Report - pefrrfgayp.5555963com-dh.top/

Report Overview

Visited public
2025-04-04 02:50:00
Tags
URL
pefrrfgayp.5555963com-dh.top/
Finishing URL
knywescfhs.5555963com-dh.top/demo/
IP / ASN
154.40.48.249
#979 NETLAB-SDN
Title
热文资讯,致力打造,火热全网！

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
knywescfhs.5555963com-dh.top	unknown	2024-12-11	2025-04-04	2025-04-04	3.4 kB	64 kB	154.40.48.249
pefrrfgayp.5555963com-dh.top	unknown	2024-12-11	2025-04-04	2025-04-04	497 B	23 kB	154.40.48.249

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-03	medium	5555963com-dh.top	Sinkholed
2025-04-03	medium	5555963com-dh.top	Sinkholed
2025-04-03	medium	5555963com-dh.top	Sinkholed
2025-04-03	medium	5555963com-dh.top	Sinkholed
2025-04-03	medium	5555963com-dh.top	Sinkholed
2025-04-03	medium	5555963com-dh.top	Sinkholed
2025-04-03	medium	5555963com-dh.top	Sinkholed
2025-04-03	medium	5555963com-dh.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (14)

	URL	From	Size	First Seen	Last Seen
	knywescfhs.5555963com-dh.top/demo/tz2.php	Eval	73 B	2023-05-10	2025-04-04
Pretty URL knywescfhs.5555963com-dh.top/demo/tz2.php IP 154.40.48.249 ASN #979 NETLAB-SDN Introduced by eval Embedded in HTML false Observations First Seen2023-05-10 13:00 Last Seen2025-04-04 20:24 Times Seen45033 Hash 7d462f7480676d2a149569e9db13a53c d434c83449ccfdcd5bf0e0a40a7968bd52593598 9110ec446c6b807e9f71f741b62558e2fb8e0c49d8d4e09d1ebe92c006040b6e Loading...

	knywescfhs.5555963com-dh.top/demo/zz/zy.js	ScriptElement	1.1 kB	2024-12-12	2025-04-04
Pretty URL knywescfhs.5555963com-dh.top/demo/zz/zy.js IP 154.40.48.249 ASN #979 NETLAB-SDN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-12 23:45 Last Seen2025-04-04 20:24 Times Seen2989 Hash e93a26fc5dd543d3f99d89617ddf471e 5e1b536ae9206ded03a419b1f2758acd6d3a8214 72c9ee4df98b391cb0134dfc94b51a002b13a3371494c31d82bbcc1625eeff8f Loading...

		Size	First Seen	Last Seen
	#1 Write - 166248a6129a1e4370d20adc2d4c23f3	6 B	2023-03-07 12:56	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-04 20:24 Times Seen13073 Hash 166248a6129a1e4370d20adc2d4c23f3 0fe0bb445f51fad57f3fc4115d7c66cf18545107 b7d082ee12e91b756ea22e8513b8594eebcf5d39fab813da3cb55794dc888ad7 Loading...

	#2 Write - 650a8a865e53b4874d534b737b4f1adb	68 B	2023-03-07 12:24	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 12:24 Last Seen2025-04-04 20:24 Times Seen7001 Hash 650a8a865e53b4874d534b737b4f1adb debf3d84db7fee67f540f8bf4c1efc606c456814 becf4ff9b69150621d1550d7c45b59372f47cd07bd3bd4274bd98b2cab8606e1 Loading...

	#3 Write - 0efa13d18e21e1c280569064dccd2d9f	7 B	2023-03-07 01:02	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-04-04 20:24 Times Seen8241 Hash 0efa13d18e21e1c280569064dccd2d9f 0656901371cc259791bd253dc8835dc44b0575fd 69eb3111ab6500088bcc0f5cb043f452bd7b7801bdcd7b0e478c2fc454fdba0a Loading...

	#4 Write - bc1d3a136e6f54eff73adaf5669b9be3	6 B	2023-03-07 01:02	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-04-04 20:24 Times Seen8199 Hash bc1d3a136e6f54eff73adaf5669b9be3 1a0f53998a4dd4c3f5e9a6fbadc64d21046d1295 9aabfd165cfb96fc5e170862e4fd9c90cfa2a5705af401617c836f152398fce1 Loading...

	#5 Write - d923d625a6069ca47e88b353d65317c5	150 B	2023-03-10 10:18	2025-04-04 20:24
Pretty Observations First Seen2023-03-10 10:18 Last Seen2025-04-04 20:24 Times Seen27736 Hash d923d625a6069ca47e88b353d65317c5 b8fe40a5f05f41b31610abf10083f502f5c7c5a3 54879948a8244eaefbd28a09c10228feb96b8016f4fbe15a81b21e66bc4297f9 Loading...

	#6 Write - 0a3a0b592b9c285e050805307cee87c2	6 B	2023-03-07 01:02	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-04-04 20:24 Times Seen35503 Hash 0a3a0b592b9c285e050805307cee87c2 125a168e24b2bd38aadb84cbb5f87f316b073c41 aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23 Loading...

	#7 Write - babd0daf38a8ba8a6c33c4d1d354eb56	6 B	2023-03-07 12:56	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-04 20:24 Times Seen8201 Hash babd0daf38a8ba8a6c33c4d1d354eb56 c64904f4f0bdb995912fdd1667d538cff4dee6e2 ce519cccc38cf22bd82579910ddfdcb00f5726373dae5af87048b157303e8f27 Loading...

	#8 Write - ff3ca8e44ba47f1016fd362db9486bde	129 B	2023-03-10 10:18	2025-04-04 20:24
Pretty Observations First Seen2023-03-10 10:18 Last Seen2025-04-04 20:24 Times Seen7037 Hash ff3ca8e44ba47f1016fd362db9486bde bcebecfff3ce470efacdfd1edc1884435dfa5e84 d7481a0669ae9bde1f31170054562f7aa4390f00b8b59a100ccaa3c1525889ec Loading...

	#9 Write - 9567c2967d7c5c5494d00644691d2fa4	94 B	2024-12-12 23:37	2025-04-04 20:24
Pretty Observations First Seen2024-12-12 23:37 Last Seen2025-04-04 20:24 Times Seen3033 Hash 9567c2967d7c5c5494d00644691d2fa4 6ddfa5537063e872c6fddd5ffb3e47da3cce9968 370c8d05a3935df950aa4ced2c9c79af30159b12a21cb0f71e2e98059694f6b2 Loading...

	#10 Write - 7bbb9a425b192a3a671909a2294e819e	26 B	2023-03-07 01:19	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 01:19 Last Seen2025-04-04 20:24 Times Seen27903 Hash 7bbb9a425b192a3a671909a2294e819e caaa351a98fa028a2358c203e76ee929e3483c10 c848e1cc5599d00de1273069d5fd1610dd47a137da896e219ffe1283bb415b90 Loading...

	#11 Write - a0bf95a38cb701564c34134431943259	7 B	2023-03-07 12:56	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-04 20:24 Times Seen8248 Hash a0bf95a38cb701564c34134431943259 0187395c6d7697a45f0464905d967396748b2194 124207d84bdc8a107cbcc04212a091e85157e09d7bf208f7afb4839498fef083 Loading...

	#12 Write - 308065b5078a49f986fc3c9f9b66e5d3	7 B	2023-03-07 12:56	2025-04-04 20:24
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-04 20:24 Times Seen13279 Hash 308065b5078a49f986fc3c9f9b66e5d3 be1628c3c7d88ddfb243f216545e780b98cc4386 fdfe0993e6e9e9917554bb95b1137af5870146fd38da5f13bea1b530ac05b296 Loading...

HTTP Transactions (8)

URL IP Response Size

knywescfhs.5555963com-dh.top/images/search.jpg

154.40.48.249

404 Not Found

146 B

URL GET
knywescfhs.5555963com-dh.top/images/search.jpg
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://knywescfhs.5555963com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/search.jpg HTTP/1.1
Host: knywescfhs.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://knywescfhs.5555963com-dh.top/demo/zz/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 04 Apr 2025 02:49:30 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

knywescfhs.5555963com-dh.top/favicon.ico

154.40.48.249

404 Not Found

146 B

URL GET
knywescfhs.5555963com-dh.top/favicon.ico
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://knywescfhs.5555963com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: knywescfhs.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://knywescfhs.5555963com-dh.top/demo/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 04 Apr 2025 02:49:30 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

knywescfhs.5555963com-dh.top/style.css

154.40.48.249

404 Not Found

146 B

URL GET
knywescfhs.5555963com-dh.top/style.css
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://knywescfhs.5555963com-dh.top/demo/tz2.php
Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /style.css HTTP/1.1
Host: knywescfhs.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://knywescfhs.5555963com-dh.top/demo/tz2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 04 Apr 2025 02:49:30 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

pefrrfgayp.5555963com-dh.top/

154.40.48.249

302 Found

23 kB

URL User Request GET
pefrrfgayp.5555963com-dh.top/
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type

Size
23 kB (22944 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: pefrrfgayp.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Fri, 04 Apr 2025 02:49:28 GMT
content-type: text/html; charset=UTF-8
location: https://KNYWeSCFhS.5555963com-dh.top/demo/
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

knywescfhs.5555963com-dh.top/demo/

154.40.48.249

200 OK

23 kB

URL User Request GET
knywescfhs.5555963com-dh.top/demo/
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type

Size
23 kB (22944 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/ HTTP/1.1
Host: knywescfhs.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 04 Apr 2025 02:49:28 GMT
content-type: text/html
last-modified: Tue, 15 Oct 2024 11:02:57 GMT
vary: Accept-Encoding
etag: W/"670e4be1-59a0"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

knywescfhs.5555963com-dh.top/demo/zz/style.css

154.40.48.249

200 OK

30 kB

URL GET
knywescfhs.5555963com-dh.top/demo/zz/style.css
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://knywescfhs.5555963com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
30 kB (30240 bytes)
Hash
5581f62c6abce9111cae182b183876b0
c1725c079dff681b709c78aadd64e47e3fa070f8
9c0219446014bd754f79fa89779ef3c55231802a2c007f19bb2e5a65f4a8b843

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/zz/style.css HTTP/1.1
Host: knywescfhs.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://knywescfhs.5555963com-dh.top/demo/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 04 Apr 2025 02:49:29 GMT
content-type: text/css
last-modified: Fri, 03 Nov 2023 06:44:03 GMT
vary: Accept-Encoding
etag: W/"654496b3-7620"
expires: Fri, 04 Apr 2025 14:49:29 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

knywescfhs.5555963com-dh.top/demo/zz/zy.js

154.40.48.249

200 OK

1.1 kB

URL GET
knywescfhs.5555963com-dh.top/demo/zz/zy.js
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://knywescfhs.5555963com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (878), with no line terminators
Size
1.1 kB (1145 bytes)
Hash
e0313bdadc62bf5960314dee968c3584
6a4aafec9acc11fc79c8f795e01a059f128ea724
91c6fc42d039ec62b1c7317ccfabd51a5edb85e565a4bdde6d476a2e6d2b19ec

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/zz/zy.js HTTP/1.1
Host: knywescfhs.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://knywescfhs.5555963com-dh.top/demo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 04 Apr 2025 02:49:29 GMT
content-type: application/javascript
last-modified: Tue, 15 Oct 2024 11:07:18 GMT
vary: Accept-Encoding
etag: W/"670e4ce6-479"
expires: Fri, 04 Apr 2025 14:49:29 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

knywescfhs.5555963com-dh.top/demo/tz2.php

154.40.48.249

200 OK

7.7 kB

URL GET
knywescfhs.5555963com-dh.top/demo/tz2.php
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://knywescfhs.5555963com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.5555963.com
FingerprintC2:10:24:76:1B:18:B0:36:59:DB:98:2F:06:BD:87:89:1D:F9:C1:BE
ValiditySun, 09 Feb 2025 20:30:52 GMT - Sat, 10 May 2025 20:30:51 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7828), with no line terminators
Size
7.7 kB (7652 bytes)
Hash
844a33a1076b471a72cc3a2f803d87d2
0348e2acf1ad6fb49e5b7cdbb9ef84370cf5421e
cf8f1e782945636027ec16f183f16cb97ca2e6cbb4a863fca66c5ed05b0760c8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/tz2.php HTTP/1.1
Host: knywescfhs.5555963com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://knywescfhs.5555963com-dh.top/demo/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 04 Apr 2025 02:49:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections