Report - jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc

Report Overview

Submitted URL
jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
IP
202.95.15.89
ASN
#64050 BGPNET Global ASN
Submitted
2024-04-17 21:56:41
Access
public
Website Title
jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Final URL
jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Tags
mercari e-commerce phishing
urlquery detections
Phishing - Mercari

Detections

urlquery
7
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jierui1.cn	unknown	unknown	No data	No data	12 kB	1.3 MB	202.95.15.89
cdn.bootcdn.net	87757	2014-08-02	2019-03-12	2024-04-16	450 B	14 kB	104.18.51.222

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/	0 B	2023-03-07	2024-04-30
Pretty URL jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/ IP 202.95.15.89 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 13:15:21 Times Seen37213558 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	jierui1.cn/js/app.js	445 kB	2023-03-26	2024-04-18
Pretty URL jierui1.cn/js/app.js IP 202.95.15.89 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:39:31 Last Seen2024-04-18 19:17:14 Times Seen19 Hash ffec99d63411f947cfd7c825b81a944a 825542350d3a05fbef68b7e315aadd811810a30c 671b4d0652d6595864464801ef0219bedd8fc821e41381d5648a361a0225b733 Loading...

	jierui1.cn/js/site-jquery.min.js	93 kB	2023-03-07	2024-04-30
Pretty URL jierui1.cn/js/site-jquery.min.js IP 202.95.15.89 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:12 Last Seen2024-04-30 07:24:50 Times Seen411 Hash ec0038e66fccbe388685ec3cc98ccf80 371a235a8e735bbdc3ba0207fb1af7fcd6b809d4 5994332aadd364a7350ad226ef61c1c75dc97372f739e01682e190be3abaf672 Loading...

	jierui1.cn/js/layui.js	291 kB	2023-03-07	2024-04-30
Pretty URL jierui1.cn/js/layui.js IP 202.95.15.89 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:12:06 Last Seen2024-04-30 08:21:53 Times Seen2552 Hash 283f389e9b4f41b323ca7cf7bdd8b46a b6e72add2fa95aa177e6fe807b875c9a7f22bc5c bbfe1536a99000acceb61f549aa59354cc596efc9f10d3843aab6b273f5adb1e Loading...

HTTP Transactions (23)

URL IP Response Size

jierui1.cn/img/logo_login.svg

202.95.15.89

200 OK

2.4 kB

URL GET HTTP/2
jierui1.cn/img/logo_login.svg
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
SVG Scalable Vector Graphics image
Size
2.4 kB (2355 bytes)
Hash
6761cf5f98cc93627bb2007b32a637b8
248123f5a1e59a195215596541f6628a058e97d1
f4c823301da0441f633837b7b207f4711269ff5c49e8d82f66df3324031a30cc

HTTP Headers

GET /img/logo_login.svg HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: image/svg+xml
content-length: 2355
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
etag: "61487fba-933"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/

202.95.15.89

200 OK

2.5 kB

URL User Request GET HTTP/2
jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
gzip compressed data, from Unix
Size
2.5 kB (2526 bytes)
Hash
18924cfa36ed0674e2f027160cfd0a69
7449cf59dd636b2c3e0c22efa0319408a4b12784
a2f2a4706377b38702efff45453af395688e0fd671bf2af470cda02462d0c14f

HTTP Headers

GET /login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/ HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

jierui1.cn/img/apple.png

202.95.15.89

200 OK

512 B

URL GET HTTP/2
jierui1.cn/img/apple.png
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Size
512 B (512 bytes)
Hash
b3b6f5d34559adc687537ddc81f2c44d
135e36f66f4616cb46e621c252a00d9ddf181cb9
710af163fbc86ed27b4012f2df34df1efc19ef7b24875f3a7fa776b4cd48fcbc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Mercari

HTTP Headers

GET /img/apple.png HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: image/png
content-length: 512
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
etag: "61487fba-200"
expires: Fri, 17 May 2024 21:56:17 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

jierui1.cn/img/logo-gray.svg

202.95.15.89

200 OK

2.3 kB

URL GET HTTP/2
jierui1.cn/img/logo-gray.svg
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
SVG Scalable Vector Graphics image
Size
2.3 kB (2302 bytes)
Hash
e6cc370ea3c907ac5486f772698326de
614d02483aadc6ab7f531bfb411bb0449fc8d3ab
0f34f7d169129d40b428ac87ea520dce5c3acafe7d25699aaddf13a3b381d150

HTTP Headers

GET /img/logo-gray.svg HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: image/svg+xml
content-length: 2302
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
etag: "61487fba-8fe"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

jierui1.cn/js/css/modules/laydate/default/laydate.css?v=5.3.1

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/js/css/modules/laydate/default/laydate.css?v=5.3.1
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /js/css/modules/laydate/default/laydate.css?v=5.3.1 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/js/css/modules/layer/default/layer.css?v=3.5.1

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/js/css/modules/layer/default/layer.css?v=3.5.1
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /js/css/modules/layer/default/layer.css?v=3.5.1 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/js/css/modules/code.css?v=2

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/js/css/modules/code.css?v=2
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /js/css/modules/code.css?v=2 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/img/google.svg

202.95.15.89

200 OK

3.9 kB

URL GET HTTP/2
jierui1.cn/img/google.svg
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
SVG Scalable Vector Graphics image
Size
3.9 kB (3890 bytes)
Hash
c294817d1be0eddb16ecf6ff7714b43e
84fa6a65ad3aa6d69164d99e4b7bff1da32a5a8f
872b4ec42cabd91533ce3bf8b71c0c682cf5341a0ec7931670654fd356176d8a

HTTP Headers

GET /img/google.svg HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: image/svg+xml
content-length: 3890
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
etag: "61487fba-f32"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

jierui1.cn/jp/assets/fonts/SourceSansPro-Semibold.ttf.woff2?52591824

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/jp/assets/fonts/SourceSansPro-Semibold.ttf.woff2?52591824
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /jp/assets/fonts/SourceSansPro-Semibold.ttf.woff2?52591824 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.ttf.woff2?52591824

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.ttf.woff2?52591824
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /jp/assets/fonts/SourceSansPro-Regular.ttf.woff2?52591824 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/jp/assets/fonts/SourceSansPro-Semibold.ttf.woff2?52591824

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/jp/assets/fonts/SourceSansPro-Semibold.ttf.woff2?52591824
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /jp/assets/fonts/SourceSansPro-Semibold.ttf.woff2?52591824 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.ttf.woff2?52591824

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.ttf.woff2?52591824
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /jp/assets/fonts/SourceSansPro-Regular.ttf.woff2?52591824 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:18 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/jp/assets/fonts/SourceSansPro-Semibold.otf.woff?52591824

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/jp/assets/fonts/SourceSansPro-Semibold.otf.woff?52591824
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /jp/assets/fonts/SourceSansPro-Semibold.otf.woff?52591824 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:19 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.otf.woff?52591824

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.otf.woff?52591824
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /jp/assets/fonts/SourceSansPro-Regular.otf.woff?52591824 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:19 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.ttf?52591824

202.95.15.89

404 Not Found

146 B

URL GET HTTP/2
jierui1.cn/jp/assets/fonts/SourceSansPro-Regular.ttf?52591824
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /jp/assets/fonts/SourceSansPro-Regular.ttf?52591824 HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/css/app.jp.css
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 21:56:19 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

jierui1.cn/img/apple-touch-icon-57x57.png

202.95.15.89

200 OK

459 B

URL GET HTTP/2
jierui1.cn/img/apple-touch-icon-57x57.png
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
PNG image data, 57 x 57, 8-bit colormap, non-interlaced
Size
459 B (459 bytes)
Hash
5e2e69387ba4731fd2b9a98710917e04
6d0c15d095534f4587ac3dd34f50a6dac54a687d
e7d84e0b583def03750630bfe2bcdb2d8a1c556f0350f8a7a99b68abd2f4fa8b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Mercari

HTTP Headers

GET /img/apple-touch-icon-57x57.png HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:19 GMT
content-type: image/png
content-length: 459
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
etag: "61487fba-1cb"
expires: Fri, 17 May 2024 21:56:19 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

jierui1.cn/img/favicon-32x32.png

202.95.15.89

200 OK

482 B

URL GET HTTP/2
jierui1.cn/img/favicon-32x32.png
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
482 B (482 bytes)
Hash
7425bb5129cf5c20d1afc9c9784363b1
c445498bcb97b9823d159d5c583b7a1d012d0845
81575bbe001962298e2cf35f6f77bf11b3cd1fed5fc19bc39ff123e9c8d7ec2f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Mercari

HTTP Headers

GET /img/favicon-32x32.png HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:19 GMT
content-type: image/png
content-length: 482
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
etag: "61487fba-1e2"
expires: Fri, 17 May 2024 21:56:19 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

jierui1.cn/js/site-jquery.min.js

202.95.15.89

200 OK

93 kB

URL GET HTTP/2
jierui1.cn/js/site-jquery.min.js
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
JavaScript source, ASCII text, with very long lines (32056), with CRLF line terminators
Size
93 kB (93024 bytes)
Hash
ec0038e66fccbe388685ec3cc98ccf80
371a235a8e735bbdc3ba0207fb1af7fcd6b809d4
5994332aadd364a7350ad226ef61c1c75dc97372f739e01682e190be3abaf672

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Mercari

HTTP Headers

GET /js/site-jquery.min.js HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: application/javascript
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
vary: Accept-Encoding
etag: W/"61487fba-16b60"
expires: Thu, 18 Apr 2024 09:56:17 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

jierui1.cn/css/app.jp.css

202.95.15.89

200 OK

469 kB

URL GET HTTP/2
jierui1.cn/css/app.jp.css
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type

Size
469 kB (469044 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /css/app.jp.css HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: text/css
last-modified: Mon, 20 Sep 2021 12:34:00 GMT
vary: Accept-Encoding
etag: W/"61487fb8-72834"
expires: Thu, 18 Apr 2024 09:56:17 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

cdn.bootcdn.net/ajax/libs/layer/3.5.1/theme/default/layer.min.css

104.18.51.222

200 OK

14 kB

URL GET HTTP/2
cdn.bootcdn.net/ajax/libs/layer/3.5.1/theme/default/layer.min.css
IP
104.18.51.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectcdn.bootcdn.net
Fingerprint75:E5:37:45:23:DC:2F:23:A7:AD:C4:C3:B8:FB:BA:13:7E:77:A7:C0
ValidityFri, 12 Apr 2024 08:07:42 GMT - Thu, 11 Jul 2024 08:07:41 GMT

File type
ASCII text, with very long lines (13770), with no line terminators
Size
14 kB (13770 bytes)
Hash
cc95560d6c0b155a346306a4d57a711d
ede90187e1bb80fd038d42a6bc3d94f4d5224947
f99199228144a11b7adda7dad83f11c366ecb6f530ba8a352fb155bc0e58fc0e

HTTP Headers

GET /ajax/libs/layer/3.5.1/theme/default/layer.min.css HTTP/1.1
Host: cdn.bootcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: text/css
last-modified: Mon, 21 Jun 2021 05:29:55 GMT
vary: Accept-Encoding
etag: W/"60d023d3-35ca"
expires: Thu, 17 Apr 2025 21:56:17 GMT
cache-control: public, max-age=31536000
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, Token
content-encoding: gzip
cf-cache-status: HIT
server: cloudflare
cf-ray: 875faa08ceb2b505-OSL
X-Firefox-Spdy: h2

jierui1.cn/js/layui.js

202.95.15.89

200 OK

291 kB

URL GET HTTP/2
jierui1.cn/js/layui.js
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
291 kB (291290 bytes)
Hash
283f389e9b4f41b323ca7cf7bdd8b46a
b6e72add2fa95aa177e6fe807b875c9a7f22bc5c
bbfe1536a99000acceb61f549aa59354cc596efc9f10d3843aab6b273f5adb1e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Mercari

HTTP Headers

GET /js/layui.js HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: application/javascript
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
vary: Accept-Encoding
etag: W/"61487fba-471da"
expires: Thu, 18 Apr 2024 09:56:17 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

jierui1.cn/img/Facebook.png

202.95.15.89

200 OK

305 B

URL GET HTTP/2
jierui1.cn/img/Facebook.png
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Size
305 B (305 bytes)
Hash
512268046283044a44b50608880ff451
5f7505a29a59e7ad8ae6e3238aa83370c407b52e
f8dc3cbdcec5b032381dee1bfa6f5fc0ad38e514c1b60cb0b4f031f49870ccac

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Mercari

HTTP Headers

GET /img/Facebook.png HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: image/png
content-length: 305
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
etag: "61487fba-131"
expires: Fri, 17 May 2024 21:56:17 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

jierui1.cn/js/app.js

202.95.15.89

200 OK

445 kB

URL GET HTTP/2
jierui1.cn/js/app.js
IP
202.95.15.89:443
ASN
#64050 BGPNET Global ASN

Requested by
https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Certificate
IssuerLet's Encrypt
Subjectjierui1.cn
FingerprintFA:0A:E3:26:C0:45:B9:39:0F:C1:76:17:E6:DB:B3:A6:5A:B3:21:D3
ValidityWed, 17 Apr 2024 13:33:08 GMT - Tue, 16 Jul 2024 13:33:07 GMT

File type

Size
445 kB (445117 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/app.js HTTP/1.1
Host: jierui1.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jierui1.cn/login.php?ignin&openid.idec_handle=jpenid.net/auth/2.0&&ref_=nav_em_hd_clc_signin/
Cookie: PHPSESSID=i52f3hpbj0cofjiktg8vi8f07k
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 21:56:17 GMT
content-type: application/javascript
last-modified: Mon, 20 Sep 2021 12:34:02 GMT
vary: Accept-Encoding
etag: W/"61487fba-6cabd"
expires: Thu, 18 Apr 2024 09:56:17 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (23)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash