Report - tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A

Report Overview

Visited public
2024-12-01 18:27:04
Tags
URL
tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A
Finishing URL
tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A
IP / ASN
60.190.243.166
#58461 CT-HangZhou-IDC
Title
盾集域名停放-全球优质行业导航备案网站

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pos.baidu.com	23488	1999-10-11	2012-05-24	2024-11-28	1.7 kB	579 B	103.235.46.94
cpro.baidustatic.com	23298	2012-03-28	2012-08-26	2024-11-28	410 B	118 kB	220.169.152.38
tf.click.com.cn	unknown	2006-07-04	2023-01-14	2024-10-16	2.1 kB	213 kB	60.190.243.166
www.365.com	unknown	2001-08-06	2012-08-24	2024-10-16	418 B	123 kB	60.190.243.166

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-01 18:26:42	low	60.190.243.166	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	cpro.baidustatic.com/cpro/ui/cm.js	118 kB	2024-12-01 07:32	2024-12-23 04:04
Pretty URL cpro.baidustatic.com/cpro/ui/cm.js IP 220.169.152.38 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-01 07:32 Last Seen2024-12-23 04:04 Times Seen19 Hash 1d6afb1d4d3738377dec71a91e2f4b7d efcb39d70577450a755e3420d47d9b60719981a3 c5f9d4479728a9b6c5ef4e3122acf95441b5f8aac2e5832403c8fcf2a4808749 Loading...

	pos.baidu.com/auto_dup?di=0&uuid=8eec6633fe0e3570&dri=0&dis=0&dai=0&ps=0x0&enu=encoding&exps=110011&ant=0&psi=f90e493e68208b4e&dcb=___baidu_union_callback&dtm=AUTO_JSONP&dvi=0.0&dci=-1&dpt=none&tpr=1733077603860&ti=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE-%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E5%AF%BC%E8%88%AA%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99&ari=2&ver=1121&kws=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%EF%BC%8C%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E7%BD%91%E7%AB%99%EF%BC%8C%E8%A1%8C%E4%B8%9A%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99%2C%E5%85%8D%E8%B4%B9%E6%8F%90%E4%BA%A4%E9%93%BE%E6%8E%A5%2C&dps=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%E3%80%90dns1.dopa.com%2Cdns2.dopa.com%E3%80%91%E6%9C%AC%E7%9D%80%E8%AE%A9%E8%B5%84%E6%BA%90%E5%88%9B%E9%80%A0%E4%BB%B7%E5%80%BC%E7%9A%84%E4%BD%BF%E5%91%BD%2C%E5%8A%A9%E5%8A%9B%E6%8E%A8%E5%8A%A8%E7%BD%91%E7%BB%9C%E8%B5%84%E6%BA%90%E5%BA%94%E7%94%A8%E5%85%B1%E4%BA%AB&dbv=0&drs=3&pcs=1280x1024&pss=1280x1647&cfv=0&cpl=5&chi=2&cce=true&cec=UTF-8&tlm=1712457201&prot=2&rw=1024&ltu=https%3A%2F%2Ftf.click.com.cn%2Fshu.html%3Fpoprequest%3D1%26dm%3Dfzzxnkbkd.top%26acc%3D0BC527E5-0AAB-4FFE-BA95-D51296715A6A&ecd=1&dft=0&uc=1280x1024&pis=-1x-1&sr=1280x1024&tcn=1733077604&dc=4&aa=1	59 B	2024-12-01 18:27	2024-12-01 18:27
Pretty URL pos.baidu.com/auto_dup?di=0&uuid=8eec6633fe0e3570&dri=0&dis=0&dai=0&ps=0x0&enu=encoding&exps=110011&ant=0&psi=f90e493e68208b4e&dcb=___baidu_union_callback&dtm=AUTO_JSONP&dvi=0.0&dci=-1&dpt=none&tpr=1733077603860&ti=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE-%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E5%AF%BC%E8%88%AA%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99&ari=2&ver=1121&kws=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%EF%BC%8C%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E7%BD%91%E7%AB%99%EF%BC%8C%E8%A1%8C%E4%B8%9A%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99%2C%E5%85%8D%E8%B4%B9%E6%8F%90%E4%BA%A4%E9%93%BE%E6%8E%A5%2C&dps=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%E3%80%90dns1.dopa.com%2Cdns2.dopa.com%E3%80%91%E6%9C%AC%E7%9D%80%E8%AE%A9%E8%B5%84%E6%BA%90%E5%88%9B%E9%80%A0%E4%BB%B7%E5%80%BC%E7%9A%84%E4%BD%BF%E5%91%BD%2C%E5%8A%A9%E5%8A%9B%E6%8E%A8%E5%8A%A8%E7%BD%91%E7%BB%9C%E8%B5%84%E6%BA%90%E5%BA%94%E7%94%A8%E5%85%B1%E4%BA%AB&dbv=0&drs=3&pcs=1280x1024&pss=1280x1647&cfv=0&cpl=5&chi=2&cce=true&cec=UTF-8&tlm=1712457201&prot=2&rw=1024&ltu=https%3A%2F%2Ftf.click.com.cn%2Fshu.html%3Fpoprequest%3D1%26dm%3Dfzzxnkbkd.top%26acc%3D0BC527E5-0AAB-4FFE-BA95-D51296715A6A&ecd=1&dft=0&uc=1280x1024&pis=-1x-1&sr=1280x1024&tcn=1733077604&dc=4&aa=1 IP 103.235.46.94 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-01 18:27 Last Seen2024-12-01 18:27 Times Seen1 Hash db6e2b1f1f2cd4b3ede717e46f7e0c42 fb7326709fa6b719fb90a5cf3de449b475b74792 2e1abe842debe19f658a0f6bb743e1ab5fe1652fd95f8123ebb174b82b7d7f03 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	tf.click.com.cn/img/left_banner.png	60.190.243.166	200 OK	15 kB
URL GET HTTP/2 tf.click.com.cn/img/left_banner.png IP 60.190.243.166:443 ASN #58461 CT-HangZhou-IDC Requested by https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Certificate IssuerLet's Encrypt Subjectclick.com.cn Fingerprint5E:73:07:F4:F4:46:45:32:52:5E:A3:5A:EA:6B:22:CB:FD:B6:5A:2E ValidityThu, 31 Oct 2024 05:48:18 GMT - Wed, 29 Jan 2025 05:48:17 GMT File type PNG image data, 554 x 168, 8-bit colormap, non-interlaced Size 15 kB (15173 bytes) Hash 7a4f795627e03c659ac2c823e9126c29 ab670db9cd82ee8a7cab668b0cd570be86a6c6b7 251d3311dcc8d06ab641f43a1be5650830bb30a457261de3312d15ddd663290c HTTP Headers GET /img/left_banner.png HTTP/1.1 Host: tf.click.com.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Sun, 01 Dec 2024 18:26:41 GMT content-type: image/png content-length: 15173 last-modified: Sun, 07 Apr 2024 02:23:37 GMT expires: Tue, 31 Dec 2024 18:26:41 GMT accept-ranges: bytes pragma: no-cache cache-control: max-age=2592000, no-store X-Firefox-Spdy: h2`

	tf.click.com.cn/img/main_bot.jpg	60.190.243.166	200 OK	180 kB
URL GET HTTP/2 tf.click.com.cn/img/main_bot.jpg IP 60.190.243.166:443 ASN #58461 CT-HangZhou-IDC Requested by https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Certificate IssuerLet's Encrypt Subjectclick.com.cn Fingerprint5E:73:07:F4:F4:46:45:32:52:5E:A3:5A:EA:6B:22:CB:FD:B6:5A:2E ValidityThu, 31 Oct 2024 05:48:18 GMT - Wed, 29 Jan 2025 05:48:17 GMT File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x396, components 3 Size 180 kB (179852 bytes) Hash c58a3d3cef5e0bf7163496e630c887d8 5556a6292d5ebf021557c51fb2d3fb647b6eebae 614b09a9fa7a1e150b22f06443ecffd70174c102357d83bc5c9be71818a858db HTTP Headers GET /img/main_bot.jpg HTTP/1.1 Host: tf.click.com.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Sun, 01 Dec 2024 18:26:41 GMT content-type: image/jpeg content-length: 179852 last-modified: Sun, 07 Apr 2024 02:23:37 GMT expires: Tue, 31 Dec 2024 18:26:41 GMT accept-ranges: bytes pragma: no-cache cache-control: max-age=2592000, no-store X-Firefox-Spdy: h2`

	www.365.com/tg2024.jpeg	60.190.243.166	200 OK	123 kB
URL GET HTTP/2 www.365.com/tg2024.jpeg IP 60.190.243.166:443 ASN #58461 CT-HangZhou-IDC Requested by https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Certificate IssuerZeroSSL Subject365.com FingerprintEB:F3:CE:32:27:0A:62:9F:6F:AE:10:83:16:C0:4B:D5:B1:18:95:D9 ValidityThu, 28 Nov 2024 00:00:00 GMT - Wed, 26 Feb 2025 23:59:59 GMT File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1700x100, components 3 Size 123 kB (122650 bytes) Hash 5c331f7c961c8c47347c8a96e4f1fec1 0995eeeac9656230cb10252e8d17e51aaf769218 4926433ac48be2e8b237df9a3ab166dc8a8bf469b7d4733ab8c5ba2c308f051a HTTP Headers `GET /tg2024.jpeg HTTP/1.1 Host: www.365.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tf.click.com.cn/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty date: Sun, 01 Dec 2024 18:26:42 GMT content-type: image/jpeg content-length: 122650 last-modified: Tue, 02 Apr 2024 03:48:05 GMT etag: "660b7ff5-1df1a" accept-ranges: bytes X-Firefox-Spdy: h2`

	pos.baidu.com/auto_dup?di=0&uuid=8eec6633fe0e3570&dri=0&dis=0&dai=0&ps=0x0&enu=encoding&exps=110011&ant=0&psi=f90e493e68208b4e&dcb=___baidu_union_callback&dtm=AUTO_JSONP&dvi=0.0&dci=-1&dpt=none&tpr=1733077603860&ti=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE-%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E5%AF%BC%E8%88%AA%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99&ari=2&ver=1121&kws=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%EF%BC%8C%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E7%BD%91%E7%AB%99%EF%BC%8C%E8%A1%8C%E4%B8%9A%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99%2C%E5%85%8D%E8%B4%B9%E6%8F%90%E4%BA%A4%E9%93%BE%E6%8E%A5%2C&dps=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%E3%80%90dns1.dopa.com%2Cdns2.dopa.com%E3%80%91%E6%9C%AC%E7%9D%80%E8%AE%A9%E8%B5%84%E6%BA%90%E5%88%9B%E9%80%A0%E4%BB%B7%E5%80%BC%E7%9A%84%E4%BD%BF%E5%91%BD%2C%E5%8A%A9%E5%8A%9B%E6%8E%A8%E5%8A%A8%E7%BD%91%E7%BB%9C%E8%B5%84%E6%BA%90%E5%BA%94%E7%94%A8%E5%85%B1%E4%BA%AB&dbv=0&drs=3&pcs=1280x1024&pss=1280x1647&cfv=0&cpl=5&chi=2&cce=true&cec=UTF-8&tlm=1712457201&prot=2&rw=1024&ltu=https%3A%2F%2Ftf.click.com.cn%2Fshu.html%3Fpoprequest%3D1%26dm%3Dfzzxnkbkd.top%26acc%3D0BC527E5-0AAB-4FFE-BA95-D51296715A6A&ecd=1&dft=0&uc=1280x1024&pis=-1x-1&sr=1280x1024&tcn=1733077604&dc=4&aa=1	103.235.46.94	200 OK	59 B
URL GET HTTP/1.1 pos.baidu.com/auto_dup?di=0&uuid=8eec6633fe0e3570&dri=0&dis=0&dai=0&ps=0x0&enu=encoding&exps=110011&ant=0&psi=f90e493e68208b4e&dcb=___baidu_union_callback&dtm=AUTO_JSONP&dvi=0.0&dci=-1&dpt=none&tpr=1733077603860&ti=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE-%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E5%AF%BC%E8%88%AA%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99&ari=2&ver=1121&kws=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%EF%BC%8C%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E7%BD%91%E7%AB%99%EF%BC%8C%E8%A1%8C%E4%B8%9A%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99%2C%E5%85%8D%E8%B4%B9%E6%8F%90%E4%BA%A4%E9%93%BE%E6%8E%A5%2C&dps=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%E3%80%90dns1.dopa.com%2Cdns2.dopa.com%E3%80%91%E6%9C%AC%E7%9D%80%E8%AE%A9%E8%B5%84%E6%BA%90%E5%88%9B%E9%80%A0%E4%BB%B7%E5%80%BC%E7%9A%84%E4%BD%BF%E5%91%BD%2C%E5%8A%A9%E5%8A%9B%E6%8E%A8%E5%8A%A8%E7%BD%91%E7%BB%9C%E8%B5%84%E6%BA%90%E5%BA%94%E7%94%A8%E5%85%B1%E4%BA%AB&dbv=0&drs=3&pcs=1280x1024&pss=1280x1647&cfv=0&cpl=5&chi=2&cce=true&cec=UTF-8&tlm=1712457201&prot=2&rw=1024&ltu=https%3A%2F%2Ftf.click.com.cn%2Fshu.html%3Fpoprequest%3D1%26dm%3Dfzzxnkbkd.top%26acc%3D0BC527E5-0AAB-4FFE-BA95-D51296715A6A&ecd=1&dft=0&uc=1280x1024&pis=-1x-1&sr=1280x1024&tcn=1733077604&dc=4&aa=1 IP 103.235.46.94:443 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Requested by https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Certificate IssuerGlobalSign nv-sa Subjectbaidu.com FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0 ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT File type ASCII text, with no line terminators Size 59 B (59 bytes) Hash db6e2b1f1f2cd4b3ede717e46f7e0c42 fb7326709fa6b719fb90a5cf3de449b475b74792 2e1abe842debe19f658a0f6bb743e1ab5fe1652fd95f8123ebb174b82b7d7f03 HTTP Headers GET /auto_dup?di=0&uuid=8eec6633fe0e3570&dri=0&dis=0&dai=0&ps=0x0&enu=encoding&exps=110011&ant=0&psi=f90e493e68208b4e&dcb=___baidu_union_callback&dtm=AUTO_JSONP&dvi=0.0&dci=-1&dpt=none&tpr=1733077603860&ti=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE-%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E5%AF%BC%E8%88%AA%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99&ari=2&ver=1121&kws=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%EF%BC%8C%E5%85%A8%E7%90%83%E4%BC%98%E8%B4%A8%E8%A1%8C%E4%B8%9A%E7%BD%91%E7%AB%99%EF%BC%8C%E8%A1%8C%E4%B8%9A%E5%A4%87%E6%A1%88%E7%BD%91%E7%AB%99%2C%E5%85%8D%E8%B4%B9%E6%8F%90%E4%BA%A4%E9%93%BE%E6%8E%A5%2C&dps=%E7%9B%BE%E9%9B%86%E5%9F%9F%E5%90%8D%E5%81%9C%E6%94%BE%E3%80%90dns1.dopa.com%2Cdns2.dopa.com%E3%80%91%E6%9C%AC%E7%9D%80%E8%AE%A9%E8%B5%84%E6%BA%90%E5%88%9B%E9%80%A0%E4%BB%B7%E5%80%BC%E7%9A%84%E4%BD%BF%E5%91%BD%2C%E5%8A%A9%E5%8A%9B%E6%8E%A8%E5%8A%A8%E7%BD%91%E7%BB%9C%E8%B5%84%E6%BA%90%E5%BA%94%E7%94%A8%E5%85%B1%E4%BA%AB&dbv=0&drs=3&pcs=1280x1024&pss=1280x1647&cfv=0&cpl=5&chi=2&cce=true&cec=UTF-8&tlm=1712457201&prot=2&rw=1024&ltu=https%3A%2F%2Ftf.click.com.cn%2Fshu.html%3Fpoprequest%3D1%26dm%3Dfzzxnkbkd.top%26acc%3D0BC527E5-0AAB-4FFE-BA95-D51296715A6A&ecd=1&dft=0&uc=1280x1024&pis=-1x-1&sr=1280x1024&tcn=1733077604&dc=4&aa=1 HTTP/1.1 Host: pos.baidu.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tf.click.com.cn/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Cache-Control: post-check=0, pre-check=0 Connection: keep-alive Content-Length: 59 Content-Type: application/javascript;charset=UTF-8 Date: Sun, 01 Dec 2024 18:26:45 GMT Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Mon Dec 2 02:26:45 2024 P3p: CP=" OTI DSP COR IVA OUR IND COM " Pragma: no-cache Server: nginx Set-Cookie: BAIDUID=A6C119F87BBB4019E4E0695D65879A20:FG=1; expires=Mon, 01-Dec-55 18:26:45 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1 X-Xss-Protection: 0

	cpro.baidustatic.com/cpro/ui/cm.js	220.169.152.38	200 OK	118 kB
URL GET HTTP/2 cpro.baidustatic.com/cpro/ui/cm.js IP 220.169.152.38:443 ASN #4134 Chinanet Requested by https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Certificate IssuerGlobalSign nv-sa Subjectbaidu.com FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0 ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT File type Size 118 kB (117456 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /cpro/ui/cm.js HTTP/1.1 Host: cpro.baidustatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tf.click.com.cn/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: JSP3/2.0.14 date: Sun, 01 Dec 2024 18:26:43 GMT content-type: text/javascript; charset=utf-8 expires: Sun, 01 Dec 2024 19:16:41 GMT last-modified: Thu, 21 Nov 2024 03:29:19 GMT cache-control: max-age=3600 content-encoding: gzip age: 531 accept-ranges: bytes ohc-global-saved-time: Sun, 01 Dec 2024 18:16:41 GMT ohc-cache-hit: yy2ct72 [2], xiangyix162 [2] ohc-file-size: 40906 x-cache-status: HIT X-Firefox-Spdy: h2`

	tf.click.com.cn/favicon.ico	60.190.243.166	404 Not Found	138 B
URL GET HTTP/2 tf.click.com.cn/favicon.ico IP 60.190.243.166:443 ASN #58461 CT-HangZhou-IDC Requested by https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Certificate IssuerLet's Encrypt Subjectclick.com.cn Fingerprint5E:73:07:F4:F4:46:45:32:52:5E:A3:5A:EA:6B:22:CB:FD:B6:5A:2E ValidityThu, 31 Oct 2024 05:48:18 GMT - Wed, 29 Jan 2025 05:48:17 GMT File type HTML document, ASCII text, with no line terminators Size 138 B (138 bytes) Hash 3b46d87e0e86d52ea0d2f8fab44c53d6 667cfb6b3452b96310c6a9d791b7e452b77e2174 62de828a32e36ab676f57d291690df36bce3eed05a6693b009ac147c27d5a606 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: tf.click.com.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found server: openresty date: Sun, 01 Dec 2024 18:26:41 GMT content-type: text/html content-encoding: gzip X-Firefox-Spdy: h2`

	tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A	60.190.243.166	200 OK	16 kB
URL User Request GET HTTP/2 tf.click.com.cn/shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A IP 60.190.243.166:443 ASN #58461 CT-HangZhou-IDC Certificate IssuerLet's Encrypt Subjectclick.com.cn Fingerprint5E:73:07:F4:F4:46:45:32:52:5E:A3:5A:EA:6B:22:CB:FD:B6:5A:2E ValidityThu, 31 Oct 2024 05:48:18 GMT - Wed, 29 Jan 2025 05:48:17 GMT File type Size 16 kB (16415 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /shu.html?poprequest=1&dm=fzzxnkbkd.top&acc=0BC527E5-0AAB-4FFE-BA95-D51296715A6A HTTP/1.1 Host: tf.click.com.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: openresty date: Sun, 01 Dec 2024 18:26:40 GMT content-type: text/html last-modified: Sun, 07 Apr 2024 02:33:21 GMT vary: Accept-Encoding content-encoding: gzip pragma: no-cache cache-control: no-store X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash