Report - questionbank.oupchina.com.hk/

Report Overview

Submitted URL
questionbank.oupchina.com.hk/
IP
54.230.111.50
ASN
#16509 AMAZON-02
Submitted
2024-05-10 10:22:44
Access
public
Website Title
Online Question Bank 線上試題庫
Final URL
questionbank.oupchina.com.hk/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-05-09	338 B	863 B	143.204.53.97
questionbank.oupchina.com.hk	unknown	1996-01-22	2023-08-11	2023-08-11	6.1 kB	379 kB	54.230.111.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	questionbank.oupchina.com.hk/qb-web/JavaScript/core.js	Unique code from Jetriz, Swid & Jeniva of the Tetris framework

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	questionbank.oupchina.com.hk/qb-web/JavaScript/agent.js?v=20221005_01	2.6 kB	2024-05-10	2024-05-10
Pretty URL questionbank.oupchina.com.hk/qb-web/JavaScript/agent.js?v=20221005_01 IP 54.230.111.68 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 12:22:45 Last Seen2024-05-10 12:22:46 Times Seen2 Hash c27e3751d1acc62aaf953a4b3308ae55 262e83f047efbde766658ef8550d3b0263ce5f1e e6b72be9fef901e32e1c9e47f5373490d7a4ac307085ea01c0c971cad335a8a1 Loading...

	questionbank.oupchina.com.hk/qb-web/JavaScript/validate.js?v=20230530_01	1.8 kB	2024-05-10	2024-05-10
Pretty URL questionbank.oupchina.com.hk/qb-web/JavaScript/validate.js?v=20230530_01 IP 54.230.111.68 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 12:22:45 Last Seen2024-05-10 12:22:46 Times Seen2 Hash 09bc1a045d61ff8adbe821a6d3598bd5 fae71e31464e7769a0b79074b93ee1e0509c29bc 08b4819e5fcbe6aa4f13552bfc86e0bbfdffa54305c3088be9b83ef70b1643d2 Loading...

HTTP Transactions (14)

URL IP Response Size

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
203b0fa4e610cf7b4e4adeb947f62f6d
43704acc6310151395f60c8778d4fe4e093a6c19
6ff86e60c65ab64a3f2a36faad40b65784b9e523f05f102e6ef5981c12dd7dbe

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:22:19 GMT
Server: ECAcc (amb/6B38)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EZsd5Xxg0WQfvyI4u1nb2zFZ25gnz_HelFmB532FJObnMz24LRBZEg==

questionbank.oupchina.com.hk/

54.230.111.68

200 OK

4.4 kB

URL User Request GET HTTP/2
questionbank.oupchina.com.hk/
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
4.4 kB (4381 bytes)
Hash
bc13769e4c97bdf44409dbcdc745134b
ad6cdf7ee12fc86a05dde1839c1084a1e6c8765f
0a08a78a0f7c8703bd66ba4b7181f60cf973c5ce59fb0595a7cf1f7946497d4d

HTTP Headers

GET / HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
content-length: 4381
vary: Accept-Encoding
date: Fri, 10 May 2024 10:22:21 GMT
last-modified: Thu, 13 Jul 2023 11:14:09 GMT
etag: "bc13769e4c97bdf44409dbcdc745134b"
x-amz-server-side-encryption: AES256
x-amz-meta-cb-modifiedtime: Tue, 30 May 2023 10:56:46 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YD5qFyMaKBU2D3wtzrE34mQt0UfyPeC12bCxBXsaO8nsegu_UEKuBA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/AbacusCodec.js

54.230.111.68

200 OK

3.3 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/AbacusCodec.js
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (3288), with no line terminators
Size
3.3 kB (3288 bytes)
Hash
9076fc36c1bc699237da6ed467d205a4
1deab217511e7ee07dc0de9b8ac023dd98cb3c06
ab1341ce3cc3d40634d692ae27278678606d6791bca58fa4ec65d8967d71b0dc

HTTP Headers

GET /qb-web/JavaScript/AbacusCodec.js HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 3288
vary: Accept-Encoding
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 18 May 2022 09:03:50 GMT
etag: "9076fc36c1bc699237da6ed467d205a4"
x-amz-meta-cb-modifiedtime: Wed, 18 May 2022 08:58:28 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HmgxBTvuhM6wBSzFQIDIigjVqEB2EOZeHTSdWsQgAh9m0KQft4AHiQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/config.js

54.230.111.68

200 OK

132 B

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/config.js
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
ASCII text
Size
132 B (132 bytes)
Hash
1306a6084431d15c1cc45b57e7bf6dc5
69c4abf2d1af37fb4762653620e3bda14c262b7d
bf4e221dbaa1a17ddd89e19292b8e946ff7ffcab84f1dd6e67353a73339cd7bb

HTTP Headers

GET /qb-web/JavaScript/config.js HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 132
x-amz-id-2: T9xUcwzuQox7IfBQ0ayUm2ZOZMDZp2oglRILX0HiCC1ryYBGWdUAD+imQS4ZKQj7b+AoyQjDs3s=
x-amz-request-id: ERD7WJM1SB1NB81H
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 18 May 2022 09:03:50 GMT
etag: "1306a6084431d15c1cc45b57e7bf6dc5"
x-amz-meta-cb-modifiedtime: Wed, 18 May 2022 08:58:28 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FwI44Tk4mrE5RkCZHKBG-PTjwYGtjrr-I3Klfs3OqNqu1u2F7xqRqA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/agent.js?v=20221005_01

54.230.111.68

200 OK

2.6 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/agent.js?v=20221005_01
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (2610), with no line terminators
Size
2.6 kB (2610 bytes)
Hash
c27e3751d1acc62aaf953a4b3308ae55
262e83f047efbde766658ef8550d3b0263ce5f1e
e6b72be9fef901e32e1c9e47f5373490d7a4ac307085ea01c0c971cad335a8a1

HTTP Headers

GET /qb-web/JavaScript/agent.js?v=20221005_01 HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 2610
vary: Accept-Encoding
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Mon, 03 Oct 2022 05:22:00 GMT
etag: "c27e3751d1acc62aaf953a4b3308ae55"
x-amz-server-side-encryption: AES256
x-amz-meta-cb-modifiedtime: Mon, 03 Oct 2022 05:04:48 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u0gOE8rR9Zznrnz1x_ywsrFldDC1tFRxR_irslC7BLwZkF5JqnrbQw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/CSS/iframe.css

54.230.111.68

200 OK

3.1 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/CSS/iframe.css
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
3.1 kB (3095 bytes)
Hash
261d118268230986e42e590e06bed9d1
7d754f4f092a426de1ea88709c6dd32128bfc6b9
13261c728246361be0e6fe5cca497fd448c4c3cbb620d026b077b4c8678e52f4

HTTP Headers

GET /qb-web/CSS/iframe.css HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 3095
vary: Accept-Encoding
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 18 May 2022 09:03:32 GMT
etag: "261d118268230986e42e590e06bed9d1"
x-amz-meta-cb-modifiedtime: Wed, 18 May 2022 08:58:17 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 74XnEvDtutEaRcEyxn9cJSrcfH4MaWDg7BhV3-ZwcmyS9E5378fTzA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/validate.js?v=20230530_01

54.230.111.68

200 OK

1.8 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/validate.js?v=20230530_01
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (1720), with no line terminators
Size
1.8 kB (1764 bytes)
Hash
09bc1a045d61ff8adbe821a6d3598bd5
fae71e31464e7769a0b79074b93ee1e0509c29bc
08b4819e5fcbe6aa4f13552bfc86e0bbfdffa54305c3088be9b83ef70b1643d2

HTTP Headers

GET /qb-web/JavaScript/validate.js?v=20230530_01 HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 1764
vary: Accept-Encoding
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Mon, 03 Oct 2022 05:22:00 GMT
etag: "09bc1a045d61ff8adbe821a6d3598bd5"
x-amz-server-side-encryption: AES256
x-amz-meta-cb-modifiedtime: Mon, 03 Oct 2022 05:17:56 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9DgRpebwrlBClXKc-AR9wYGqMUqZJg7dvMwWhZyt4emc_Od-P_ULHQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/CSS/qb.css?v=20221005_01

54.230.111.68

200 OK

439 B

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/CSS/qb.css?v=20221005_01
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
439 B (439 bytes)
Hash
835c19c61665deb071212a9172a926dd
84c93afd308828121d31da41a5be82235b030e63
23278d21e99ae916f84e0224cb00a87e7816e8cc2794c576dc4d28bcb98ebe21

HTTP Headers

GET /qb-web/CSS/qb.css?v=20221005_01 HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 439
x-amz-id-2: ZYKfpYpzpI2Kv6R6ILKn+8GbyMipD998MZXrb+5abM0BaAZXZuaCxWWtuq9Kay83MIG8Y03jfzU=
x-amz-request-id: ERDEV9FA5T5Z4YPB
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Fri, 14 Oct 2022 15:28:19 GMT
etag: "835c19c61665deb071212a9172a926dd"
x-amz-meta-cb-modifiedtime: Fri, 23 Sep 2022 09:03:48 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cflqr4H3EPo5MGyy-VK0e55a6oivED9gVmep0Qh3uoeuONX-A9pIUA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/qb.js?v=20221005_01

54.230.111.68

200 OK

1.4 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/qb.js?v=20221005_01
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1397), with no line terminators
Size
1.4 kB (1397 bytes)
Hash
e44b47ffb1655d818446bb9cac070372
01bda603c8f4b2096483ee2d11d6c2cf43bd0970
5159d82f1ef322c182eac81dbdb927fb345089105f708f53c0f293011904312f

HTTP Headers

GET /qb-web/JavaScript/qb.js?v=20221005_01 HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 1397
x-amz-id-2: FtnYfzbo3lf6A1rye4tptS7pffk3FNPSHRl+i1R9UlNz6Dw9K85ki3W4rv3k1SF0ZAnsfDZE6Bg=
x-amz-request-id: ERDAFFWDX9ZEYKYS
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 05 Oct 2022 09:21:38 GMT
etag: "e44b47ffb1655d818446bb9cac070372"
x-amz-meta-cb-modifiedtime: Mon, 03 Oct 2022 05:04:25 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f3oyVNStLD6CkZlwGv6g5B6qHlpd9FZ4iR_W5Ay36MnZEbR5I7RtWw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/lib/Recorderjs/recorder.js

54.230.111.68

200 OK

13 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/lib/Recorderjs/recorder.js
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (848)
Size
13 kB (13027 bytes)
Hash
18522c3a7072801765c2caa2aa96cca7
305f9de1c0d1b64b404e8cdacae2a2d4bdfb0b1b
1a2c75ff6cce671708bb4d9055a2838339b0cb6cb5d686a76918d62ea8617572

HTTP Headers

GET /qb-web/lib/Recorderjs/recorder.js HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 13027
vary: Accept-Encoding
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 18 May 2022 09:03:44 GMT
etag: "18522c3a7072801765c2caa2aa96cca7"
x-amz-meta-cb-modifiedtime: Wed, 18 May 2022 08:58:28 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZLwbKZiDkKYaLdIfgX_Q26vW3PWKkWei1c7qS5soVymgjDw_Mq5ShA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/view.js?v=20221005_01

54.230.111.68

200 OK

27 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/view.js?v=20221005_01
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (26826), with no line terminators
Size
27 kB (26846 bytes)
Hash
59bcaed7a1bbb6c50d92fff981178e2f
623ef01fcd12cb44159dc947ac9b05a808ce9e11
4794727b1730c834101d31b605b2648df7e063c10e4e40eb3cb1567c2aeb90aa

HTTP Headers

GET /qb-web/JavaScript/view.js?v=20221005_01 HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 26846
x-amz-id-2: dbgzKL3jCrGrj2ZhDSM8OIc/7Og0s6r6eJM79QMB66LnE093Fug+xau16cSNUo0Wgl/Kkg//+iw=
x-amz-request-id: ERD5QQ7Q6R66W8T9
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 18 May 2022 09:03:50 GMT
etag: "59bcaed7a1bbb6c50d92fff981178e2f"
x-amz-meta-cb-modifiedtime: Wed, 18 May 2022 08:58:28 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3SGL6TcbEll_MECsx-3c-wsrN_DW_Fy8sXk7IHGOG00kbxFuQwfLmA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/native.js?v=20230713_01

54.230.111.68

200 OK

36 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/native.js?v=20230713_01
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (36526), with no line terminators
Size
36 kB (36526 bytes)
Hash
69474bdeecafa842059901fa968b02b7
f39fb166f6cb9a0f360d49a7204509f4f6666a70
528a129789ad8dd1e449e8b92adb2285ee274e2056b313488547135d7b0ec243

HTTP Headers

GET /qb-web/JavaScript/native.js?v=20230713_01 HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 36526
x-amz-id-2: Ra027cyTmNphmM+wi6+8pQP6zn1CF7v0hbACCXcm17SJ956897d+btEAtEjOTMQpyWGirr/HNLs=
x-amz-request-id: ERD28D8SRFGJ8J3B
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Thu, 13 Jul 2023 11:13:30 GMT
etag: "69474bdeecafa842059901fa968b02b7"
x-amz-server-side-encryption: AES256
x-amz-meta-cb-modifiedtime: Thu, 13 Jul 2023 11:08:35 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZqwYaCC0KmG7paGb8qwReLu5wP3y7m7k_9KuqHTSc_Eo7TDuGj19PQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/lib/jQuery/jquery-min.js?v=20221005_01

54.230.111.68

200 OK

90 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/lib/jQuery/jquery-min.js?v=20221005_01
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
90 kB (89492 bytes)
Hash
561acb3e541133bbdd2c0c19f8ee35a1
ffd1353cf3f77d25f801c84d8208613eb0d3d548
9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc

HTTP Headers

GET /qb-web/lib/jQuery/jquery-min.js?v=20221005_01 HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 89492
vary: Accept-Encoding
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 18 May 2022 09:03:47 GMT
etag: "561acb3e541133bbdd2c0c19f8ee35a1"
x-amz-meta-cb-modifiedtime: Wed, 18 May 2022 08:58:28 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WcHZbzf_BiVU3giKLryr0WRSGQVx-OAiApj9dQRXK0r5kCGxinzF7A==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

questionbank.oupchina.com.hk/qb-web/JavaScript/core.js

54.230.111.68

200 OK

186 kB

URL GET HTTP/2
questionbank.oupchina.com.hk/qb-web/JavaScript/core.js
IP
54.230.111.68:443
ASN
#16509 AMAZON-02

Requested by
https://questionbank.oupchina.com.hk/
Certificate
IssuerAmazon
Subjectquestionbank.oupchina.com.hk
Fingerprint83:E7:D7:2C:4E:81:09:DD:1E:6D:06:63:06:09:1C:68:EA:45:B0:41
ValidityWed, 07 Feb 2024 00:00:00 GMT - Sat, 08 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
186 kB (185882 bytes)
Hash
a784ac79191109f484dddb4efccdd305
494a75e9aae4595b9031b97ea308c58edbeeb572
fafb8e931d5d8b3ec88cb3014bb32afc6ae335a1979d7eeff0bce536c9b575e5

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Unique code from Jetriz, Swid & Jeniva of the Tetris framework

HTTP Headers

GET /qb-web/JavaScript/core.js HTTP/1.1
Host: questionbank.oupchina.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://questionbank.oupchina.com.hk/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 185882
x-amz-id-2: nX8202maIOaIAi8SR7rO5qZ5Bvl/RZ443BjvC35tdBlpbzqLQwIB/5APBIbsta8zhALRGNguKdc=
x-amz-request-id: ERD3ABHEYBVBJGCD
date: Fri, 10 May 2024 10:22:22 GMT
last-modified: Wed, 18 May 2022 09:03:50 GMT
etag: "a784ac79191109f484dddb4efccdd305"
x-amz-meta-cb-modifiedtime: Wed, 18 May 2022 08:58:28 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: meQ1R_REXwfJfZxJOO1OB9kXQq7tDt_S8yBqffmjuyb2ips6Ufsk5g==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type