6%9C%80%E6%96%B0%E7%89%88%2F%E5%AE%89%E5%8D%93%E7%89%88%E4%B8%8B%E8%BD%BD-tpwallet HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 25 Apr 2024 08:55:05 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=3002A197CC7EDB8A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

ynmzyyj.com/static/pic/c1400x260.jpg

104.21.33.171

200 OK

24 kB

URL GET HTTP/3
ynmzyyj.com/static/pic/c1400x260.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 400x260, components 3
Size
24 kB (24025 bytes)
Hash
f19e27af7bd497007586f0b878cb09a8
c6d8bf5eb496ebb1c6b75891f98883b4fc1098f7
af6b2215b54760ca14c6dbe7cf8f54e7e77b4ea7f8bb5d7bf8cc0894d1495a24

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/pic/c1400x260.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:05 GMT
content-type: image/jpeg
content-length: 24025
last-modified: Fri, 27 Oct 2023 02:25:41 GMT
etag: "653b1fa5-5dd9"
expires: Sat, 25 May 2024 08:55:04 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HFRRqFbhSrn6%2BipQYnIOFVAOjodAfLV7ljUOeBeA6%2FzzXcpXYqjERYIa8SVB%2F7%2FCnRtpONvFOhU0Fl8mipIR64Fto6kJe5AHqRz0iHIWgLndWSoAXwVfNOy7L0TFSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1ca70bd20b55-OSL
alt-svc: h3=":443"; ma=86400

sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://ynmzyyj.com/

103.235.46.40

200 OK

0 B

URL GET HTTP/1.1
sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://ynmzyyj.com/
IP
103.235.46.40:443
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

Requested by
https://ynmzyyj.com/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://ynmzyyj.com/ HTTP/1.1
Host: sp0.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Thu, 25 Apr 2024 08:55:06 GMT

ynmzyyj.com/favicon.ico

104.21.33.171

200 OK

14 kB

URL GET HTTP/3
ynmzyyj.com/favicon.ico
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
14 kB (13462 bytes)
Hash
5e042d12674ed33745b0a21450fd2daf
edd44fc5615c5a655aaeb30f19127b011484ba23
565b4feab0effad55a1f96868a857872d0e9b1bef05ec5640e30ef3f91bf4105

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:06 GMT
content-type: image/x-icon
last-modified: Sun, 30 Apr 2023 14:04:30 GMT
etag: W/"644e756e-10be"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A7ZCRT%2BpPCOT0tcV40apcU6e0Jk9xiHhyMrsmn7pJ23NVkuo%2FqaZ%2BG7tchCYXgOJf8wu5wFTa7HXzKddIoto8XvwjMSDpa29jqHr0%2FWEKx%2BBfPDWpmPpIprQgKHaLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1cac7f3a0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/image/901_top9.png

104.21.33.171

404 Not Found

146 B

URL GET HTTP/3
ynmzyyj.com/static/image/901_top9.png
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/image/901_top9.png HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/static/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 25 Apr 2024 08:55:04 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BAl8g%2ByDuAtrCGhfFdBQLnRYw8I01SgzdgbPDxbQisOQVqC2v34vFOk3Wgm2HNTG0UX7JRcJna4D8LboS2AOqIJjlM3w1yPdjwPAq3o%2B7yrEyI68CVSaO83Qzo56DQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1ca70bcd0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/ajax1.js

104.21.33.171

200 OK

75 B

URL GET HTTP/3
ynmzyyj.com/ajax1.js
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
HTML document, ASCII text, with no line terminators
Size
75 B (75 bytes)
Hash
4584991cb1b820f41ba04bfe0e8e701d
e11baaf4ef53d413474ae8aceeadc711732c488a
422320bf26faea1992ca400b54a8f3c9965484e5977eeded72ce5379c5aac979

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax1.js HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: application/javascript
last-modified: Sat, 12 Aug 2023 14:10:26 GMT
etag: W/"64d792d2-4b"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DpZwqYdJAJCIWX1vwJZn5MEOGaVrpIOkjiiOWAfaynaiZKEZOMyT1x%2BP2bzwexcbC8xD2amyG%2Flwwo6cvmZnpyJGfBJ46584gRcKvQy2sLjQUK1N9biu3TGYLK2tgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1c90fd610b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/js/index.js

104.21.33.171

200 OK

2.8 kB

URL GET HTTP/3
ynmzyyj.com/static/js/index.js
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (3022), with no line terminators
Size
2.8 kB (2846 bytes)
Hash
f0c5d75eff75f52eb5d71ed165f80789
bdef303e46eb97ef042ad3f866ff74209a78e4d0
3f714958bb383845df2f7c5a2723ea7064bb06882ec9108de54adeb2a945e6d5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/index.js HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: application/javascript
last-modified: Tue, 28 Mar 2023 09:05:38 GMT
vary: Accept-Encoding
etag: W/"6422ade2-b1e"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2FIbo%2BsK%2BI6bzHi8cqgOAhyPhhpMH3LAxheBGQPebBIuVcZmraFULv7enNpFvMTYs4TLtr3Vpsz29lPM1TNjOPEhRtQu4zP7RX5ieYQzfIZ7GvYIt%2B1d5ckVTxZIUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c90fd600b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/

104.21.33.171

200 OK

49 kB

URL User Request GET HTTP/2
ynmzyyj.com/
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type

Size
49 kB (49013 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 08:54:59 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fICVgmdG25y1QjkEf9W6zr3WO1WR3KnsAOy%2BwMwhJzHEJN3M4VvIVhWlOTUSdScdmcBdAwRYywLIQcRCr%2Bt1H1lie%2BzQKMUHbOYFgC5r%2BHDpapV4SrVL1p4efDqTYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c89bdeeb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ynmzyyj.com/static/js/swiper.min.js

104.21.33.171

200 OK

128 kB

URL GET HTTP/3
ynmzyyj.com/static/js/swiper.min.js
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JavaScript source, ASCII text, with very long lines (65270)
Size
128 kB (127934 bytes)
Hash
53fc0155c6c3cb55f34b749325ebb370
a0738b4767a38b90e17792041d648ed621dab2ae
b9c90c601bc81ad71ed8be557ff9b095de5aae947926e84011e2728cf65250a6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/swiper.min.js HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:02 GMT
content-type: application/javascript
last-modified: Tue, 28 Mar 2023 09:05:38 GMT
vary: Accept-Encoding
etag: W/"6422ade2-1f3be"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5KjB5oeLqedU4l3Ob48wQaimEJdY3J91f3I%2BWuiPSDHkv5aFdTXmUtNoxif9xDEkcd4sinwR4anSs0PVRxMeVXcEUlvnAi3o5t0njEEMsPc4GErUfQYKXeAPWrCEgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c90fd5e0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/js/jquery.min.js

104.21.33.171

200 OK

86 kB

URL GET HTTP/3
ynmzyyj.com/static/js/jquery.min.js
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
86 kB (85578 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/jquery.min.js HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:01 GMT
content-type: application/javascript
last-modified: Tue, 28 Mar 2023 09:05:38 GMT
vary: Accept-Encoding
etag: W/"6422ade2-14e4a"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BOxfN0k4KZlu2QgfX1m%2Frffo6dRqUuoh4ZIC7BirNuTWClKvMUnlQNkZevwg7bu0S8KFzTiJ5b1Lb5f%2FGkcu0DR2EYEdu2FEp5NjtbLe%2FaSEFZzke3jozUupUfbf6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c90fd5a0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/css/swiper.min.css

104.21.33.171

200 OK

22 kB

URL GET HTTP/3
ynmzyyj.com/static/css/swiper.min.css
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
ASCII text, with very long lines (1467), with CRLF line terminators
Size
22 kB (21835 bytes)
Hash
0df27b9a317c772145cb5a0814719137
edb5e936c7fe0da460315392e28f8f6fe36f155b
6061fc6fb89ced9891b1cd6b793aa725116c71ec412c5f50e741a289a2981309

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/swiper.min.css HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: text/css
last-modified: Tue, 28 Mar 2023 09:05:34 GMT
vary: Accept-Encoding
etag: W/"6422adde-554b"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0JKXmL%2BV%2BWyoMzKZCjYlM%2FQELejWb%2BPFGmhy7uB1pUWlF4%2FkizYIBkEtZUOTBb%2BD%2FnUKmRqfy0Ztdm59GRruA4CF82J7dcOohGkgm7RutFjn7n7vZ8gIOVQ3BnjBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c90fd580b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/css/style.css

104.21.33.171

200 OK

69 kB

URL GET HTTP/3
ynmzyyj.com/static/css/style.css
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type

Size
69 kB (68654 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/style.css HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:01 GMT
content-type: text/css
last-modified: Tue, 28 Mar 2023 09:05:34 GMT
vary: Accept-Encoding
etag: W/"6422adde-10c2e"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XYBXPKdZdIZFkmP0jiD%2FPWA1C%2BVM%2BlzgjSl7cvb8HkzoPpZL%2FE69XnkGE8rMEf9efNhH2wzhCu28%2Fu8DA5kuNG6CDLOQPpOuZa5EqkNCVNWflhY2dUV1BFPrKaAMlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c90fd590b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/js/wow.min.js

104.21.33.171

200 OK

8.4 kB

URL GET HTTP/3
ynmzyyj.com/static/js/wow.min.js
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
JavaScript source, ASCII text, with very long lines (8515), with no line terminators
Size
8.4 kB (8415 bytes)
Hash
da4ec6a3e988677b1eff06cb90e95927
4083d1ec23a24f9f0eeb025501b9806b567249aa
85a9285b248eb56c2268288cfcea3ea7806c912ebb82d256fcd7c4e5b7e9c740

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/wow.min.js HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: application/javascript
last-modified: Tue, 28 Mar 2023 09:05:38 GMT
vary: Accept-Encoding
etag: W/"6422ade2-20df"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S033ZuKp92LkqHp4m7XInix43jVvS5GxivFakXXp%2B5frm7WudzFfnF0sIqYViV0JTDYIUHESE3xUfiKmajHZZ0E0FeAjIUa9L9KoRSlkdbl3CUMR1a0ES0ObUlEukA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c90fd5d0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/image/902_ys_bg.jpg

104.21.33.171

404 Not Found

146 B

URL GET HTTP/3
ynmzyyj.com/static/image/902_ys_bg.jpg
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/image/902_ys_bg.jpg HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/static/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 25 Apr 2024 08:55:05 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=crobcQjoi%2FWDoviZVJQae6voK9jaIHna2kNhbUtvlbQHKET6tM04GAnx%2BcdHjp%2FvXXkrlIyV05ZQ9IyCYPJJMwyz41S53sPprqLp9%2FMzjT2O%2BbJ4ewv0hdSTiOJazg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d1ca70bd10b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ynmzyyj.com/static/css/animate.min.css

104.21.33.171

200 OK

67 kB

URL GET HTTP/3
ynmzyyj.com/static/css/animate.min.css
IP
104.21.33.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ynmzyyj.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectynmzyyj.com
FingerprintFE:83:66:26:5D:1B:E3:2C:41:65:EA:03:51:3F:D8:55:67:91:A8:2F
ValidityMon, 25 Mar 2024 06:43:49 GMT - Sun, 23 Jun 2024 06:43:48 GMT

File type
ASCII text, with CRLF line terminators
Size
67 kB (67264 bytes)
Hash
4d5ffe9fc2f8bdf29a5dff560b349cea
323413d8a63a930c175ed7e0423875e5999467ee
12e834512fd4042a4922467eda8ae4261afe5b08d3d5597ae530240e8ed0c672

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/animate.min.css HTTP/1.1
Host: ynmzyyj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ynmzyyj.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 08:55:00 GMT
content-type: text/css
last-modified: Tue, 28 Mar 2023 09:05:34 GMT
vary: Accept-Encoding
etag: W/"6422adde-106c0"
expires: Thu, 25 Apr 2024 20:55:00 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DQf0Veu88lyNTHUBc0JxMrCQCzsZKFqO0Kf9KwHRcoCCyYmiNGnLErdXvNGmOUzj0f%2BUe2jTKeVE%2FrOSQo7Bqm%2B50UAjLrnlMbAcTYDjCC%2FPh6%2F0%2FhtDXe0BLJEKnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d1c90fd570b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL