Report - www.fhgeds.cn/

Report Overview

Submitted URL
www.fhgeds.cn/
IP
210.56.49.188
ASN
#64050 BGPNET Global ASN
Submitted
2024-04-17 06:17:40
Access
public
Website Title
ログイン - メルカリスマホでかんたんフリマアプリ
Final URL
www.fhgeds.cn/#/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
70

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-16	428 B	31 kB	142.250.74.42
www.fhgeds.cn	unknown	2023-04-23	2024-01-06	2024-04-17	8.5 kB	562 kB	210.56.49.188

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari
2024-04-16	medium	www.fhgeds.cn/	Mercari

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed
2024-04-17	medium	fhgeds.cn	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	www.fhgeds.cn/index/web/js/chunk-vendors.6902600f.js?version=2222	299 kB	2023-12-20	2024-05-18
Pretty URL www.fhgeds.cn/index/web/js/chunk-vendors.6902600f.js?version=2222 IP 210.56.49.188 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-20 15:59:28 Last Seen2024-05-18 20:36:36 Times Seen432 Hash a24db699dc203ce418c5678ea462f831 c7c13722d3f1218e08bd3a7e59c771fac2416138 7e6b9a2a3291af72e4e8d4013e002c69a64201b8b930db8512c4b8c0be9a2c3d Loading...

	www.fhgeds.cn/index/web/js/app.46d27c9f.js?version=2222	10 kB	2023-12-20	2024-05-18
Pretty URL www.fhgeds.cn/index/web/js/app.46d27c9f.js?version=2222 IP 210.56.49.188 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-20 15:59:28 Last Seen2024-05-18 20:36:36 Times Seen433 Hash bdd4a059450513febd5b7d62bbac5b93 153296ede101d33269a2c146e225505da9e9070c 43a4eab5b925b60b57b74649c52a80146232ce2f646562127370253263001748 Loading...

	www.fhgeds.cn/index/web/js/allInit.js?version=2222	1.4 kB	2024-03-02	2024-05-18
Pretty URL www.fhgeds.cn/index/web/js/allInit.js?version=2222 IP 210.56.49.188 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-02 08:42:41 Last Seen2024-05-18 20:36:36 Times Seen415 Hash f5f8913d6a221be7e1f0c71a08e084de e34bd306859680c0e9e8758c171d43d721963b4e dc21913f752fd56c33eafd560a89a49e9f49012c75f81a638950b3c4854556b5 Loading...

	www.fhgeds.cn/#/	0 B	2023-03-07	2024-05-19
Pretty URL www.fhgeds.cn/#/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-19 02:17:56 Times Seen37810145 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.fhgeds.cn/index/web/js/chunk-59a76fbc.4c541c77.js	4.1 kB	2023-12-20	2024-05-18
Pretty URL www.fhgeds.cn/index/web/js/chunk-59a76fbc.4c541c77.js IP 210.56.49.188 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-20 15:59:28 Last Seen2024-05-18 20:36:36 Times Seen439 Hash d8cc9f6cf140bf4737649f220cf2b5f6 4ba234566e79d78c39e9d690c78bfcf236d62792 882decee0c118d1bd01d0dc0c583bd05703091496bc9e7c712357bccc1492719 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js	88 kB	2023-08-31	2024-05-19
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js IP 142.250.74.42 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03:19 Last Seen2024-05-19 01:03:20 Times Seen9761 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

HTTP Transactions (20)

URL IP Response Size

ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js

142.250.74.42

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
142.250.74.42:443
ASN
#15169 GOOGLE

Requested by
https://www.fhgeds.cn/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (30462 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30462
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:15:30 GMT
expires: Wed, 16 Apr 2025 03:15:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 97300
last-modified: Tue, 12 Sep 2023 02:38:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/css/chunk-62172722.063c0a9d.css?version=2222

210.56.49.188

200 OK

883 B

URL GET HTTP/2
www.fhgeds.cn/index/web/css/chunk-62172722.063c0a9d.css?version=2222
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
ASCII text, with very long lines (883), with no line terminators
Size
883 B (883 bytes)
Hash
c98e5cdb06fcf84251695a812c212e2f
23ca350e7dd03cfc784feefec65e69b95d81310b
23a2ca7fbc35172a3e0e4b717530f08472326c6b1aad555f3acbbe5812e19729

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/css/chunk-62172722.063c0a9d.css?version=2222 HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:10 GMT
content-type: text/css
content-length: 883
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
etag: "6145e2da-373"
expires: Wed, 17 Apr 2024 18:17:10 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/chunk-vendors.6902600f.js

210.56.49.188

200 OK

117 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/chunk-vendors.6902600f.js
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
gzip compressed data, from Unix
Size
117 kB (116675 bytes)
Hash
bce347195eaf8bb97b2eccff1c0d2358
8d5b2c4c675b47f22a6df7898bb0fcac16a238dc
da17adad6bf1fbec57516ee6b61bd073d45dc26892100044b40855e18d5ae148

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/chunk-vendors.6902600f.js HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:09 GMT
content-type: application/javascript
last-modified: Sat, 18 Sep 2021 13:00:14 GMT
vary: Accept-Encoding
etag: W/"6145e2de-48f70"
expires: Wed, 17 Apr 2024 18:17:09 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/css/app.08fda6cd.css

210.56.49.188

200 OK

3.2 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/css/app.08fda6cd.css
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
gzip compressed data, from Unix
Size
3.2 kB (3241 bytes)
Hash
b6137acea4508dde8f4b087d5e60fc3d
175826563d67e35012e3c282f263bfe61b32ff2b
179bc14448a9d6079eeffc498461d68a6a7f9eceb77b7cc55df32fe6e4462e36

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/css/app.08fda6cd.css HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:09 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:08 GMT
vary: Accept-Encoding
etag: W/"6145e2d8-ad0"
expires: Wed, 17 Apr 2024 18:17:09 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/

210.56.49.188

200 OK

4.2 kB

URL User Request GET HTTP/2
www.fhgeds.cn/
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
gzip compressed data, from Unix
Size
4.2 kB (4234 bytes)
Hash
2515b82b524c281da60a5717d36bec96
9629f2fb8037ceea76a4f8371ec8a783e0af4e32
9f759f8fdcc28fcfaebab48ed644cc78aaa1dd74e0d4240559446ef2d799c88f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:08 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: 
access-control-allow-methods: GET,POST,PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With,X_Requested_With,Content-Type,token,X-Token,authorization
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/app.46d27c9f.js?version=2222

210.56.49.188

200 OK

10 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/app.46d27c9f.js?version=2222
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type

Size
10 kB (10427 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/app.46d27c9f.js?version=2222 HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:09 GMT
content-type: application/javascript
last-modified: Sat, 18 Sep 2021 13:00:12 GMT
vary: Accept-Encoding
etag: W/"6145e2dc-28bb"
expires: Wed, 17 Apr 2024 18:17:09 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/index/getStatus

210.56.49.188

200 OK

32 B

URL GET HTTP/2
www.fhgeds.cn/index/index/getStatus
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
32 B (32 bytes)
Hash
2c361cdd841a344b1ed525b60c4c2cec
0f1cc6384f1c59502cf4f064b16692ddba09f0b5
f181cdc0828b30bf70045e35cc41d4cadc44f6e828749c8560d9a13802c90ce9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/index/getStatus HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:10 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: 
access-control-allow-methods: GET,POST,PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With,X_Requested_With,Content-Type,token,X-Token,authorization
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

www.fhgeds.cn/index/favicon.ico

210.56.49.188

404 Not Found

6.8 kB

URL GET HTTP/2
www.fhgeds.cn/index/favicon.ico
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (6978), with no line terminators
Size
6.8 kB (6835 bytes)
Hash
25e81ef75feb70f98d81e313df2b0e44
4941e51192facbef1659ae84af044c6faf520777
8739c9c268b1a6712125fa75f60f6d26f7dc2083a46f14198ce47591af6759c5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/favicon.ico HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 06:17:11 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: 
access-control-allow-methods: GET,POST,PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With,X_Requested_With,Content-Type,token,X-Token,authorization
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/img/logo_login.6761cf5f.svg

210.56.49.188

200 OK

2.4 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/img/logo_login.6761cf5f.svg
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
SVG Scalable Vector Graphics image
Size
2.4 kB (2355 bytes)
Hash
f5e598b4affbba78e38685e5064bf3b4
9771881c91b6c229be971ce3f2ae3d11eb8f7cc4
f7d5a161e98943453913d26b91271a2afcbb9ec138d792f61b5d7b21f6823f86

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/img/logo_login.6761cf5f.svg HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:11 GMT
content-type: image/svg+xml
content-length: 2355
last-modified: Sat, 18 Sep 2021 13:00:12 GMT
etag: "6145e2dc-933"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/allInit.js?version=2222

210.56.49.188

200 OK

1.4 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/allInit.js?version=2222
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
ASCII text, with very long lines (1416), with no line terminators
Size
1.4 kB (1380 bytes)
Hash
79260f76e75a011e49ec7032c383de12
ccc0d72674c709212a188be422dbd302a0a48b81
a1ede74722940a594aac9a9a226b41ab0eca1bcbdff287995762c6bc6a6e16ab

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/allInit.js?version=2222 HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:09 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 04:57:54 GMT
vary: Accept-Encoding
etag: W/"65d582d2-564"
expires: Wed, 17 Apr 2024 18:17:09 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/chunk-33e067a3.0a730f71.js?version=2222

210.56.49.188

200 OK

4.2 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/chunk-33e067a3.0a730f71.js?version=2222
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (4158), with no line terminators
Size
4.2 kB (4174 bytes)
Hash
86e143476f743785008a850bb76b6708
70b296eeb2e61f1d54a9ea2fda1c4d2c19464745
7ff7ce78a45f2f183b9f39ee7dd88d04149b66d432db05781f1ec39c0b1f5514

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/chunk-33e067a3.0a730f71.js?version=2222 HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:10 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 05:28:25 GMT
vary: Accept-Encoding
etag: W/"65d589f9-104e"
expires: Wed, 17 Apr 2024 18:17:10 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/chunk-62172722.c683da35.js?version=2222

210.56.49.188

200 OK

5.4 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/chunk-62172722.c683da35.js?version=2222
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (5500), with no line terminators
Size
5.4 kB (5373 bytes)
Hash
e13dbc2a58d381a676b088eda4c00516
5575bd05bc1683a63c937ca848eb684621a7271a
9c10d2e8e1e9417c1bf1bef49f078bf70ec5078fb0a32b84f1fcfd94270a11b6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/chunk-62172722.c683da35.js?version=2222 HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:10 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 05:29:52 GMT
vary: Accept-Encoding
etag: W/"65d58a50-14fd"
expires: Wed, 17 Apr 2024 18:17:10 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css

210.56.49.188

200 OK

2.7 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
ASCII text, with very long lines (2739), with no line terminators
Size
2.7 kB (2739 bytes)
Hash
81f4fcc18612ff8fb360b48b3b084dc2
92c7dfd5863cc556e716ee21c99683a799d399f0
b4ad71a4324373eaf29a1057f8e66bb3fc487793fe70899eee74869aa4a43fb1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/css/chunk-59a76fbc.ee42fe5e.css HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:11 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-ab3"
expires: Wed, 17 Apr 2024 18:17:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/chunk-59a76fbc.4c541c77.js

210.56.49.188

200 OK

4.1 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/chunk-59a76fbc.4c541c77.js
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (4100), with no line terminators
Size
4.1 kB (4097 bytes)
Hash
b1691750f4fa4e3f3500d72110c0cde8
1ab80cfcc56d9a6a282dc39c950b8a022bcb70d5
6b469374a26e78e0ea5db7357b1c3489a5739a2cac1e38bd71654807651c8b64

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/chunk-59a76fbc.4c541c77.js HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Dec 2023 11:22:26 GMT
vary: Accept-Encoding
etag: W/"65802b72-1001"
expires: Wed, 17 Apr 2024 18:17:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/chunk-vendors.6902600f.js?version=2222

210.56.49.188

200 OK

299 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/chunk-vendors.6902600f.js?version=2222
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type

Size
299 kB (298864 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/chunk-vendors.6902600f.js?version=2222 HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:09 GMT
content-type: application/javascript
last-modified: Sat, 18 Sep 2021 13:00:14 GMT
vary: Accept-Encoding
etag: W/"6145e2de-48f70"
expires: Wed, 17 Apr 2024 18:17:09 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/css/chunk-33e067a3.3db98e59.css

210.56.49.188

200 OK

2.3 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/css/chunk-33e067a3.3db98e59.css
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
ASCII text, with very long lines (2339), with no line terminators
Size
2.3 kB (2339 bytes)
Hash
5b21585d48dfa0e1ae8204096290301a
aad7f79028e855182d6096489f2301d4ac67aeba
e953f2f6cd08b2f53c91c3ee80b89ce3226930c9b50f90a7a5ae81abd65fe268

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/css/chunk-33e067a3.3db98e59.css HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:10 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-923"
expires: Wed, 17 Apr 2024 18:17:10 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css

210.56.49.188

200 OK

2.7 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
ASCII text, with very long lines (2739), with no line terminators
Size
2.7 kB (2739 bytes)
Hash
81f4fcc18612ff8fb360b48b3b084dc2
92c7dfd5863cc556e716ee21c99683a799d399f0
b4ad71a4324373eaf29a1057f8e66bb3fc487793fe70899eee74869aa4a43fb1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/css/chunk-59a76fbc.ee42fe5e.css HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:10 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-ab3"
expires: Wed, 17 Apr 2024 18:17:10 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/img/logo-gray.e6cc370e.svg

210.56.49.188

200 OK

2.3 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/img/logo-gray.e6cc370e.svg
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
SVG Scalable Vector Graphics image
Size
2.3 kB (2302 bytes)
Hash
d0d3cb2e4063f53dcfaf8b0f9fa2a400
eb46aa2924b62fef0a2d96c2fd0b6bbea35e1795
352f3659b138b7c6a491b7d136751be0e53a10c51c3b5b8d7fa45b6a14db6925

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/img/logo-gray.e6cc370e.svg HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:11 GMT
content-type: image/svg+xml
content-length: 2302
last-modified: Sat, 18 Sep 2021 13:00:12 GMT
etag: "6145e2dc-8fe"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/css/chunk-vendors.663cee71.css

210.56.49.188

200 OK

82 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/css/chunk-vendors.663cee71.css
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
82 kB (82428 bytes)
Hash
b5ee09b5dd48e46e1fee53eee1ed2d7f
6b3f7806b47ed39d71a7e0ed4c468baf9f570687
b9444d49f5429eb9893d00b66292dab12efaaeeb7e015072cfcef378dd066199

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mercari
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/css/chunk-vendors.663cee71.css HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:09 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-141fc"
expires: Wed, 17 Apr 2024 18:17:09 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.fhgeds.cn/index/web/js/chunk-59a76fbc.4c541c77.js?version=2222

210.56.49.188

200 OK

4.1 kB

URL GET HTTP/2
www.fhgeds.cn/index/web/js/chunk-59a76fbc.4c541c77.js?version=2222
IP
210.56.49.188:443
ASN
#64050 BGPNET Global ASN

Requested by
https://www.fhgeds.cn/
Certificate
IssuerLet's Encrypt
Subjectwww.bhctlzo.cn
Fingerprint9C:1A:5B:6C:9C:AF:02:1B:F6:86:60:E2:43:F1:A4:11:39:54:19:F7
ValidityTue, 26 Mar 2024 16:41:36 GMT - Mon, 24 Jun 2024 16:41:35 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (4100), with no line terminators
Size
4.1 kB (4097 bytes)
Hash
b1691750f4fa4e3f3500d72110c0cde8
1ab80cfcc56d9a6a282dc39c950b8a022bcb70d5
6b469374a26e78e0ea5db7357b1c3489a5739a2cac1e38bd71654807651c8b64

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/web/js/chunk-59a76fbc.4c541c77.js?version=2222 HTTP/1.1
Host: www.fhgeds.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.fhgeds.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:10 GMT
content-type: application/javascript
last-modified: Mon, 18 Dec 2023 11:22:26 GMT
vary: Accept-Encoding
etag: W/"65802b72-1001"
expires: Wed, 17 Apr 2024 18:17:10 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP