Report - www.5gtox.top/

Report Overview

Submitted URL
www.5gtox.top/
IP
35.244.161.158
ASN
#396982 GOOGLE-CLOUD-PLATFORM
Submitted
2024-05-10 07:07:58
Access
public
Website Title
www.5gtox.top
Final URL
www.5gtox.top/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
track.uc.cn	69223	2003-03-17	2014-06-05	2024-04-15	1.8 kB	506 B	123.182.51.94
hm.baidu.com	8254	1999-10-11	2012-05-26	2024-05-09	1.0 kB	12 kB	111.45.11.83
www.5gtox.top	unknown	unknown	No data	No data	785 B	3.0 kB	35.244.161.158
g.alicdn.com	6787	2008-06-25	2014-10-06	2024-05-10	1.3 kB	22 kB	163.181.56.189
image.uc.cn	54371	2003-03-17	2014-06-05	2024-04-13	892 B	12 kB	47.246.3.234
px.effirst.com	31137	2019-07-05	2019-09-03	2024-05-07	1.1 kB	824 B	111.63.205.165

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 07:07:34	medium	Client IP	35.244.161.158	ET INFO HTTP Request to a *.top domain
2024-05-10 07:07:34	medium	Client IP	35.244.161.158	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	www.5gtox.top/	283 B	2024-01-20	2024-05-13
Pretty URL www.5gtox.top/ IP 35.244.161.158 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-20 13:54:08 Last Seen2024-05-13 15:07:41 Times Seen58 Hash 1ebfe7fb63c16fa8870a7da3159e029e 2ec9e2508361fc3c306106f14168948e35309e74 2e6ec4a601d5743d06a8670b2c3edb3e6756268d3196e1e98c19753e107405a7 Loading...

	unknown	257 B	2024-05-10	2024-05-10
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-05-10 09:08:05 Last Seen2024-05-10 09:08:05 Times Seen1 Hash 066f0641e85e7c8cfe95327e0579479a 7eb7b2e83f674bc99a40caea619f34ef83359ac4 f086450fb6307683b55b24366852aa56a774bd4542e5e20d468537cadfdd8f84 Loading...

	www.5gtox.top/	449 B	2023-04-05	2024-05-13
Pretty URL www.5gtox.top/ IP 35.244.161.158 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 07:24:51 Last Seen2024-05-13 15:07:41 Times Seen593 Hash ab3ca60b682d769e885a3bf4a2ee8ecd e57913130b5789d522b4bae431a84491b305ebd5 d6d517048076dc1da710b3ee5c68f29ca8a3580b38e1f34dd85a6da8a1887990 Loading...

	www.5gtox.top/	2.3 kB	2023-10-13	2024-05-13
Pretty URL www.5gtox.top/ IP 35.244.161.158 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-13 14:14:48 Last Seen2024-05-13 15:07:41 Times Seen358 Hash 2009f8b88f747f0537a9ec85795925e3 0061ae929d4514ee623468467b4f4b46be1b357e 9ba19171a6704fcc9bcc259ecdb250cb2772fa1f7f8a913f3e925f4ded0398a3 Loading...

	g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js	5.3 kB	2023-04-11	2024-05-20
Pretty URL g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js IP 163.181.56.189 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 23:26:24 Last Seen2024-05-20 15:11:16 Times Seen1406 Hash 2edd3ece2d4fdebb930c640f8011a567 bd2ff2c0a0e98a7ddb2449e2afe00a68d16ffc12 0be039408b767c620542ae7d66781537712fe8096253922e09fb3082a62730f8 Loading...

	www.5gtox.top/	677 B	2023-04-05	2024-05-20
Pretty URL www.5gtox.top/ IP 35.244.161.158 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 07:24:51 Last Seen2024-05-20 15:11:16 Times Seen708 Hash ae122dace4d89339aac7bf0935fa98ac bf26669156d4f51d455cc7480351e40e0e7bdc4e 0d1de7a4d187b4decc1bd1c92787b34c200b00fd20964d5206a7d69f2377e4e1 Loading...

	hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc	30 kB	2024-05-10	2024-05-10
Pretty URL hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc IP 111.45.11.83 ASN #56040 China Mobile communications corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 09:08:05 Last Seen2024-05-10 09:08:05 Times Seen2 Hash 0172446de303a3ba572ba8d815192c30 c94bfa5b5ba339ea55b44e30e6d4c7bf5eabb66e b087099acc0c1fb0f4963e1ea7733da2bb5cf20da65d30e611452adaa9f924da Loading...

	unknown	37 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:49:14 Last Seen2024-05-20 21:44:56 Times Seen22714 Hash 1c5c9160600df2d96d69a4ea16cec7ed 3cf678c9135cc952ba6970ef545035bb757a443f a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808 Loading...

	g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js	41 kB	2023-10-31	2024-05-20
Pretty URL g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js IP 163.181.56.189 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-31 06:22:05 Last Seen2024-05-20 15:11:16 Times Seen767 Hash 995c173aa043d3cc1d774ca298a71b74 65b6edb7a721a8312de14f1dd78df2c6d13658b4 ed55450c5fd25afc4812912061a313704f155a507e302921a9513df81c9e493f Loading...

	g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js	5.8 kB	2023-04-11	2024-05-20
Pretty URL g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js IP 163.181.56.189 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 23:26:24 Last Seen2024-05-20 15:11:16 Times Seen1405 Hash 9f681b53980381f708c2787b4961b8e7 8fa2a66468a3db33ae1b10cdabd9de88c20211b9 ff81aa49e48452dc0d382124bf6277a29977a95743711b268eb7a76849cd225a Loading...

	www.5gtox.top/	131 B	2023-04-05	2024-05-20
Pretty URL www.5gtox.top/ IP 35.244.161.158 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 07:24:51 Last Seen2024-05-20 15:11:16 Times Seen708 Hash 082e61361a0fa61cdf282c8599c93c4e 370261194ab560873a389f7759e45e9ed076ef7d 1f917b159803690dbd11d6b1920842e2eacb2f87f1c28ca0ed7fe7cf714d9e12 Loading...

	image.uc.cn/s/uae/g/3o/berg/static/archer_index.e96dc6dc6863835f4ad0.js	33 kB	2024-01-20	2024-05-13
Pretty URL image.uc.cn/s/uae/g/3o/berg/static/archer_index.e96dc6dc6863835f4ad0.js IP 47.246.3.234 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-20 13:54:08 Last Seen2024-05-13 15:07:41 Times Seen116 Hash 61da0dd4fe144aeea55c1180bcc8401b 1b96d8e5c436d163d36a72b07c205b1e529dbbd7 dbf8ba66348e1bf2450dc819100258c9f27bf477abcf13dc31222497c6e7b1df Loading...

HTTP Transactions (13)

URL IP Response Size

www.5gtox.top/

35.244.161.158

200 OK

2.4 kB

URL User Request GET HTTP/1.1
www.5gtox.top/
IP
35.244.161.158:80
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4989), with no line terminators
Size
2.4 kB (2430 bytes)
Hash
7d0130e46c8df2c5de0bc87d78428504
4d203022aa2f3c51934e1d6332a3ac70889f93a2
6b88a654786e12b5611adf4ab411cda582ed19fa482f3fe797a3f2486f01146c

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET / HTTP/1.1
Host: www.5gtox.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 10 May 2024 07:07:34 GMT
Content-Type: text/html
Last-Modified: Mon, 15 Jan 2024 02:08:28 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"65a4939c-1429"
Cache-Control: no-cache
Content-Encoding: gzip
Via: 1.1 google

g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js

163.181.56.189

200 OK

2.6 kB

URL GET HTTP/2
g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js
IP
163.181.56.189:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2
ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (5721), with no line terminators
Size
2.6 kB (2591 bytes)
Hash
9f681b53980381f708c2787b4961b8e7
8fa2a66468a3db33ae1b10cdabd9de88c20211b9
ff81aa49e48452dc0d382124bf6277a29977a95743711b268eb7a76849cd225a

HTTP Headers

GET /woodpeckerx/jssdk/plugins/performance.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.5gtox.top
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 2591
date: Fri, 10 May 2024 07:02:37 GMT
vary: Accept-Encoding
x-oss-request-id: 663DC68D989F15333744CCA4
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10730233764925966105
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: n2gbU5gDgfcIwnh7SWG45w==
x-oss-server-time: 2
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1715324557
via: cache25.l2de2[0,0,200-0,H], cache12.l2de2[1,0], cache12.l2de2[1,0], ens-cache1.de4[0,0,200-0,H], ens-cache1.de4[2,0]
age: 297
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 10 May 2024 07:03:49 GMT
x-swift-cachetime: 528
timing-allow-origin: *
eagleid: 2ff62b1917153248544006044e
X-Firefox-Spdy: h2

g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js

163.181.56.189

200 OK

2.4 kB

URL GET HTTP/2
g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js
IP
163.181.56.189:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2
ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (5084), with no line terminators
Size
2.4 kB (2356 bytes)
Hash
2edd3ece2d4fdebb930c640f8011a567
bd2ff2c0a0e98a7ddb2449e2afe00a68d16ffc12
0be039408b767c620542ae7d66781537712fe8096253922e09fb3082a62730f8

HTTP Headers

GET /woodpeckerx/jssdk/plugins/globalerror.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.5gtox.top
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 2356
date: Fri, 10 May 2024 07:02:37 GMT
vary: Accept-Encoding
x-oss-request-id: 663DC68D76D4203639B16726
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16649164976846769012
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: Lt0+zi1P3ruTDGQPgBGlZw==
x-oss-server-time: 2
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1715324557
via: cache8.l2de2[0,0,200-0,H], cache12.l2de2[1,0], cache12.l2de2[1,0], ens-cache1.de4[0,0,200-0,H], ens-cache1.de4[2,0]
age: 297
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 10 May 2024 07:03:49 GMT
x-swift-cachetime: 528
timing-allow-origin: *
eagleid: 2ff62b1917153248544016052e
X-Firefox-Spdy: h2

image.uc.cn/s/uae/g/3o/berg/static/archer_index.e96dc6dc6863835f4ad0.js

47.246.3.234

200 OK

10 kB

URL GET HTTP/2
image.uc.cn/s/uae/g/3o/berg/static/archer_index.e96dc6dc6863835f4ad0.js
IP
47.246.3.234:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.uc.cn
FingerprintEF:76:66:0B:BC:06:CB:DC:CA:4F:DB:1A:04:75:36:84:9F:9A:72:F3
ValidityFri, 05 Jan 2024 01:56:02 GMT - Wed, 05 Feb 2025 01:56:01 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (24209)
Size
10 kB (10341 bytes)
Hash
61da0dd4fe144aeea55c1180bcc8401b
1b96d8e5c436d163d36a72b07c205b1e529dbbd7
dbf8ba66348e1bf2450dc819100258c9f27bf477abcf13dc31222497c6e7b1df

HTTP Headers

GET /s/uae/g/3o/berg/static/archer_index.e96dc6dc6863835f4ad0.js HTTP/1.1
Host: image.uc.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: text/javascript
content-length: 10341
date: Thu, 21 Mar 2024 23:06:26 GMT
expires: Tue, 12 Dec 2023 22:08:06 GMT
cache-control: max-age=8640000
access-control-allow-origin: *
ali-swift-global-savetime: 1711062386
via: cache1.l2fr1[0,0,304-0,H], cache38.l2fr1[1,0], cache3.ru4[0,0,200-0,H], cache6.ru4[0,0]
vary: Accept-Encoding
etag: ae54e074-7f5e
content-encoding: gzip
age: 66
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 07 May 2024 05:46:31 GMT
x-swift-cachetime: 4641595
timing-allow-origin: *
eagleid: 2ff6039a17153248544505389e
X-Firefox-Spdy: h2

g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js

163.181.56.189

200 OK

15 kB

URL GET HTTP/2
g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js
IP
163.181.56.189:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2
ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (39989), with no line terminators
Size
15 kB (14747 bytes)
Hash
995c173aa043d3cc1d774ca298a71b74
65b6edb7a721a8312de14f1dd78df2c6d13658b4
ed55450c5fd25afc4812912061a313704f155a507e302921a9513df81c9e493f

HTTP Headers

GET /woodpeckerx/jssdk/wpkReporter.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.5gtox.top
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 14747
date: Fri, 10 May 2024 07:01:28 GMT
vary: Accept-Encoding
x-oss-request-id: 663DC648CDAAFE31332B6D9C
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17575337766638963859
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: mVwXOqBD08wdd0yimKcbdA==
x-oss-server-time: 1
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1715324488
via: cache25.l2de2[0,0,200-0,H], cache14.l2de2[0,0], cache14.l2de2[1,0], ens-cache2.de4[0,0,200-0,H], ens-cache1.de4[1,0]
age: 366
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 10 May 2024 07:01:48 GMT
x-swift-cachetime: 580
timing-allow-origin: *
eagleid: 2ff62b1917153248544026053e
X-Firefox-Spdy: h2

image.uc.cn/s/uae/g/3o/berg/static/index.c4bc5b38d870fecd8a1f.css

47.246.3.234

200 OK

937 B

URL GET HTTP/2
image.uc.cn/s/uae/g/3o/berg/static/index.c4bc5b38d870fecd8a1f.css
IP
47.246.3.234:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.uc.cn
FingerprintEF:76:66:0B:BC:06:CB:DC:CA:4F:DB:1A:04:75:36:84:9F:9A:72:F3
ValidityFri, 05 Jan 2024 01:56:02 GMT - Wed, 05 Feb 2025 01:56:01 GMT

File type
ASCII text, with very long lines (2179), with no line terminators
Size
937 B (937 bytes)
Hash
09bdfbcc9456faf8a85a94d44ef7734d
e3d00a7df14bc13abb5bd31caa58f1e4be17ede0
05ef687cb9294988df06df1c39cc1e84a26f29f26735c6948978347ed7927fc8

HTTP Headers

GET /s/uae/g/3o/berg/static/index.c4bc5b38d870fecd8a1f.css HTTP/1.1
Host: image.uc.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: text/css
content-length: 937
date: Wed, 24 Apr 2024 04:11:22 GMT
expires: Tue, 20 Feb 2024 18:23:06 GMT
cache-control: max-age=8640000
access-control-allow-origin: *
ali-swift-global-savetime: 1713931882
via: cache24.l2fr1[0,0,304-0,H], cache6.l2fr1[1,0], cache10.ru4[0,0,200-0,H], cache6.ru4[1,0]
vary: Accept-Encoding
etag: b589311b-883
content-encoding: gzip
age: 66
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 07 May 2024 05:39:29 GMT
x-swift-cachetime: 7511513
timing-allow-origin: *
eagleid: 2ff6039a17153248547155575e
X-Firefox-Spdy: h2

px.effirst.com/api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1715324854%26ud%3D94ea07e7-5b4a-41c4-919c-78715653f313%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce

111.63.205.165

200 OK

130 B

URL GET HTTP/1.1
px.effirst.com/api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1715324854%26ud%3D94ea07e7-5b4a-41c4-919c-78715653f313%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce
IP
111.63.205.165:80
ASN
#24547 Hebei Mobile Communication Company Limited

Requested by
http://www.5gtox.top/

File type
JSON text data
Size
130 B (130 bytes)
Hash
8a46bb6723144792c02515bd25ac87ab
b2e7fa5d196eb21b6a4f92c282a0f27afe35ba54
f8e66f4dd7a88c792357ed6ee9117fda40a72a47b99f23ac1600e8fb34ab40b6

HTTP Headers

GET /api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1715324854%26ud%3D94ea07e7-5b4a-41c4-919c-78715653f313%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.5gtox.top
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Fri, 10 May 2024 07:07:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip

www.5gtox.top/favicon.ico

35.244.161.158

404 Not Found

153 B

URL GET HTTP/1.1
www.5gtox.top/favicon.ico
IP
35.244.161.158:80
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
http://www.5gtox.top/

File type
HTML document, ASCII text, with CRLF line terminators
Size
153 B (153 bytes)
Hash
a53e183b2c571a68b246ad570b76da19
7eac95d26ba1e92a3b4d6fd47ee057f00274ac13
29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.5gtox.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Cookie: __wpkreporterwid_=63b13ead-5bbd-4e5f-394f-79841e57e8cf
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.20.2
Date: Fri, 10 May 2024 07:07:35 GMT
Content-Type: text/html
Content-Length: 153
Via: 1.1 google

track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=www.5gtox.top&url=http%3A%2F%2Fwww.5gtox.top%2F&cookie=__wpkreporterwid_%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf&time=1715324854838&entry=&_ua=Mozilla%2F5.0+(X11%3B+Linux+x86_64%3B+rv%3A96.0)+Gecko%2F20100101+Firefox%2F96.0&isUC=false&isQuark=false&is_duannei=false&lt=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv

123.182.51.94

200

33 B

URL GET HTTP/1.1
track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=www.5gtox.top&url=http%3A%2F%2Fwww.5gtox.top%2F&cookie=__wpkreporterwid_%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf&time=1715324854838&entry=&_ua=Mozilla%2F5.0+(X11%3B+Linux+x86_64%3B+rv%3A96.0)+Gecko%2F20100101+Firefox%2F96.0&isUC=false&isQuark=false&is_duannei=false&lt=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
IP
123.182.51.94:443
ASN
#141771 China Telecom

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.uc.cn
FingerprintEF:76:66:0B:BC:06:CB:DC:CA:4F:DB:1A:04:75:36:84:9F:9A:72:F3
ValidityFri, 05 Jan 2024 01:56:02 GMT - Wed, 05 Feb 2025 01:56:01 GMT

File type
JSON text data
Size
33 B (33 bytes)
Hash
55199048ae64f13bfc67cd2fec307e1a
0febd20edc3ebbaa60bf312be0e1d977ddd3a319
7c677a0c1ba67a4335c821aa3af6031428be641e33887fc719ce8f52f926898d

HTTP Headers

GET /collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=www.5gtox.top&url=http%3A%2F%2Fwww.5gtox.top%2F&cookie=__wpkreporterwid_%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf&time=1715324854838&entry=&_ua=Mozilla%2F5.0+(X11%3B+Linux+x86_64%3B+rv%3A96.0)+Gecko%2F20100101+Firefox%2F96.0&isUC=false&isQuark=false&is_duannei=false&lt=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv HTTP/1.1
Host: track.uc.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Fri, 10 May 2024 07:07:35 GMT
Content-Type: image/avif;charset=UTF-8
Content-Length: 33
Connection: keep-alive
Server: Tengine/2.1.3_400
Cache-Control: no-cache
Access-Control-Allow-Origin: *

track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first&lt=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=www.5gtox.top&url=http%3A%2F%2Fwww.5gtox.top%2F&cookie=__wpkreporterwid_%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf&time=1715324854821&entry=&_ua=Mozilla%2F5.0+(X11%3B+Linux+x86_64%3B+rv%3A96.0)+Gecko%2F20100101+Firefox%2F96.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv

123.182.51.196

200

33 B

URL GET HTTP/1.1
track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first&lt=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=www.5gtox.top&url=http%3A%2F%2Fwww.5gtox.top%2F&cookie=__wpkreporterwid_%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf&time=1715324854821&entry=&_ua=Mozilla%2F5.0+(X11%3B+Linux+x86_64%3B+rv%3A96.0)+Gecko%2F20100101+Firefox%2F96.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
IP
123.182.51.196:443
ASN
#141771 China Telecom

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subject*.uc.cn
FingerprintEF:76:66:0B:BC:06:CB:DC:CA:4F:DB:1A:04:75:36:84:9F:9A:72:F3
ValidityFri, 05 Jan 2024 01:56:02 GMT - Wed, 05 Feb 2025 01:56:01 GMT

File type
JSON text data
Size
33 B (33 bytes)
Hash
55199048ae64f13bfc67cd2fec307e1a
0febd20edc3ebbaa60bf312be0e1d977ddd3a319
7c677a0c1ba67a4335c821aa3af6031428be641e33887fc719ce8f52f926898d

HTTP Headers

GET /collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first&lt=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=www.5gtox.top&url=http%3A%2F%2Fwww.5gtox.top%2F&cookie=__wpkreporterwid_%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf&time=1715324854821&entry=&_ua=Mozilla%2F5.0+(X11%3B+Linux+x86_64%3B+rv%3A96.0)+Gecko%2F20100101+Firefox%2F96.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv HTTP/1.1
Host: track.uc.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Fri, 10 May 2024 07:07:36 GMT
Content-Type: image/avif;charset=UTF-8
Content-Length: 33
Connection: keep-alive
Server: Tengine/2.1.3_400
Cache-Control: no-cache
Access-Control-Allow-Origin: *

hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc

111.45.11.83

200 OK

11 kB

URL GET HTTP/1.1
hm.baidu.com/hm.js?42296466acbd6a1e84224ab1433a06cc
IP
111.45.11.83:443
ASN
#56040 China Mobile communications corporation

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
JavaScript source, ASCII text, with very long lines (622)
Size
11 kB (11260 bytes)
Hash
0172446de303a3ba572ba8d815192c30
c94bfa5b5ba339ea55b44e30e6d4c7bf5eabb66e
b087099acc0c1fb0f4963e1ea7733da2bb5cf20da65d30e611452adaa9f924da

HTTP Headers

GET /hm.js?42296466acbd6a1e84224ab1433a06cc HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11260
Content-Type: application/javascript
Date: Fri, 10 May 2024 07:07:36 GMT
Etag: 9c6919c3cc5e961f794cf9b0b58e83ab
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=8D9EFB33F0C174DB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1730544541&si=42296466acbd6a1e84224ab1433a06cc&v=1.3.0&lv=1&sn=11767&r=0&ww=1280&u=http%3A%2F%2Fwww.5gtox.top%2F&tt=www.5gtox.top

111.45.11.83

200 OK

43 B

URL GET HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1730544541&si=42296466acbd6a1e84224ab1433a06cc&v=1.3.0&lv=1&sn=11767&r=0&ww=1280&u=http%3A%2F%2Fwww.5gtox.top%2F&tt=www.5gtox.top
IP
111.45.11.83:443
ASN
#56040 China Mobile communications corporation

Requested by
http://www.5gtox.top/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1730544541&si=42296466acbd6a1e84224ab1433a06cc&v=1.3.0&lv=1&sn=11767&r=0&ww=1280&u=http%3A%2F%2Fwww.5gtox.top%2F&tt=www.5gtox.top HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 10 May 2024 07:07:37 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=8661322CE8EF1BFB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1715324857310%26tm%3D1715324857%26ud%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf%26ver%3D2.42.1%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b

111.63.205.165

200 OK

20 B

URL POST HTTP/1.1
px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1715324857310%26tm%3D1715324857%26ud%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf%26ver%3D2.42.1%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b
IP
111.63.205.165:80
ASN
#24547 Hebei Mobile Communication Company Limited

Requested by
http://www.5gtox.top/

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

HTTP Headers

POST /api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1715324857310%26tm%3D1715324857%26ud%3D63b13ead-5bbd-4e5f-394f-79841e57e8cf%26ver%3D2.42.1%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 887
Origin: http://www.5gtox.top
DNT: 1
Connection: keep-alive
Referer: http://www.5gtox.top/

HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Fri, 10 May 2024 07:07:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by