IP 222.186.18.216:0
File typeHTML document, ASCII text, with CRLF line terminators Hash72fa0fca20c82853e6dbbc1f13c78100 4e9b01e3ad0b56c9409bb02e5700430792fecacd 4555de589ff9b307e20c708d6f112bc47bb377df29ff0a5914f8fb0932926887
GET / HTTP/1.1
Host: 3g.7723.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Sat, 11 May 2024 00:08:44 GMT
Content-Type: text/html
Content-Length: 262
Connection: keep-alive
Location: https://3g.7723.cn/
Via: cache4.cn2810[,0]
Timing-Allow-Origin: *
EagleId: deba129817153861245501872e
|
IP222.186.18.216:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash6d45e0966f5df9cc3bb98030cd6efed2 11e33b0b058a399c6eba94283e326340c28f1eac 2d992b049eaf32c120fa3273b0d0e00cc7d207c7965dbe5d4dd7e2e7691324fd
GET / HTTP/1.1
Host: 3g.7723.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/html; charset=utf-8
content-length: 8201
date: Fri, 10 May 2024 23:09:37 GMT
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
ali-swift-global-savetime: 1715382577
via: cache74.l2cn3160[0,0,200-0,H], cache42.l2cn3160[0,0], cache13.cn2810[0,0,200-0,H], cache7.cn2810[1,0]
age: 3548
x-cache: HIT TCP_HIT dirn:7:726862532
x-swift-savetime: Fri, 10 May 2024 23:25:31 GMT
x-swift-cachetime: 2646
timing-allow-origin: *
eagleid: deba129b17153861253272850e
X-Firefox-Spdy: h2
|
| apk21-auth.bazhang.com/202405120808/85965d280fb36baadc8da1cd0880640d/bigfiles/androidapk/65816/201505/8524700eb9696079859ddafc2ea851ec1431063953.apk | 111.6.201.218 | 200 OK | 23 MB |
URL User Request GET HTTP/1.1apk21-auth.bazhang.com/202405120808/85965d280fb36baadc8da1cd0880640d/bigfiles/androidapk/65816/201505/8524700eb9696079859ddafc2ea851ec1431063953.apk IP111.6.201.218:443 ASN#9808 China Mobile Communications Group Co., Ltd.
CertificateIssuerDigiCert Inc Subjectapk21-auth.bazhang.com Fingerprint65:58:73:2D:60:75:C6:44:A3:01:DE:79:63:37:3A:46:91:8E:38:A2 ValidityTue, 22 Aug 2023 00:00:00 GMT - Thu, 22 Aug 2024 23:59:59 GMT
File typeZip archive data, at least v2.0 to extract, compression method=deflate Size23 MB (23353840 bytes) Hash22f0420392e6b3657a6b8c5374d138a7 30984023323329c22c8f7bd1d75cd1a1f5a26ddc 367d4b8d724399df3ef731b225c1b03b0318b479e27ead6b6698bc7777d517d7
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | malicious | |
GET /202405120808/85965d280fb36baadc8da1cd0880640d/bigfiles/androidapk/65816/201505/8524700eb9696079859ddafc2ea851ec1431063953.apk HTTP/1.1
Host: apk21-auth.bazhang.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Byte-nginx
Content-Type: application/octet-stream
Content-Length: 23353840
Connection: keep-alive
Accept-Ranges: bytes
Age: 241321
Cache-Control: max-age=31536000
Etag: "22f0420392e6b3657a6b8c5374d138a7"
Last-Modified: Tue, 19 Jan 2021 02:37:59 GMT
Via: cache45.czmp,cache02.hnxxcm02
X-Amz-Meta-S2-Size: 23353840
X-Amz-Request-Id: 33580056-2401-0716-0545-e8611f1b2829
X-Amz-S2-Requester: GRPS000000ANONYMOUSE
X-Bdcdn-Cache-Status: TCP_MISS,TCP_HIT
X-Request-Id: 28e5ad57f696d46cb96fafb0ea02f803
X-Request-Ip: 91.90.42.154
X-Response-Cache: parent_hit
X-Response-Cinfo: 91.90.42.154
X-Ser: BC132_dx-lt-yd-zhejiang-wenzhou-11-cache-8, BC53_dx-shanghai-shanghai-35-cache-3
X-Tt-Trace-Tag: id=5
Date: Sat, 11 May 2024 00:08:45 GMT
|
| 3g.7723.cn/apps/download/202405111158/817a0435f47a785079fac4909ca1ec77/16572.apk | 222.186.18.215 | 302 Found | 23 MB |
URL User Request GET HTTP/23g.7723.cn/apps/download/202405111158/817a0435f47a785079fac4909ca1ec77/16572.apk IP222.186.18.215:443
CertificateIssuerDigiCert, Inc. Subject*.7723.cn Fingerprint3F:A0:D9:1F:B9:9C:E3:63:3C:8E:5B:E0:76:99:97:07:2B:64:1B:DA ValidityThu, 30 Nov 2023 00:00:00 GMT - Wed, 11 Dec 2024 23:59:59 GMT
Size23 MB (23353840 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /apps/download/202405111158/817a0435f47a785079fac4909ca1ec77/16572.apk HTTP/1.1
Host: 3g.7723.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: Tengine
content-type: text/html; charset=utf-8
location: https://apk21-auth.bazhang.com/202405120808/85965d280fb36baadc8da1cd0880640d/bigfiles/androidapk/65816/201505/8524700eb9696079859ddafc2ea851ec1431063953.apk
date: Sat, 11 May 2024 00:08:42 GMT
set-cookie: HWWAFSESID=a324e736921ae0e867; path=/
HWWAFSESTIME=1715386122366; path=/
cache-control: no-cache,must-revalidate
ali-swift-global-savetime: 1715386122
via: cache72.l2cn3160[145,145,302-0,M], cache47.l2cn3160[146,0], cache20.cn2810[153,673,302-0,M], cache18.cn2810[675,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Sat, 11 May 2024 00:08:42 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: deba12a617153861218271967e
X-Firefox-Spdy: h2
|