Report - api.xsdggw.cn/T/bolang-2/

Report Overview

Submitted URL
api.xsdggw.cn/T/bolang-2/
IP
119.3.179.103
ASN
#55990 Huawei Cloud Service data center
Submitted
2024-05-10 09:49:17
Access
public
Website Title
底部波浪API接口 - 晓盒子 - 免费API数据接口调用服务平台
Final URL
api.xsdggw.cn/T/bolang-2/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
api.xsdggw.cn	unknown	2018-06-10	2022-09-16	2022-10-28	5.5 kB	173 kB	119.3.179.103
ocsp.trust-provider.cn	unknown	2015-04-09	2022-02-10	2024-05-09	668 B	2.9 kB	117.27.246.96
xsdggw.cn	unknown	2018-06-10	2019-03-26	2022-10-22	333 B	68 kB	119.3.179.103
ohan.gitee.io	unknown	2017-02-10	2022-08-10	2023-01-18	412 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 09:48:55	low	119.3.179.103	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
2024-05-10 09:48:55	low	119.3.179.103	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
2024-05-10 09:48:55	low	119.3.179.103	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
2024-05-10 09:48:55	low	119.3.179.103	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
2024-05-10 09:48:55	low	119.3.179.103	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
2024-05-10 09:48:55	low	119.3.179.103	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	api.xsdggw.cn/Public/Wenzhang/javascript/layui.all.js	278 kB	2023-03-07	2024-05-10
Pretty URL api.xsdggw.cn/Public/Wenzhang/javascript/layui.all.js IP 119.3.179.103 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:56:25 Last Seen2024-05-10 11:49:22 Times Seen100 Hash b0832d3906d2d7a9688ed9c095dcc23d 8766e46bdb1d6a9422bf5902988e712c2e2017e0 251a9e596ef2859fb0e92e13b4c619e95a131a93b55e48974552d312c75d9514 Loading...

	api.xsdggw.cn/Public/Wenzhang/javascript/clipboard.min.js	11 kB	2024-05-10	2024-05-10
Pretty URL api.xsdggw.cn/Public/Wenzhang/javascript/clipboard.min.js IP 119.3.179.103 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 11:49:22 Last Seen2024-05-10 11:49:22 Times Seen1 Hash a7955d7389da1af129074dc36fec03b6 3d515b8d257e07a5d71d002ed0e4fd66a17330a1 b293e190cdd399c6f9ce73d46857d66c7a10f300b3509fca2841752c0566b879 Loading...

	api.xsdggw.cn/T/bolang-2/	0 B	2023-03-07	2024-05-20
Pretty URL api.xsdggw.cn/T/bolang-2/ IP 119.3.179.103 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 22:46:28 Times Seen37896475 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	api.xsdggw.cn/api/bolang-2.php	9.7 kB	2024-05-10	2024-05-10
Pretty URL api.xsdggw.cn/api/bolang-2.php IP 119.3.179.103 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 11:49:22 Last Seen2024-05-10 11:49:22 Times Seen2 Hash c4f955ce2e90fa9d49e1185a94908f30 cfd79909187f4700e1e7435e54e313fc751bad2c 33bfa66ded8f133687b3ea80b40991b7a73f091dc8b15533bc1c44c0af590e0a Loading...

HTTP Transactions (17)

URL IP Response Size

api.xsdggw.cn/T/bolang-2/

119.3.179.103

200 OK

1.9 kB

URL User Request GET HTTP/1.1
api.xsdggw.cn/T/bolang-2/
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

File type
HTML document, Unicode text, UTF-8 text, with very long lines (352)
Size
1.9 kB (1949 bytes)
Hash
ce054fee7c33c68ccff482f4dcc50fe8
8b75afeb6ea812a6f3eeb92adab665cbcdb7bb1c
d0fb9dfab0fb06ce640c2e21543bb1ec23ee02a2212f24116bc1f39fc1e176a6

HTTP Headers

GET /T/bolang-2/ HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip

ocsp.trust-provider.cn/

117.27.246.96

599 B

URL
ocsp.trust-provider.cn/
IP
117.27.246.96:0
ASN
#133774 Fuzhou

File type
data
Size
599 B (599 bytes)
Hash
095ca485332da689542b94a93183e277
5032097cce54fd1bb40168fb9e189056bc8a9567
9eb26a10e9226999c72123b447724320cd6c6d60d0fb493314dc459ef6a7af39

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
x-ccacdn-proxy-id: scdpinlb6
cache-control: max-age=3600
date: Fri, 10 May 2024 09:48:54 GMT
cf-ray: 8809dce34a35e67a-HKG
etag: "5032097cce54fd1bb40168fb9e189056bc8a9567"
last-modified: Wed, 08 May 2024 02:11:18 GMT
x-frame-options: SAMEORIGIN
expires: Wed, 15 May 2024 02:11:17 GMT
age: 1
accept-ranges: bytes
cf-cache-status: MISS
ctl-cache-status: HIT from hk-xianggang4-ca01, HIT from fj-quanzhou7-ca38, HIT from fj-fuzhou4-ca05
request-id: 663ded85d798efabf610384587f2e327
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1715334533e76e5d7ddcba1de71dbb7886e6c0042c
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=550, edge;dur=0

api.xsdggw.cn/api/bolang-2.php

119.3.179.103

200 OK

4.7 kB

URL GET HTTP/1.1
api.xsdggw.cn/api/bolang-2.php
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
JavaScript source, ASCII text, with very long lines (9732)
Size
4.7 kB (4700 bytes)
Hash
c4f955ce2e90fa9d49e1185a94908f30
cfd79909187f4700e1e7435e54e313fc751bad2c
33bfa66ded8f133687b3ea80b40991b7a73f091dc8b15533bc1c44c0af590e0a

Detections

NIDS	Severity	Alert
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
suricata	low	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3

HTTP Headers

GET /api/bolang-2.php HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

api.xsdggw.cn/Public/Wenzhang/javascript/clipboard.min.js

119.3.179.103

200 OK

3.9 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/javascript/clipboard.min.js
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (10645)
Size
3.9 kB (3943 bytes)
Hash
8bf13f2bba6daa912e80ddf9e7dc89d0
a36a01a50c85f4e793272f217948e6538c1f3636
0339c249fd0ac448e97895282dbc990b6123868532a93438d0dfac2c6eb5ac0a

HTTP Headers

GET /Public/Wenzhang/javascript/clipboard.min.js HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:54 GMT
Content-Type: application/javascript
Last-Modified: Sat, 27 Mar 2021 04:57:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"605ebb45-2b5d"
Expires: Fri, 10 May 2024 21:48:54 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

api.xsdggw.cn/Public/Wenzhang/css/layui.css

119.3.179.103

200 OK

16 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/css/layui.css
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
ASCII text, with very long lines (65479)
Size
16 kB (16467 bytes)
Hash
ed25238487def59336954f163106e183
d800e3a830e414962ec1f4d0fc46c0362b2e8050
4dd1c55c9f0239b02eb82a362b4fdc14e4b6672f74eb468d9c05946c83f3c879

HTTP Headers

GET /Public/Wenzhang/css/layui.css HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:54 GMT
Content-Type: text/css
Last-Modified: Wed, 17 Mar 2021 11:18:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6051e59d-1210b"
Expires: Fri, 10 May 2024 21:48:54 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

api.xsdggw.cn/Public/Wenzhang/css/style4.0.css

119.3.179.103

200 OK

1.2 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/css/style4.0.css
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
ASCII text
Size
1.2 kB (1167 bytes)
Hash
7b6ff6b266e6c6d53d5beb956adca67e
fd6ca14dc5f3786c7330a9fd1d6dd9c451c16fa3
c08c92738ca2e0a77628d74fc9f4380f5168c4f93a8d69f98f54c2e964e0113b

HTTP Headers

GET /Public/Wenzhang/css/style4.0.css HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:54 GMT
Content-Type: text/css
Last-Modified: Mon, 22 Mar 2021 05:06:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"605825c1-e63"
Expires: Fri, 10 May 2024 21:48:54 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

api.xsdggw.cn/Public/Home/static/image/normal.cur

119.3.179.103

404 Not Found

1.1 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Home/static/image/normal.cur
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
1.1 kB (1058 bytes)
Hash
f6d43a23a7bb31a3b21fc485b17ee4b0
eee87f52dbaf69cac5e45c1f88be32542e1b6738
f53e70212b9845b9bd8d76cf6cc3390fa7b5d589ec667df12cd81d5200d81056

HTTP Headers

GET /Public/Home/static/image/normal.cur HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/Public/Wenzhang/css/style4.0.css
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 10 May 2024 09:48:55 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip

api.xsdggw.cn/Public/Home/static/images/background.png

119.3.179.103

200 OK

255 B

URL GET HTTP/1.1
api.xsdggw.cn/Public/Home/static/images/background.png
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
PNG image data, 24 x 16, 4-bit colormap, non-interlaced
Size
255 B (255 bytes)
Hash
b1c941e3d0f88f6dad9431a526a77d0d
918e6e4d1f52e8991678327b96714e6e2b00fc1b
5231113db0d629ed061c7ef3e5496fed0e136dae8050cd9c7cdc3acc0fbd0c93

HTTP Headers

GET /Public/Home/static/images/background.png HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/Public/Wenzhang/css/style4.0.css
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:55 GMT
Content-Type: image/png
Content-Length: 255
Last-Modified: Sat, 30 Mar 2019 13:19:48 GMT
Connection: keep-alive
ETag: "5c9f6cf4-ff"
Expires: Sun, 09 Jun 2024 09:48:55 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes

api.xsdggw.cn/Public/Wenzhang/image/link.cur

119.3.179.103

200 OK

4.3 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/image/link.cur
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
MS Windows cursor resource - 1 icon, 32x32, hotspot @9x7
Size
4.3 kB (4286 bytes)
Hash
9b3d014a395ff2c9882015636a531171
7a116c8ea9771402b1888577539a5ca38385d537
57d5010c33447c68a5ce464dfc3a41eb1a3b89490c109f0610614719459d3e31

HTTP Headers

GET /Public/Wenzhang/image/link.cur HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/Public/Wenzhang/css/style4.0.css
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:55 GMT
Content-Type: application/octet-stream
Content-Length: 4286
Last-Modified: Sun, 30 Dec 1979 16:00:00 GMT
Connection: keep-alive
ETag: "12cce400-10be"
Accept-Ranges: bytes

api.xsdggw.cn/Public/Wenzhang/image/iconfont.woff2

119.3.179.103

200 OK

26 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/image/iconfont.woff2
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
Web Open Font Format (Version 2), TrueType, length 25964, version 1.0
Size
26 kB (25964 bytes)
Hash
d8c214c89e33a7bea93d656bd865e869
c188dbfc6951b7c305940ac3a279227aeb5617f4
bef73f87b8a3972427dcece922ed8f59d1d01c4a3fd572316efa70de9aec9c09

HTTP Headers

GET /Public/Wenzhang/image/iconfont.woff2 HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/Public/Wenzhang/css/layui.css
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:55 GMT
Content-Type: font/woff2
Content-Length: 25964
Last-Modified: Sun, 30 Dec 1979 16:00:00 GMT
Connection: keep-alive
ETag: "12cce400-656c"
Accept-Ranges: bytes

api.xsdggw.cn/Public/Wenzhang/javascript/layui.all.js

119.3.179.103

200 OK

103 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/javascript/layui.all.js
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65131)
Size
103 kB (102952 bytes)
Hash
b0832d3906d2d7a9688ed9c095dcc23d
8766e46bdb1d6a9422bf5902988e712c2e2017e0
251a9e596ef2859fb0e92e13b4c619e95a131a93b55e48974552d312c75d9514

HTTP Headers

GET /Public/Wenzhang/javascript/layui.all.js HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:54 GMT
Content-Type: application/javascript
Last-Modified: Sat, 27 Mar 2021 04:57:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"605ebb54-43fc6"
Expires: Fri, 10 May 2024 21:48:54 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

api.xsdggw.cn/Public/Wenzhang/javascript/css/modules/layer/default/layer.css?v=3.1.1

119.3.179.103

200 OK

3.3 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/javascript/css/modules/layer/default/layer.css?v=3.1.1
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
ASCII text, with very long lines (14368)
Size
3.3 kB (3269 bytes)
Hash
cdf467c11d77287b09cec22297aa06b2
57e147ee3cf8a1ea2194bdfbad5e69083fa578bd
ba2baf1bb08b0bff57cce75934bab7768c52567bf389479bed787004ae6e653b

HTTP Headers

GET /Public/Wenzhang/javascript/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:55 GMT
Content-Type: text/css
Last-Modified: Sat, 27 Mar 2021 07:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"605ee40d-3859"
Expires: Fri, 10 May 2024 21:48:55 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

api.xsdggw.cn/Public/Wenzhang/javascript/css/modules/laydate/default/laydate.css?v=5.0.9

119.3.179.103

200 OK

3.3 kB

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/javascript/css/modules/laydate/default/laydate.css?v=5.0.9
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
ASCII text, with very long lines (14368)
Size
3.3 kB (3269 bytes)
Hash
cdf467c11d77287b09cec22297aa06b2
57e147ee3cf8a1ea2194bdfbad5e69083fa578bd
ba2baf1bb08b0bff57cce75934bab7768c52567bf389479bed787004ae6e653b

HTTP Headers

GET /Public/Wenzhang/javascript/css/modules/laydate/default/laydate.css?v=5.0.9 HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:55 GMT
Content-Type: text/css
Last-Modified: Sat, 27 Mar 2021 07:49:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"605ee387-3859"
Expires: Fri, 10 May 2024 21:48:55 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

api.xsdggw.cn/Public/Wenzhang/javascript/css/modules/code.css

119.3.179.103

404 Not Found

146 B

URL GET HTTP/1.1
api.xsdggw.cn/Public/Wenzhang/javascript/css/modules/code.css
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /Public/Wenzhang/javascript/css/modules/code.css HTTP/1.1
Host: api.xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/T/bolang-2/
Cookie: PHPSESSID=skr9pi974dof0v9cuubm5gt857
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 10 May 2024 09:48:55 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

xsdggw.cn/favicon.ico

119.3.179.103

200 OK

68 kB

URL GET HTTP/1.1
xsdggw.cn/favicon.ico
IP
119.3.179.103:80
ASN
#55990 Huawei Cloud Service data center

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type
MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Size
68 kB (67646 bytes)
Hash
8a26782ee57e561549e69e6ae53b60bd
38ad09669f4e06c92b43644ad51527f8d99a0064
e41d108cbfe25126969af19407dd15154f80ea1977e04da2b4c5ed0cc9ae69b1

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: xsdggw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 09:48:56 GMT
Content-Type: image/x-icon
Content-Length: 67646
Last-Modified: Fri, 20 Nov 2020 14:18:22 GMT
Connection: keep-alive
ETag: "5fb7d02e-1083e"
Accept-Ranges: bytes

ocsp.trust-provider.cn/

117.27.246.96

600 B

URL
ocsp.trust-provider.cn/
IP
117.27.246.96:0
ASN
#133774 Fuzhou

File type
data
Size
600 B (600 bytes)
Hash
afbf7d29a17c2fd549794e66adb70930
38f26dac0804c70bd3b185ddd626362a01f2ee83
08ee3872d2974d51e35e0b9b7e3cc5f97fc400351dac01aa7d308488e55ea7a3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
ctl-cache-status: HIT from hk-xianggang4-ca01, HIT from fj-quanzhou7-ca35, MISS from js-nanjing1-ca24
age: 2839
last-modified: Tue, 07 May 2024 09:15:54 GMT
x-ccacdn-proxy-id: scdpinlb5
cache-control: max-age=3600
x-frame-options: SAMEORIGIN
date: Fri, 10 May 2024 09:48:57 GMT
cf-cache-status: EXPIRED
expires: Tue, 14 May 2024 09:15:53 GMT
accept-ranges: bytes
cf-ray: 88004fe4dd1e1066-HKG
etag: "38f26dac0804c70bd3b185ddd626362a01f2ee83"
request-id: 663ded894529a4734ac0caaa7f547dd6
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1715334537aa9027f83ed6a0608422ca46f7b6a0b9
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=70, edge;dur=0

ohan.gitee.io/HanKu/HanJs/HanConsole.js

0.0.0.0

0 B

URL GET
ohan.gitee.io/HanKu/HanJs/HanConsole.js
IP
0.0.0.0:0
ASN
#0

Requested by
http://api.xsdggw.cn/T/bolang-2/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /HanKu/HanJs/HanConsole.js HTTP/1.1
Host: ohan.gitee.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://api.xsdggw.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP