Report - jfile.jijidown.com/PC/WPF/list.txt?ver=202402260831

Report Overview

Visited public
2024-03-04 12:59:26
Tags
URL
jfile.jijidown.com/PC/WPF/list.txt?ver=202402260831
Finishing URL
jfile-b.jijidown.com:4433/PC/WPF/list.txt?ver=202402260831
IP / ASN
120.55.98.203
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Title
400 The plain HTTP request was sent to HTTPS port

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09 21:05:29	2024-03-04 05:21:11	672 B	1.6 kB	104.18.38.233
jfile.jijidown.com	unknown	2017-01-20	2018-12-23 13:19:46	2024-03-03 04:18:04	774 B	750 B	120.55.98.203
	unknown				1.2 kB	2.3 kB	222.186.139.31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-03-04 12:59:03	low	120.55.98.203	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-03-04 12:59:07	low	222.186.139.31	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate
2024-03-04 12:59:08	low	222.186.139.31	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

	URL	IP	Response	Size
	zerossl.ocsp.sectigo.com/	104.18.38.233		316 B
URL zerossl.ocsp.sectigo.com/ IP 104.18.38.233:0 ASN #13335 CLOUDFLARENET File type data Size 316 B (316 bytes) Hash 2a0dd5fe5d1405a1132e39a0113e21b7 9bd14fa3a56cd1d2b16a86c331c93e7dcdd2f814 821fe281684224cd85acb6dcfb8d96c7aad39eef8163de8729d4e1bc74b27145 HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Mon, 04 Mar 2024 12:59:02 GMT Content-Type: application/ocsp-response Content-Length: 316 Connection: keep-alive Last-Modified: Sun, 03 Mar 2024 06:20:54 GMT Expires: Sun, 10 Mar 2024 06:20:53 GMT Etag: "9bd14fa3a56cd1d2b16a86c331c93e7dcdd2f814" Cache-Control: max-age=493910,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 85f20a8f78005699-OSL`

	jfile.jijidown.com/PC/WPF/list.txt?ver=202402260831	120.55.98.203	302 Found	161 B
URL User Request GET HTTP/2 jfile.jijidown.com/PC/WPF/list.txt?ver=202402260831 IP 120.55.98.203:443 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Certificate IssuerZeroSSL Subject.jijidown.com Fingerprint10:CE:11:4F:42:BA:79:C4:89:41:0F:44:F4:A8:65:92:FB:7C:10:4C ValidityThu, 01 Feb 2024 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT File type HTML document, ASCII text, with CRLF line terminators Size 161 B (161 bytes) Hash b25d5e7ec72fe7c181c56fe286b44875 10f16139f7f5e07bd4a2f49ae4c1a407df5578b6 99d6333713dc294a4d960b71cbdecfcd89d57960c2715ceb2b289199b5fe9297 HTTP Headers `GET /PC/WPF/list.txt?ver=202402260831 HTTP/1.1 Host: jfile.jijidown.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx/1.14.2 date: Mon, 04 Mar 2024 12:59:03 GMT content-type: text/html content-length: 161 location: https://jfile-b.jijidown.com:4433/PC/WPF/list.txt?ver=202402260831 X-Firefox-Spdy: h2`

	jfile.jijidown.com/	120.55.98.203		161 B
URL jfile.jijidown.com/ IP 120.55.98.203:0 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Certificate IssuerZeroSSL Subject.jijidown.com Fingerprint10:CE:11:4F:42:BA:79:C4:89:41:0F:44:F4:A8:65:92:FB:7C:10:4C ValidityThu, 01 Feb 2024 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT File type HTML document, ASCII text, with CRLF line terminators Size 161 B (161 bytes) Hash b25d5e7ec72fe7c181c56fe286b44875 10f16139f7f5e07bd4a2f49ae4c1a407df5578b6 99d6333713dc294a4d960b71cbdecfcd89d57960c2715ceb2b289199b5fe9297 HTTP Headers `GET / HTTP/1.1 Host: jfile.jijidown.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Moved Temporarily Server: nginx/1.14.2 Date: Mon, 04 Mar 2024 12:59:05 GMT Content-Type: text/html Content-Length: 161 Connection: keep-alive Location: https://jfile-b.jijidown.com:4433/`

	zerossl.ocsp.sectigo.com/	104.18.38.233		316 B
URL zerossl.ocsp.sectigo.com/ IP 104.18.38.233:0 ASN #13335 CLOUDFLARENET File type data Size 316 B (316 bytes) Hash 2a0dd5fe5d1405a1132e39a0113e21b7 9bd14fa3a56cd1d2b16a86c331c93e7dcdd2f814 821fe281684224cd85acb6dcfb8d96c7aad39eef8163de8729d4e1bc74b27145 HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Mon, 04 Mar 2024 12:59:07 GMT Content-Type: application/ocsp-response Content-Length: 316 Connection: keep-alive Last-Modified: Sun, 03 Mar 2024 06:20:54 GMT Expires: Sun, 10 Mar 2024 06:20:53 GMT Etag: "9bd14fa3a56cd1d2b16a86c331c93e7dcdd2f814" Cache-Control: max-age=493905,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 85f20aaab93a5699-OSL`

	jfile-b.jijidown.com:4433/	222.186.139.31		1.2 kB
URL jfile-b.jijidown.com:4433/ IP 222.186.139.31:0 ASN #4134 Chinanet File type HTML document, Unicode text, UTF-8 (with BOM) text Size 1.2 kB (1192 bytes) Hash 7b9a9baa55f50ce19e2833fbf35ee478 ae48345ddfb7e5bebd47d30fd84a35ad34006781 1e4f4b874dc2ff2ae463e62af750085756af7229f8fa596667432d5093f815aa HTTP Headers `GET / HTTP/1.1 Host: jfile-b.jijidown.com:4433 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty/1.9.15.1 Date: Mon, 04 Mar 2024 12:59:07 GMT Content-Type: text/html Content-Length: 1192 Last-Modified: Tue, 20 Jul 2021 01:42:46 GMT Connection: keep-alive ETag: "60f62a16-4a8" Accept-Ranges: bytes`

	jfile-b.jijidown.com:4433/PC/WPF/list.txt?ver=202402260831	222.186.139.31	400 Bad Request	277 B
URL User Request GET HTTP/1.1 jfile-b.jijidown.com:4433/PC/WPF/list.txt?ver=202402260831 IP 222.186.139.31:4433 ASN #4134 Chinanet File type HTML document, ASCII text, with CRLF line terminators Size 277 B (277 bytes) Hash 469ba0e0337e82850c1e19523c34812a a829c753bb3e30296c1faeea6783edf7dd23824f ff990fc95970bd2fc6333663ae043aaef308117190507bbd7b4831244cd97c2d HTTP Headers `GET /PC/WPF/list.txt?ver=202402260831 HTTP/1.1 Host: jfile-b.jijidown.com:4433 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 400 Bad Request Server: openresty/1.9.15.1 Date: Mon, 04 Mar 2024 12:59:08 GMT Content-Type: text/html Content-Length: 277 Connection: close`

	jfile-b.jijidown.com:4433/favicon.ico	222.186.139.31	400 Bad Request	277 B
URL GET HTTP/1.1 jfile-b.jijidown.com:4433/favicon.ico IP 222.186.139.31:4433 ASN #4134 Chinanet Requested by http://jfile-b.jijidown.com:4433/PC/WPF/list.txt?ver=202402260831 File type HTML document, ASCII text, with CRLF line terminators Size 277 B (277 bytes) Hash 469ba0e0337e82850c1e19523c34812a a829c753bb3e30296c1faeea6783edf7dd23824f ff990fc95970bd2fc6333663ae043aaef308117190507bbd7b4831244cd97c2d HTTP Headers `GET /favicon.ico HTTP/1.1 Host: jfile-b.jijidown.com:4433 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://jfile-b.jijidown.com:4433/PC/WPF/list.txt?ver=202402260831 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 400 Bad Request Server: openresty/1.9.15.1 Date: Mon, 04 Mar 2024 12:59:09 GMT Content-Type: text/html Content-Length: 277 Connection: close`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers