WEBSITE ANALYSIS REPORT

http://www.35518236365.com/

10 Aug 2026 · 03:46:33.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

03:46:02.910 GET No response document 0 B 0 ms 4 alerts

03:46:05.832 GET 200 document 1.0 KB 472 ms 4 alerts

03:46:06.403 GET 200 script 0 B 0 ms —

03:46:06.888 GET 200 document 5.9 KB 1874 ms 4 alerts

03:46:08.963 GET 200 stylesheet 53.8 KB 1063 ms 4 alerts

03:46:08.964 GET 200 stylesheet 5.9 KB 1061 ms 4 alerts

03:46:08.965 GET 200 script 91.7 KB 1590 ms 4 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://365756zxd.com/js/jquery-1.7.1.min.js

IP / ASN

103.255.47.25

AS133201 · ABCDE GROUP

Requested by: https://365756zxd.com/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)
MIME type: application/javascript
First seen (UTC): 07 Mar 2023 · 01:03:13.000 UTC
Last seen (UTC): 21 Oct 2026 · 13:23:00.401 UTC
Times seen: 20835

Size: 91.7 KB (93868 bytes)
MD5: ddb84c1587287b2df08966081ef063bf
SHA1: 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f
SHA256: 88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd

Certificate information

Issuer: Asseco Data Systems S.A. · Certum DV TLS G2 R39 CA
Subject: 365756l.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SHA1 fingerprint: 5D:F8:FE:AD:6E:6B:8F:13:30:86:70:18:D7:E7:42:23:D2:1A:B6:52
Valid from: Mon, 13 Oct 2025 07:57:15 GMT
Valid until: Thu, 12 Nov 2026 07:57:14 GMT

Technology fingerprints

IIS:10.0 (Web servers)
Windows Server (Operating systems)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing

HTTP headers

Request headers

GET /js/jquery-1.7.1.min.js HTTP/1.1
Host: 365756zxd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://365756zxd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
content-type: application/javascript
last-modified: Tue, 30 Jan 2018 17:39:52 GMT
accept-ranges: bytes
etag: "0643b55f199d31:0"
server: Microsoft-IIS/10.0
date: Mon, 10 Aug 2026 03:46:08 GMT
content-length: 93868
X-Firefox-Spdy: h2

03:46:09.000 GET 200 img 1.3 KB 1556 ms 4 alerts

03:46:10.588 GET 200 img 356.5 KB 2385 ms 4 alerts

03:46:10.616 GET 200 img 66.3 KB 2356 ms 4 alerts

03:46:10.618 GET 200 img 9.4 KB 2089 ms 4 alerts

03:46:10.620 GET 200 img 9.3 KB 2353 ms 4 alerts

03:46:11.045 GET 404 img 1.1 KB 1927 ms 4 alerts

03:46:30.641 GET No response document 0 B 0 ms 2 alerts

http://www.35518236365.com/

Domain graph

Hostnames

Connections