Report Overview

  1. Submitted URL

    47.91.149.178/?u=ahr0

  2. IP

    47.91.149.178

    ASN

    #45102 Alibaba US Technology Co., Ltd.

  3. Submitted

    2024-03-28 16:15:30

    Access

    public

  4. Website Title

    Facebook

  5. Final URL

    47.91.149.178/?u=aHR0&r=cHM6Ly93d3cuZmFjZWJvb2suY29tL2xvZ2luLz9uZXh0PWh0dHBzJTNBJTJGJTJGd3d3LmZhY2Vib29rLmNvbSUyRiUzRnUlM0RhaHIw

  6. urlquery detections

    Phishing - Facebook

Detections

  1. urlquery

    5

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    32

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
47.91.149.178unknownunknown2019-12-092024-03-12
agent.joinf.cnunknown2009-07-052019-12-202024-03-12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
mediumagent.joinf.cn/Facebook, Inc.
medium47.91.149.178/Facebook, Inc.
medium47.91.149.178/Facebook, Inc.

PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium47.91.149.178Sinkholed
medium47.91.149.178Sinkholed
medium47.91.149.178Sinkholed
medium47.91.149.178Sinkholed

ThreatFox

No alerts detected


JavaScript (36)

HTTP Transactions (32)

URLIPResponseSize
47.91.149.178/?u=ahr0
47.91.149.178 0 B
47.91.149.178/?u=aHR0&r=cHM6Ly93d3cuZmFjZWJvb2suY29tL2xvZ2luLz9uZXh0PWh0dHBzJTNBJTJGJTJGd3d3LmZhY2Vib29rLmNvbSUyRiUzRnUlM0RhaHIw
47.91.149.178 60 kB
agent.joinf.cn/static?u=aH&r=R0cHM6Ly9zdGF0aWMueHguZmJjZG4ubmV0L3JzcmMucGhwL3YzL3kzL2wvMCxjcm9zcy9RZ3huYVA0TXpzQy5jc3M/X25jX3g9SWozV3A4bGc1S3o=
47.91.149.178200 OK11 kB
agent.joinf.cn/static?u=aH&r=R0cHM6Ly9zdGF0aWMueHguZmJjZG4ubmV0L3JzcmMucGhwL3YzaWo5bTQveUcvbC9lbl9HQi91YkdRSnQ4OHlqQy5qcz9fbmNfeD1JajNXcDhsZzVLeg==
47.91.149.178200 OK66 kB
agent.joinf.cn/static?u=aH&r=R0cHM6Ly9zdGF0aWMueHguZmJjZG4ubmV0L3JzcmMucGhwL3YzL3k3L3IvUkpUOWRRUzN0Mk4uanM/X25jX3g9SWozV3A4bGc1S3o=
47.91.149.178200 OK51 kB
agent.joinf.cn/static?u=aH&r=R0cHM6Ly9zdGF0aWMueHguZmJjZG4ubmV0L3JzcmMucGhwL3YzL3lwL2wvMCxjcm9zcy9BVlRUY09IdjBhMi5jc3M/X25jX3g9SWozV3A4bGc1S3o=
47.91.149.178200 OK46 kB
agent.joinf.cn/static?u=aH&r=R0cHM6Ly9zdGF0aWMueHguZmJjZG4ubmV0L3JzcmMucGhwL3YzL3l4L3IvR0lsSmp5ekVndVEuanM/X25jX3g9SWozV3A4bGc1S3o=
47.91.149.178200 OK1.0 kB
agent.joinf.cn/static?u=aH&r=R0cHM6Ly9zdGF0aWMueHguZmJjZG4ubmV0L3JzcmMucGhwL3YzL3l2L3IvNEc0MmZtWlY3RzguanM/X25jX3g9SWozV3A4bGc1S3o=
47.91.149.178200 OK384 kB
agent.joinf.cn/static/rsrc.php/v3ij9m4/yG/l/en_GB/ubGQJt88yjC.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK66 kB
agent.joinf.cn/static/rsrc.php/v3/yk/r/RKK6hMCj3R1.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK5.3 kB
agent.joinf.cn/static/rsrc.php/v3/yx/r/GIlJjyzEguQ.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK1.0 kB
agent.joinf.cn/static?u=aH&r=R0cHM6Ly9zdGF0aWMueHguZmJjZG4ubmV0L3JzcmMucGhwL3liL3IvaExSSjFHR195MEouaWNv
47.91.149.178200 OK4.3 kB
agent.joinf.cn/rsrc.php/v3/y7/r/ZMz_3PD0Ipc.png
47.91.149.178200 OK3.9 kB
agent.joinf.cn/static/rsrc.php/v3/y7/r/RJT9dQS3t2N.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK51 kB
agent.joinf.cn/static/rsrc.php/v3/yE/r/KqVnbuezAjj.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK41 kB
agent.joinf.cn/static/rsrc.php/v3/y2/r/3FPJ9YC_wUr.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK1.1 kB
agent.joinf.cn/static/rsrc.php/v3/yG/r/CbM6CZG2ZAb.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK1.3 kB
agent.joinf.cn/static/rsrc.php/v3/y4/r/xPI18UMP6Nr.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK43 kB
agent.joinf.cn/static/rsrc.php/v3/yS/r/ui2DkP-wt_7.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK11 kB
agent.joinf.cn/static/rsrc.php/v3/yO/r/_tJ17sGyxOX.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK18 kB
agent.joinf.cn/static/rsrc.php/v3/yD/r/51zpDh2VzWP.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK16 kB
agent.joinf.cn/static/rsrc.php/v3/yj/r/wwPr_f3niE-.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK52 kB
agent.joinf.cn/static/rsrc.php/v3/yz/r/R9MsQbdO8Qf.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK110 B
agent.joinf.cn/static/rsrc.php/v3/yY/r/BqEjD1dj1pL.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK840 B
agent.joinf.cn/static/rsrc.php/v3/y-/r/PosgynLjFh0.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK24 kB
agent.joinf.cn/static/rsrc.php/v3i_Ou4/yX/l/en_GB/kbFnzNy-KO7.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK46 kB
agent.joinf.cn/static/rsrc.php/v3/yR/r/_Sa5pGsCdFu.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK1.9 kB
agent.joinf.cn/static/rsrc.php/v3/y-/r/kq7zpUNTtp7.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK2.3 kB
agent.joinf.cn/static/rsrc.php/v3/yK/r/jMaPOqcTw38.js?_nc_x=Ij3Wp8lg5Kz
47.91.149.178200 OK30 kB
47.91.149.178/ajax/bz?__a=1&__aaid=0&__ccg=EXCELLENT&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G1Qw5Mx61vw5zwwwi81nE1u83mwaS0zK1swc-0pa0h-0Lo6-0uS0ue&__hs=19810.BP%3ADEFAULT.2.0..0.0&__hsi=7351448594777587361&__req=1&__rev=1012382939&__s=h6uyn7%3Ayonxzy%3Al0ktqp&__spin_b=trunk&__spin_r=1012382939&__spin_t=1711642508&__user=0&dpr=1&jazoest=2976&lsd=AVrel_1Zx1c
47.91.149.178200 OK44 kB
47.91.149.178/ajax/webstorage/process_keys/?state=1
47.91.149.178 243 B
agent.joinf.cn/static/rsrc.php/v3/yo/r/SCrsJqgfPT1.js?_nc_x=Ij3Wp8lg5Kz
0.0.0.0 0 B