Report - ebay88.cn/

Report Overview

Submitted URL
ebay88.cn/
IP
27.25.153.19
ASN
#148981 China Telecom
Submitted
2024-05-10 11:50:15
Access
public
Website Title
个人主页-胡双阳_努力建设中
Final URL
ebay88.cn/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.trust-provider.cn	unknown	2015-04-09	2022-02-10	2024-05-09	334 B	1.4 kB	36.248.38.100
ebay88.cn	unknown	2024-05-02	2017-02-01	2017-02-01	2.4 kB	200 kB	27.25.153.19
www.yuanxiapi.cn	unknown	2021-06-16	2021-07-03	2024-01-23	421 B	389 B	222.211.75.211

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	ebay88.cn	Sinkholed
2024-05-10	medium	ebay88.cn	Sinkholed
2024-05-10	medium	ebay88.cn	Sinkholed
2024-05-10	medium	ebay88.cn	Sinkholed
2024-05-10	medium	ebay88.cn	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	ebay88.cn/	612 B	2024-05-10	2024-05-10
Pretty URL ebay88.cn/ IP 27.25.153.19 ASN #148981 China Telecom Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-10 13:50:18 Last Seen2024-05-10 13:50:18 Times Seen1 Hash 3e0409575879e1e099721842effaf948 ba3663634aea5542416a6657e97dd3410553a0bf 8190b86990daaf5be0964499ce58f7f7f41e7d4e008e7cf7f584b91faf963217 Loading...

	www.yuanxiapi.cn/api/qqbeian/?type=js&url=ebay88.cn	176 B	2024-05-10	2024-05-10
Pretty URL www.yuanxiapi.cn/api/qqbeian/?type=js&url=ebay88.cn IP 222.211.75.211 ASN #38283 CHINANET SiChuan Telecom Internet Data Center Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 13:50:18 Last Seen2024-05-10 13:50:18 Times Seen1 Hash d86fbb95eb03bf74523803d0bd85ba23 1515f2b38a542d01cb77c0285bbb53f97499d35e 628df8f2517d16ce669a578474d30cc8a9b7b5ffe7aa1f4c69c368677d74cb3a Loading...

		Size	First Seen	Last Seen
	#1 Write - 342f10f6e5397ce7239f86af90744f8c	83 B	2024-05-10	2024-05-10
Pretty Observations First Seen2024-05-10 13:50:18 Last Seen2024-05-10 13:50:18 Times Seen1 Hash 342f10f6e5397ce7239f86af90744f8c 230338deec0379833e5b4be95ecea688712ab197 b2ea9451d9e122f0052660712a1c242807c175fe6e5f8a06e530f25a521be748 Loading...

HTTP Transactions (7)

URL IP Response Size

ocsp.trust-provider.cn/

36.248.38.100

600 B

URL
ocsp.trust-provider.cn/
IP
36.248.38.100:0
ASN
#4837 CHINA UNICOM China169 Backbone

File type
data
Size
600 B (600 bytes)
Hash
1351c79a2f96b7cf5da05251cce0ead6
d925627a318dc34b678e053f2796d2a99ce8ed68
a0306d24b73241866c7422f724466e784b602f4b4b72b691ac3bf0bb91c764b7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
ctl-cache-status: HIT from hk-xianggang4-ca01, HIT from fj-quanzhou7-ca52, HIT from zj-shaoxing1-ca06
date: Fri, 10 May 2024 11:49:53 GMT
request-id: 663e09e1562978a0a46d8730e4563fbf
expires: Thu, 16 May 2024 12:52:51 GMT
etag: "d925627a318dc34b678e053f2796d2a99ce8ed68"
cf-ray: 8811f8671e771fc1-HKG
last-modified: Thu, 09 May 2024 12:52:52 GMT
cache-control: max-age=3600
age: 1226
x-frame-options: SAMEORIGIN
x-ccacdn-proxy-id: scdpinlb6
cf-cache-status: EXPIRED
accept-ranges: bytes
via: n172-013-214.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 17153417934585c76f6b74954a5361a19d9ec60236
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=25, edge;dur=0

ebay88.cn/assets/css/bootstrap.min.css

27.25.153.19

200 OK

97 kB

URL GET HTTP/2
ebay88.cn/assets/css/bootstrap.min.css
IP
27.25.153.19:443
ASN
#148981 China Telecom

Requested by
https://ebay88.cn/
Certificate
IssuerGlobalSign nv-sa
Subject*.ebay88.cn
Fingerprint02:7F:E9:5C:E5:E5:28:A1:C0:AF:58:91:45:5C:7A:5D:38:D5:E2:DC
ValidityThu, 09 May 2024 04:25:06 GMT - Tue, 10 Jun 2025 04:25:05 GMT

File type
gzip compressed data, from Unix
Size
97 kB (97171 bytes)
Hash
8847529b2dd5904cb765afc62ac186a5
22946a3e1c09447f058d192684d52ca13f14c84e
5c6827b0296ddad1a248c6bdcf7ec82c1a2523aafa60529e25ef73e2c26cde03

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/bootstrap.min.css HTTP/1.1
Host: ebay88.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay88.cn/
Cookie: PHPSESSID=maiai59dhd3qvgh0ajolf85o57
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 11:49:51 GMT
content-type: text/css
last-modified: Sat, 10 Feb 2024 06:40:28 GMT
vary: Accept-Encoding
etag: W/"65c71a5c-1da71"
expires: Fri, 10 May 2024 23:49:51 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

ebay88.cn/favicon.ico

27.25.153.19

200 OK

5.7 kB

URL GET HTTP/2
ebay88.cn/favicon.ico
IP
27.25.153.19:443
ASN
#148981 China Telecom

Requested by
https://ebay88.cn/
Certificate
IssuerGlobalSign nv-sa
Subject*.ebay88.cn
Fingerprint02:7F:E9:5C:E5:E5:28:A1:C0:AF:58:91:45:5C:7A:5D:38:D5:E2:DC
ValidityThu, 09 May 2024 04:25:06 GMT - Tue, 10 Jun 2025 04:25:05 GMT

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Size
5.7 kB (5666 bytes)
Hash
2966b7ff90a98cf52cf3ec2d267e8824
e08ed23e364dbe1e889674801d6f37810dd832ab
559f7de07e4944985b28d918cc91d32b4b641fd9a871809347402bcefb44cf8f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ebay88.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay88.cn/
Cookie: PHPSESSID=maiai59dhd3qvgh0ajolf85o57
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 11:49:53 GMT
content-type: image/x-icon
content-length: 5666
last-modified: Tue, 30 Jan 2024 14:01:42 GMT
etag: "65b90146-1622"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

ebay88.cn/assets/css/main.css

27.25.153.19

200 OK

17 kB

URL GET HTTP/2
ebay88.cn/assets/css/main.css
IP
27.25.153.19:443
ASN
#148981 China Telecom

Requested by
https://ebay88.cn/
Certificate
IssuerGlobalSign nv-sa
Subject*.ebay88.cn
Fingerprint02:7F:E9:5C:E5:E5:28:A1:C0:AF:58:91:45:5C:7A:5D:38:D5:E2:DC
ValidityThu, 09 May 2024 04:25:06 GMT - Tue, 10 Jun 2025 04:25:05 GMT

File type
gzip compressed data, from Unix
Size
17 kB (16671 bytes)
Hash
c9bc3ce98df2232ee25d5f88fcd88bd4
4096d5e78d22811965429214d982f96c9539ccc1
9cc272990737a49a8167751edbc3939600627428a9271be9bf8ddf745c3ac20b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/main.css HTTP/1.1
Host: ebay88.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay88.cn/
Cookie: PHPSESSID=maiai59dhd3qvgh0ajolf85o57
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 11:49:51 GMT
content-type: text/css
last-modified: Sat, 10 Feb 2024 06:39:48 GMT
vary: Accept-Encoding
etag: W/"65c71a34-7d84"
expires: Fri, 10 May 2024 23:49:51 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

ebay88.cn/assets/css/home-bg.jpg

27.25.153.19

200 OK

76 kB

URL GET HTTP/2
ebay88.cn/assets/css/home-bg.jpg
IP
27.25.153.19:443
ASN
#148981 China Telecom

Requested by
https://ebay88.cn/
Certificate
IssuerGlobalSign nv-sa
Subject*.ebay88.cn
Fingerprint02:7F:E9:5C:E5:E5:28:A1:C0:AF:58:91:45:5C:7A:5D:38:D5:E2:DC
ValidityThu, 09 May 2024 04:25:06 GMT - Tue, 10 Jun 2025 04:25:05 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1200, components 3
Size
76 kB (76210 bytes)
Hash
e71fef01b7f7c3451afcf7e7c5973a30
bd2e1c869ec085797b5182f6d4fb2d0bcccd7a3c
f49b2287e97c41b304201a36fca896d3b4408fa180c443104669511cd02cf330

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/home-bg.jpg HTTP/1.1
Host: ebay88.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay88.cn/
Cookie: PHPSESSID=maiai59dhd3qvgh0ajolf85o57
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 11:49:52 GMT
content-type: image/jpeg
last-modified: Sat, 10 Feb 2024 06:41:28 GMT
vary: Accept-Encoding
etag: W/"65c71a98-129b2"
expires: Sun, 09 Jun 2024 11:49:52 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.yuanxiapi.cn/api/qqbeian/?type=js&url=ebay88.cn

222.211.75.211

200 OK

176 B

URL GET HTTP/2
www.yuanxiapi.cn/api/qqbeian/?type=js&url=ebay88.cn
IP
222.211.75.211:443
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

Requested by
https://ebay88.cn/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectyuanxiapi.cn
Fingerprint2F:3E:14:5C:62:03:66:1D:55:61:A5:12:38:FF:32:8E:B0:3B:4A:7E
ValidityThu, 01 Feb 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
176 B (176 bytes)
Hash
e24d1d50c817d3f81ed80e50f292018f
0d583cd9ef9e46de936019d5f53983b8d8e507a6
d0cf2816678b5074425bd8157134f177f9467c20219cecd67e0c07b3a002a14a

HTTP Headers

GET /api/qqbeian/?type=js&url=ebay88.cn HTTP/1.1
Host: www.yuanxiapi.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay88.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 11:48:54 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

ebay88.cn/

27.25.153.19

200 OK

2.3 kB

URL User Request GET HTTP/2
ebay88.cn/
IP
27.25.153.19:443
ASN
#148981 China Telecom

Certificate
IssuerGlobalSign nv-sa
Subject*.ebay88.cn
Fingerprint02:7F:E9:5C:E5:E5:28:A1:C0:AF:58:91:45:5C:7A:5D:38:D5:E2:DC
ValidityThu, 09 May 2024 04:25:06 GMT - Tue, 10 Jun 2025 04:25:05 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2366), with no line terminators
Size
2.3 kB (2329 bytes)
Hash
502225520fec75a2219fdbd0565023ad
5e332edef18ed25b2448abd5550fa08f6f60d283
e1b703f7afc93458f3a8abf54f36acebce8014b17246ad4a27bc0c7b6edd32a5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ebay88.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 11:49:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=maiai59dhd3qvgh0ajolf85o57; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers