Report - yuu5yytuy.xyz/

Report Overview

Submitted URL
yuu5yytuy.xyz/
IP
20.24.95.155
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-04-25 08:16:05
Access
public
Website Title
系统登录 · crypto
Final URL
yuu5yytuy.xyz/admin/login.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
50

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
yuu5yytuy.xyz	unknown	2024-02-27	2024-02-29	2024-02-29	13 kB	802 kB	20.24.95.155

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed
2024-04-25	medium	yuu5yytuy.xyz	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	yuu5yytuy.xyz/admin/login.html	82 B	2023-03-11	2024-04-25
Pretty URL yuu5yytuy.xyz/admin/login.html IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-11 19:03:59 Last Seen2024-04-25 10:16:07 Times Seen6 Hash a46d74c87df497b42b19036716e662de 89b9717cbb9abeb1202eb7e2e67103a1160c301a f47ac71a5ba54d519a01146d99dd3d1efbac83d9ae38fab2a196e10aee31b402 Loading...

	yuu5yytuy.xyz/static/plugs/require/require.js	18 kB	2023-03-07	2024-05-04
Pretty URL yuu5yytuy.xyz/static/plugs/require/require.js IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:32 Last Seen2024-05-04 19:50:57 Times Seen2272 Hash 18823f6a6d208ee1e361bb266ab794d5 e9fa356ac13bd24c051804a6e4ec3e053bc8001c d5f10f852b112a514a19f2b778eef5d2d1307878757f0a24539c051831cefaf8 Loading...

	yuu5yytuy.xyz/static/admin.js?v=1	61 kB	2024-04-25	2024-04-25
Pretty URL yuu5yytuy.xyz/static/admin.js?v=1 IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 10:16:07 Last Seen2024-04-25 10:16:07 Times Seen1 Hash c2906b02bb3a0873df0e8ef1e7d28ca0 9bc939713998e94cade06498b5528b50aa5199e0 07cd77b03eb9bd402b13f373fd4b16c9960f8a09737be797c50a4773659af98a Loading...

	yuu5yytuy.xyz/static/plugs/jquery/pace.min.js	12 kB	2023-03-11	2024-04-25
Pretty URL yuu5yytuy.xyz/static/plugs/jquery/pace.min.js IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 19:03:59 Last Seen2024-04-25 10:16:07 Times Seen9 Hash a002c33714181b01b7630965dec6b987 dab1fe84637226d411fcd6c830279c8676f91916 7ac87a0e3606fa56e3a1d225fc873fa1e0f1ca615b43a270ed7f66c066903288 Loading...

	yuu5yytuy.xyz/admin/api.plugs/script	76 B	2023-03-11	2024-04-25
Pretty URL yuu5yytuy.xyz/admin/api.plugs/script IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 19:03:59 Last Seen2024-04-25 10:16:07 Times Seen4 Hash 15d35028250c33a6694242ffa8907f3c d8a9d7b23e25e79352ff703ef14cca91742c6430 c96e2853f1887a44f2e2c2d906c57c04ddfc66394a0aa64b0af2b2b74c934230 Loading...

	yuu5yytuy.xyz/static/plugs/layui/layui.js	291 kB	2023-03-07	2024-05-01
Pretty URL yuu5yytuy.xyz/static/plugs/layui/layui.js IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:02:52 Last Seen2024-05-01 11:09:15 Times Seen102 Hash 210a8b1c979a8ff8d8036c3bab6e3b46 40ed39b8c127b1f1307c142e94cc8f9e0c36e31b fef3fe945718e6caef2f72dc7c89080374cfd74e59576746e477de017c1ef0ad Loading...

	yuu5yytuy.xyz/static/extra/script.js?v=1	692 B	2023-03-11	2024-04-25
Pretty URL yuu5yytuy.xyz/static/extra/script.js?v=1 IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 19:03:59 Last Seen2024-04-25 10:16:07 Times Seen5 Hash 5721d812a078b2d00ba08b2e49b9a264 a08b2c35de244da840d59403f829b4e7589aac51 1d6f5f8cdd3ce03fdd3dcf3b8933b3fa58a40243e8371c32c8cc12bbce0c084f Loading...

	yuu5yytuy.xyz/static/login.js	3.7 kB	2023-03-11	2024-04-25
Pretty URL yuu5yytuy.xyz/static/login.js IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 19:03:59 Last Seen2024-04-25 10:16:07 Times Seen4 Hash 3477c10a9e52b44af0bdfe4870aa0faf 9ace0e0522dd7d34041a04cab63b6c7add986b56 fd30413f3b35aad85d1ac56d6bea78f96b8fe031142e0c7163bc54b0b51aec92 Loading...

	yuu5yytuy.xyz/admin/login.html	0 B	2023-03-07	2024-05-05
Pretty URL yuu5yytuy.xyz/admin/login.html IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-05 00:39:27 Times Seen37350578 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	yuu5yytuy.xyz/static/plugs/toastr/toastr.min.js	5.5 kB	2023-03-07	2024-05-03
Pretty URL yuu5yytuy.xyz/static/plugs/toastr/toastr.min.js IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:28:39 Last Seen2024-05-03 01:22:00 Times Seen1525 Hash b36f28de584845317de40a7219c82b1c 6de8657c8782561bc023478ab708179ed846db1a ddb96c25de07962ffbc0243e6e68177ce74aee9fd950cb4f5d8d3c8e6c524a09 Loading...

	yuu5yytuy.xyz/static/plugs/jquery/md5.min.js	10 kB	2023-03-07	2024-05-03
Pretty URL yuu5yytuy.xyz/static/plugs/jquery/md5.min.js IP 20.24.95.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:14 Last Seen2024-05-03 05:53:48 Times Seen96 Hash 6cc0b8c4be9a71f032824bbef584340e 0c842ec4e2de83053a5d6b011a53a5bdaa98da8d bd97cabaab59ae6fe68b23ee94d82918e4f43f9eeb24322819fcf319a32ea9f8 Loading...

HTTP Transactions (25)

URL IP Response Size

yuu5yytuy.xyz/static/extra/style.css?at=0425

20.24.95.155

200 OK

250 B

URL GET HTTP/2
yuu5yytuy.xyz/static/extra/style.css?at=0425
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
Unicode text, UTF-8 text
Size
250 B (250 bytes)
Hash
25c4c7a5e04327e47e30de2775463777
58fb2838b4136d80de8d367b471b8722959b64c6
d5bcd4c409752586d485e4d76d482c98018742a8774367fa59f3d2af45259b6c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/extra/style.css?at=0425 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: text/css
content-length: 250
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
etag: "631ed0be-fa"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
gp-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/extra/script.js?v=1

20.24.95.155

200 OK

692 B

URL GET HTTP/2
yuu5yytuy.xyz/static/extra/script.js?v=1
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
692 B (692 bytes)
Hash
5721d812a078b2d00ba08b2e49b9a264
a08b2c35de244da840d59403f829b4e7589aac51
1d6f5f8cdd3ce03fdd3dcf3b8933b3fa58a40243e8371c32c8cc12bbce0c084f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/extra/script.js?v=1 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 692
last-modified: Fri, 17 Feb 2023 04:30:28 GMT
etag: "63ef02e4-2b4"
expires: Tue, 30 Apr 2024 10:21:45 GMT
cache-control: max-age=2592000
gp-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/layui/font/iconfont.woff2?v=256

20.24.95.155

200 OK

26 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/layui/font/iconfont.woff2?v=256
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 25964, version 1.0
Size
26 kB (25964 bytes)
Hash
d8c214c89e33a7bea93d656bd865e869
c188dbfc6951b7c305940ac3a279227aeb5617f4
bef73f87b8a3972427dcece922ed8f59d1d01c4a3fd572316efa70de9aec9c09

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/layui/font/iconfont.woff2?v=256 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/static/plugs/layui/css/layui.css?at=0425
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:40 GMT
content-type: font/woff2
content-length: 25964
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
etag: "631ed0be-656c"
gp-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/layui/css/modules/laydate/default/laydate.css?v=5.3.1

20.24.95.155

200 OK

11 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/layui/css/modules/laydate/default/laydate.css?v=5.3.1
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with very long lines (7787), with no line terminators
Size
11 kB (11415 bytes)
Hash
965ecf4e5b007d28c7813d295310c9f8
85850be545bf1b7e5856988633b40184cd776449
68e2983e63097dc51336bd69da10365ce29d723d7dfdab3796a29bcfe5aaa335

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/layui/css/modules/laydate/default/laydate.css?v=5.3.1 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-1e6b"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/theme/img/login/bg2.jpg

20.24.95.155

200 OK

68 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/theme/img/login/bg2.jpg
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1920x1200, components 3
Size
68 kB (67855 bytes)
Hash
42ac5ad7da4246c745c0cf1193821a64
e70ed9e518ab098cfe57f4e12953df4f1a86cbd7
948ad9910b1ec34a806720f3685dc04ef330ae2471d25302c7245f0f2805c374

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/theme/img/login/bg2.jpg HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: image/jpeg
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-1090f"
expires: Sat, 03 Aug 2024 08:15:32 GMT
cache-control: max-age=8640000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/admin/login/captcha

20.24.95.155

200 OK

7.4 kB

URL POST HTTP/2
yuu5yytuy.xyz/admin/login/captcha
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (7507), with no line terminators
Size
7.4 kB (7371 bytes)
Hash
cb72afbfa6735405172e8ba552476a9c
38006dc28499447bc4fe6d36a973d48552d12860
9a4e5d41acaa73adbfb9ba0c0b1314b88ba66f3955dea19129d9807476d686d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /admin/login/captcha HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 42
Origin: https://yuu5yytuy.xyz
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: https://yuu5yytuy.xyz
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE
access-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With,Api-Type,Api-Name,Api-Uuid,Api-Token,User-Form-Token,User-Token,Token
access-control-expose-headers: Api-Type,Api-Name,Api-Uuid,Api-Token,User-Form-Token,User-Token,Token
access-control-allow-credentials: true
x-frame-options: sameorigin
set-cookie: lang=zh-cn; path=/; secure; HttpOnly
ssid=f2fefbc45cddd7a89c3f66a2b7ed4733; path=/; secure; HttpOnly
content-encoding: br
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/jquery/md5.min.js

20.24.95.155

200 OK

10 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/jquery/md5.min.js
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JavaScript source, ASCII text, with very long lines (10157)
Size
10 kB (10158 bytes)
Hash
6cc0b8c4be9a71f032824bbef584340e
0c842ec4e2de83053a5d6b011a53a5bdaa98da8d
bd97cabaab59ae6fe68b23ee94d82918e4f43f9eeb24322819fcf319a32ea9f8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/jquery/md5.min.js HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 12 Sep 2022 06:25:03 GMT
vary: Accept-Encoding
etag: W/"631ed0bf-27ae"
expires: Sat, 25 May 2024 08:15:33 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/admin/login.html

20.24.95.155

200 OK

7.1 kB

URL User Request GET HTTP/2
yuu5yytuy.xyz/admin/login.html
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7234), with no line terminators
Size
7.1 kB (7118 bytes)
Hash
0e0e8b48a09d8bc010024c723c10fcd3
dce9c3b210b23c58ba580c62960fd630d2629e9c
9ad070d58240db24bf15e2964aad484f9322a7b561bc82a70c0d4a3888edf728

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /admin/login.html HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-frame-options: sameorigin
set-cookie: lang=zh-cn; path=/; secure; HttpOnly
ssid=f2fefbc45cddd7a89c3f66a2b7ed4733; path=/; secure; HttpOnly
content-encoding: br
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/theme/css/login.css

20.24.95.155

200 OK

4.4 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/theme/css/login.css
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with very long lines (4412), with no line terminators
Size
4.4 kB (4410 bytes)
Hash
60b4e2aa20308be8b7ea650781944d3f
0569c1e5f6d073fbb0e48f31f101c34c04160280
50ca1526cd149fd6521336997d782d877d4af57ba68e7ab2526c9db8ad2f99ff

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/theme/css/login.css HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-113a"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/admin.js?v=1

20.24.95.155

200 OK

61 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/admin.js?v=1
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type

Size
61 kB (61318 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/admin.js?v=1 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 27 Apr 2023 13:48:51 GMT
vary: Accept-Encoding
etag: W/"644a7d43-ef86"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/admin/api.plugs/script

20.24.95.155

200 OK

76 B

URL GET HTTP/2
yuu5yytuy.xyz/admin/api.plugs/script
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with no line terminators
Size
76 B (76 bytes)
Hash
10971607dd65f2f2cfcae9115585cca7
908fa43bf37dd05c3c85037e8e10388bd9866c7c
95e4790dddd2132338ef876aaa30ddb120ddc6d8f6b6f3b681f651283498076a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /admin/api.plugs/script HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: application/x-javascript; charset=utf-8
vary: Accept-Encoding
x-frame-options: sameorigin
set-cookie: lang=zh-cn; path=/; secure; HttpOnly
ssid=f2fefbc45cddd7a89c3f66a2b7ed4733; path=/; secure; HttpOnly
content-encoding: br
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/toastr/toastr.min.js

20.24.95.155

200 OK

5.5 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/toastr/toastr.min.js
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JavaScript source, ASCII text, with very long lines (5663), with no line terminators
Size
5.5 kB (5537 bytes)
Hash
3d7586bac6d9db8e8f629161cb2b878b
e1c4b0fdfde33772d8da46deb26ac290c511ba76
227ac21562d727a225ba405ddcf2a2d4259e298e6b715bc6540d2f833e7c9b91

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/toastr/toastr.min.js HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 17 Feb 2023 04:30:28 GMT
vary: Accept-Encoding
etag: W/"63ef02e4-15a1"
expires: Sat, 25 May 2024 08:15:33 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/favicon.ico

20.24.95.155

200 OK

9.7 kB

URL GET HTTP/2
yuu5yytuy.xyz/favicon.ico
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel
Size
9.7 kB (9662 bytes)
Hash
3f97e33c7e35ec2bb03ec7f10de52e8c
b9f8b64060b0f56d368c7ad482d88bb1e46f789c
97a2f0d10914b3b59f231d379514c92fefdc63e8cb0f43955c80f7d73b33a768

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: image/x-icon
content-length: 9662
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
etag: "631ed0be-25be"
gp-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

yuu5yytuy.xyz/

20.24.95.155

301 Moved Permanently

7.1 kB

URL User Request GET HTTP/2
yuu5yytuy.xyz/
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type

Size
7.1 kB (7118 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 25 Apr 2024 08:15:38 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache,must-revalidate
x-frame-options: sameorigin
location: /admin/login.html
set-cookie: lang=zh-cn; path=/; secure; HttpOnly
ssid=f2fefbc45cddd7a89c3f66a2b7ed4733; path=/; secure; HttpOnly
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/login.js

20.24.95.155

200 OK

3.7 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/login.js
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (3622), with no line terminators
Size
3.7 kB (3705 bytes)
Hash
2a6af9e9cb32e6d675d3b0abd9bd286a
e1c7dce86a3b1bdaedaa9e282dc8a18c76bf75dc
e159903975ba4ea803654607ef9a91cc2628485477451f85c5a0ef5f3c67edeb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/login.js HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-e79"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/layui/css/modules/code.css?v=3

20.24.95.155

200 OK

1.7 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/layui/css/modules/code.css?v=3
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with very long lines (1738), with no line terminators
Size
1.7 kB (1738 bytes)
Hash
9e6c47f424536b7039ede0093cc8a153
0e994c799db4c0f0de38cef2ea4bda958813cf87
e5fa94378e76c854bbf3572f9e090f1fa5d8260c3e93d8a864a74941b540034e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/layui/css/modules/code.css?v=3 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-6ca"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/layui/layui.js

20.24.95.155

200 OK

291 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/layui/layui.js
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
291 kB (291146 bytes)
Hash
210a8b1c979a8ff8d8036c3bab6e3b46
40ed39b8c127b1f1307c142e94cc8f9e0c36e31b
fef3fe945718e6caef2f72dc7c89080374cfd74e59576746e477de017c1ef0ad

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/layui/layui.js HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-4714a"
expires: Fri, 10 May 2024 14:06:53 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/require/require.js

20.24.95.155

200 OK

18 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/require/require.js
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JavaScript source, ASCII text, with very long lines (17493), with no line terminators
Size
18 kB (17493 bytes)
Hash
18823f6a6d208ee1e361bb266ab794d5
e9fa356ac13bd24c051804a6e4ec3e053bc8001c
d5f10f852b112a514a19f2b778eef5d2d1307878757f0a24539c051831cefaf8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/require/require.js HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 12 Sep 2022 06:25:03 GMT
vary: Accept-Encoding
etag: W/"631ed0bf-4455"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/layui/css/layui.css?at=0425

20.24.95.155

200 OK

82 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/layui/css/layui.css?at=0425
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
82 kB (82259 bytes)
Hash
3f301374d385c19214a4b3e17c815422
4b82ec3e4fc883d6331063fa19ccc94e2a0b970c
7e90b7ced175894e5737acf791e4f77d2d3223e85d15c81b2485f1c525730987

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/layui/css/layui.css?at=0425 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-14153"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/toastr/toastr.min.css?at=0425

20.24.95.155

200 OK

6.7 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/toastr/toastr.min.css?at=0425
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with very long lines (6749), with no line terminators
Size
6.7 kB (6741 bytes)
Hash
2e61413edabb7ecd24cabfbf6284dfd7
e6c8461f15ba235c5c9e765883ab2e51601858cf
2b1c01f6ce4ac938dfb71d8608e5980ac70f1206674b7df3be10f0c2871223b8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/toastr/toastr.min.css?at=0425 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: text/css
last-modified: Fri, 17 Feb 2023 04:30:28 GMT
vary: Accept-Encoding
etag: W/"63ef02e4-1a55"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/jquery/pace.min.js

20.24.95.155

200 OK

12 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/jquery/pace.min.js
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JavaScript source, ASCII text, with very long lines (12350)
Size
12 kB (12368 bytes)
Hash
a002c33714181b01b7630965dec6b987
dab1fe84637226d411fcd6c830279c8676f91916
7ac87a0e3606fa56e3a1d225fc873fa1e0f1ca615b43a270ed7f66c066903288

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/jquery/pace.min.js HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 12 Sep 2022 06:25:03 GMT
vary: Accept-Encoding
etag: W/"631ed0bf-3050"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/theme/css/iconfont.css?at=0425

20.24.95.155

200 OK

4.5 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/theme/css/iconfont.css?at=0425
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with very long lines (4796), with no line terminators
Size
4.5 kB (4494 bytes)
Hash
8c9607da010648f86b5a9c28f40a1e8a
e480845ee3aa7bc92c44fd503615a9b52e7c0087
440d49d324063c1a40db8d2cd3f914a4356c99d86659fd5f00066b49bf6ab634

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/theme/css/iconfont.css?at=0425 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-118e"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/plugs/layui/css/modules/layer/default/layer.css?v=3.5.1

20.24.95.155

200 OK

14 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/plugs/layui/css/modules/layer/default/layer.css?v=3.5.1
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
ASCII text, with very long lines (14323), with no line terminators
Size
14 kB (14323 bytes)
Hash
9bc0bb378b16f6d3d94b945b8a12de7f
b3a3a2788fa3cfab78191f3c2f9ac3dfac1192a4
452d67901461bc418452e139ce517ca82971744bb128aedf6aeae16091574681

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugs/layui/css/modules/layer/default/layer.css?v=3.5.1 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:41 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-37f3"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/theme/css/console.css?at=0425

20.24.95.155

200 OK

85 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/theme/css/console.css?at=0425
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type

Size
85 kB (84665 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/theme/css/console.css?at=0425 HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:39 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-14ab9"
expires: Sat, 25 May 2024 08:15:32 GMT
cache-control: max-age=2592000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

yuu5yytuy.xyz/static/theme/img/login/bg1.jpg

20.24.95.155

200 OK

56 kB

URL GET HTTP/2
yuu5yytuy.xyz/static/theme/img/login/bg1.jpg
IP
20.24.95.155:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://yuu5yytuy.xyz/admin/login.html
Certificate
IssuerLet's Encrypt
Subjectyuu5yytuy.xyz
FingerprintEF:B4:8D:29:7A:51:44:A4:92:93:40:CA:F8:9B:C2:D4:9D:93:DA:BA
ValidityThu, 14 Mar 2024 12:46:18 GMT - Wed, 12 Jun 2024 12:46:17 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1920x1200, components 3
Size
56 kB (55719 bytes)
Hash
e97b5addb9c45bc6581cf2fefc77c7f1
b18d9275c586ff34ab5989243b81e2c8e181b640
78320c76a9c84f614fef793e7d406cd3f7217ce2a763664c0d836c5059265286

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/theme/img/login/bg1.jpg HTTP/1.1
Host: yuu5yytuy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuu5yytuy.xyz/admin/login.html
Cookie: lang=zh-cn; ssid=f2fefbc45cddd7a89c3f66a2b7ed4733
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 08:15:40 GMT
content-type: image/jpeg
last-modified: Mon, 12 Sep 2022 06:25:02 GMT
vary: Accept-Encoding
etag: W/"631ed0be-d9a7"
expires: Sat, 03 Aug 2024 08:15:32 GMT
cache-control: max-age=8640000
content-encoding: br
gp-cache-status: HIT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML