Report - czyfzb.com/html/cp/54.htm

Report Overview

Submitted URL
czyfzb.com/html/cp/54.htm
IP
23.225.23.85
ASN
#40065 CNSERVERS
Submitted
2024-04-25 13:56:52
Access
public
Website Title
系统发生错误
Final URL
czyfzb.com/html/cp/54.htm?fibgxq=pnlpw
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
czyfzb.com	unknown	2017-05-06	2021-01-29	2021-01-29	1.3 kB	3.6 kB	23.225.23.85

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	czyfzb.com	Sinkholed
2024-04-25	medium	czyfzb.com	Sinkholed
2024-04-25	medium	czyfzb.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

		Size	First Seen	Last Seen
	#1 Eval - ca0e4e9475a071ff6ff2028f31054ab6	15 B	2023-07-19	2024-04-25
Pretty Observations First Seen2023-07-19 20:39:32 Last Seen2024-04-25 15:56:56 Times Seen2 Hash ca0e4e9475a071ff6ff2028f31054ab6 ba4af6bf9c0f24a5bca00eed18802c559b7a6122 f7102eeeec2476d52651d0e8526886e46bf9c778ca525589c1b988d3c5690ee6 Loading...

	#2 Eval - 6323742eb0d3fa38d81413019cd0f7a7	49 B	2024-04-25	2024-04-25
Pretty Observations First Seen2024-04-25 15:56:56 Last Seen2024-04-25 15:56:56 Times Seen1 Hash 6323742eb0d3fa38d81413019cd0f7a7 ec75c41da01167d20bc8c54d9498830bcb3dbcc7 6f221efb20243714dc10c777e49152fcabca3f3d577243c3acaf144549f3f00d Loading...

	#3 Eval - 2702e9f18481833c9291b7e203384699	71 B	2024-04-25	2024-04-25
Pretty Observations First Seen2024-04-25 15:56:56 Last Seen2024-04-25 15:56:56 Times Seen1 Hash 2702e9f18481833c9291b7e203384699 e9f7c200c1ea0b7571cc67cc5e47993b60fb0178 1d1cc90c66c5127357352f3bc1c2a95b21605601736405f18b3189a92c06ff46 Loading...

HTTP Transactions (3)

URL IP Response Size

czyfzb.com/html/cp/54.htm

23.225.23.85

930 B

URL
czyfzb.com/html/cp/54.htm
IP
23.225.23.85:0
ASN
#40065 CNSERVERS

File type
HTML document, ASCII text, with very long lines (930), with no line terminators
Size
930 B (930 bytes)
Hash
4963c37db1b397df4d02794adc22e77d
78ba265ba4b394ee87218975e49b017b20e452b3
2c94900d7f014b3b8260164bc631be413f3fa3fe2737a080d0f4a58aeb9d6963

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /html/cp/54.htm HTTP/1.1
Host: czyfzb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 930
Pragma: no-cache
Cache-control: no-store

czyfzb.com/html/cp/54.htm?fibgxq=pnlpw

23.225.23.85

404 Not Found

2.0 kB

URL User Request GET HTTP/1.1
czyfzb.com/html/cp/54.htm?fibgxq=pnlpw
IP
23.225.23.85:80
ASN
#40065 CNSERVERS

File type
HTML document, Unicode text, UTF-8 text
Size
2.0 kB (2018 bytes)
Hash
a77e41362ec2a9405d49e6b093205e2a
78135040bad940b7271f0a64c629e4afda583740
efd9667136bdea0a16933b8056f9e4dd5379e17cfb37f4acf53f91fe1e9f93f1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /html/cp/54.htm?fibgxq=pnlpw HTTP/1.1
Host: czyfzb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://czyfzb.com/html/cp/54.htm
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: openresty
Date: Thu, 25 Apr 2024 13:56:27 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=e3fc6c77722f0456a72d1b5916116e62; path=/
Content-Encoding: gzip

czyfzb.com/favicon.ico

23.225.23.85

200 OK

57 B

URL GET HTTP/1.1
czyfzb.com/favicon.ico
IP
23.225.23.85:80
ASN
#40065 CNSERVERS

Requested by
http://czyfzb.com/html/cp/54.htm?fibgxq=pnlpw

File type
HTML document, ASCII text, with no line terminators
Size
57 B (57 bytes)
Hash
39610561c159a7de5cbf3cebdceb8e90
306235cc07ef94883261a62bd329b28983d0f225
4bf7e7e6c78c1a69def4beef216ad52dbabae1f831f49067e3b29f8a7a62d71e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: czyfzb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://czyfzb.com/html/cp/54.htm?fibgxq=pnlpw
Cookie: PHPSESSID=e3fc6c77722f0456a72d1b5916116e62
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 25 Apr 2024 13:56:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers