Report - www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm

Report Overview

Submitted URL
www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
IP
88.218.28.56
ASN
#50673 Serverius Holding B.V.
Submitted
2024-05-04 05:36:58
Access
public
Website Title
网易免费邮箱 - 中国第一大电子邮件服务商
Final URL
www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ssl.mail.163.com	167805	1997-09-15	2017-01-30	2024-03-07	436 B	333 B	220.197.30.201
mimg.127.net	151075	1998-02-28	2012-07-04	2024-04-15	2.8 kB	36 kB	103.129.252.89
email.163.com	359469	1997-09-15	2012-05-26	2023-06-06	385 B	1.4 kB	61.170.80.230
www.electrocoolhvacr.com	unknown	unknown	No data	No data	509 B	84 kB	88.218.28.56
ocsp.digicert.cn	37572	2006-01-24	2020-03-20	2024-05-03	2.6 kB	7.8 kB	47.246.3.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-03	medium	www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm	NetEase

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm	2.1 kB	2023-04-17	2024-05-04
Pretty URL www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm IP 88.218.28.56 ASN #50673 Serverius Holding B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-17 20:05:24 Last Seen2024-05-04 07:37:04 Times Seen11 Hash 00714e32a03c532a6707f207ff5899ef c08494e00e529b9b2e60057da79339678155d5a8 b76ae97900262f3dcea5276fb10f2abdf37da36880c8e85d41a9f53bbbeb9ece Loading...

	www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm	2.8 kB	2023-04-17	2024-05-04
Pretty URL www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm IP 88.218.28.56 ASN #50673 Serverius Holding B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-17 20:05:24 Last Seen2024-05-04 07:37:04 Times Seen11 Hash 99954140bb671a19f96e13141d41dd00 4ad087a850cea5d739eb33860e0745895526d767 7445912c3c7b3a32bab2e5e044b2e5b8e2f4c38b9b68b8b5f461583d14a05a53 Loading...

	www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm	49 B	2023-03-07	2024-05-04
Pretty URL www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm IP 88.218.28.56 ASN #50673 Serverius Holding B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:15:58 Last Seen2024-05-04 07:37:04 Times Seen13 Hash 8ced394c59813532b3275e739252a3f4 b5b486dff2eb0a405408b5650bed1dcc84844fab 843e7e5b3b8fd148124152b9bca7fc0a71d0696e7bca9001a51b969c660dde72 Loading...

	www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm	44 kB	2023-04-17	2024-05-04
Pretty URL www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm IP 88.218.28.56 ASN #50673 Serverius Holding B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-17 20:05:24 Last Seen2024-05-04 07:37:04 Times Seen11 Hash ab61c143f20d5e098365acc4a3597bba bca46c59b54cffaaf95228ea20b5f93546bbcfd5 37cf274a453e9a35639b9a889b4bb8109ae907aac1971b2455dc4b316fe3a83d Loading...

HTTP Transactions (18)

URL IP Response Size

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
1737d12b773e79e9002f537232645bd6
1c0ee36139f4174e9da6313e3f14c95cf3859190
135a0b4f7b004e27037b4b601051889e46aadddd3dc56e07fe68e0065b8178e4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:34 GMT
Ali-Swift-Global-Savetime: 1714800994
Via: cache14.l2fr1[213,212,200-0,M], cache14.l2fr1[214,0], cache5.ru4[270,269,200-0,M], cache5.ru4[271,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:34 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039917148009942886280e

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
c82e7659b90525db1ba013f6f0a02f22
e43858c4eaf52f691f1168518a93a630cf92084b
e48376f2735459fa32adc20c1709abf8007c981b3c05ae94f4851a578a1c0bce

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:34 GMT
Ali-Swift-Global-Savetime: 1714800994
Via: cache40.l2fr1[205,204,200-0,M], cache40.l2fr1[207,0], cache6.ru4[262,261,200-0,M], cache6.ru4[263,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:34 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039a17148009944767513e

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
c82e7659b90525db1ba013f6f0a02f22
e43858c4eaf52f691f1168518a93a630cf92084b
e48376f2735459fa32adc20c1709abf8007c981b3c05ae94f4851a578a1c0bce

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:34 GMT
Ali-Swift-Global-Savetime: 1714800994
Via: cache25.l2fr1[212,211,200-0,M], cache25.l2fr1[212,0], cache7.ru4[269,268,200-0,M], cache7.ru4[270,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:34 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039b17148009944912740e

ssl.mail.163.com/httpsEnable.gif

220.197.30.201

200 OK

43 B

URL GET HTTP/2
ssl.mail.163.com/httpsEnable.gif
IP
220.197.30.201:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subject*.mail.163.com
FingerprintB8:33:27:E2:B5:C9:DF:50:03:8C:82:D1:FE:83:27:53:AA:81:0F:3D
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

HTTP Headers

GET /httpsEnable.gif HTTP/1.1
Host: ssl.mail.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.electrocoolhvacr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:34 GMT
content-type: image/gif
content-length: 43
last-modified: Wed, 27 Oct 2021 02:55:03 GMT
etag: "6178bf87-2b"
expires: Sat, 04 May 2024 05:56:06 GMT
cache-control: max-age=3600
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
c82e7659b90525db1ba013f6f0a02f22
e43858c4eaf52f691f1168518a93a630cf92084b
e48376f2735459fa32adc20c1709abf8007c981b3c05ae94f4851a578a1c0bce

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:34 GMT
Ali-Swift-Global-Savetime: 1714800994
Via: cache31.l2fr1[213,212,200-0,M], cache31.l2fr1[214,0], cache5.ru4[269,269,200-0,M], cache5.ru4[270,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:34 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039917148009945936372e

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
c82e7659b90525db1ba013f6f0a02f22
e43858c4eaf52f691f1168518a93a630cf92084b
e48376f2735459fa32adc20c1709abf8007c981b3c05ae94f4851a578a1c0bce

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:34 GMT
Ali-Swift-Global-Savetime: 1714800994
Via: cache32.l2fr1[523,522,200-0,M], cache32.l2fr1[524,0], cache10.ru4[580,579,200-0,M], cache10.ru4[581,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:34 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039e17148009943997728e

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
c82e7659b90525db1ba013f6f0a02f22
e43858c4eaf52f691f1168518a93a630cf92084b
e48376f2735459fa32adc20c1709abf8007c981b3c05ae94f4851a578a1c0bce

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:34 GMT
Ali-Swift-Global-Savetime: 1714800994
Via: cache20.l2fr1[549,549,200-0,M], cache20.l2fr1[550,0], cache3.ru4[605,605,200-0,M], cache3.ru4[606,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:34 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039717148009943845783e

mimg.127.net/index/email/img/2012/bg_v2.png

103.129.252.89

200 OK

17 kB

URL GET HTTP/2
mimg.127.net/index/email/img/2012/bg_v2.png
IP
103.129.252.89:443
ASN
#137263 NETEASE HONG KONG LIMITED

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
PNG image data, 353 x 353, 8-bit colormap, non-interlaced
Size
17 kB (16741 bytes)
Hash
fecd1f26c6ba7e6aff93183be43624bd
ced7b5c53d57548223f136844d3b2f72abaa64b9
7d898171a5ede23236d3d2cdfe18d4590a5dc485f6229c66e24f6928d16e7072

HTTP Headers

GET /index/email/img/2012/bg_v2.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:34 GMT
content-type: image/png
content-length: 16741
last-modified: Fri, 19 Apr 2013 08:46:49 GMT
etag: "51710479-4165"
expires: Sat, 04 May 2024 06:28:37 GMT
cache-control: max-age=3600
accept-ranges: bytes
X-Firefox-Spdy: h2

mimg.127.net/logo/knet.png

103.129.252.89

200 OK

4.6 kB

URL GET HTTP/2
mimg.127.net/logo/knet.png
IP
103.129.252.89:443
ASN
#137263 NETEASE HONG KONG LIMITED

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
PNG image data, 57 x 19, 8-bit/color RGBA, non-interlaced
Size
4.6 kB (4611 bytes)
Hash
dca9fb1809c54c9b1d3d4b9087372b8c
9fcdf3273f6a82ff9b1f203c20fb9fc64e6994d0
17add961a686edb5b25996bcc4e08a14e5e36b6a1796ffbbb9cc751e7ca97ac8

HTTP Headers

GET /logo/knet.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:34 GMT
content-type: image/png
content-length: 4611
last-modified: Wed, 16 May 2012 09:47:58 GMT
etag: "4fb377ce-1203"
expires: Sat, 04 May 2024 05:55:01 GMT
cache-control: max-age=3600
accept-ranges: bytes
X-Firefox-Spdy: h2

mimg.127.net/p/t.gif

103.129.252.89

200 OK

77 B

URL GET HTTP/2
mimg.127.net/p/t.gif
IP
103.129.252.89:443
ASN
#137263 NETEASE HONG KONG LIMITED

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
GIF image data, version 89a, 32 x 32
Size
77 B (77 bytes)
Hash
0e3f16e485782c9d637911921d217ee5
0a9ef053d0ad6f98389ac063766a0b66d6abf876
3f666934b806964af9be68a39f16151701e7a7b8009ac24e7acb9ac0a7c10aa5

HTTP Headers

GET /p/t.gif HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:34 GMT
content-type: image/gif
content-length: 77
last-modified: Mon, 18 Jun 2012 08:52:50 GMT
etag: "4fdeec62-4d"
expires: Tue, 02 May 2034 02:24:50 GMT
cache-control: max-age=315360000
vary: Origin
accept-ranges: bytes
X-Firefox-Spdy: h2

mimg.127.net/index/email/img/2012/arr.png

103.129.252.89

200 OK

492 B

URL GET HTTP/2
mimg.127.net/index/email/img/2012/arr.png
IP
103.129.252.89:443
ASN
#137263 NETEASE HONG KONG LIMITED

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
PNG image data, 16 x 24, 8-bit/color RGBA, non-interlaced
Size
492 B (492 bytes)
Hash
d8fcb50a13369d784d4359f16d97cf9b
dabf670fd4b4553718ee7233e5a8b41efa38fa04
e4129228b3c1d9183ed091b163797dddf16a2cf72868bb4fa56c98e7a074686d

HTTP Headers

GET /index/email/img/2012/arr.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:34 GMT
content-type: image/png
content-length: 492
last-modified: Mon, 17 Dec 2012 09:09:16 GMT
etag: "50cee13c-1ec"
expires: Sat, 04 May 2024 06:36:34 GMT
cache-control: max-age=3600
accept-ranges: bytes
X-Firefox-Spdy: h2

mimg.127.net/index/email/img/2012/ntes_logo.png

103.129.252.89

200 OK

983 B

URL GET HTTP/2
mimg.127.net/index/email/img/2012/ntes_logo.png
IP
103.129.252.89:443
ASN
#137263 NETEASE HONG KONG LIMITED

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
PNG image data, 87 x 27, 4-bit colormap, non-interlaced
Size
983 B (983 bytes)
Hash
20b5dba7c83cc58a7f3152a4f885a062
543c734cfaec7b2fb37640d72cd383c1697ee961
16ede25c08f54c3b1627d401b847eec08b089227058660799c2372dbd6f52425

HTTP Headers

GET /index/email/img/2012/ntes_logo.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:35 GMT
content-type: image/png
content-length: 983
last-modified: Mon, 17 Dec 2012 09:09:12 GMT
etag: "50cee138-3d7"
expires: Sat, 04 May 2024 06:27:54 GMT
cache-control: max-age=3600
accept-ranges: bytes
X-Firefox-Spdy: h2

mimg.127.net/index/email/img/2012/bgx.png

103.129.252.89

200 OK

304 B

URL GET HTTP/2
mimg.127.net/index/email/img/2012/bgx.png
IP
103.129.252.89:443
ASN
#137263 NETEASE HONG KONG LIMITED

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
PNG image data, 6 x 76, 4-bit colormap, non-interlaced
Size
304 B (304 bytes)
Hash
1691d69011c7c58353d0e2c78c8fdc9d
79c4e66595f7e5c152d70a1d3670aba2081fa947
86305704cb5ce03d2ce2c34224ecd1f54bfad514a5980bd9453fab19858af4d5

HTTP Headers

GET /index/email/img/2012/bgx.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:35 GMT
content-type: image/png
content-length: 304
last-modified: Mon, 17 Dec 2012 09:09:16 GMT
etag: "50cee13c-130"
expires: Sat, 04 May 2024 06:36:35 GMT
cache-control: max-age=3600
accept-ranges: bytes
X-Firefox-Spdy: h2

mimg.127.net/index/email/img/2012/logo_v2.png

103.129.252.89

200 OK

11 kB

URL GET HTTP/2
mimg.127.net/index/email/img/2012/logo_v2.png
IP
103.129.252.89:443
ASN
#137263 NETEASE HONG KONG LIMITED

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subjectmimg.127.net
Fingerprint1F:9E:92:7A:42:53:FA:B9:89:36:E3:D7:D7:58:DB:5B:96:84:EF:06
ValidityTue, 29 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
PNG image data, 298 x 125, 8-bit colormap, non-interlaced
Size
11 kB (10664 bytes)
Hash
0e9947b757328b1b1f80185a5ec4ff37
105638c554dce9bf508e5fc4c74e5fc9b730aa34
3cc3a1cc321b22df78b7bf0da839fd05906c7db47296afdf317298882a0b73be

HTTP Headers

GET /index/email/img/2012/logo_v2.png HTTP/1.1
Host: mimg.127.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:35 GMT
content-type: image/png
content-length: 10664
last-modified: Fri, 19 Apr 2013 08:46:49 GMT
etag: "51710479-29a8"
expires: Sat, 04 May 2024 06:27:54 GMT
cache-control: max-age=3600
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
8383d4a4f696a5303ec30f8467e36bea
3006e8ba5764ed4c12e1e51df78b62ed0b596b9f
61fd8ff0b490210914cd0aa442065405aba2d7c5df8b3fb892fbce0afaf44d03

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:35 GMT
Ali-Swift-Global-Savetime: 1714800995
Via: cache34.l2fr1[206,206,200-0,M], cache34.l2fr1[207,0], cache6.ru4[263,263,200-0,M], cache6.ru4[265,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:35 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039a17148009956747700e

email.163.com/favicon.ico

61.170.80.230

200 OK

318 B

URL GET HTTP/2
email.163.com/favicon.ico
IP
61.170.80.230:443
ASN
#4812 China Telecom Group

Requested by
https://www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
Certificate
IssuerDigiCert Inc
Subject*.163.com
FingerprintE2:7C:6D:36:2B:67:C4:E0:20:B4:DD:D0:A2:FF:B4:CF:C4:69:05:08
ValidityThu, 28 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 16 colors
Size
318 B (318 bytes)
Hash
a14e5365cc2b27ec57e1ab7866c6a228
37fc3645c16a1cbd74d8a6b7ef8756bbf0a3e857
43c6594eb74940c6e0fb38d55c634425860093660f4eb0cb89334608dd9947eb

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: email.163.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: image/x-icon
content-length: 318
date: Sat, 04 May 2024 05:36:35 GMT
expires: Sat, 04 May 2024 05:37:35 GMT
cache-control: max-age=60
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.mediav.com *.netstatic.net; connect-src 'self' wss: *.127.net *.126.net *.163.com *.126.com *.yeah.net *.188.com *.netease.com *.qiyukf.com qiyukf.com *.youdao.com *.163yun.com; report-uri https://countly.mail.163.com/stats/csp
accept-ranges: bytes
ali-swift-global-savetime: 1714800995
via: cache33.l2cn3129[0,0,304-0,H], cache42.l2cn3129[1,0], vcache24.cn6012[17,18,200-0,H], vcache23.cn6012[53,0]
last-modified: Fri, 13 Feb 2009 02:59:32 GMT
etag: "4994e214-13e"
age: 1
x-cache: HIT TCP_REFRESH_HIT dirn:-2:-2
x-swift-savetime: Sat, 04 May 2024 05:36:36 GMT
x-swift-cachetime: 599
cdn-user-ip: 91.90.42.154
cdn-source: ali
cdn-ip: 61.170.80.230
timing-allow-origin: *
eagleid: 3daa502b17148009961011984e
X-Firefox-Spdy: h2

ocsp.digicert.cn/

47.246.3.233

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.233:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
8383d4a4f696a5303ec30f8467e36bea
3006e8ba5764ed4c12e1e51df78b62ed0b596b9f
61fd8ff0b490210914cd0aa442065405aba2d7c5df8b3fb892fbce0afaf44d03

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 05:36:36 GMT
Ali-Swift-Global-Savetime: 1714800996
Via: cache19.l2fr1[509,509,200-0,M], cache19.l2fr1[510,0], cache7.ru4[567,566,200-0,M], cache7.ru4[568,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 May 2024 05:36:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039b17148009957742940e

www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm

88.218.28.56

200 OK

84 kB

URL User Request GET HTTP/2
www.electrocoolhvacr.com/control/163/163xffrxxzzz.htm
IP
88.218.28.56:443
ASN
#50673 Serverius Holding B.V.

Certificate
IssuercPanel, Inc.
Subjectelectrocoolhvacr.com
FingerprintFC:1C:1D:FF:EE:56:B2:16:74:0F:1A:C9:E8:BE:82:4C:26:46:A3:E1
ValidityFri, 08 Mar 2024 00:00:00 GMT - Thu, 06 Jun 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2597), with CRLF line terminators
Size
84 kB (84032 bytes)
Hash
2c3330d6ab833827c0c913332f11c443
fc57b3916f33a55238b672b12b2d564a573cfe2a
013f223da445542611c2a8a1e9de390a9b235b9d77621ea1ea6b72893dd3725c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NetEase

HTTP Headers

GET /control/163/163xffrxxzzz.htm HTTP/1.1
Host: www.electrocoolhvacr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 05:36:33 GMT
content-type: text/html
last-modified: Mon, 01 Jun 2015 13:19:42 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by