WEBSITE ANALYSIS REPORT

https://www.86365x.com/

04 Jun 2026 · 14:12:26.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:12:03.817 GET No response document 0 B 968 ms 3 alerts

14:12:05.877 GET 302 document 5.9 KB 2343 ms 3 alerts

14:12:07.189 GET 200 document 5.9 KB 1975 ms 4 alerts

14:12:08.595 GET 200 stylesheet 53.8 KB 271 ms 4 alerts

14:12:08.597 GET 200 stylesheet 5.9 KB 271 ms 4 alerts

14:12:08.599 GET 200 script 91.7 KB 1220 ms 4 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://365756zxd.com/js/jquery-1.7.1.min.js

IP / ASN

27.124.41.82

AS152194 · CTG Server Limited

Requested by: https://365756zxd.com/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)
MIME type: application/javascript
First seen (UTC): 07 Mar 2023 · 01:03:13.000 UTC
Last seen (UTC): 21 Oct 2026 · 22:01:45.465 UTC
Times seen: 20842

Size: 91.7 KB (93868 bytes)
MD5: ddb84c1587287b2df08966081ef063bf
SHA1: 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f
SHA256: 88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd

Certificate information

Issuer: Asseco Data Systems S.A. · Certum DV TLS G2 R39 CA
Subject: 365756l.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SHA1 fingerprint: 5D:F8:FE:AD:6E:6B:8F:13:30:86:70:18:D7:E7:42:23:D2:1A:B6:52
Valid from: Mon, 13 Oct 2025 07:57:15 GMT
Valid until: Thu, 12 Nov 2026 07:57:14 GMT

Technology fingerprints

IIS:10.0 (Web servers)
Windows Server (Operating systems)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /js/jquery-1.7.1.min.js HTTP/1.1
Host: 365756zxd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://365756zxd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 30 Jan 2018 17:39:52 GMT
accept-ranges: bytes
etag: "0643b55f199d31:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
date: Thu, 04 Jun 2026 14:13:03 GMT
content-length: 33226
X-Firefox-Spdy: h2

14:12:08.603 GET 200 img 1.3 KB 1218 ms 4 alerts

14:12:09.820 GET 200 img 356.5 KB 4794 ms 4 alerts

14:12:09.831 GET 200 script 29.3 KB 2103 ms —

14:12:09.857 GET 200 img 66.3 KB 5295 ms 4 alerts

14:12:09.859 GET 200 img 9.4 KB 5390 ms 4 alerts

14:12:09.861 GET 200 img 9.3 KB 5433 ms 4 alerts

14:12:10.396 GET 404 img 1.1 KB 4899 ms 4 alerts

14:12:11.404 GET 200 img 43 B 270 ms —

https://www.86365x.com/

Domain graph

Hostnames

Connections