Report - shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke

Report Overview

Submitted URL
shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk
IP
104.192.108.17
ASN
#55992 Beijing Qihu Technology Company Limited
Submitted
2024-04-23 08:36:21
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
hot.shouji.360tpcdn.com	unknown	2013-02-18	2013-12-10	2024-04-18	541 B	960 kB	104.192.108.20
download.api.sj.360.cn	unknown	2003-03-17	2018-03-27	2024-04-18	651 B	7.3 kB	180.163.251.81
shouji.360tpcdn.com	unknown	2013-02-18	2013-04-22	2024-04-18	807 B	1.1 kB	104.192.108.21

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
hot.shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk
IP
104.192.108.20
ASN
#55992 Beijing Qihu Technology Company Limited

File type
Java archive data (JAR)
Size
960 kB (959717 bytes)
Hash
35454bf24c80f47352ba8af8a6819ce1
f8dcb7899a6f68d891cf91194fb73e0929084686
4668aa1a734a450a7bdbb57b552dca387acd25376c3af0035ed193e913c0850a

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/63

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk

104.192.108.21

302 Moved Temporarily

142 B

URL User Request GET HTTP/1.1
shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk
IP
104.192.108.21:443
ASN
#55992 Beijing Qihu Technology Company Limited

Certificate
IssuerWoTrus CA Limited
Subject*.shouji.360tpcdn.com
FingerprintB3:0C:6C:65:C8:1A:74:48:EA:CB:93:29:04:89:94:06:CC:6F:C1:E7
ValidityWed, 18 Oct 2023 00:00:00 GMT - Thu, 17 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
142 B (142 bytes)
Hash
82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c

HTTP Headers

GET /141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk HTTP/1.1
Host: shouji.360tpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Tue, 23 Apr 2024 08:35:56 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://download.api.sj.360.cn/url/cdn?q=dXJpPWh0dHBzJTNBJTJGJTJGc2hvdWppLjM2MHRwY2RuLmNvbSUyRjE0MTAxNCUyRjM1NDU0YmYyNGM4MGY0NzM1MmJhOGFmOGE2ODE5Y2UxJTJGY29tLmZyZWdvLmpva2VfMTI0OC5hcGsmaXA9OTEuOTAuNDIuMTU0

hot.shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk

104.192.108.20

200 OK

960 kB

URL User Request GET HTTP/1.1
hot.shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk
IP
104.192.108.20:443
ASN
#55992 Beijing Qihu Technology Company Limited

Certificate
IssuerWoTrus CA Limited
Subject*.shouji.360tpcdn.com
FingerprintB3:0C:6C:65:C8:1A:74:48:EA:CB:93:29:04:89:94:06:CC:6F:C1:E7
ValidityWed, 18 Oct 2023 00:00:00 GMT - Thu, 17 Oct 2024 23:59:59 GMT

File type
Java archive data (JAR)
Size
960 kB (959717 bytes)
Hash
35454bf24c80f47352ba8af8a6819ce1
f8dcb7899a6f68d891cf91194fb73e0929084686
4668aa1a734a450a7bdbb57b552dca387acd25376c3af0035ed193e913c0850a

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/63

HTTP Headers

GET /141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk HTTP/1.1
Host: hot.shouji.360tpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 08:36:00 GMT
Content-Type: application/vnd.android.package-archive
Content-Length: 959717
Connection: keep-alive
Expires: Tue, 30 Apr 2024 08:36:00 GMT
Last-Modified: Tue, 14 Oct 2014 03:35:05 GMT
Cache-Control: s-maxage=604800, max-age=604800
KCS-Via: HIT from w-f04.lato;MISS from back-f04.dl.lato;MISS from w-subsrc02.lato
K-Cache-status: MISS
K-RateLimit-used: 1
K-RateLimit-limit: 1000
K-RateLimit-reset: 1713916800
K-RateLimit-remaining: 999
K-RateLimit: dl
Accept-Ranges: bytes

download.api.sj.360.cn/url/cdn?q=dXJpPWh0dHBzJTNBJTJGJTJGc2hvdWppLjM2MHRwY2RuLmNvbSUyRjE0MTAxNCUyRjM1NDU0YmYyNGM4MGY0NzM1MmJhOGFmOGE2ODE5Y2UxJTJGY29tLmZyZWdvLmpva2VfMTI0OC5hcGsmaXA9OTEuOTAuNDIuMTU0

180.163.251.81

302 Found

7.0 kB

URL User Request GET HTTP/2
download.api.sj.360.cn/url/cdn?q=dXJpPWh0dHBzJTNBJTJGJTJGc2hvdWppLjM2MHRwY2RuLmNvbSUyRjE0MTAxNCUyRjM1NDU0YmYyNGM4MGY0NzM1MmJhOGFmOGE2ODE5Y2UxJTJGY29tLmZyZWdvLmpva2VfMTI0OC5hcGsmaXA9OTEuOTAuNDIuMTU0
IP
180.163.251.81:443
ASN
#4812 China Telecom Group

Certificate
IssuerWoTrus CA Limited
Subject*.api.sj.360.cn
Fingerprint35:74:3D:68:4A:00:D4:88:DF:33:BE:0B:0C:15:9F:3B:2C:3E:C2:FA
ValidityMon, 11 Dec 2023 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3
Size
7.0 kB (6980 bytes)
Hash
4d8a00c988672a08a19e704d23777ef6
9c7c94a4a6a65661fbee8812ba1bd966f93a3735
82d2778617791f252803bbdcf7496f997b2966ec4481d185e4506d6badb94596

HTTP Headers

GET /url/cdn?q=dXJpPWh0dHBzJTNBJTJGJTJGc2hvdWppLjM2MHRwY2RuLmNvbSUyRjE0MTAxNCUyRjM1NDU0YmYyNGM4MGY0NzM1MmJhOGFmOGE2ODE5Y2UxJTJGY29tLmZyZWdvLmpva2VfMTI0OC5hcGsmaXA9OTEuOTAuNDIuMTU0 HTTP/1.1
Host: download.api.sj.360.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx/1.16.1
date: Tue, 23 Apr 2024 08:35:58 GMT
content-type: text/html;charset=utf-8
location: https://hot.shouji.360tpcdn.com/141014/35454bf24c80f47352ba8af8a6819ce1/com.frego.joke_1248.apk
cache-control: max-age=900
X-Firefox-Spdy: h2

shouji.360tpcdn.com/

104.192.108.21

164 B

URL
shouji.360tpcdn.com/
IP
104.192.108.21:0
ASN
#55992 Beijing Qihu Technology Company Limited

Certificate
IssuerWoTrus CA Limited
Subject*.shouji.360tpcdn.com
FingerprintB3:0C:6C:65:C8:1A:74:48:EA:CB:93:29:04:89:94:06:CC:6F:C1:E7
ValidityWed, 18 Oct 2023 00:00:00 GMT - Thu, 17 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
164 B (164 bytes)
Hash
ee729afed9e80d7cddc65e35bb0423a0
32de48a0e531d35b04e29f85eab13f5bdaabba2c
c8d730e29849de110e1d4ac259de973a2d3dee68541c15a07d0ea432db5a376b

HTTP Headers

GET / HTTP/1.1
Host: shouji.360tpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 504 Gateway Time-out
Date: Tue, 23 Apr 2024 08:36:09 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
KCS-X-From: PARENT-PSEUDO-or-SOURCE
KCS-Via: MISS from w-f05.lato;MISS from back-f05.dl.lato;MISS from w-subsrc01.lato
K-Cache-status: MISS
K-RateLimit-used: 5
K-RateLimit-limit: 1000
K-RateLimit-reset: 1713916800
K-RateLimit-remaining: 995
K-RateLimit: dl

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (4)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers